This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_8MfqTlwHIAEZop2d0j0B4fiNcc.roa File: _8MfqTlwHIAEZop2d0j0B4fiNcc.roa (raw, json) Hash identifier: dm4V9EX4DMOfukRcjIc7tta5OVDepCaL5NCtjw1Zmq0= Subject key identifier: FF:C3:1F:A9:39:70:1C:80:04:66:8A:76:77:48:F4:07:87:E2:35:C7 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C130E0CC9539EAFE00640B8E60B25F9 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_8MfqTlwHIAEZop2d0j0B4fiNcc.roa Signing time: Fri 02 Jan 2026 00:19:42 +0000 ROA not before: Fri 02 Jan 2026 00:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215590 IP address blocks: 5.231.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:0e:0c:c9:53:9e:af:e0:06:40:b8:e6:0b:25:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffc31fa939701c8004668a767748f40787e235c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d6:ff:5e:f5:9c:fe:31:5b:e9:c9:9f:5f:7c: 54:2d:66:57:04:34:37:9d:19:36:c8:c6:af:49:06: 74:2b:75:3b:6b:53:3e:ad:9f:64:88:a9:23:f7:d7: 4a:67:51:7d:81:14:4d:50:d3:f4:1d:3b:e4:ca:e9: fa:0a:33:fb:20:b4:d7:4c:94:94:b4:69:53:74:b5: e0:e1:0e:79:f2:b2:b9:4a:0f:d8:57:2b:f0:a4:6c: 80:ef:90:e9:6d:bb:99:74:e3:da:12:6a:cb:9a:48: 00:a3:33:26:c2:88:49:48:39:7c:f3:19:ca:47:48: 5f:de:d5:83:33:17:77:7a:fa:88:76:4c:21:63:05: fa:f4:8c:6e:cc:23:dd:c1:5d:6d:0b:60:f5:90:63: 73:fa:37:ef:e0:69:12:32:d8:15:22:ce:2d:c0:09: bc:e7:29:ed:d2:10:4b:8c:d2:b1:e0:b5:2c:2f:97: e5:2f:9e:df:b7:87:0f:01:dc:7c:70:f3:d0:c6:2e: 5c:9d:f3:91:fe:e7:10:39:9d:00:44:73:52:1f:0e: 9a:74:20:82:a0:ca:ee:bd:b9:fc:68:5b:8c:06:75: fe:bf:8b:eb:5c:f5:f1:50:36:c1:7f:65:ca:02:2e: b8:5f:09:9a:12:98:08:e9:ea:c4:2e:65:b7:cb:ea: 05:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C3:1F:A9:39:70:1C:80:04:66:8A:76:77:48:F4:07:87:E2:35:C7 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_8MfqTlwHIAEZop2d0j0B4fiNcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.230.0/24 Signature Algorithm: sha256WithRSAEncryption df:f4:56:29:ed:c3:1f:8c:dc:c7:1b:13:87:cf:8f:ca:91:e4: 49:d3:ba:5a:d6:aa:cd:2b:f0:ff:ed:ab:29:8b:8a:d8:fd:29: ec:0e:ee:b3:be:56:a5:e5:7a:6f:94:aa:55:79:bf:3c:44:ca: cb:ff:4e:2d:66:fe:3b:26:6e:81:87:00:94:0d:ae:7d:28:0c: 69:be:fe:05:28:dc:0b:b9:7c:a0:fa:47:44:b0:02:c5:63:8e: eb:b0:83:49:34:c7:45:92:c8:8b:3d:29:86:a4:fc:3c:87:bc: 99:4b:6d:06:66:7e:09:9c:25:d5:a3:44:6e:b9:af:11:62:6e: 14:18:7a:04:3d:99:bd:28:fe:6c:cb:12:23:7f:fe:fd:e0:0f: 68:5d:d8:02:9a:30:69:06:f5:58:85:e6:e7:89:ff:64:f8:e9: 3f:4e:ec:38:cc:56:2c:0c:81:7a:89:0a:13:9b:52:80:f0:d8: e8:19:bc:07:3a:58:9a:3b:5c:4c:ad:e4:62:c9:12:79:50:8a: be:32:25:aa:d4:58:74:d8:1c:ce:46:08:22:dd:19:71:bf:da: ef:f6:d2:26:46:bd:db:4f:c9:5f:3a:0d:83:30:82:0b:dc:b4: 36:ea:2e:e7:72:37:d1:7c:e4:05:7d:c3:ba:4f:06:a9:87:d1: 0b:e1:54:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ew4MyVOer+AGQLjmCyX5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmMzMWZhOTM5NzAxYzgwMDQ2NjhhNzY3NzQ4ZjQwNzg3ZTIzNWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2db/XvWc/jFb6cmfX3xULWZXBDQ3 nRk2yMavSQZ0K3U7a1M+rZ9kiKkj99dKZ1F9gRRNUNP0HTvkyun6CjP7ILTXTJSU tGlTdLXg4Q558rK5Sg/YVyvwpGyA75DpbbuZdOPaEmrLmkgAozMmwohJSDl88xnK R0hf3tWDMxd3evqIdkwhYwX69IxuzCPdwV1tC2D1kGNz+jfv4GkSMtgVIs4twAm8 5ynt0hBLjNKx4LUsL5flL57ft4cPAdx8cPPQxi5cnfOR/ucQOZ0ARHNSHw6adCCC oMruvbn8aFuMBnX+v4vrXPXxUDbBf2XKAi64XwmaEpgI6erELmW3y+oFLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP/DH6k5cByABGaKdndI9AeH4jXHMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvXzhNZnFUbHdISUFFWm9wMmQwajBCNGZpTmNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABefmMA0G CSqGSIb3DQEBCwUAA4IBAQDf9FYp7cMfjNzHGxOHz4/KkeRJ07pa1qrNK/D/7asp i4rY/SnsDu6zvlal5XpvlKpVeb88RMrL/04tZv47Jm6BhwCUDa59KAxpvv4FKNwL uXyg+kdEsALFY47rsINJNMdFksiLPSmGpPw8h7yZS20GZn4JnCXVo0Ruua8RYm4U GHoEPZm9KP5syxIjf/794A9oXdgCmjBpBvVYhebnif9k+Ok/Tuw4zFYsDIF6iQoT m1KA8NjoGbwHOliaO1xMreRiyRJ5UIq+MiWq1Fh02BzORggi3Rlxv9rv9tImRr3b T8lfOg2DMIIL3LQ26i7ncjfRfOQFfcO6Twaph9EL4VQP -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:41 2026 by rpki-client