This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lt8mBRnwnOFzIoSiy5pQhKyHD4w.roa File: lt8mBRnwnOFzIoSiy5pQhKyHD4w.roa (raw, json) Hash identifier: 3tCIeZKo/jQ1IlwOlU4CPPo7O/yWFmqz+YpxzL2lHgA= Subject key identifier: 96:DF:26:05:19:F0:9C:E1:73:22:84:A2:CB:9A:50:84:AC:87:0F:8C Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12CB8B4CE41AC6DABA576F8A4CBB07 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lt8mBRnwnOFzIoSiy5pQhKyHD4w.roa Signing time: Fri 02 Jan 2026 00:19:25 +0000 ROA not before: Fri 02 Jan 2026 00:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23470 IP address blocks: 5.231.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:cb:8b:4c:e4:1a:c6:da:ba:57:6f:8a:4c:bb:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96df260519f09ce1732284a2cb9a5084ac870f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0e:eb:76:c2:3c:08:f9:7a:03:03:82:10:e1: ed:ca:8c:25:35:1a:26:b4:d7:dd:8a:c3:e1:df:c5: a0:ca:99:6d:03:94:bf:c6:1b:14:21:f2:ed:19:b2: 60:2a:44:83:33:c9:e5:28:4c:ad:24:28:fb:dd:d9: 89:75:7d:ca:ef:2b:2c:38:88:50:67:65:f4:94:2b: 45:70:9d:b4:47:10:30:af:aa:71:60:ab:2b:2d:b1: 77:e9:33:de:ec:9c:a1:54:0d:b9:fb:9a:12:fd:ef: 86:cf:19:d1:ba:7b:00:d1:e6:8b:e5:67:0c:4a:54: 33:30:9b:62:12:d9:5a:68:1d:cd:6a:f8:96:76:ce: d4:e7:99:cf:a9:b5:02:0b:56:6d:ad:85:d3:ad:1a: 5a:96:c9:ba:50:98:60:75:89:1c:23:ae:05:c9:68: 87:1c:69:d5:31:16:18:6c:a7:cb:a3:e1:40:ef:2a: 49:d0:fd:3b:25:e0:ea:64:f9:c3:5d:2d:57:32:68: be:55:d7:d9:c4:57:9d:81:b7:34:84:80:e3:13:73: a9:9b:fb:38:e2:67:2b:d4:c4:e5:a7:aa:a4:ac:5a: a1:d2:97:67:dd:66:81:90:dd:88:23:38:05:c9:08: 3b:f5:f7:a6:be:b3:db:f9:0b:60:8c:ed:89:e4:07: 8e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DF:26:05:19:F0:9C:E1:73:22:84:A2:CB:9A:50:84:AC:87:0F:8C X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lt8mBRnwnOFzIoSiy5pQhKyHD4w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.61.0/24 Signature Algorithm: sha256WithRSAEncryption 04:4f:b2:a1:4e:ac:b9:29:2c:f4:45:15:60:57:3c:8a:3a:e8: 3e:af:21:3a:f5:43:e6:21:f7:ce:4f:16:ae:c2:fc:49:4a:8b: 33:fc:14:52:0b:67:25:51:e3:82:52:3c:b4:dd:f6:8c:3f:17: 8d:60:f0:0b:5c:0a:5d:a4:3f:23:5b:53:24:74:53:b3:90:ea: 8b:d0:1b:95:84:ee:77:ab:43:2d:d7:16:7b:a0:4d:ac:a2:07: bd:66:72:7a:c2:21:b7:94:33:3b:e1:54:35:08:7e:f1:ea:0d: 55:40:7e:3f:8f:5d:3a:88:26:90:19:d7:6a:88:41:3a:27:bc: be:37:d4:b5:6e:17:2b:e3:5b:a8:d7:65:f3:2d:6f:de:e8:4c: 6a:7b:32:1d:f9:ac:36:44:82:a7:50:77:fb:2f:17:59:1a:b2: 0a:a3:75:51:1b:70:c2:c9:13:32:fd:75:e9:65:6d:95:d9:79: 1e:17:25:7a:b1:5d:78:3f:b3:76:34:66:8c:ff:f5:ca:5a:68: 9c:b0:86:9e:b6:27:b9:46:9b:d6:eb:6c:1f:9e:76:73:cb:a6: 7a:ab:60:c9:2a:2f:64:bf:57:00:6f:06:35:f0:3f:5d:ac:58: 43:d2:77:ab:14:cd:7b:23:b8:12:1c:ac:53:7e:25:a9:9d:64: 56:24:4b:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EsuLTOQaxtq6V2+KTLsHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmRmMjYwNTE5ZjA5Y2UxNzMyMjg0YTJjYjlhNTA4NGFjODcwZjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw7rdsI8CPl6AwOCEOHtyowlNRom tNfdisPh38WgypltA5S/xhsUIfLtGbJgKkSDM8nlKEytJCj73dmJdX3K7yssOIhQ Z2X0lCtFcJ20RxAwr6pxYKsrLbF36TPe7JyhVA25+5oS/e+GzxnRunsA0eaL5WcM SlQzMJtiEtlaaB3NaviWds7U55nPqbUCC1ZtrYXTrRpalsm6UJhgdYkcI64FyWiH HGnVMRYYbKfLo+FA7ypJ0P07JeDqZPnDXS1XMmi+VdfZxFedgbc0hIDjE3Opm/s4 4mcr1MTlp6qkrFqh0pdn3WaBkN2IIzgFyQg79femvrPb+QtgjO2J5AeOOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJbfJgUZ8JzhcyKEosuaUISshw+MMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvbHQ4bUJSbnduT0Z6SW9TaXk1cFFoS3lIRDR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABec9MA0G CSqGSIb3DQEBCwUAA4IBAQAET7KhTqy5KSz0RRVgVzyKOug+ryE69UPmIffOTxau wvxJSosz/BRSC2clUeOCUjy03faMPxeNYPALXApdpD8jW1MkdFOzkOqL0BuVhO53 q0Mt1xZ7oE2soge9ZnJ6wiG3lDM74VQ1CH7x6g1VQH4/j106iCaQGddqiEE6J7y+ N9S1bhcr41uo12XzLW/e6ExqezId+aw2RIKnUHf7LxdZGrIKo3VRG3DCyRMy/XXp ZW2V2XkeFyV6sV14P7N2NGaM//XKWmicsIaetie5RpvW62wfnnZzy6Z6q2DJKi9k v1cAbwY18D9drFhD0nerFM17I7gSHKxTfiWpnWRWJEuv -----END CERTIFICATE-----Generated at Thu Jan 8 09:23:16 2026 by rpki-client