This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iDJyoBT8ebVlap91oVJlmlJtygA.roa File: iDJyoBT8ebVlap91oVJlmlJtygA.roa (raw, json) Hash identifier: mf7XfOABlYQvEdkiU2w3TGDEyA73OTP4CRdNq3jjmNE= Subject key identifier: 88:32:72:A0:14:FC:79:B5:65:6A:9F:75:A1:52:65:9A:52:6D:CA:00 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C1301940719660395B736D1A4ECD861 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iDJyoBT8ebVlap91oVJlmlJtygA.roa Signing time: Fri 02 Jan 2026 00:19:38 +0000 ROA not before: Fri 02 Jan 2026 00:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213850 IP address blocks: 5.175.245.0/24 maxlen: 24 5.231.31.0/24 maxlen: 24 94.249.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:01:94:07:19:66:03:95:b7:36:d1:a4:ec:d8:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=883272a014fc79b5656a9f75a152659a526dca00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e9:e9:c0:41:70:60:70:8d:6c:67:8a:d3:aa: 77:dd:a2:79:7e:29:78:80:c3:94:26:80:d7:6f:e0: 10:4b:a8:72:ea:54:67:c5:97:f5:d6:53:c8:a1:ae: f3:33:1e:bf:dd:2d:e0:9b:67:31:1d:15:03:c8:71: a0:24:b5:41:7e:98:49:18:bf:f0:b2:17:48:7e:4c: 4b:98:28:be:ed:8b:de:8b:43:61:67:41:42:4f:e3: 50:56:c4:04:90:06:5d:6e:08:f5:8e:77:f0:b7:3f: 75:ee:7e:3e:ec:6e:d7:c6:c0:89:c4:1e:4c:44:15: ae:f4:a7:21:54:5d:bc:c3:3a:df:91:7e:42:c8:fb: 63:ef:2f:86:03:79:b3:25:5b:3d:d9:60:a4:41:f0: 6d:ed:d0:38:dc:9e:e9:49:4b:7a:32:aa:55:87:0e: 89:a8:c0:bc:32:4e:c4:16:1b:f7:93:a3:50:a7:08: ca:d3:c7:56:6a:a4:1a:7a:f4:53:44:08:3c:c5:25: 84:7b:48:04:c0:5a:f0:e1:0f:22:e7:3a:17:66:b5: d4:55:f4:6f:28:37:cb:79:f0:9f:36:b0:77:8f:36: 1e:65:6b:62:83:2e:8e:96:ad:83:bf:b8:41:05:1a: 61:d8:49:36:59:2e:d0:4e:da:31:51:27:4a:de:dc: a0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:32:72:A0:14:FC:79:B5:65:6A:9F:75:A1:52:65:9A:52:6D:CA:00 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iDJyoBT8ebVlap91oVJlmlJtygA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.245.0/24 5.231.31.0/24 94.249.175.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:b5:ed:e6:c1:81:ec:11:37:c2:f4:a8:b4:7f:87:ef:69:e8: ac:a6:67:38:28:d8:74:76:b1:ef:9a:df:8e:4d:8c:2d:dc:f5: d0:85:7c:31:2a:4d:0a:5f:c2:ee:02:7a:68:7a:1b:e7:7d:3f: 16:69:a4:14:4e:e8:37:f1:53:46:0d:6a:f3:ee:32:9f:47:49: 14:03:e6:56:73:72:d0:fe:69:05:66:31:16:51:02:c5:58:bd: 66:ed:95:7e:81:38:fa:93:1f:e7:c3:b3:15:1b:8a:ef:60:73: 86:b7:75:6c:e1:5a:34:4c:f7:db:d8:0f:82:74:a3:79:2b:4d: 93:cc:13:91:01:05:45:98:7a:8b:1e:4e:8b:3f:f1:59:25:bc: 67:44:09:da:11:b0:e1:2f:dc:c1:71:54:33:2d:57:52:f6:4f: 98:40:3d:7b:b6:4c:0f:cc:38:dd:4f:97:48:99:80:e8:19:16: fe:8f:97:d4:13:f5:4e:32:14:4f:ed:2e:b8:e3:05:2c:6c:c2: 3f:02:ad:46:f7:60:13:64:3c:fd:51:06:18:c0:24:e0:10:39: 57:bd:f6:3b:40:76:4e:4e:13:7d:dd:53:2b:d3:fd:d1:a5:e2: e4:f5:b5:63:1e:a3:78:a5:79:49:15:c2:31:37:90:5c:e9:4e: 72:f4:d4:77 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EwGUBxlmA5W3NtGk7NhhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODMyNzJhMDE0ZmM3OWI1NjU2YTlmNzVhMTUyNjU5YTUyNmRjYTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OnpwEFwYHCNbGeK06p33aJ5fil4 gMOUJoDXb+AQS6hy6lRnxZf11lPIoa7zMx6/3S3gm2cxHRUDyHGgJLVBfphJGL/w shdIfkxLmCi+7Yvei0NhZ0FCT+NQVsQEkAZdbgj1jnfwtz917n4+7G7XxsCJxB5M RBWu9KchVF28wzrfkX5CyPtj7y+GA3mzJVs92WCkQfBt7dA43J7pSUt6MqpVhw6J qMC8Mk7EFhv3k6NQpwjK08dWaqQaevRTRAg8xSWEe0gEwFrw4Q8i5zoXZrXUVfRv KDfLefCfNrB3jzYeZWtigy6Olq2Dv7hBBRph2Ek2WS7QTtoxUSdK3tygfQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIgycqAU/Hm1ZWqfdaFSZZpSbcoAMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvaURKeW9CVDhlYlZsYXA5MW9WSmxtbEp0eWdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABa/1AwQA BecfAwQAXvmvMA0GCSqGSIb3DQEBCwUAA4IBAQANte3mwYHsETfC9Ki0f4fvaeis pmc4KNh0drHvmt+OTYwt3PXQhXwxKk0KX8LuAnpoehvnfT8WaaQUTug38VNGDWrz 7jKfR0kUA+ZWc3LQ/mkFZjEWUQLFWL1m7ZV+gTj6kx/nw7MVG4rvYHOGt3Vs4Vo0 TPfb2A+CdKN5K02TzBORAQVFmHqLHk6LP/FZJbxnRAnaEbDhL9zBcVQzLVdS9k+Y QD17tkwPzDjdT5dImYDoGRb+j5fUE/VOMhRP7S644wUsbMI/Aq1G92ATZDz9UQYY wCTgEDlXvfY7QHZOThN93VMr0/3RpeLk9bVjHqN4pXlJFcIxN5Bc6U5y9NR3 -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:17 2026 by rpki-client