This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PAxgmlT-r-zPZ1laelQM81tmGXw.roa File: PAxgmlT-r-zPZ1laelQM81tmGXw.roa (raw, json) Hash identifier: jzz513fIiVex4xv1lutLaVgZNs1VpCyJC3hza4i5SGw= Subject key identifier: 3C:0C:60:9A:54:FE:AF:EC:CF:67:59:5A:7A:54:0C:F3:5B:66:19:7C Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C13073710AD52AF7C388F94990ED651 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PAxgmlT-r-zPZ1laelQM81tmGXw.roa Signing time: Fri 02 Jan 2026 00:19:40 +0000 ROA not before: Fri 02 Jan 2026 00:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214902 IP address blocks: 5.83.147.0/24 maxlen: 24 5.231.28.0/24 maxlen: 24 5.231.45.0/24 maxlen: 24 77.90.6.0/24 maxlen: 24 77.90.19.0/24 maxlen: 24 77.90.43.0/24 maxlen: 24 77.90.45.0/24 maxlen: 24 85.93.9.0/24 maxlen: 24 89.144.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:07:37:10:ad:52:af:7c:38:8f:94:99:0e:d6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c0c609a54feafeccf67595a7a540cf35b66197c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f2:6c:af:7e:ba:ac:e1:74:bb:d4:8b:18:f9: 31:22:c8:95:cd:ae:f8:fb:7b:11:c5:e5:9e:92:fb: 23:ee:e5:37:e3:8d:fd:ca:b4:b4:0e:61:28:30:6b: cc:40:62:dd:09:97:31:85:3e:43:87:ec:d4:b6:c9: c3:83:59:70:3c:73:87:db:9e:fe:53:65:62:51:26: a6:88:08:89:bb:9b:fe:d3:c6:74:56:11:8b:58:f8: b7:14:b9:72:71:49:5c:0b:83:c2:05:df:ac:26:13: 16:8a:8e:1e:50:9a:2d:8a:3f:e8:7b:d7:1e:eb:f3: f4:71:5b:57:98:44:4f:ac:29:fc:af:2a:61:3c:65: 34:99:3b:16:0e:75:84:82:c3:43:38:1f:08:3c:72: 4e:1a:0a:fd:1c:fe:78:ed:37:bb:00:fb:af:50:c4: 1c:35:43:ea:6c:1b:6c:49:a6:cb:32:05:ea:ef:b7: 6f:e1:ff:2b:91:03:76:6b:54:bb:6d:87:a4:df:7c: 7e:08:4c:18:8f:36:8e:20:6c:df:1d:f1:9b:3c:3c: 57:ac:19:11:50:02:4a:b5:8b:9c:21:92:55:6c:a0: 4a:e2:c6:bc:4f:7e:57:48:56:26:e0:10:b1:a3:36: 13:a4:fb:d3:dc:41:66:90:57:ab:b3:89:5a:74:c3: dd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0C:60:9A:54:FE:AF:EC:CF:67:59:5A:7A:54:0C:F3:5B:66:19:7C X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PAxgmlT-r-zPZ1laelQM81tmGXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.147.0/24 5.231.28.0/24 5.231.45.0/24 77.90.6.0/24 77.90.19.0/24 77.90.43.0/24 77.90.45.0/24 85.93.9.0/24 89.144.8.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:07:49:64:e9:ad:db:a9:40:f6:e6:76:b5:b5:46:0e:c9:b3: d2:32:cf:c4:70:cf:4f:0f:51:0a:41:3d:b7:27:c1:f8:5d:dc: 08:5d:db:6e:fd:b6:2b:64:68:79:45:5f:45:af:bb:37:2b:c2: 23:a8:94:cf:86:54:3b:e2:db:f3:2b:5d:cc:2f:53:94:ed:6e: 57:1c:08:11:8b:52:22:82:dd:1b:cc:a5:29:65:71:6f:35:5d: 13:cf:89:ef:bb:2f:02:bd:be:81:14:f2:d6:52:9b:a7:2e:e1: a8:da:c5:53:13:48:70:8a:f5:92:6a:a1:a1:83:76:7c:7b:d3: 6d:45:06:33:17:0f:0f:af:12:6e:1f:86:12:5b:43:3a:cc:d7: 31:77:32:75:78:80:8c:30:07:ce:9c:b6:26:0e:23:86:8e:01: 42:03:4e:61:e3:a2:53:9b:b9:37:b2:8d:46:da:da:f9:1d:45: f2:3f:42:67:f3:ff:37:f4:66:1b:12:fb:7c:f4:bd:4d:59:fe: 61:80:61:c4:54:ce:1c:7a:65:91:33:7d:b2:5a:4a:81:26:c8: c6:d8:b0:6d:02:7e:a4:80:bd:51:57:4d:aa:df:2b:f7:82:3c: 03:e0:73:15:dd:12:9b:46:1b:70:7c:e7:48:8b:97:88:36:02: 9b:67:74:5f -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt8Ewc3EK1Sr3w4j5SZDtZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzBjNjA5YTU0ZmVhZmVjY2Y2NzU5NWE3YTU0MGNmMzViNjYxOTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPJsr366rOF0u9SLGPkxIsiVza74 +3sRxeWekvsj7uU34439yrS0DmEoMGvMQGLdCZcxhT5Dh+zUtsnDg1lwPHOH257+ U2ViUSamiAiJu5v+08Z0VhGLWPi3FLlycUlcC4PCBd+sJhMWio4eUJotij/oe9ce 6/P0cVtXmERPrCn8ryphPGU0mTsWDnWEgsNDOB8IPHJOGgr9HP547Te7APuvUMQc NUPqbBtsSabLMgXq77dv4f8rkQN2a1S7bYek33x+CEwYjzaOIGzfHfGbPDxXrBkR UAJKtYucIZJVbKBK4sa8T35XSFYm4BCxozYTpPvT3EFmkFers4ladMPd8QIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFDwMYJpU/q/sz2dZWnpUDPNbZhl8MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvUEF4Z21sVC1yLXpQWjFsYWVsUU04MXRtR1h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQABVOTAwQA BeccAwQABectAwQATVoGAwQATVoTAwQATVorAwQATVotAwQAVV0JAwQAWZAIMA0G CSqGSIb3DQEBCwUAA4IBAQAvB0lk6a3bqUD25na1tUYOybPSMs/EcM9PD1EKQT23 J8H4XdwIXdtu/bYrZGh5RV9Fr7s3K8IjqJTPhlQ74tvzK13ML1OU7W5XHAgRi1Ii gt0bzKUpZXFvNV0Tz4nvuy8Cvb6BFPLWUpunLuGo2sVTE0hwivWSaqGhg3Z8e9Nt RQYzFw8PrxJuH4YSW0M6zNcxdzJ1eICMMAfOnLYmDiOGjgFCA05h46JTm7k3so1G 2tr5HUXyP0Jn8/839GYbEvt89L1NWf5hgGHEVM4cemWRM32yWkqBJsjG2LBtAn6k gL1RV02q3yv3gjwD4HMV3RKbRhtwfOdIi5eINgKbZ3Rf -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:54 2026 by rpki-client