This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/j6tTIJcNxXavpvvE-S24QMQDFWo.roa File: j6tTIJcNxXavpvvE-S24QMQDFWo.roa (raw, json) Hash identifier: 94VfEV60ZrU4uEtKTEai0JIlo8DcZ8Wes/HteGesBT0= Subject key identifier: 8F:AB:53:20:97:0D:C5:76:AF:A6:FB:C4:F9:2D:B8:40:C4:03:15:6A Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12DE3481A936FAC8DAE31BBF959827 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/j6tTIJcNxXavpvvE-S24QMQDFWo.roa Signing time: Fri 02 Jan 2026 00:19:29 +0000 ROA not before: Fri 02 Jan 2026 00:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62403 IP address blocks: 5.231.46.0/24 maxlen: 24 5.231.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:de:34:81:a9:36:fa:c8:da:e3:1b:bf:95:98:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fab5320970dc576afa6fbc4f92db840c403156a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:96:18:0d:8b:3e:34:42:38:f1:4c:5b:32:ff: ac:da:7b:5e:e9:0f:54:0b:d1:69:c1:f8:17:a7:2e: c9:13:02:dd:20:a7:4c:2d:2f:66:97:ce:04:c3:c1: 1e:11:bb:9a:d7:58:51:03:98:f0:a8:b6:08:ab:48: 38:5d:83:54:15:2b:12:5c:6e:13:39:77:3e:14:b3: c2:cf:8c:8a:7a:40:5f:ea:ad:5c:4a:63:40:fc:12: 69:81:4a:c2:27:a1:a8:36:38:29:d6:2f:4a:e7:e8: b5:ef:f0:e8:2b:a2:20:b6:43:0c:4e:6e:01:c3:4f: 18:d9:91:9d:3f:56:0f:19:2b:5e:97:59:a7:89:b6: c8:dc:6d:e3:77:e0:d1:05:82:8c:ce:1e:d6:82:42: e4:60:c3:99:6b:16:d7:2c:fb:9d:ac:d2:5f:e4:90: 67:ae:07:74:be:35:36:24:ed:3b:92:ad:51:0b:e2: f2:01:ea:b2:88:91:b0:2a:24:ba:a7:b8:93:32:e2: 47:c4:4f:e4:b1:59:78:93:29:b7:fd:ba:54:53:1e: 06:3f:54:9e:22:ba:65:5a:ae:84:8b:38:89:be:fa: ef:7f:00:2b:e3:b4:3d:c5:b6:0e:c9:98:48:35:73: a7:2d:5a:1e:42:44:eb:a0:5b:ce:c6:0a:d3:94:30: a8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AB:53:20:97:0D:C5:76:AF:A6:FB:C4:F9:2D:B8:40:C4:03:15:6A X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/j6tTIJcNxXavpvvE-S24QMQDFWo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.46.0/24 5.231.57.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:cb:9b:b4:b0:40:6f:0b:32:d0:52:20:f6:0f:74:f9:e7:d4: 88:11:0f:be:7d:14:c6:a7:61:18:fe:be:b8:13:c2:20:f5:41: f4:9b:91:d5:f8:00:f1:b2:52:52:13:3b:19:65:40:58:37:53: 68:69:b4:50:e9:1f:70:ba:21:7e:fb:79:64:3e:b3:2c:17:12: 37:e7:88:89:44:3b:6d:a2:b8:cd:79:48:7a:62:4b:8b:25:8d: ed:29:6e:a9:27:e7:17:40:45:d2:63:c0:33:80:77:a5:f6:96: cd:f9:b4:86:1b:a3:67:38:e5:50:fb:15:ce:b6:75:bd:13:fb: ca:8b:b5:65:61:05:d9:70:f5:ce:a6:b9:f6:47:a8:e0:32:de: a3:8e:f1:86:b8:4b:f1:43:40:1e:a2:66:f1:7f:a3:48:20:49: ad:c4:e8:4e:25:0b:95:dc:3f:2a:9c:84:95:e6:98:98:ad:85: 11:c9:8d:f9:16:11:bf:3b:17:60:6d:81:8b:a7:0a:24:d8:81: 9b:d0:0a:a6:bc:9f:26:d6:d9:dc:88:fe:7d:63:82:ca:7e:f6: 25:a4:be:2a:2a:1b:44:6d:e1:76:2c:9b:7a:e5:d5:03:00:52: 7c:79:88:a5:fb:9f:7f:2d:86:19:8f:86:87:bc:71:72:e0:22: ee:e0:4a:a7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Et40gak2+sja4xu/lZgnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmFiNTMyMDk3MGRjNTc2YWZhNmZiYzRmOTJkYjg0MGM0MDMxNTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JYYDYs+NEI48UxbMv+s2nte6Q9U C9FpwfgXpy7JEwLdIKdMLS9ml84Ew8EeEbua11hRA5jwqLYIq0g4XYNUFSsSXG4T OXc+FLPCz4yKekBf6q1cSmNA/BJpgUrCJ6GoNjgp1i9K5+i17/DoK6IgtkMMTm4B w08Y2ZGdP1YPGStel1mnibbI3G3jd+DRBYKMzh7WgkLkYMOZaxbXLPudrNJf5JBn rgd0vjU2JO07kq1RC+LyAeqyiJGwKiS6p7iTMuJHxE/ksVl4kym3/bpUUx4GP1Se IrplWq6EiziJvvrvfwAr47Q9xbYOyZhINXOnLVoeQkTroFvOxgrTlDCoUQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI+rUyCXDcV2r6b7xPktuEDEAxVqMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvajZ0VElKY054WGF2cHZ2RS1TMjRRTVFERldvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABecuAwQA Bec5MA0GCSqGSIb3DQEBCwUAA4IBAQAby5u0sEBvCzLQUiD2D3T559SIEQ++fRTG p2EY/r64E8Ig9UH0m5HV+ADxslJSEzsZZUBYN1NoabRQ6R9wuiF++3lkPrMsFxI3 54iJRDttorjNeUh6YkuLJY3tKW6pJ+cXQEXSY8AzgHel9pbN+bSGG6NnOOVQ+xXO tnW9E/vKi7VlYQXZcPXOprn2R6jgMt6jjvGGuEvxQ0Aeombxf6NIIEmtxOhOJQuV 3D8qnISV5piYrYURyY35FhG/OxdgbYGLpwok2IGb0AqmvJ8m1tnciP59Y4LKfvYl pL4qKhtEbeF2LJt65dUDAFJ8eYil+59/LYYZj4aHvHFy4CLu4Eqn -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:54 2026 by rpki-client