This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aJhKNxR77CGBUp6is0Bj9ym5gUI.roa File: aJhKNxR77CGBUp6is0Bj9ym5gUI.roa (raw, json) Hash identifier: J8nKZ+7wHFVcyS8Yn1KijrEHUkHnu81qTZFBalCemFQ= Subject key identifier: 68:98:4A:37:14:7B:EC:21:81:52:9E:A2:B3:40:63:F7:29:B9:81:42 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12CE678374225836E86FF56210876A Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aJhKNxR77CGBUp6is0Bj9ym5gUI.roa Signing time: Fri 02 Jan 2026 00:19:25 +0000 ROA not before: Fri 02 Jan 2026 00:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32132 IP address blocks: 5.175.203.0/24 maxlen: 24 5.175.204.0/24 maxlen: 24 5.231.59.0/24 maxlen: 24 5.231.94.0/24 maxlen: 24 89.106.76.0/24 maxlen: 24 89.106.80.0/24 maxlen: 24 89.106.92.0/24 maxlen: 24 89.106.93.0/24 maxlen: 24 94.103.170.0/24 maxlen: 24 94.103.171.0/24 maxlen: 24 94.103.174.0/24 maxlen: 24 94.249.158.0/24 maxlen: 24 94.249.168.0/24 maxlen: 24 94.249.169.0/24 maxlen: 24 94.249.170.0/24 maxlen: 24 94.249.172.0/24 maxlen: 24 94.249.177.0/24 maxlen: 24 94.249.214.0/24 maxlen: 24 94.249.233.0/24 maxlen: 24 94.249.238.0/24 maxlen: 24 94.249.245.0/24 maxlen: 24 178.18.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ce:67:83:74:22:58:36:e8:6f:f5:62:10:87:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68984a37147bec2181529ea2b34063f729b98142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f6:83:58:06:92:d0:76:0f:ef:0f:c1:31:86: 13:ab:92:26:bd:dc:ca:5e:65:61:57:a0:ed:0b:99: e0:f5:08:3f:7b:44:f3:23:4d:9b:75:9a:30:bf:4e: 74:98:9e:f0:68:ff:8a:0c:b7:6d:d3:f5:5a:46:b5: 8b:64:a7:81:39:35:fa:47:02:08:89:51:bf:e2:77: da:c0:54:64:64:5a:dd:19:21:3b:31:79:5e:66:ef: 1c:08:f9:e8:c5:44:b4:5d:3c:ce:ac:36:5e:63:83: 7a:b2:94:e3:69:eb:25:f2:ec:29:d8:e6:1c:01:12: 8e:31:81:dd:6d:0c:d3:14:ac:47:d4:f8:21:f4:d9: 0c:43:bd:80:ee:61:42:e1:0d:66:3b:84:f9:df:8a: 93:6f:2d:4b:19:7b:72:6c:d3:c1:06:9f:98:47:e0: 09:d9:14:7e:6d:b0:68:ff:e1:7f:ee:1c:af:d2:49: 7d:0c:d5:5f:62:3b:44:47:9c:c5:f8:2c:cd:f7:4a: 9c:56:65:95:71:14:e6:77:ab:d1:c9:21:f3:b1:61: 29:a8:6f:18:74:d9:68:58:f6:cf:c4:6e:a0:18:ce: 8b:74:3a:29:2f:93:f9:67:48:b5:90:b5:07:8b:67: f9:27:69:fe:a3:6c:a5:e2:92:ec:f4:d0:80:28:66: 05:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:98:4A:37:14:7B:EC:21:81:52:9E:A2:B3:40:63:F7:29:B9:81:42 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aJhKNxR77CGBUp6is0Bj9ym5gUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.203.0-5.175.204.255 5.231.59.0/24 5.231.94.0/24 89.106.76.0/24 89.106.80.0/24 89.106.92.0/23 94.103.170.0/23 94.103.174.0/24 94.249.158.0/24 94.249.168.0-94.249.170.255 94.249.172.0/24 94.249.177.0/24 94.249.214.0/24 94.249.233.0/24 94.249.238.0/24 94.249.245.0/24 178.18.144.