This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ne_mJfsZaT2MbuLxnTG1AH6J9H8.roa File: ne_mJfsZaT2MbuLxnTG1AH6J9H8.roa (raw, json) Hash identifier: rs4PgDqT0Z5REKaw/rmXx00wRHg5DVJSHZs5xN3Pcuo= Subject key identifier: 9D:EF:E6:25:FB:19:69:3D:8C:6E:E2:F1:9D:31:B5:00:7E:89:F4:7F Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C13101C5D6830B9015D0836BE6694AB Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ne_mJfsZaT2MbuLxnTG1AH6J9H8.roa Signing time: Fri 02 Jan 2026 00:19:42 +0000 ROA not before: Fri 02 Jan 2026 00:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215849 IP address blocks: 5.175.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:10:1c:5d:68:30:b9:01:5d:08:36:be:66:94:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9defe625fb19693d8c6ee2f19d31b5007e89f47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ef:d1:cc:06:1d:79:13:94:33:ef:93:18:ba: 60:8c:25:72:80:09:de:05:76:e1:9f:66:e7:37:76: 50:e5:07:18:5f:52:de:12:42:00:50:e1:e3:27:ee: 75:38:b1:41:59:8a:a8:a6:09:aa:c6:ad:04:88:b7: 92:27:c9:86:32:91:ef:2b:4f:7e:15:82:02:7f:e2: bc:56:79:25:1c:a7:49:b7:66:76:ec:9a:21:13:1f: b5:51:1a:b5:7d:9c:12:d2:6b:70:fe:c1:ab:96:76: c5:1d:79:28:91:5a:ea:c2:dc:3d:2b:2d:08:27:de: 10:da:e5:8e:d4:a6:e5:6f:01:86:51:cb:ec:e3:ad: be:ce:87:90:69:08:2f:ac:c9:fe:cf:6c:96:81:d7: 8a:d3:d5:c4:45:97:1f:05:ff:12:2e:60:35:b1:21: 75:26:fc:13:94:25:16:d4:80:f2:57:1c:79:c0:37: b9:c0:e5:6f:14:7e:ab:9e:97:50:4f:8f:72:c8:24: 70:3b:a6:e7:4e:3e:76:87:28:7c:19:38:2f:c0:a8: af:ae:92:6c:a0:49:bc:de:42:31:af:e6:4b:02:d5: eb:15:35:31:60:b2:d6:f3:dc:5e:62:da:8b:f4:84: 8f:95:19:e1:03:1e:1d:25:52:a6:70:9b:e1:a2:53: 53:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EF:E6:25:FB:19:69:3D:8C:6E:E2:F1:9D:31:B5:00:7E:89:F4:7F X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ne_mJfsZaT2MbuLxnTG1AH6J9H8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.177.0/24 Signature Algorithm: sha256WithRSAEncryption 67:3c:a6:7e:da:81:64:e8:f4:e5:18:fe:6f:0a:10:67:d8:23: 61:e8:dc:60:9a:f0:8e:04:5b:0a:79:ac:6e:e3:d8:41:2b:ff: e0:14:80:b3:5a:53:04:9f:8d:a3:a9:32:11:2b:7c:5c:60:f2: d8:27:ab:b0:fc:10:18:b8:dc:d8:c7:eb:d3:bb:dd:38:37:15: ad:ce:23:a2:0f:b3:b3:77:7f:59:8b:0f:df:ed:19:67:d0:eb: 79:9f:1c:5c:8f:83:3c:95:b9:4c:85:39:f5:74:7a:88:d3:4d: fc:54:f9:c3:29:f2:c6:f7:7c:c4:2a:e9:47:13:b9:d7:aa:31: cb:40:39:c8:01:66:4e:18:c7:84:74:26:09:59:81:21:4b:82: ae:26:b3:51:12:b6:df:72:86:c7:dc:64:8c:da:35:19:13:f5: 8c:26:01:75:67:0c:0b:30:d2:bb:cf:c0:91:0e:25:4f:67:ff: 26:fe:09:6b:88:91:0b:0e:a4:cd:4d:83:ec:61:2a:e9:cf:b8: 5a:2c:49:3b:48:5b:e7:39:da:60:0f:0e:05:a7:84:a5:97:43: a5:1c:a4:f1:06:3e:5f:02:8b:23:a3:93:2b:b9:19:f9:f8:ca: ee:59:3c:e2:7c:fa:3d:5b:3e:c1:04:eb:43:b7:40:49:b5:09: 9f:9e:9b:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ExAcXWgwuQFdCDa+ZpSrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGVmZTYyNWZiMTk2OTNkOGM2ZWUyZjE5ZDMxYjUwMDdlODlmNDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO/RzAYdeROUM++TGLpgjCVygAne BXbhn2bnN3ZQ5QcYX1LeEkIAUOHjJ+51OLFBWYqopgmqxq0EiLeSJ8mGMpHvK09+ FYICf+K8VnklHKdJt2Z27JohEx+1URq1fZwS0mtw/sGrlnbFHXkokVrqwtw9Ky0I J94Q2uWO1KblbwGGUcvs462+zoeQaQgvrMn+z2yWgdeK09XERZcfBf8SLmA1sSF1 JvwTlCUW1IDyVxx5wDe5wOVvFH6rnpdQT49yyCRwO6bnTj52hyh8GTgvwKivrpJs oEm83kIxr+ZLAtXrFTUxYLLW89xeYtqL9ISPlRnhAx4dJVKmcJvholNTTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ3v5iX7GWk9jG7i8Z0xtQB+ifR/MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvbmVfbUpmc1phVDJNYnVMeG5URzFBSDZKOUg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa+xMA0G CSqGSIb3DQEBCwUAA4IBAQBnPKZ+2oFk6PTlGP5vChBn2CNh6NxgmvCOBFsKeaxu 49hBK//gFICzWlMEn42jqTIRK3xcYPLYJ6uw/BAYuNzYx+vTu904NxWtziOiD7Oz d39Ziw/f7Rln0Ot5nxxcj4M8lblMhTn1dHqI0038VPnDKfLG93zEKulHE7nXqjHL QDnIAWZOGMeEdCYJWYEhS4KuJrNRErbfcobH3GSM2jUZE/WMJgF1ZwwLMNK7z8CR DiVPZ/8m/glriJELDqTNTYPsYSrpz7haLEk7SFvnOdpgDw4Fp4Sll0OlHKTxBj5f Aosjo5MruRn5+MruWTzifPo9Wz7BBOtDt0BJtQmfnptS -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:53 2026 by rpki-client