This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rz7p1Pe3QkT9oYd2fJm19prsPpw.roa File: rz7p1Pe3QkT9oYd2fJm19prsPpw.roa (raw, json) Hash identifier: 1iaHgE1Fqr9jC//hwP1PL0yvVPTbYXt5navkt6o76Fg= Subject key identifier: AF:3E:E9:D4:F7:B7:42:44:FD:A1:87:76:7C:99:B5:F6:9A:EC:3E:9C Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12E60B9FC99F115D473562B2640B63 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rz7p1Pe3QkT9oYd2fJm19prsPpw.roa Signing time: Fri 02 Jan 2026 00:19:31 +0000 ROA not before: Fri 02 Jan 2026 00:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200456 IP address blocks: 5.175.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e6:0b:9f:c9:9f:11:5d:47:35:62:b2:64:0b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af3ee9d4f7b74244fda187767c99b5f69aec3e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4a:7c:47:32:1b:6b:2d:f1:8d:8d:70:9a:2f: 45:f9:86:c0:d9:b6:1e:b5:ad:f7:31:d7:8e:82:03: b6:c9:2a:52:81:c5:ba:35:ef:37:a6:61:4c:42:24: 77:2b:fa:34:d0:21:b3:f2:e1:30:83:98:dc:3b:07: b7:ac:06:bc:76:19:d2:3c:e3:55:fa:75:2f:9e:56: dc:c5:3a:3b:94:e4:7d:fd:a1:b3:65:3a:98:91:7d: 70:a8:f1:11:e3:14:d2:2b:c2:7d:b5:7d:1b:c8:fb: 3e:f4:fd:fb:26:48:cd:24:47:e7:52:2c:58:20:35: 70:46:a1:15:db:6a:bf:38:b7:f5:fb:c4:a9:5b:ef: 41:36:1e:3b:79:89:6a:3e:98:0e:80:05:61:a3:ec: 83:d4:ef:81:be:c1:f5:f1:cf:fd:38:32:8b:d4:31: 3a:93:8e:02:36:55:af:eb:bb:d7:24:9c:d5:2a:21: 50:2a:0b:b1:ca:6c:b4:88:b3:62:c5:61:e3:fb:c9: 90:e4:12:ab:32:78:b4:c7:d5:2b:6f:fb:54:c6:9a: 00:84:02:d5:53:73:eb:0f:26:c4:a9:6a:b0:de:b1: 26:b9:b1:6a:77:e8:41:4a:69:07:5a:f8:0c:ee:cb: dd:cd:1c:3f:15:ad:74:51:8e:4b:4c:fb:45:43:12: 03:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3E:E9:D4:F7:B7:42:44:FD:A1:87:76:7C:99:B5:F6:9A:EC:3E:9C X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rz7p1Pe3QkT9oYd2fJm19prsPpw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.201.0/24 Signature Algorithm: sha256WithRSAEncryption b6:d9:76:58:16:55:57:39:d7:c0:01:0b:5b:07:c0:79:41:d6: d4:09:8e:b3:d7:8a:a1:2f:52:c0:0a:d1:75:2b:8b:90:1c:90: 03:99:05:30:e6:d3:a0:6c:ad:20:c0:a4:af:f4:59:f5:5c:de: 5a:9b:f8:22:20:86:4c:8b:72:d0:77:17:ce:b1:c2:a2:ad:ab: b0:71:7e:ab:5b:dc:88:7d:24:5d:8b:0e:5e:39:54:9a:1e:9e: 29:ae:f9:97:f5:77:ea:ec:31:d6:b3:e4:ad:1e:55:8a:a3:f3: 7b:b3:a5:2e:0e:d1:68:0c:5f:84:e6:bd:60:cb:67:82:11:41: fd:48:fa:f7:23:0e:60:be:93:7d:f8:83:7a:bc:ad:56:46:ff: 56:75:b7:3f:a1:7e:b6:f3:c9:54:d4:bf:07:d2:97:48:fe:15: 31:42:55:cd:7e:c5:08:07:de:4b:7d:3a:ac:21:4b:07:d4:35: 1b:be:59:a8:83:c3:87:20:b4:e4:2d:cf:1b:f3:b0:68:5a:0a: 98:0e:5f:a5:97:68:b0:04:ff:b0:51:b3:40:c9:da:0a:92:e1: 09:7f:0d:cc:29:7b:b5:f0:34:9d:31:ed:c8:cf:d5:b4:40:d6: 6a:ca:17:a5:c3:a8:f2:37:ef:b1:f6:e1:5f:82:d9:8f:7f:a5: 2e:72:1b:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EuYLn8mfEV1HNWKyZAtjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjNlZTlkNGY3Yjc0MjQ0ZmRhMTg3NzY3Yzk5YjVmNjlhZWMzZTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0p8RzIbay3xjY1wmi9F+YbA2bYe ta33MdeOggO2ySpSgcW6Ne83pmFMQiR3K/o00CGz8uEwg5jcOwe3rAa8dhnSPONV +nUvnlbcxTo7lOR9/aGzZTqYkX1wqPER4xTSK8J9tX0byPs+9P37JkjNJEfnUixY IDVwRqEV22q/OLf1+8SpW+9BNh47eYlqPpgOgAVho+yD1O+BvsH18c/9ODKL1DE6 k44CNlWv67vXJJzVKiFQKguxymy0iLNixWHj+8mQ5BKrMni0x9Urb/tUxpoAhALV U3PrDybEqWqw3rEmubFqd+hBSmkHWvgM7svdzRw/Fa10UY5LTPtFQxID9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK8+6dT3t0JE/aGHdnyZtfaa7D6cMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvcno3cDFQZTNRa1Q5b1lkMmZKbTE5cHJzUHB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa/JMA0G CSqGSIb3DQEBCwUAA4IBAQC22XZYFlVXOdfAAQtbB8B5QdbUCY6z14qhL1LACtF1 K4uQHJADmQUw5tOgbK0gwKSv9Fn1XN5am/giIIZMi3LQdxfOscKirauwcX6rW9yI fSRdiw5eOVSaHp4prvmX9Xfq7DHWs+StHlWKo/N7s6UuDtFoDF+E5r1gy2eCEUH9 SPr3Iw5gvpN9+IN6vK1WRv9Wdbc/oX6288lU1L8H0pdI/hUxQlXNfsUIB95LfTqs IUsH1DUbvlmog8OHILTkLc8b87BoWgqYDl+ll2iwBP+wUbNAydoKkuEJfw3MKXu1 8DSdMe3Iz9W0QNZqyhelw6jyN++x9uFfgtmPf6UuchtJ -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:54 2026 by rpki-client