This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/T6r3URy_y3jylXZk-PvxSVbD0RA.roa File: T6r3URy_y3jylXZk-PvxSVbD0RA.roa (raw, json) Hash identifier: g5P20lRHLXJMTSwP9Pk1bbc1WsqgOmr7V1UnqFEO9IY= Subject key identifier: 4F:AA:F7:51:1C:BF:CB:78:F2:95:76:64:F8:FB:F1:49:56:C3:D1:10 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B84B2F093FBA3D8FCEB284884F46CF4FE Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/T6r3URy_y3jylXZk-PvxSVbD0RA.roa Signing time: Sat 03 Jan 2026 16:31:18 +0000 ROA not before: Sat 03 Jan 2026 16:31:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206996 IP address blocks: 5.83.138.0/24 maxlen: 24 5.175.181.0/24 maxlen: 24 5.175.184.0/24 maxlen: 24 5.231.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:84:b2:f0:93:fb:a3:d8:fc:eb:28:48:84:f4:6c:f4:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 3 16:31:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4faaf7511cbfcb78f2957664f8fbf14956c3d110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d9:19:f4:ca:79:a7:30:18:f6:c1:ea:80:6a: d7:03:f0:f2:97:00:0d:22:a3:e6:0a:00:2f:4a:32: 31:f1:87:c3:97:e5:76:f5:4c:df:c6:fd:21:5e:08: 13:cd:ba:75:e9:5e:17:13:fd:23:63:8d:c2:0c:f6: 40:95:30:a7:fc:55:06:47:3c:02:b3:df:c8:b9:82: a7:f9:70:25:10:d4:87:2a:f8:45:e6:96:73:b0:9f: 72:ec:61:bd:b3:e2:e7:e7:ba:f5:44:fd:b5:94:33: 02:2e:8a:4d:09:6b:30:45:ee:34:55:11:72:ad:da: e3:42:19:e3:5c:c0:52:df:a3:2e:e2:e7:bf:7a:22: 57:b1:7c:c6:32:ab:c1:71:10:70:e9:1e:31:dd:d8: 1a:bf:32:3c:12:9b:c7:0a:88:29:2d:9d:23:7b:a7: 00:95:49:c0:d1:82:e1:57:62:41:f2:e0:ce:58:c0: f7:a7:19:c0:3b:5e:6e:88:1b:43:8b:eb:d2:67:82: 24:7c:f7:7c:98:ab:c9:1b:f5:7e:c8:f6:bc:5e:74: e2:94:b9:68:0a:7e:f5:03:9c:d7:f5:9c:b3:8d:97: b7:b2:78:80:d4:4f:ac:e3:ce:75:3a:21:02:09:e3: 18:e8:c3:6e:4b:8c:2c:a0:c6:d9:d0:ad:46:87:56: 2e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AA:F7:51:1C:BF:CB:78:F2:95:76:64:F8:FB:F1:49:56:C3:D1:10 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/T6r3URy_y3jylXZk-PvxSVbD0RA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.138.0/24 5.175.181.0/24 5.175.184.0/24 5.231.107.0/24 Signature Algorithm: sha256WithRSAEncryption d1:d8:d1:b2:d8:38:f7:02:07:09:d7:f6:50:b2:60:94:74:44: a3:38:a6:43:13:5a:6c:fd:6a:23:c5:68:0e:8b:5e:46:60:3e: a3:f4:c9:9f:d4:87:65:3f:27:d0:82:51:cf:2c:1a:5a:96:62: f1:28:08:77:c9:6e:78:59:61:6f:3b:7a:3b:7c:e4:b8:48:01: 4b:3f:5b:6d:b0:2b:26:32:3f:8a:fe:c0:d1:77:e1:06:ec:e8: 0e:6b:1a:61:40:de:5d:b1:9c:a5:f1:40:9c:93:18:46:fa:c6: c5:12:da:cc:17:00:38:4c:e3:13:3b:f6:ab:e0:75:34:31:b6: fe:6b:10:7b:4c:a4:7c:d0:6d:7d:24:2c:a4:0a:de:9e:83:13: fd:ce:92:63:d9:cb:83:b7:25:dc:9a:92:0c:aa:36:b0:59:69: 6b:52:ee:43:a2:85:a9:fe:bd:10:3a:f5:d9:aa:e6:5d:49:79: 70:8e:53:02:3d:95:f7:67:09:77:5b:50:f3:c6:33:bd:7d:66: 7a:c7:9e:20:d7:c6:88:09:65:fc:9b:b9:4a:21:ce:0a:6c:3c: 0d:79:b0:f5:70:8a:19:e2:57:25:53:f3:5d:fc:4f:21:ab:4a: 9a:bb:d9:34:6f:93:02:ec:47:29:c2:10:0d:c5:33:b8:92:31: 3b:10:61:f0 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZuEsvCT+6PY/OsoSIT0bPT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAzMTYzMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmFhZjc1MTFjYmZjYjc4ZjI5NTc2NjRmOGZiZjE0OTU2YzNkMTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdkZ9Mp5pzAY9sHqgGrXA/DylwAN IqPmCgAvSjIx8YfDl+V29Uzfxv0hXggTzbp16V4XE/0jY43CDPZAlTCn/FUGRzwC s9/IuYKn+XAlENSHKvhF5pZzsJ9y7GG9s+Ln57r1RP21lDMCLopNCWswRe40VRFy rdrjQhnjXMBS36Mu4ue/eiJXsXzGMqvBcRBw6R4x3dgavzI8EpvHCogpLZ0je6cA lUnA0YLhV2JB8uDOWMD3pxnAO15uiBtDi+vSZ4IkfPd8mKvJG/V+yPa8XnTilLlo Cn71A5zX9ZyzjZe3sniA1E+s4851OiECCeMY6MNuS4wsoMbZ0K1Gh1YuFwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFE+q91Ecv8t48pV2ZPj78UlWw9EQMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvVDZyM1VSeV95M2p5bFhaay1QdnhTVmJEMFJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABVOKAwQA Ba+1AwQABa+4AwQABedrMA0GCSqGSIb3DQEBCwUAA4IBAQDR2NGy2Dj3AgcJ1/ZQ smCUdESjOKZDE1ps/WojxWgOi15GYD6j9Mmf1IdlPyfQglHPLBpalmLxKAh3yW54 WWFvO3o7fOS4SAFLP1ttsCsmMj+K/sDRd+EG7OgOaxphQN5dsZyl8UCckxhG+sbF EtrMFwA4TOMTO/ar4HU0Mbb+axB7TKR80G19JCykCt6egxP9zpJj2cuDtyXcmpIM qjawWWlrUu5DooWp/r0QOvXZquZdSXlwjlMCPZX3Zwl3W1DzxjO9fWZ6x54g18aI CWX8m7lKIc4KbDwNebD1cIoZ4lclU/Nd/E8hq0qau9k0b5MC7EcpwhANxTO4kjE7 EGHw -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:16 2026 by rpki-client