This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/g66YNvpKpgup9envEyMEXwCgOBE.roa File: g66YNvpKpgup9envEyMEXwCgOBE.roa (raw, json) Hash identifier: hptIEz9zt/bAZ2jtsmV8Z1b6Fd2Jy1mDf/qvIPS6bzA= Subject key identifier: 83:AE:98:36:FA:4A:A6:0B:A9:F5:E9:EF:13:23:04:5F:00:A0:38:11 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12F95FB87C20379498D21EADCF0B13 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/g66YNvpKpgup9envEyMEXwCgOBE.roa Signing time: Fri 02 Jan 2026 00:19:36 +0000 ROA not before: Fri 02 Jan 2026 00:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211301 IP address blocks: 5.175.249.0/24 maxlen: 24 77.90.57.0/24 maxlen: 24 89.144.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f9:5f:b8:7c:20:37:94:98:d2:1e:ad:cf:0b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83ae9836fa4aa60ba9f5e9ef1323045f00a03811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6a:d3:7f:fc:f2:c4:5f:9a:0a:64:6d:fc:7b: ab:31:16:08:64:87:51:57:20:fc:69:4a:6a:95:50: c4:29:2b:c9:b9:f2:7b:25:ca:88:c6:7e:fc:53:e9: 08:0c:65:aa:1c:f6:52:87:fb:18:55:ea:df:fa:d1: 5a:b2:cb:5a:db:f5:59:96:5c:df:10:b0:99:9e:9b: 5b:5e:46:37:6a:02:67:d4:f7:b5:ba:8a:f0:10:c0: b8:9d:db:8a:87:14:ef:60:95:7f:78:11:37:09:47: fb:a9:59:f1:d9:bc:10:a6:bc:a7:c1:71:c7:80:5f: 84:39:86:f4:d3:38:04:0b:16:22:61:a3:3c:5c:16: 0d:9d:7b:0a:e0:3e:06:0f:b8:f5:f9:a9:f0:6c:af: b3:16:ca:f1:82:3e:c9:30:54:74:d5:f7:18:a8:c7: e0:d9:d9:a3:47:af:3d:b6:23:46:e0:e3:e1:bb:d4: b1:23:fb:b3:1e:9e:9c:50:35:fb:48:fb:b0:86:e4: 26:3b:59:ae:16:13:91:8b:e2:96:6f:71:73:56:af: ff:62:78:4e:8f:e1:c1:bc:b7:8c:50:24:ed:f5:6b: c1:aa:fc:ca:f9:4e:f0:3a:7d:25:13:cf:b7:8f:3a: 26:c9:9a:06:40:2f:aa:00:51:ed:9b:e6:43:e7:06: 23:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AE:98:36:FA:4A:A6:0B:A9:F5:E9:EF:13:23:04:5F:00:A0:38:11 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/g66YNvpKpgup9envEyMEXwCgOBE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.249.0/24 77.90.57.0/24 89.144.30.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:0a:82:c1:a1:f0:da:f9:a6:de:b7:1d:3d:f5:bd:0e:7f:3f: 51:5c:1c:e8:07:f4:f5:41:87:d2:fa:bd:9f:43:09:74:dc:c6: d3:ed:0f:fb:60:5f:bd:ce:e4:ab:48:e0:fd:46:e2:19:ac:05: 75:e5:02:9a:f5:88:6e:68:6a:49:41:2c:7b:70:07:b7:ec:3f: 3e:6b:1d:b3:8c:8d:ce:d4:b1:6d:7e:de:dc:07:81:1f:b7:eb: 38:73:25:0e:04:80:30:6d:40:19:67:d7:c9:2a:72:2d:32:aa: 68:08:2d:a8:ae:5a:50:cf:2e:bd:81:ee:bf:5c:cf:d5:67:b3: db:de:5b:0a:55:4d:2c:29:fa:5b:c3:28:35:1d:4e:5b:fb:d8: ca:6b:7f:5e:66:76:7a:01:07:54:fe:19:29:8b:23:a6:7b:79: 9a:8b:ac:61:2d:a9:0d:12:ce:85:20:1c:ea:af:c5:60:14:af: ba:92:97:0d:08:3e:38:8d:f3:eb:15:3d:e2:88:22:66:6d:89: 11:c8:d9:9b:0a:07:fd:0a:04:a8:f0:47:29:d1:f7:d2:ba:0a: 57:76:28:ee:87:64:57:63:77:72:e6:19:7d:df:23:30:53:30: a5:a2:06:78:d1:63:1d:3e:a5:22:b0:40:c7:b0:d9:05:23:ec: 39:ef:84:06 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EvlfuHwgN5SY0h6tzwsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2FlOTgzNmZhNGFhNjBiYTlmNWU5ZWYxMzIzMDQ1ZjAwYTAzODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmrTf/zyxF+aCmRt/HurMRYIZIdR VyD8aUpqlVDEKSvJufJ7JcqIxn78U+kIDGWqHPZSh/sYVerf+tFassta2/VZllzf ELCZnptbXkY3agJn1Pe1uorwEMC4nduKhxTvYJV/eBE3CUf7qVnx2bwQprynwXHH gF+EOYb00zgECxYiYaM8XBYNnXsK4D4GD7j1+anwbK+zFsrxgj7JMFR01fcYqMfg 2dmjR689tiNG4OPhu9SxI/uzHp6cUDX7SPuwhuQmO1muFhORi+KWb3FzVq//YnhO j+HBvLeMUCTt9WvBqvzK+U7wOn0lE8+3jzomyZoGQC+qAFHtm+ZD5wYjpQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIOumDb6SqYLqfXp7xMjBF8AoDgRMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvZzY2WU52cEtwZ3VwOWVudkV5TUVYd0NnT0JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABa/5AwQA TVo5AwQAWZAeMA0GCSqGSIb3DQEBCwUAA4IBAQBuCoLBofDa+abetx099b0Ofz9R XBzoB/T1QYfS+r2fQwl03MbT7Q/7YF+9zuSrSOD9RuIZrAV15QKa9YhuaGpJQSx7 cAe37D8+ax2zjI3O1LFtft7cB4Eft+s4cyUOBIAwbUAZZ9fJKnItMqpoCC2orlpQ zy69ge6/XM/VZ7Pb3lsKVU0sKfpbwyg1HU5b+9jKa39eZnZ6AQdU/hkpiyOme3ma i6xhLakNEs6FIBzqr8VgFK+6kpcNCD44jfPrFT3iiCJmbYkRyNmbCgf9CgSo8Ecp 0ffSugpXdijuh2RXY3dy5hl93yMwUzClogZ40WMdPqUisEDHsNkFI+w574QG -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:26 2026 by rpki-client