This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lWxR2jc6m07ghRE_6L9zQ14iPDc.roa File: lWxR2jc6m07ghRE_6L9zQ14iPDc.roa (raw, json) Hash identifier: 1z1MZ/Th6EQn3GoaZDsNXoB9PR0zzLNJyxcfXXVtaNI= Subject key identifier: 95:6C:51:DA:37:3A:9B:4E:E0:85:11:3F:E8:BF:73:43:5E:22:3C:37 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BCE31F827FF0425713E0E9F69BAD2ED55 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lWxR2jc6m07ghRE_6L9zQ14iPDc.roa Signing time: Sat 17 Jan 2026 23:02:19 +0000 ROA not before: Sat 17 Jan 2026 23:02:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58212 IP address blocks: 5.231.70.0/24 maxlen: 24 5.231.220.0/24 maxlen: 24 5.231.234.0/24 maxlen: 24 77.90.22.0/24 maxlen: 24 77.90.41.0/24 maxlen: 24 77.90.52.0/24 maxlen: 24 85.93.1.0/24 maxlen: 24 89.144.25.0/24 maxlen: 24 89.144.44.0/24 maxlen: 24 89.144.46.0/24 maxlen: 24 178.18.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ce:31:f8:27:ff:04:25:71:3e:0e:9f:69:ba:d2:ed:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 17 23:02:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=956c51da373a9b4ee085113fe8bf73435e223c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0d:95:d9:06:5c:1f:9e:f8:f4:31:0a:84:55: 44:d2:66:48:57:34:48:a0:71:40:7a:4e:9b:5d:09: a2:cc:af:d0:72:1b:4f:0a:59:d6:04:82:64:fb:62: ed:52:d9:e0:e0:ad:26:2d:1d:02:74:95:2b:a8:27: 3b:ff:0f:a1:f0:3c:6d:f0:f4:ff:c1:b3:89:87:46: ec:ea:a5:f6:58:c4:e7:ea:97:cb:63:bc:c2:43:90: 2b:cb:70:2a:dd:5e:d1:e8:43:5c:3a:ac:2c:5d:fa: 02:c0:33:93:16:de:88:64:bf:65:ba:63:b8:40:5e: 2d:0f:e7:db:ed:26:52:1b:af:49:e1:c5:97:6d:60: b7:b0:a9:59:ab:95:94:21:70:6e:94:05:33:2c:dd: 1d:49:a5:eb:c0:9f:49:53:de:81:14:24:a6:be:c6: 97:8a:b0:23:4e:28:35:4c:67:e3:46:57:55:6a:43: 46:7b:81:77:00:e7:a1:c9:4a:7a:91:bc:6e:49:3f: b2:d8:91:4a:9a:f7:0e:64:6e:9e:63:e0:9a:5d:76: c2:ed:52:3a:59:02:c9:5e:ac:c8:2b:63:7b:2c:ed: 4e:f1:0c:0f:25:8b:16:c8:0f:96:6e:b4:1e:68:10: ab:e5:ce:17:0f:0c:88:a6:24:23:1e:a8:81:36:f5: 14:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6C:51:DA:37:3A:9B:4E:E0:85:11:3F:E8:BF:73:43:5E:22:3C:37 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lWxR2jc6m07ghRE_6L9zQ14iPDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.70.0/24 5.231.220.0/24 5.231.234.0/24 77.90.22.0/24 77.90.41.0/24 77.90.52.0/24 85.93.1.0/24 89.144.25.0/24 89.144.44.0/24 89.144.46.0/24 178.18.147.0/24 Signature Algorithm: sha256WithRSAEncryption c6:44:75:6e:3a:bd:57:66:68:79:09:34:89:b1:3d:a5:d4:e2: d1:cc:cf:e3:f5:4c:9a:aa:78:13:03:47:3f:a1:15:7e:c7:58: 39:b2:63:76:52:44:80:ef:76:c0:45:f2:42:fe:61:59:68:91: d7:d2:95:e2:9a:a2:94:74:4b:33:aa:8e:d5:df:36:6e:b0:b1: e1:bb:ab:a9:65:19:ba:b3:13:1e:9b:56:f0:c0:b1:74:cf:9c: 14:ba:47:bc:f7:29:5d:57:76:1b:62:f6:24:06:bb:b3:7c:4d: f8:07:b4:ac:ef:fc:1c:5c:0f:b4:b7:78:d9:53:bf:c3:5c:04: 26:45:7d:1e:bf:cd:71:3e:94:0a:5d:fd:e1:f1:8e:cd:7d:71: f8:c9:c1:ce:a6:85:7a:a2:08:19:15:00:91:96:5b:54:c8:f4: 38:55:9c:be:3d:ec:7a:ae:d5:1d:9a:a1:1d:bd:15:0c:1e:39: ae:df:4d:18:2d:cf:54:b9:c3:e5:69:6e:e8:60:2e:66:3d:6a: 00:17:5c:22:6c:97:b6:f1:64:ec:af:d7:66:d2:d5:8f:9b:c0: bb:d6:70:c0:3c:46:ef:6d:2b:a3:96:71:7b:1c:8b:f3:6c:59: 50:cf:f6:b3:49:20:78:99:f5:56:07:27:85:aa:f2:27:05:f9: d7:74:e7:55 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZvOMfgn/wQlcT4On2m60u1VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTE3MjMwMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTZjNTFkYTM3M2E5YjRlZTA4NTExM2ZlOGJmNzM0MzVlMjIzYzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw2V2QZcH5749DEKhFVE0mZIVzRI oHFAek6bXQmizK/QchtPClnWBIJk+2LtUtng4K0mLR0CdJUrqCc7/w+h8Dxt8PT/ wbOJh0bs6qX2WMTn6pfLY7zCQ5Ary3Aq3V7R6ENcOqwsXfoCwDOTFt6IZL9lumO4 QF4tD+fb7SZSG69J4cWXbWC3sKlZq5WUIXBulAUzLN0dSaXrwJ9JU96BFCSmvsaX irAjTig1TGfjRldVakNGe4F3AOehyUp6kbxuST+y2JFKmvcOZG6eY+CaXXbC7VI6 WQLJXqzIK2N7LO1O8QwPJYsWyA+WbrQeaBCr5c4XDwyIpiQjHqiBNvUUcwIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFJVsUdo3OptO4IURP+i/c0NeIjw3MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvbFd4UjJqYzZtMDdnaFJFXzZMOXpRMTRpUERjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQABedGAwQA BefcAwQABefqAwQATVoWAwQATVopAwQATVo0AwQAVV0BAwQAWZAZAwQAWZAsAwQA WZAuAwQAshKTMA0GCSqGSIb3DQEBCwUAA4IBAQDGRHVuOr1XZmh5CTSJsT2l1OLR zM/j9UyaqngTA0c/oRV+x1g5smN2UkSA73bARfJC/mFZaJHX0pXimqKUdEszqo7V 3zZusLHhu6upZRm6sxMem1bwwLF0z5wUuke89yldV3YbYvYkBruzfE34B7Ss7/wc XA+0t3jZU7/DXAQmRX0ev81xPpQKXf3h8Y7NfXH4ycHOpoV6oggZFQCRlltUyPQ4 VZy+Pex6rtUdmqEdvRUMHjmu300YLc9UucPlaW7oYC5mPWoAF1wibJe28WTsr9dm 0tWPm8C71nDAPEbvbSujlnF7HIvzbFlQz/azSSB4mfVWByeFqvInBfnXdOdV -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:21 2026 by rpki-client