This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rGGa3nL0RWa-_xZQntLMGyk5xXM.roa File: rGGa3nL0RWa-_xZQntLMGyk5xXM.roa (raw, json) Hash identifier: SXmaYXG9nyv8ziyjzRBZUKk+NOrhiTSzugL3/J35UNs= Subject key identifier: AC:61:9A:DE:72:F4:45:66:BE:FF:16:50:9E:D2:CC:1B:29:39:C5:73 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12E8759D1E1549B5B66F1A6D3D952D Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rGGa3nL0RWa-_xZQntLMGyk5xXM.roa Signing time: Fri 02 Jan 2026 00:19:32 +0000 ROA not before: Fri 02 Jan 2026 00:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200993 IP address blocks: 5.175.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e8:75:9d:1e:15:49:b5:b6:6f:1a:6d:3d:95:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac619ade72f44566beff16509ed2cc1b2939c573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:ab:cd:1b:7b:03:c0:55:3d:37:ae:11:92: d9:89:e8:d1:30:49:fd:de:ba:d6:6f:45:35:b8:30: 39:ba:cf:6b:ae:41:bb:c8:e0:4b:58:57:39:0a:fc: 07:ac:90:b3:f0:80:9a:58:6d:25:bc:9e:54:ce:c2: 1a:c0:c6:cd:65:55:e8:9d:b9:fe:06:c0:7f:4d:a3: 3b:48:eb:96:e5:0c:e4:a6:86:bb:9a:d7:ef:78:31: fc:b1:1c:fb:0d:2e:a9:a6:7a:98:78:69:5f:08:a3: 8c:31:9e:80:0d:e4:6c:d0:e0:f5:f4:21:9f:d6:e7: 89:8e:72:e5:91:f8:4e:af:3b:c0:40:af:0d:4f:bd: 91:d0:d9:3c:f4:9b:dd:32:ba:ad:76:ce:92:f8:33: 58:a5:27:73:e9:4e:49:c8:bf:a7:a6:84:4e:b1:15: 6a:67:af:0e:da:30:68:29:0b:6e:ec:fb:c9:0a:7d: 62:60:67:a0:2e:d2:ab:20:8d:77:ab:ef:f7:12:14: 82:d0:f2:9b:eb:00:ab:15:02:fd:cd:a3:e5:40:ff: 2f:5b:17:be:2c:d2:49:93:cf:c4:f0:31:2b:09:a2: 3b:50:c3:40:06:ca:c2:7a:39:34:ff:4a:12:26:dc: 66:ec:45:3b:ba:b9:4a:38:c7:54:d7:e3:c3:82:eb: 56:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:61:9A:DE:72:F4:45:66:BE:FF:16:50:9E:D2:CC:1B:29:39:C5:73 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rGGa3nL0RWa-_xZQntLMGyk5xXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.134.0/24 Signature Algorithm: sha256WithRSAEncryption 39:66:d7:e7:86:a9:19:31:8c:df:1f:42:00:93:88:36:22:f5: b3:5b:2a:77:1f:a0:3c:73:c1:c4:d4:f1:00:40:13:a6:47:e3: ca:47:43:a4:83:e1:80:6f:49:18:43:0e:80:90:6a:4b:66:a4: 48:d8:57:c1:0f:df:39:0a:eb:85:45:5d:99:39:98:04:29:f5: 7f:50:b8:5d:c9:c0:1f:bf:07:c2:8d:21:f8:c5:dd:19:d6:a1: 3e:06:da:76:6d:3e:87:80:f7:e3:7c:6f:a1:70:60:d5:13:12: 64:1a:6f:5b:6c:9f:63:c9:4a:4e:8f:c0:85:e6:cb:2c:4c:3e: 7c:b9:12:51:cf:3f:b7:e4:59:31:03:e2:57:35:b9:ae:a9:66: 73:07:d2:ae:7c:df:05:af:c1:f1:27:ab:12:fb:ab:08:43:36: 2f:7b:2c:81:43:e0:11:98:2d:db:54:0b:4e:94:31:1d:19:a9: b3:ff:8a:dd:83:29:48:04:8b:36:02:1d:13:27:e6:ee:4a:7b: ab:97:e4:bb:44:c1:b2:de:ba:e0:c0:fc:5d:fb:09:86:7d:e3: ba:42:e9:a1:ff:fe:48:b8:87:fa:b3:fa:af:d4:d3:b4:7a:ed: 7e:ee:75:88:c1:0f:10:a3:7a:5f:7a:00:4c:ce:b9:ed:5d:36: 2b:fc:8e:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Euh1nR4VSbW2bxptPZUtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzYxOWFkZTcyZjQ0NTY2YmVmZjE2NTA5ZWQyY2MxYjI5MzljNTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqarzRt7A8BVPTeuEZLZiejRMEn9 3rrWb0U1uDA5us9rrkG7yOBLWFc5CvwHrJCz8ICaWG0lvJ5UzsIawMbNZVXonbn+ BsB/TaM7SOuW5Qzkpoa7mtfveDH8sRz7DS6ppnqYeGlfCKOMMZ6ADeRs0OD19CGf 1ueJjnLlkfhOrzvAQK8NT72R0Nk89JvdMrqtds6S+DNYpSdz6U5JyL+npoROsRVq Z68O2jBoKQtu7PvJCn1iYGegLtKrII13q+/3EhSC0PKb6wCrFQL9zaPlQP8vWxe+ LNJJk8/E8DErCaI7UMNABsrCejk0/0oSJtxm7EU7urlKOMdU1+PDgutWyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKxhmt5y9EVmvv8WUJ7SzBspOcVzMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvckdHYTNuTDBSV2EtX3haUW50TE1HeWs1eFhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa+GMA0G CSqGSIb3DQEBCwUAA4IBAQA5ZtfnhqkZMYzfH0IAk4g2IvWzWyp3H6A8c8HE1PEA QBOmR+PKR0Okg+GAb0kYQw6AkGpLZqRI2FfBD985CuuFRV2ZOZgEKfV/ULhdycAf vwfCjSH4xd0Z1qE+Btp2bT6HgPfjfG+hcGDVExJkGm9bbJ9jyUpOj8CF5sssTD58 uRJRzz+35FkxA+JXNbmuqWZzB9KufN8Fr8HxJ6sS+6sIQzYveyyBQ+ARmC3bVAtO lDEdGamz/4rdgylIBIs2Ah0TJ+buSnurl+S7RMGy3rrgwPxd+wmGfeO6Qumh//5I uIf6s/qv1NO0eu1+7nWIwQ8Qo3pfegBMzrntXTYr/I4k -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:59 2026 by rpki-client