This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eR8MEdeIGH-tl_y-UtB596faEDo.roa File: eR8MEdeIGH-tl_y-UtB596faEDo.roa (raw, json) Hash identifier: ZYUYfPsksRv2QpKpA7/mA78BbnWvG0RbOXo/tAFJz5M= Subject key identifier: 79:1F:0C:11:D7:88:18:7F:AD:97:FC:BE:52:D0:79:F7:A7:DA:10:3A Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12FF7B52E54D38621B08838C7F6566 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eR8MEdeIGH-tl_y-UtB596faEDo.roa Signing time: Fri 02 Jan 2026 00:19:38 +0000 ROA not before: Fri 02 Jan 2026 00:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213493 IP address blocks: 5.175.246.0/24 maxlen: 24 5.175.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ff:7b:52:e5:4d:38:62:1b:08:83:8c:7f:65:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=791f0c11d788187fad97fcbe52d079f7a7da103a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:57:13:0a:9c:23:55:d1:20:c2:8e:e2:1c:9c: f9:9d:a3:89:a1:7c:64:3b:1f:70:83:00:a6:a6:e0: 6f:c9:3e:78:6f:5b:16:99:bd:d5:54:0f:1c:43:29: 3f:b0:ca:ac:24:79:d1:b3:5b:6b:80:34:58:c7:18: ae:56:c7:85:20:c3:8a:a1:19:f3:b8:1f:c8:57:7f: d6:43:63:07:24:19:ef:c4:2e:1b:f5:a3:96:08:58: 09:0e:1f:60:89:a9:b7:f2:36:d9:47:03:55:af:44: 25:a9:8f:16:cc:36:b5:c2:b9:af:2e:98:91:5a:b3: f6:00:29:e2:dc:69:3b:d7:ab:f2:cc:00:d4:57:af: b3:19:3b:8d:6f:10:7a:ad:d2:0d:fa:59:64:5a:00: c4:4a:f8:73:cc:f3:d9:bb:4b:43:7a:4b:bc:53:62: 68:24:b2:a0:bf:5f:a2:cb:8f:64:22:fb:34:d1:76: 56:b0:96:ed:44:24:ef:8b:9c:1c:8d:d9:19:9a:14: ce:1f:df:4d:bb:ef:80:f3:d7:d6:26:16:50:11:f2: b2:34:cd:60:7c:d6:b8:c7:ea:83:bd:36:18:66:1d: e1:3f:eb:bb:85:4b:59:df:dc:c4:7f:45:11:1f:3d: ae:b8:7e:21:3f:a4:ad:34:47:7d:7f:55:0b:9c:cc: 97:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1F:0C:11:D7:88:18:7F:AD:97:FC:BE:52:D0:79:F7:A7:DA:10:3A X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eR8MEdeIGH-tl_y-UtB596faEDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.246.0/24 5.175.248.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:72:8d:bd:10:72:de:fe:10:db:c6:e2:c0:82:ee:5c:94:58: f1:e0:a8:d4:28:64:1a:55:0f:07:31:05:6b:4d:7c:cd:32:dd: 9f:2a:55:9a:ac:58:de:29:1e:f2:16:da:72:b8:dd:95:85:ca: 8f:2f:eb:36:af:ad:09:17:43:15:c9:b2:ed:be:a3:1c:07:b8: f7:9e:2d:9e:44:2c:eb:08:19:7d:de:64:12:ba:26:ba:37:02: ab:43:af:e3:e2:c8:8c:53:5a:e1:86:54:d9:bc:d5:bc:40:d2: 9f:64:b7:bb:0b:9b:c0:43:6c:52:94:d9:97:31:f4:d7:40:1c: d8:a3:fc:88:f6:f8:dd:4c:16:8c:0c:a9:f5:00:7b:7c:a4:e6: a8:4c:5e:20:21:1d:87:e7:03:ef:31:23:1b:b1:12:2b:07:83: f8:2e:35:7b:79:b9:a3:d5:27:7b:a5:14:b4:d5:a9:c0:71:28: ad:6a:f7:87:4f:7f:c6:fc:36:e8:c1:25:e1:43:46:14:e3:3b: 5a:6c:23:cb:15:6e:48:25:e0:f9:0a:36:47:f6:04:cd:16:43: 06:9e:42:17:3f:1a:09:89:c5:3b:44:d6:1e:3f:9b:6a:d1:cb: 90:58:e1:8a:d9:7e:c4:46:b8:77:cc:81:c8:36:d5:42:a2:c7: 8a:57:c2:b3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Ev97UuVNOGIbCIOMf2VmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTFmMGMxMWQ3ODgxODdmYWQ5N2ZjYmU1MmQwNzlmN2E3ZGExMDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FcTCpwjVdEgwo7iHJz5naOJoXxk Ox9wgwCmpuBvyT54b1sWmb3VVA8cQyk/sMqsJHnRs1trgDRYxxiuVseFIMOKoRnz uB/IV3/WQ2MHJBnvxC4b9aOWCFgJDh9giam38jbZRwNVr0QlqY8WzDa1wrmvLpiR WrP2ACni3Gk716vyzADUV6+zGTuNbxB6rdIN+llkWgDESvhzzPPZu0tDeku8U2Jo JLKgv1+iy49kIvs00XZWsJbtRCTvi5wcjdkZmhTOH99Nu++A89fWJhZQEfKyNM1g fNa4x+qDvTYYZh3hP+u7hUtZ39zEf0URHz2uuH4hP6StNEd9f1ULnMyXnwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHkfDBHXiBh/rZf8vlLQefen2hA6MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvZVI4TUVkZUlHSC10bF95LVV0QjU5NmZhRURvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABa/2AwQA Ba/4MA0GCSqGSIb3DQEBCwUAA4IBAQBtco29EHLe/hDbxuLAgu5clFjx4KjUKGQa VQ8HMQVrTXzNMt2fKlWarFjeKR7yFtpyuN2VhcqPL+s2r60JF0MVybLtvqMcB7j3 ni2eRCzrCBl93mQSuia6NwKrQ6/j4siMU1rhhlTZvNW8QNKfZLe7C5vAQ2xSlNmX MfTXQBzYo/yI9vjdTBaMDKn1AHt8pOaoTF4gIR2H5wPvMSMbsRIrB4P4LjV7ebmj 1Sd7pRS01anAcSitaveHT3/G/DbowSXhQ0YU4ztabCPLFW5IJeD5CjZH9gTNFkMG nkIXPxoJicU7RNYeP5tq0cuQWOGK2X7ERrh3zIHINtVCoseKV8Kz -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:31 2026 by rpki-client