This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/a0KeDJ0MC01N_mOkRoYRq-YrLhg.roa File: a0KeDJ0MC01N_mOkRoYRq-YrLhg.roa (raw, json) Hash identifier: g1uJ4eWLj+kfebTiW2CUHV162AJ/sKLtEh2/HRBM2P4= Subject key identifier: 6B:42:9E:0C:9D:0C:0B:4D:4D:FE:63:A4:46:86:11:AB:E6:2B:2E:18 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7D34E9BA84E9BA497E46282804E7420A Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/a0KeDJ0MC01N_mOkRoYRq-YrLhg.roa Signing time: Fri 02 Jan 2026 05:36:18 +0000 ROA not before: Fri 02 Jan 2026 05:36:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134465 IP address blocks: 5.231.93.0/24 maxlen: 24 94.249.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:34:e9:ba:84:e9:ba:49:7e:46:28:28:04:e7:42:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 05:36:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b429e0c9d0c0b4d4dfe63a4468611abe62b2e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:78:d9:fb:a9:e4:a4:a3:6d:e2:d1:61:4b:8e: 63:13:e1:37:54:71:c2:dc:20:44:1c:ac:c1:2c:c8: 60:72:6f:30:97:5a:97:46:1d:b3:3e:c4:c2:e5:d7: b5:20:0b:fa:46:74:fa:6f:7a:d8:f3:5b:eb:1b:d5: 5a:bb:c1:8b:8d:8a:26:fb:07:70:a0:dc:27:80:36: 0e:c6:1e:4e:ef:e9:14:aa:45:f9:26:61:d1:6b:50: 00:65:07:4f:c2:82:5a:70:17:df:15:45:a8:97:ea: 29:cf:14:21:c0:eb:0b:ad:3d:06:ed:a1:d2:1b:5e: 4d:64:79:5a:c3:82:d2:34:79:95:15:05:e3:42:7e: e5:ec:5d:68:76:ba:71:10:a0:0f:b6:b9:ce:66:fa: a3:56:d0:06:bf:35:2f:14:80:22:ca:87:0b:32:3a: ae:e7:b8:44:a6:3e:6b:16:6a:94:eb:68:60:87:fa: d3:91:7a:79:e1:29:7a:aa:e3:9a:1c:e5:57:ba:3d: 84:ed:ce:a9:cc:6e:97:35:7a:e2:0f:58:f6:56:a0: 3f:02:fd:6a:7b:1a:73:89:d1:42:af:27:1a:65:53: 23:2a:64:b9:3f:92:a7:10:8b:fe:34:52:5b:cc:9b: d2:64:63:8b:50:fc:bc:88:26:03:88:a8:09:8e:94: c6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:42:9E:0C:9D:0C:0B:4D:4D:FE:63:A4:46:86:11:AB:E6:2B:2E:18 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/a0KeDJ0MC01N_mOkRoYRq-YrLhg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.93.0/24 94.249.151.0/24 Signature Algorithm: sha256WithRSAEncryption 44:5d:54:6b:87:bd:bd:f9:85:93:b6:f7:0a:69:35:d3:f7:55: 07:b1:7d:92:ed:8e:b2:de:9a:b7:4e:48:1e:b9:7e:56:6b:03: 94:d0:72:cb:49:9f:fd:52:9a:42:a5:27:9c:75:93:72:73:c8: a4:eb:c9:b3:77:68:83:3b:dd:34:6f:87:ee:40:eb:f8:56:d6: 79:3d:ef:26:36:e1:12:72:73:4b:85:a9:c4:74:d3:2b:1b:cd: 29:87:b7:66:f3:0f:ca:21:4d:2e:21:17:87:99:98:74:1d:f6: a9:a3:7b:4f:b2:8a:3d:21:c3:a8:c7:29:48:fb:31:cd:54:e9: 26:cc:c6:59:cc:7e:eb:08:16:44:9d:c3:50:74:bb:4a:31:47: 8c:fd:62:22:30:1f:07:cc:00:d1:5a:c0:9a:db:31:53:4e:ba: 2f:86:57:96:78:1e:1d:48:8c:4c:85:47:fc:57:67:5b:ae:a2: 51:e1:59:58:09:3a:e0:ab:fd:8b:df:63:f4:01:03:95:44:df: 44:71:c1:a6:fc:71:f8:63:d5:55:c6:dc:85:81:54:e6:7f:92: 72:e0:c5:26:87:1b:75:a5:5b:32:76:3f:13:87:0c:af:22:10: 6d:d3:f7:b6:5b:61:b7:c3:5c:70:85:20:35:83:da:fe:fd:8b: eb:ae:81:08 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9NOm6hOm6SX5GKCgE50IKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDUzNjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjQyOWUwYzlkMGMwYjRkNGRmZTYzYTQ0Njg2MTFhYmU2MmIyZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnjZ+6nkpKNt4tFhS45jE+E3VHHC 3CBEHKzBLMhgcm8wl1qXRh2zPsTC5de1IAv6RnT6b3rY81vrG9Vau8GLjYom+wdw oNwngDYOxh5O7+kUqkX5JmHRa1AAZQdPwoJacBffFUWol+opzxQhwOsLrT0G7aHS G15NZHlaw4LSNHmVFQXjQn7l7F1odrpxEKAPtrnOZvqjVtAGvzUvFIAiyocLMjqu 57hEpj5rFmqU62hgh/rTkXp54Sl6quOaHOVXuj2E7c6pzG6XNXriD1j2VqA/Av1q expzidFCrycaZVMjKmS5P5KnEIv+NFJbzJvSZGOLUPy8iCYDiKgJjpTGDwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGtCngydDAtNTf5jpEaGEavmKy4YMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvYTBLZURKME1DMDFOX21Pa1JvWVJxLVlyTGhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABeddAwQA XvmXMA0GCSqGSIb3DQEBCwUAA4IBAQBEXVRrh729+YWTtvcKaTXT91UHsX2S7Y6y 3pq3TkgeuX5WawOU0HLLSZ/9UppCpSecdZNyc8ik68mzd2iDO900b4fuQOv4VtZ5 Pe8mNuEScnNLhanEdNMrG80ph7dm8w/KIU0uIReHmZh0Hfapo3tPsoo9IcOoxylI +zHNVOkmzMZZzH7rCBZEncNQdLtKMUeM/WIiMB8HzADRWsCa2zFTTrovhleWeB4d SIxMhUf8V2dbrqJR4VlYCTrgq/2L32P0AQOVRN9EccGm/HH4Y9VVxtyFgVTmf5Jy 4MUmhxt1pVsydj8ThwyvIhBt0/e2W2G3w1xwhSA1g9r+/YvrroEI -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:16 2026 by rpki-client