This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gQQ9YemV3J_8mOPiequtqW_OHiE.roa File: gQQ9YemV3J_8mOPiequtqW_OHiE.roa (raw, json) Hash identifier: XwvCbUq5oufk2pGQXDQ1c1AKI1fQJCKzp/02Aemop6I= Subject key identifier: 81:04:3D:61:E9:95:DC:9F:FC:98:E3:E2:7A:AB:AD:A9:6F:CE:1E:21 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12CCCB3E54615762AE2827607D67BB Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gQQ9YemV3J_8mOPiequtqW_OHiE.roa Signing time: Fri 02 Jan 2026 00:19:25 +0000 ROA not before: Fri 02 Jan 2026 00:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24875 IP address blocks: 5.231.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:cc:cb:3e:54:61:57:62:ae:28:27:60:7d:67:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81043d61e995dc9ffc98e3e27aabada96fce1e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9e:27:5a:e5:54:26:7d:06:eb:a6:e4:d2:05: fd:c3:c7:85:14:1e:1c:f1:04:12:1b:47:4c:f2:04: 3d:1f:29:86:83:20:01:94:13:b3:c5:d8:d1:e8:67: 72:d4:65:d1:88:09:73:27:43:5d:fc:b5:42:ba:01: 06:f2:70:2a:76:80:d1:67:2e:91:38:b7:c0:ac:10: f7:50:39:4f:ca:16:b4:83:9d:a6:41:6c:a1:f3:1e: 28:e8:82:3a:4d:d9:a3:4a:29:9b:49:f1:d0:48:0d: ee:70:ff:66:19:53:ac:5c:fb:9f:40:6e:de:12:1a: 50:b8:60:b8:f9:96:97:a0:78:6c:fb:69:2a:c5:5a: db:c2:3a:9b:75:46:f8:e2:d6:22:77:d9:7e:e4:d3: 31:b0:57:9a:e5:4b:10:83:1c:d0:d9:3b:44:e1:60: 09:12:02:76:25:de:84:5c:79:6a:9f:19:4c:8b:59: cd:b5:10:f5:62:b9:7f:65:52:6c:53:7e:4e:a2:61: 16:84:5d:9d:56:59:75:70:ba:c2:ad:5a:97:40:74: 00:31:fa:42:9b:8a:06:1b:ea:2b:a6:d6:b1:2e:ea: 10:4e:8f:9e:1a:73:96:b3:7a:b2:5f:a4:b4:8f:a2: 87:9b:89:70:17:31:e3:83:f6:b1:91:d5:f8:ab:98: e2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:04:3D:61:E9:95:DC:9F:FC:98:E3:E2:7A:AB:AD:A9:6F:CE:1E:21 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gQQ9YemV3J_8mOPiequtqW_OHiE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.58.0/24 Signature Algorithm: sha256WithRSAEncryption 16:ff:7e:ee:cb:22:94:b4:e4:a9:b6:9f:9c:05:a3:ce:d1:0d: e3:de:52:9f:89:3a:29:81:ca:a1:a6:99:16:70:fe:92:33:cc: c4:20:76:7c:96:2f:f0:55:cc:f3:49:00:81:9b:2f:48:25:9a: 06:bf:25:bd:af:3b:d1:8f:1d:a6:df:67:cc:10:70:8a:1c:01: e2:f8:7e:57:88:e3:8f:64:19:c6:40:50:e4:a4:b1:9b:2f:d4: cf:ac:f2:e2:51:9d:d6:c4:99:f6:2f:74:b9:29:09:e9:5c:2a: 08:b2:fe:8c:13:73:df:59:26:83:84:57:4c:ee:96:60:73:a5: 3e:cc:c9:aa:31:d0:f7:7f:d9:d6:ab:99:1a:bb:7d:f4:e0:49: 60:b5:52:1e:8c:47:4a:27:fd:54:54:52:13:54:5f:3d:f7:5d: cf:73:68:9f:cc:1c:eb:f6:11:05:ab:29:f0:3b:3d:5f:01:17: fa:85:91:d1:84:c5:5f:d0:95:b3:4f:70:e0:4d:3f:2c:e6:b6: a4:c7:67:8c:dd:3c:d0:cf:69:66:4c:f6:13:da:0b:22:a9:40: 97:4b:15:85:85:e4:01:cd:ee:09:ab:81:8f:ad:3b:a5:e7:c1: 26:36:14:8a:0b:56:c0:a2:b4:c6:cd:12:d1:ff:53:1c:bb:ce: dd:e6:ff:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EszLPlRhV2KuKCdgfWe7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTA0M2Q2MWU5OTVkYzlmZmM5OGUzZTI3YWFiYWRhOTZmY2UxZTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ4nWuVUJn0G66bk0gX9w8eFFB4c 8QQSG0dM8gQ9HymGgyABlBOzxdjR6Gdy1GXRiAlzJ0Nd/LVCugEG8nAqdoDRZy6R OLfArBD3UDlPyha0g52mQWyh8x4o6II6TdmjSimbSfHQSA3ucP9mGVOsXPufQG7e EhpQuGC4+ZaXoHhs+2kqxVrbwjqbdUb44tYid9l+5NMxsFea5UsQgxzQ2TtE4WAJ EgJ2Jd6EXHlqnxlMi1nNtRD1Yrl/ZVJsU35OomEWhF2dVll1cLrCrVqXQHQAMfpC m4oGG+orptaxLuoQTo+eGnOWs3qyX6S0j6KHm4lwFzHjg/axkdX4q5jixwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIEEPWHpldyf/Jjj4nqrralvzh4hMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvZ1FROVllbVYzSl84bU9QaWVxdXRxV19PSGlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABec6MA0G CSqGSIb3DQEBCwUAA4IBAQAW/37uyyKUtOSptp+cBaPO0Q3j3lKfiTopgcqhppkW cP6SM8zEIHZ8li/wVczzSQCBmy9IJZoGvyW9rzvRjx2m32fMEHCKHAHi+H5XiOOP ZBnGQFDkpLGbL9TPrPLiUZ3WxJn2L3S5KQnpXCoIsv6ME3PfWSaDhFdM7pZgc6U+ zMmqMdD3f9nWq5kau3304ElgtVIejEdKJ/1UVFITVF89913Pc2ifzBzr9hEFqynw Oz1fARf6hZHRhMVf0JWzT3DgTT8s5rakx2eM3TzQz2lmTPYT2gsiqUCXSxWFheQB ze4Jq4GPrTul58EmNhSKC1bAorTGzRLR/1Mcu87d5v8u -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:58 2026 by rpki-client