This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KF9sgs672mk8vMmwAW4oQW1MMMA.roa File: KF9sgs672mk8vMmwAW4oQW1MMMA.roa (raw, json) Hash identifier: nx1j3ObJKvn+/l0R3QGeivKopFy02WtP6lA16/BZchE= Subject key identifier: 28:5F:6C:82:CE:BB:DA:69:3C:BC:C9:B0:01:6E:28:41:6D:4C:30:C0 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12EEC09C38F3CD0033722CCE9CDC2F Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KF9sgs672mk8vMmwAW4oQW1MMMA.roa Signing time: Fri 02 Jan 2026 00:19:34 +0000 ROA not before: Fri 02 Jan 2026 00:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206659 IP address blocks: 5.231.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ee:c0:9c:38:f3:cd:00:33:72:2c:ce:9c:dc:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=285f6c82cebbda693cbcc9b0016e28416d4c30c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:00:55:93:c4:76:5a:06:3b:cf:55:10:ae:7d: 28:34:72:ef:df:c4:4a:51:32:c3:53:f6:ec:28:5b: 79:48:ae:94:fe:24:d1:4b:41:37:77:4c:16:57:34: 6a:f6:be:d3:96:95:b4:4a:ed:6b:4a:02:4e:87:29: 65:b1:fc:9c:29:e8:a2:67:22:a7:e0:da:b2:16:31: 4e:ee:54:8c:47:4b:96:68:1e:4a:9f:0f:2f:5e:04: e9:33:79:07:8e:23:cf:49:8f:45:08:7d:6e:cf:41: f0:df:7e:67:94:71:8f:00:5f:5e:13:59:2c:69:53: c1:79:10:87:8e:6a:39:3e:aa:a3:d4:62:31:dc:f0: 9e:ef:81:0e:75:60:dc:b7:3f:67:a1:98:2e:37:70: 1b:d4:ce:05:26:0b:4f:10:a3:20:de:fd:3d:32:1c: a2:b6:83:99:c9:4e:29:40:cc:51:15:d7:df:f8:b4: 6a:c2:ee:4d:bb:93:bf:d2:5a:e9:72:e9:8f:b5:e5: b1:32:f2:fe:6b:1b:a2:20:4b:0a:48:38:1c:52:70: df:23:f5:6f:62:90:b2:f8:54:de:b1:69:81:4b:5c: 46:39:d7:6c:fa:40:2d:81:43:1b:b3:5c:c9:d7:61: d5:ac:3a:e4:4c:44:79:28:e4:b2:ed:26:b1:10:32: 08:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5F:6C:82:CE:BB:DA:69:3C:BC:C9:B0:01:6E:28:41:6D:4C:30:C0 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KF9sgs672mk8vMmwAW4oQW1MMMA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.97.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:b5:79:f4:d0:2b:f7:9a:7e:0f:38:80:3a:df:e4:29:df:20: d6:fe:b5:14:4b:9f:7d:26:ab:cc:c7:a2:38:85:10:e0:70:66: b7:eb:54:64:de:7a:52:d9:7e:1f:24:df:8a:ed:f3:27:d1:c3: 2e:b0:9e:a5:0f:80:a4:c5:e3:3f:67:48:71:22:d5:44:0a:55: 94:73:6c:17:c8:16:2f:63:6c:9b:e7:bc:4d:7d:b4:0c:60:02: 15:dd:1d:fb:28:20:30:c9:30:98:9e:45:c0:8b:ba:44:6b:c9: a7:88:34:5f:b8:6a:95:72:00:2a:f9:0f:55:02:dc:46:18:82: 2e:a6:e1:83:b7:15:39:0e:d8:7e:12:a0:de:8f:03:a0:83:33: b7:13:d7:08:5f:ab:d4:b5:6d:65:ed:ab:2d:09:35:bb:66:5d: 4c:fe:82:fb:25:2b:95:cd:97:9f:3f:20:89:f2:c1:e9:c9:c2: 3d:6b:25:02:aa:25:ef:30:14:06:e1:75:7c:e1:29:62:6e:ec: f4:6e:0f:e8:72:af:8f:45:47:b2:06:bb:f5:4e:f6:ca:5f:31: ad:37:6c:da:83:54:b8:22:c0:2c:85:d1:f9:36:b4:5b:c9:cf: dc:4e:83:f8:99:bf:f0:0d:78:f1:f6:a0:38:46:97:89:5f:b3: 6e:4a:f8:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Eu7AnDjzzQAzcizOnNwvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODVmNmM4MmNlYmJkYTY5M2NiY2M5YjAwMTZlMjg0MTZkNGMzMGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQBVk8R2WgY7z1UQrn0oNHLv38RK UTLDU/bsKFt5SK6U/iTRS0E3d0wWVzRq9r7TlpW0Su1rSgJOhyllsfycKeiiZyKn 4NqyFjFO7lSMR0uWaB5Knw8vXgTpM3kHjiPPSY9FCH1uz0Hw335nlHGPAF9eE1ks aVPBeRCHjmo5Pqqj1GIx3PCe74EOdWDctz9noZguN3Ab1M4FJgtPEKMg3v09Mhyi toOZyU4pQMxRFdff+LRqwu5Nu5O/0lrpcumPteWxMvL+axuiIEsKSDgcUnDfI/Vv YpCy+FTesWmBS1xGOdds+kAtgUMbs1zJ12HVrDrkTER5KOSy7SaxEDIIcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFChfbILOu9ppPLzJsAFuKEFtTDDAMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvS0Y5c2dzNjcybWs4dk1td0FXNG9RVzFNTU1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABedhMA0G CSqGSIb3DQEBCwUAA4IBAQAutXn00Cv3mn4POIA63+Qp3yDW/rUUS599JqvMx6I4 hRDgcGa361Rk3npS2X4fJN+K7fMn0cMusJ6lD4CkxeM/Z0hxItVEClWUc2wXyBYv Y2yb57xNfbQMYAIV3R37KCAwyTCYnkXAi7pEa8mniDRfuGqVcgAq+Q9VAtxGGIIu puGDtxU5Dth+EqDejwOggzO3E9cIX6vUtW1l7astCTW7Zl1M/oL7JSuVzZefPyCJ 8sHpycI9ayUCqiXvMBQG4XV84Slibuz0bg/ocq+PRUeyBrv1TvbKXzGtN2zag1S4 IsAshdH5NrRbyc/cToP4mb/wDXjx9qA4RpeJX7NuSviR -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:24 2026 by rpki-client