This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JoCbIimQ1zCb2HIOe7mpYKxwNFE.roa File: JoCbIimQ1zCb2HIOe7mpYKxwNFE.roa (raw, json) Hash identifier: 6KD4BEfQsXa/g6a8k5BJrmjtkZv0jevvz+9fxeW2q3U= Subject key identifier: 26:80:9B:22:29:90:D7:30:9B:D8:72:0E:7B:B9:A9:60:AC:70:34:51 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019C270A964427A33A88E6D07B79F8DA4A8D Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JoCbIimQ1zCb2HIOe7mpYKxwNFE.roa Signing time: Wed 04 Feb 2026 05:05:31 +0000 ROA not before: Wed 04 Feb 2026 05:05:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210537 IP address blocks: 5.175.210.0/24 maxlen: 24 2a02:2fc0:19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 17:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:27:0a:96:44:27:a3:3a:88:e6:d0:7b:79:f8:da:4a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Feb 4 05:05:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26809b222990d7309bd8720e7bb9a960ac703451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:78:6b:44:55:4c:8d:5c:bf:4c:63:7d:c2:b5: fa:8d:ae:7c:93:e2:9d:c8:97:ca:3d:fb:96:83:ec: 34:8d:c9:d4:51:c2:89:9b:cf:15:88:4e:92:bd:46: 5c:46:c5:fe:6b:01:cf:2a:59:10:5c:41:87:ce:4e: 9d:b7:d6:5a:bf:93:98:d4:30:37:15:0b:84:fc:19: d9:7a:f5:78:54:9c:f5:ff:49:e2:dc:ce:ca:dc:fc: 1d:17:55:59:05:bf:ff:dc:31:fb:8e:7d:ae:8c:0e: 82:df:86:79:a4:6a:7d:72:77:3c:48:da:fd:88:36: 07:2b:e0:62:b6:15:1e:ea:fb:47:1a:b5:c2:96:94: 16:1e:cb:33:2b:c5:d9:f1:41:9b:82:dd:72:7a:3f: 56:6e:85:2f:51:67:91:56:f3:42:87:8c:12:1d:e8: e8:17:1c:80:6b:c7:42:83:db:45:16:14:80:e3:ca: a3:93:ab:70:b7:2f:6b:b2:94:6d:39:20:67:11:e3: f4:37:16:1b:b8:44:f7:43:8c:2c:bc:5b:7b:3f:b0: f0:83:41:0b:e6:b6:6b:2f:c2:f2:54:90:8e:ef:16: 65:3e:ea:88:29:22:27:22:a1:d3:dd:d8:67:c7:b7: 6e:e9:d7:66:39:6c:0c:b6:3e:c1:50:08:f2:77:d8: 94:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:80:9B:22:29:90:D7:30:9B:D8:72:0E:7B:B9:A9:60:AC:70:34:51 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JoCbIimQ1zCb2HIOe7mpYKxwNFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.210.0/24 IPv6: 2a02:2fc0:19::/48 Signature Algorithm: sha256WithRSAEncryption 6b:c2:45:2f:14:8e:6b:d7:d8:c0:ed:08:98:d8:0d:65:07:56: fa:2e:6d:b1:1e:b0:e0:74:8a:35:d2:b1:ff:43:9a:24:58:ea: 55:99:a4:be:c4:12:e7:48:ac:6d:e3:23:1f:17:a1:e8:58:c2: 1c:5b:fa:36:f5:85:6c:e9:88:25:d4:77:e2:5c:34:d0:31:89: bd:67:41:8f:1c:c1:7b:12:f9:33:8c:05:b5:1e:a1:44:25:76: eb:25:b9:ad:fc:81:c7:65:09:7e:7c:30:ea:af:f1:b5:5d:a6: d6:ab:9b:50:ad:d8:a8:6a:10:9a:06:8b:84:1d:3a:5e:db:3e: 3f:de:39:2c:bf:c8:c3:a9:0c:30:76:33:89:97:cb:3d:9f:f0: 2b:ac:41:e2:b2:36:61:ac:97:dd:94:86:13:31:fd:ed:2c:09: b5:aa:15:f0:97:86:fd:2b:40:e3:a8:cf:57:ce:67:37:20:cd: 9e:0c:fd:eb:3d:f6:15:a1:ae:e1:44:0c:f0:88:b0:51:bf:8f: 83:ca:15:f3:58:34:b1:a8:ba:8b:07:cd:5b:33:47:5c:ef:cf: 67:4e:5f:a0:a5:70:d5:b7:16:c0:89:21:28:50:2d:b1:89:51: 5e:f1:8c:31:5d:af:46:da:21:f4:33:0f:ae:4c:cd:68:8c:32: 1e:b1:f1:a2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZwnCpZEJ6M6iObQe3n42kqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMjA0MDUwNTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjgwOWIyMjI5OTBkNzMwOWJkODcyMGU3YmI5YTk2MGFjNzAzNDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXhrRFVMjVy/TGN9wrX6ja58k+Kd yJfKPfuWg+w0jcnUUcKJm88ViE6SvUZcRsX+awHPKlkQXEGHzk6dt9Zav5OY1DA3 FQuE/BnZevV4VJz1/0ni3M7K3PwdF1VZBb//3DH7jn2ujA6C34Z5pGp9cnc8SNr9 iDYHK+BithUe6vtHGrXClpQWHsszK8XZ8UGbgt1yej9WboUvUWeRVvNCh4wSHejo FxyAa8dCg9tFFhSA48qjk6twty9rspRtOSBnEeP0NxYbuET3Q4wsvFt7P7Dwg0EL 5rZrL8LyVJCO7xZlPuqIKSInIqHT3dhnx7du6ddmOWwMtj7BUAjyd9iURwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCaAmyIpkNcwm9hyDnu5qWCscDRRMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvSm9DYklpbVExekNiMkhJT2U3bXBZS3h3TkZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQABa/SMA8E AgACMAkDBwAqAi/AABkwDQYJKoZIhvcNAQELBQADggEBAGvCRS8UjmvX2MDtCJjY DWUHVvoubbEesOB0ijXSsf9DmiRY6lWZpL7EEudIrG3jIx8XoehYwhxb+jb1hWzp iCXUd+JcNNAxib1nQY8cwXsS+TOMBbUeoUQlduslua38gcdlCX58MOqv8bVdptar m1Ct2KhqEJoGi4QdOl7bPj/eOSy/yMOpDDB2M4mXyz2f8CusQeKyNmGsl92UhhMx /e0sCbWqFfCXhv0rQOOoz1fOZzcgzZ4M/es99hWhruFEDPCIsFG/j4PKFfNYNLGo uosHzVszR1zvz2dOX6ClcNW3FsCJIShQLbGJUV7xjDFdr0baIfQzD65MzWiMMh6x 8aI= -----END CERTIFICATE-----Generated at Thu Feb 5 01:49:43 2026 by rpki-client