This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Ssp16m5_XNNN384Sz-dt76w7KB0.roa File: Ssp16m5_XNNN384Sz-dt76w7KB0.roa (raw, json) Hash identifier: UxHjGCuizExxBg0JxhIMTpP6APiUZ1mw5dV+EIkUsNU= Subject key identifier: 4A:CA:75:EA:6E:7F:5C:D3:4D:DF:CE:12:CF:E7:6D:EF:AC:3B:28:1D Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12F3A8F7D0A3C236F5AB8E4753CC8B Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Ssp16m5_XNNN384Sz-dt76w7KB0.roa Signing time: Fri 02 Jan 2026 00:19:35 +0000 ROA not before: Fri 02 Jan 2026 00:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209216 IP address blocks: 5.175.210.0/24 maxlen: 24 2a02:2fc0:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f3:a8:f7:d0:a3:c2:36:f5:ab:8e:47:53:cc:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4aca75ea6e7f5cd34ddfce12cfe76defac3b281d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e3:d0:74:55:70:8c:c3:5a:7e:32:59:a1:09: f2:4c:d3:f0:ff:cf:b3:85:31:18:6c:4b:37:93:0c: 69:f0:95:c2:2e:07:d4:98:b7:55:88:e3:20:23:46: 30:e0:94:25:2d:0a:7f:8e:38:93:c7:72:01:66:28: 2a:3e:9b:13:d5:b3:35:9d:28:4f:35:f8:0a:e5:b2: c6:fb:ac:d0:ef:b3:6f:11:4e:7f:35:fd:a2:2a:0f: a4:9d:4b:c9:93:a3:bd:c4:15:df:0f:49:f2:0c:34: db:3c:b7:7c:e6:50:5e:a5:7e:24:0a:36:76:7c:09: bd:10:11:f3:32:51:21:bf:1c:6d:a7:3f:ab:41:2a: 08:a9:f6:15:fd:bc:27:9c:58:1c:8c:1d:4d:a2:b6: dc:ad:ba:1a:6a:f4:d9:31:39:46:73:89:b2:18:e0: f1:54:d6:ba:ab:71:a4:2c:05:9b:44:fa:14:4b:6b: 1d:34:b2:1d:fe:45:89:51:ac:5d:12:77:2e:48:12: 2f:41:69:0e:8d:d6:29:45:24:57:64:fa:93:c3:bd: 6d:81:a3:2e:7d:a8:48:4a:c2:18:c7:d1:d0:bd:1d: 87:e2:ee:53:e4:04:e8:c6:40:59:7a:cc:f5:84:27: 8c:ac:d6:a2:32:e4:f8:43:a9:23:28:50:e4:be:5a: 35:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CA:75:EA:6E:7F:5C:D3:4D:DF:CE:12:CF:E7:6D:EF:AC:3B:28:1D X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Ssp16m5_XNNN384Sz-dt76w7KB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.210.0/24 IPv6: 2a02:2fc0:16::/48 Signature Algorithm: sha256WithRSAEncryption d0:cf:2c:10:6e:4d:9d:38:9c:3d:e8:3f:e8:fb:54:41:67:ab: 55:38:0b:46:c9:07:fc:be:40:13:f4:c5:20:11:b8:5d:bd:32: 22:d8:48:b8:cb:ca:5e:cb:cc:8f:05:51:68:22:5c:35:9d:1f: f7:cb:fc:bc:19:d9:dd:26:da:5e:32:b5:0f:f7:64:8a:f4:d1: 91:9b:12:7d:65:34:1b:f7:91:35:60:a4:c0:cc:49:f6:44:d3: 9a:6e:17:6c:41:f7:3d:a8:4a:7b:6c:4b:c1:fa:ac:e4:81:d4: 8a:be:73:f6:ab:66:66:9e:f3:90:f0:2a:2a:e2:5c:02:b0:ad: eb:22:c3:01:a9:28:98:fd:70:a9:65:ca:b5:d5:b1:64:2c:eb: 85:c6:5a:f1:68:1b:e2:0f:75:9e:04:8f:f1:e3:c2:23:da:cb: 3c:35:6f:ea:94:2d:44:e8:11:d8:54:ff:95:75:6a:a4:7e:bc: ab:f8:38:ff:2a:ce:22:fd:0c:35:57:82:82:10:b4:d7:78:85: ec:3f:40:3e:ae:96:00:ae:c4:75:38:f4:af:ee:d5:6a:99:e7: 80:4e:64:11:f0:c9:73:87:3e:75:10:5f:24:09:f3:7f:d3:c7: a3:a2:25:97:a2:6d:85:99:f1:df:cd:3a:51:7a:d2:8e:64:cb: e4:8c:ce:de -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8EvOo99Cjwjb1q45HU8yLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWNhNzVlYTZlN2Y1Y2QzNGRkZmNlMTJjZmU3NmRlZmFjM2IyODFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluPQdFVwjMNafjJZoQnyTNPw/8+z hTEYbEs3kwxp8JXCLgfUmLdViOMgI0Yw4JQlLQp/jjiTx3IBZigqPpsT1bM1nShP NfgK5bLG+6zQ77NvEU5/Nf2iKg+knUvJk6O9xBXfD0nyDDTbPLd85lBepX4kCjZ2 fAm9EBHzMlEhvxxtpz+rQSoIqfYV/bwnnFgcjB1NorbcrboaavTZMTlGc4myGODx VNa6q3GkLAWbRPoUS2sdNLId/kWJUaxdEncuSBIvQWkOjdYpRSRXZPqTw71tgaMu fahISsIYx9HQvR2H4u5T5AToxkBZesz1hCeMrNaiMuT4Q6kjKFDkvlo1OwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFErKdepuf1zTTd/OEs/nbe+sOygdMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvU3NwMTZtNV9YTk5OMzg0U3otZHQ3Nnc3S0IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQABa/SMA8E AgACMAkDBwAqAi/AABYwDQYJKoZIhvcNAQELBQADggEBANDPLBBuTZ04nD3oP+j7 VEFnq1U4C0bJB/y+QBP0xSARuF29MiLYSLjLyl7LzI8FUWgiXDWdH/fL/LwZ2d0m 2l4ytQ/3ZIr00ZGbEn1lNBv3kTVgpMDMSfZE05puF2xB9z2oSntsS8H6rOSB1Iq+ c/arZmae85DwKiriXAKwresiwwGpKJj9cKllyrXVsWQs64XGWvFoG+IPdZ4Ej/Hj wiPayzw1b+qULUToEdhU/5V1aqR+vKv4OP8qziL9DDVXgoIQtNd4hew/QD6ulgCu xHU49K/u1WqZ54BOZBHwyXOHPnUQXyQJ83/Tx6OiJZeibYWZ8d/NOlF60o5ky+SM zt4= -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:36 2026 by rpki-client