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:e0:99:a8:49:b2:7f:1e:70:d2:6f:01:83:13:83:bd:14:f2: 47:41:1d:c0:3e:2d:22:34:fd:2b:96:6b:c6:4e:cf:88:b5:3e: 63:62:3b:a7:56:1e:01:cc:2a:5a:22:8c:42:8c:dd:d4:fe:45: 5b:ea:6a:c7:62:79:27:11:d5:07:a6:0e:1b:3b:7c:d2:51:e5: ad:c4:c4:24:d3:91:80:f0:e8:f7:b1:bb:13:15:18:33:9c:0b: 09:37:63:93:1a:5b:90:76:1c:9b:e1:7d:8b:4c:8b:06:91:7b: 4e:97:06:b2:16:9e:de:c4:5f:1e:db:0e:b1:72:7c:22:cf:97: 8c:47:d1:2c:83:4c:5d:24:01:7c:e7:bf:a4:f9:1e:2d:62:13: e1:18:d4:3e:29:e3:29:f9:98:9c:ff:6c:33:1e:6d:ac:5c:39: f5:8a:61:d0:5f:d8:6f:f4:bc:c4:f9:de:83:2a:0f:1c:df:d4: 2f:2c:fb:44:30:f4:f0:2b:4f:ef:b0:96:ef:53:43:d1:12:11: fa:5b:85:32:1c:34:61:44:32:da:95:0a:97:c9:f0:39:72:0f: 8e:e1:3a:b2:cb:37:bc:fb:d3:c3:b2:fd:70:2f:63:a7:dd:21: 4a:87:6e:95:cc:71:3a:e1:85:3f:db:97:a3:21:4c:bd:ff:e6: 86:d6:f3:86 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgISAZt8Es5ng3QiWDbob/ViEIdqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODk4NGEzNzE0N2JlYzIxODE1MjllYTJiMzQwNjNmNzI5Yjk4MTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vaDWAaS0HYP7w/BMYYTq5ImvdzK XmVhV6DtC5ng9Qg/e0TzI02bdZowv050mJ7waP+KDLdt0/VaRrWLZKeBOTX6RwII iVG/4nfawFRkZFrdGSE7MXleZu8cCPnoxUS0XTzOrDZeY4N6spTjaesl8uwp2OYc ARKOMYHdbQzTFKxH1Pgh9NkMQ72A7mFC4Q1mO4T534qTby1LGXtybNPBBp+YR+AJ 2RR+bbBo/+F/7hyv0kl9DNVfYjtER5zF+CzN90qcVmWVcRTmd6vRySHzsWEpqG8Y dNloWPbPxG6gGM6LdDopL5P5Z0i1kLUHi2f5J2n+o2yl4pLs9NCAKGYFKwIDAQAB o4ICezCCAncwHQYDVR0OBBYEFGiYSjcUe+whgVKeorNAY/cpuYFCMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvYUpoS054Ujc3Q0dCVXA2aXMwQmo5eW01Z1VJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYwDAMEAAWv ywMEAAWvzAMEAAXnOwMEAAXnXgMEAFlqTAMEAFlqUAMEAVlqXAMEAV5nqgMEAF5n rgMEAF75njAMAwQDXvmoAwQAXvmqAwQAXvmsAwQAXvmxAwQAXvnWAwQAXvnpAwQA XvnuAwQAXvn1AwQAshKQMA0GCSqGSIb3DQEBCwUAA4IBAQB+4JmoSbJ/HnDSbwGD E4O9FPJHQR3APi0iNP0rlmvGTs+ItT5jYjunVh4BzCpaIoxCjN3U/kVb6mrHYnkn EdUHpg4bO3zSUeWtxMQk05GA8Oj3sbsTFRgznAsJN2OTGluQdhyb4X2LTIsGkXtO lwayFp7exF8e2w6xcnwiz5eMR9Esg0xdJAF857+k+R4tYhPhGNQ+KeMp+Zic/2wz Hm2sXDn1imHQX9hv9LzE+d6DKg8c39QvLPtEMPTwK0/vsJbvU0PREhH6W4UyHDRh RDLalQqXyfA5cg+O4Tqyyze8+9PDsv1wL2On3SFKh26VzHE64YU/25ejIUy9/+aG 1vOG -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:20 2026 by rpki-client