This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aq2yZxMnxG8uSbxU6L5QnnlLbfg.roa File: aq2yZxMnxG8uSbxU6L5QnnlLbfg.roa (raw, json) Hash identifier: GWJauLZY0fxfJ3jpW8Kwy/HcZbSgp9pInkP0vDX6hGY= Subject key identifier: 6A:AD:B2:67:13:27:C4:6F:2E:49:BC:54:E8:BE:50:9E:79:4B:6D:F8 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C1306CB021BD4957B981FA5A867C30F Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aq2yZxMnxG8uSbxU6L5QnnlLbfg.roa Signing time: Fri 02 Jan 2026 00:19:40 +0000 ROA not before: Fri 02 Jan 2026 00:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214783 IP address blocks: 5.83.151.0/24 maxlen: 24 5.231.240.0/24 maxlen: 24 89.144.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:06:cb:02:1b:d4:95:7b:98:1f:a5:a8:67:c3:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6aadb2671327c46f2e49bc54e8be509e794b6df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b5:b7:93:7a:d5:f1:dd:40:e8:58:3e:d7:02: ca:6e:21:5b:4e:b0:e1:01:5c:9b:b4:21:c3:59:a7: 77:0e:07:83:d0:85:0b:ff:84:1d:fe:b9:ea:a7:1c: 45:86:6e:d3:a8:a2:72:16:20:9f:98:ef:a8:0a:12: 2a:8b:98:8a:05:63:ac:a8:5b:8a:9c:f9:53:21:d1: 0d:58:61:83:8b:10:27:2b:06:38:d8:1f:16:cb:89: 1d:7d:cf:f9:3f:07:42:0b:93:b9:be:1f:c9:69:e2: 28:ca:7d:d4:ef:14:35:74:1b:dd:d4:99:5a:08:e0: 8e:f4:ba:37:b4:ca:b2:6b:2d:7c:b1:ab:83:6f:df: 3a:e0:b3:ad:f2:25:94:0a:74:dc:dc:35:0f:4e:3e: 46:c2:f3:08:88:b5:28:6b:32:00:95:e7:32:a6:78: 4d:cb:35:08:38:71:71:32:37:a1:d6:36:29:11:90: 05:04:c3:a0:f7:98:d0:a4:4c:ff:60:09:af:57:c9: e1:b3:ed:06:d9:bf:04:5f:22:76:1d:7a:90:17:0e: 7c:89:f5:80:2b:b5:05:f9:a4:ab:ca:e5:d4:01:9b: b0:6c:b4:b6:83:34:a8:2f:50:16:68:7d:bc:04:2c: 7e:88:ac:7e:bf:c6:49:e2:5a:f0:92:b7:a1:8b:23: 6d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AD:B2:67:13:27:C4:6F:2E:49:BC:54:E8:BE:50:9E:79:4B:6D:F8 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aq2yZxMnxG8uSbxU6L5QnnlLbfg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.151.0/24 5.231.240.0/24 89.144.55.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:d9:2d:6f:17:7f:22:4e:6b:39:dd:7f:6d:e5:56:60:73:d6: 81:4c:70:54:fb:f1:1e:da:b1:aa:c5:27:d1:f5:28:e3:ef:51: 95:f5:8a:6e:88:b7:5f:8a:e3:ee:28:cf:91:e0:be:89:23:17: 39:b3:f5:c6:fd:66:83:84:47:49:f0:e9:f5:e7:27:52:e4:38: a2:24:44:c6:00:45:fd:99:a5:cf:97:bd:27:34:40:d6:90:06: 81:6e:bf:77:ab:2d:6e:3c:25:3f:d0:a1:ca:14:5d:0f:b3:ad: b9:1b:41:35:92:3d:63:ed:62:7d:48:79:97:a1:20:d3:c0:24: b1:02:37:27:18:e1:0b:9d:4f:6f:37:ce:62:91:31:3a:ca:e0: 0c:b5:22:2a:5e:66:6e:19:ce:42:fc:8a:8d:85:ce:13:e5:97: e9:58:c5:dd:51:c8:af:5c:2c:1e:68:bc:dd:ad:8b:12:3b:33: 61:ac:99:92:bd:b9:8c:01:cb:65:2e:9b:d6:81:3b:9b:e3:3f: 38:d7:b9:86:83:f6:58:6a:ce:6f:59:cb:7c:d3:a9:11:c9:b1: 25:84:d3:cd:89:02:9b:00:1b:a0:e3:a2:57:5a:ea:f8:da:72: 0d:b1:52:e9:45:01:8a:fb:a8:6f:cb:c1:62:ff:3e:cf:d9:c1: 3d:9a:a3:5b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EwbLAhvUlXuYH6WoZ8MPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWFkYjI2NzEzMjdjNDZmMmU0OWJjNTRlOGJlNTA5ZTc5NGI2ZGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrW3k3rV8d1A6Fg+1wLKbiFbTrDh AVybtCHDWad3DgeD0IUL/4Qd/rnqpxxFhm7TqKJyFiCfmO+oChIqi5iKBWOsqFuK nPlTIdENWGGDixAnKwY42B8Wy4kdfc/5PwdCC5O5vh/JaeIoyn3U7xQ1dBvd1Jla COCO9Lo3tMqyay18sauDb9864LOt8iWUCnTc3DUPTj5GwvMIiLUoazIAlecypnhN yzUIOHFxMjeh1jYpEZAFBMOg95jQpEz/YAmvV8nhs+0G2b8EXyJ2HXqQFw58ifWA K7UF+aSryuXUAZuwbLS2gzSoL1AWaH28BCx+iKx+v8ZJ4lrwkrehiyNtZQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGqtsmcTJ8RvLkm8VOi+UJ55S234MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvYXEyeVp4TW54Rzh1U2J4VTZMNVFubmxMYmZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABVOXAwQA BefwAwQAWZA3MA0GCSqGSIb3DQEBCwUAA4IBAQA72S1vF38iTms53X9t5VZgc9aB THBU+/Ee2rGqxSfR9Sjj71GV9YpuiLdfiuPuKM+R4L6JIxc5s/XG/WaDhEdJ8On1 5ydS5DiiJETGAEX9maXPl70nNEDWkAaBbr93qy1uPCU/0KHKFF0Ps625G0E1kj1j 7WJ9SHmXoSDTwCSxAjcnGOELnU9vN85ikTE6yuAMtSIqXmZuGc5C/IqNhc4T5Zfp WMXdUcivXCweaLzdrYsSOzNhrJmSvbmMActlLpvWgTub4z8417mGg/ZYas5vWct8 06kRybElhNPNiQKbABug46JXWur42nINsVLpRQGK+6hvy8Fi/z7P2cE9mqNb -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:12 2026 by rpki-client