This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/G_nj72-UdEMbXYTN0uFGKFPVYSE.roa File: G_nj72-UdEMbXYTN0uFGKFPVYSE.roa (raw, json) Hash identifier: hw4dspVlG9kX910iwxZPMFMMhNernyzrccAgDIwpxsQ= Subject key identifier: 1B:F9:E3:EF:6F:94:74:43:1B:5D:84:CD:D2:E1:46:28:53:D5:61:21 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C130461841468873A7C2D11B17F8735 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/G_nj72-UdEMbXYTN0uFGKFPVYSE.roa Signing time: Fri 02 Jan 2026 00:19:39 +0000 ROA not before: Fri 02 Jan 2026 00:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214320 IP address blocks: 5.83.140.0/24 maxlen: 24 5.231.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:04:61:84:14:68:87:3a:7c:2d:11:b1:7f:87:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bf9e3ef6f9474431b5d84cdd2e1462853d56121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5e:c1:58:77:64:1b:a5:74:e6:4e:4b:6d:7f: c5:24:0c:06:b9:32:9a:4c:a0:09:d4:b7:e6:d6:36: 36:d6:5c:1a:f4:ac:5a:ff:8a:7e:22:0a:55:91:43: dd:11:38:1c:87:67:68:2c:21:ed:bb:ff:f1:e8:b6: 2f:5b:4e:21:60:f8:60:11:a9:d0:d1:7d:27:c6:c9: de:c3:b9:73:ba:88:70:96:37:65:15:10:d2:3b:af: 6e:dc:b4:4c:cc:e9:47:28:ad:bb:da:5f:37:aa:c2: 1c:7d:c8:8d:b1:f1:f1:f4:05:cc:8a:b7:3b:80:c9: 96:14:9a:ae:e3:d4:9c:f1:ca:33:34:7f:f1:c4:03: d2:cd:96:81:d1:56:4f:63:fa:12:a1:1f:e6:aa:7a: 1f:22:78:70:27:68:ec:c5:da:f7:33:85:64:63:02: 8d:b0:92:a1:5b:6e:5c:12:4f:d8:14:69:05:22:f3: bf:d5:f3:de:9b:27:3d:49:e0:5a:22:9d:4f:81:ed: 50:a1:30:59:2e:a3:9e:8b:83:2c:0e:35:47:bf:8f: 9f:1c:7c:59:3b:5a:86:0c:d6:81:f8:27:79:06:ff: 14:fb:6e:6c:a7:7d:5b:ad:f5:22:8e:61:d2:d0:67: df:20:a8:b1:4b:c0:c7:b9:0f:d0:56:1a:99:77:97: 9d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F9:E3:EF:6F:94:74:43:1B:5D:84:CD:D2:E1:46:28:53:D5:61:21 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/G_nj72-UdEMbXYTN0uFGKFPVYSE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.140.0/24 5.231.75.0/24 Signature Algorithm: sha256WithRSAEncryption 14:ee:af:d3:79:41:99:2e:20:23:5b:10:9a:f6:75:ea:44:00: ab:df:6f:2a:9e:fa:86:43:a4:66:4b:89:aa:2c:0f:cf:45:8d: 65:56:56:91:ec:15:44:a0:42:16:09:a4:9a:17:fa:ba:fe:b2: 15:56:04:f6:18:d5:e3:33:b3:f8:c1:bc:ad:43:d6:af:7a:ba: 3a:58:55:d1:ef:eb:a4:e3:79:82:b9:2b:ea:c2:0d:03:cf:6c: 2c:7d:b0:b7:e6:50:a5:56:75:4d:99:1a:11:50:aa:2b:d3:3a: ee:6a:b3:7c:d0:8d:2a:9a:8f:67:06:3b:75:8d:2a:10:4b:aa: 2a:8a:cf:da:2c:63:7e:72:c7:32:c5:d6:f7:cc:9f:7e:57:10: e8:b2:3c:25:57:36:0e:31:6b:a0:6e:6f:df:c5:d7:1b:65:62: 53:e9:2f:90:b1:6f:09:29:d7:19:3a:48:a8:77:d3:d8:c9:06: e6:49:2d:b8:9c:c4:71:0d:e7:96:90:81:d1:21:9b:c9:e9:b2: 46:20:f0:b6:50:2e:2a:52:37:5d:9a:68:67:95:c7:aa:94:1c: 28:6a:e4:f4:ce:6f:40:1c:7a:7b:28:8f:09:21:c5:95:a2:f1: d4:2b:41:f9:f0:bd:8a:5e:f7:10:7e:94:df:af:c4:08:9f:ea: b6:0e:bc:8c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EwRhhBRohzp8LRGxf4c1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmY5ZTNlZjZmOTQ3NDQzMWI1ZDg0Y2RkMmUxNDYyODUzZDU2MTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V7BWHdkG6V05k5LbX/FJAwGuTKa TKAJ1Lfm1jY21lwa9Kxa/4p+IgpVkUPdETgch2doLCHtu//x6LYvW04hYPhgEanQ 0X0nxsnew7lzuohwljdlFRDSO69u3LRMzOlHKK272l83qsIcfciNsfHx9AXMirc7 gMmWFJqu49Sc8cozNH/xxAPSzZaB0VZPY/oSoR/mqnofInhwJ2jsxdr3M4VkYwKN sJKhW25cEk/YFGkFIvO/1fPemyc9SeBaIp1Pge1QoTBZLqOei4MsDjVHv4+fHHxZ O1qGDNaB+Cd5Bv8U+25sp31brfUijmHS0GffIKixS8DHuQ/QVhqZd5edwQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBv54+9vlHRDG12EzdLhRihT1WEhMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvR19uajcyLVVkRU1iWFlUTjB1RkdLRlBWWVNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABVOMAwQA BedLMA0GCSqGSIb3DQEBCwUAA4IBAQAU7q/TeUGZLiAjWxCa9nXqRACr328qnvqG Q6RmS4mqLA/PRY1lVlaR7BVEoEIWCaSaF/q6/rIVVgT2GNXjM7P4wbytQ9avero6 WFXR7+uk43mCuSvqwg0Dz2wsfbC35lClVnVNmRoRUKor0zruarN80I0qmo9nBjt1 jSoQS6oqis/aLGN+cscyxdb3zJ9+VxDosjwlVzYOMWugbm/fxdcbZWJT6S+QsW8J KdcZOkiod9PYyQbmSS24nMRxDeeWkIHRIZvJ6bJGIPC2UC4qUjddmmhnlceqlBwo auT0zm9AHHp7KI8JIcWVovHUK0H58L2KXvcQfpTfr8QIn+q2DryM -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:37 2026 by rpki-client