This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pr32Ht29Z61XKGdcrfRaeI3piWg.roa File: pr32Ht29Z61XKGdcrfRaeI3piWg.roa (raw, json) Hash identifier: BwBNRnuy4ktJCGsX3DVGN/YLtnouP80UYy0Z+UZIoRE= Subject key identifier: A6:BD:F6:1E:DD:BD:67:AD:57:28:67:5C:AD:F4:5A:78:8D:E9:89:68 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12D8C7A206F3DB3EFA6430D5AECE02 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pr32Ht29Z61XKGdcrfRaeI3piWg.roa Signing time: Fri 02 Jan 2026 00:19:28 +0000 ROA not before: Fri 02 Jan 2026 00:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 5.175.166.0/24 maxlen: 24 5.175.238.0/24 maxlen: 24 5.231.92.0/24 maxlen: 24 5.231.207.0/24 maxlen: 24 94.249.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d8:c7:a2:06:f3:db:3e:fa:64:30:d5:ae:ce:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6bdf61eddbd67ad5728675cadf45a788de98968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:51:d3:40:d2:dc:06:eb:05:5a:0f:18:bf:5c: ea:25:a0:e5:e1:3e:f0:87:20:6e:b3:13:36:fa:0c: b2:0e:8d:ad:75:1a:e9:55:eb:d4:ba:d7:1e:6c:1a: d4:54:b5:39:8f:80:6f:52:75:ed:e9:45:76:08:23: ea:db:f7:68:88:1b:2b:ac:09:59:5d:e6:ba:3a:c6: b4:d2:20:da:2a:74:78:bd:85:a1:fe:66:84:7d:33: 6d:49:b5:76:7d:68:a5:14:ef:a4:74:f3:a4:ad:36: a8:ee:e4:60:93:af:e8:3a:6c:ac:ef:db:41:50:39: 3c:b5:7f:39:b6:ac:0e:b1:d6:61:87:cc:a6:60:7d: 59:75:60:3a:2f:ec:bb:13:3d:45:fc:70:0e:4a:ca: 10:95:f3:34:c6:e2:59:15:2f:f5:22:ae:de:2b:b1: dd:78:ce:b1:23:73:90:5e:b9:05:3b:4e:6d:d9:b8: e0:37:56:fb:80:e7:60:f9:89:4c:ed:a4:c6:17:ce: 97:45:e4:f1:58:9b:81:e8:86:15:b4:91:be:5f:6f: cc:16:ec:7b:bd:53:e0:2b:b1:b1:0a:be:b5:92:4b: 38:ca:74:6d:18:54:f6:9d:14:1b:29:0f:fe:30:cb: c1:8a:62:b9:18:8a:a9:fa:f9:94:6f:06:13:3a:c1: 7f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BD:F6:1E:DD:BD:67:AD:57:28:67:5C:AD:F4:5A:78:8D:E9:89:68 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pr32Ht29Z61XKGdcrfRaeI3piWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.166.0/24 5.175.238.0/24 5.231.92.0/24 5.231.207.0/24 94.249.205.0/24 Signature Algorithm: sha256WithRSAEncryption d5:0c:75:62:e4:03:f8:79:14:44:93:51:8b:35:f3:13:27:1b: 74:75:9b:91:8f:99:db:5a:76:27:d8:99:a2:b4:a2:5b:db:09: 76:d9:21:a3:52:92:11:9b:12:51:9e:dd:9f:3f:db:7e:a2:d4: a5:7c:25:df:38:09:0a:0b:c8:ff:b3:ba:6e:6c:c9:d8:b5:42: d3:73:3c:27:7b:1b:13:67:60:3f:5c:4c:32:c5:f7:da:5c:9c: 13:f8:70:00:17:28:42:4b:79:25:c9:bc:bf:bf:43:a7:a1:bd: 5e:84:cf:44:bb:d4:46:41:0f:2b:12:f9:8c:97:67:8b:4d:ac: 77:9f:8b:6f:51:0a:e0:10:48:bf:58:7a:9c:9e:8b:b2:7c:a9: 99:e0:db:df:b1:bc:8a:36:a0:34:80:81:96:e4:c6:2c:23:c4: 67:bf:13:45:d5:d7:36:c2:ac:c9:62:b2:4f:99:f5:f5:e7:56: 34:ff:4f:0b:d7:1c:59:9b:a5:ca:8e:c4:1c:14:57:1c:b9:44: 46:6d:9f:cd:97:ff:8d:64:ce:03:86:3d:12:8c:b8:73:35:53: cb:bf:54:67:02:9f:6b:c9:16:d3:ad:95:05:5c:da:7b:29:50: ff:78:c8:93:2e:eb:6f:9b:10:7f:72:e6:40:88:0a:33:4a:a1: 2f:3c:f3:85 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt8EtjHogbz2z76ZDDVrs4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmJkZjYxZWRkYmQ2N2FkNTcyODY3NWNhZGY0NWE3ODhkZTk4OTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFHTQNLcBusFWg8Yv1zqJaDl4T7w hyBusxM2+gyyDo2tdRrpVevUutcebBrUVLU5j4BvUnXt6UV2CCPq2/doiBsrrAlZ Xea6Osa00iDaKnR4vYWh/maEfTNtSbV2fWilFO+kdPOkrTao7uRgk6/oOmys79tB UDk8tX85tqwOsdZhh8ymYH1ZdWA6L+y7Ez1F/HAOSsoQlfM0xuJZFS/1Iq7eK7Hd eM6xI3OQXrkFO05t2bjgN1b7gOdg+YlM7aTGF86XReTxWJuB6IYVtJG+X2/MFux7 vVPgK7GxCr61kks4ynRtGFT2nRQbKQ/+MMvBimK5GIqp+vmUbwYTOsF/lQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFKa99h7dvWetVyhnXK30WniN6YloMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvcHIzMkh0MjlaNjFYS0dkY3JmUmFlSTNwaVdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABa+mAwQA Ba/uAwQABedcAwQABefPAwQAXvnNMA0GCSqGSIb3DQEBCwUAA4IBAQDVDHVi5AP4 eRREk1GLNfMTJxt0dZuRj5nbWnYn2JmitKJb2wl22SGjUpIRmxJRnt2fP9t+otSl fCXfOAkKC8j/s7pubMnYtULTczwnexsTZ2A/XEwyxffaXJwT+HAAFyhCS3klyby/ v0Onob1ehM9Eu9RGQQ8rEvmMl2eLTax3n4tvUQrgEEi/WHqcnouyfKmZ4NvfsbyK NqA0gIGW5MYsI8RnvxNF1dc2wqzJYrJPmfX151Y0/08L1xxZm6XKjsQcFFccuURG bZ/Nl/+NZM4Dhj0SjLhzNVPLv1RnAp9ryRbTrZUFXNp7KVD/eMiTLutvmxB/cuZA iAozSqEvPPOF -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:26 2026 by rpki-client