This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/s8GIbG-Szzs4_AqXS6YRkHhye2I.roa File: s8GIbG-Szzs4_AqXS6YRkHhye2I.roa (raw, json) Hash identifier: V4qd7yQJwvGnz5IrP9BhAZqY9wHCPUZ5CdtTWNJCBrM= Subject key identifier: B3:C1:88:6C:6F:92:CF:3B:38:FC:0A:97:4B:A6:11:90:78:72:7B:62 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12C82FB674DBD0344716195DD6D0BF Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/s8GIbG-Szzs4_AqXS6YRkHhye2I.roa Signing time: Fri 02 Jan 2026 00:19:24 +0000 ROA not before: Fri 02 Jan 2026 00:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12360 IP address blocks: 5.231.128.0/18 maxlen: 32 5.231.128.0/19 maxlen: 32 5.231.160.0/20 maxlen: 32 5.231.176.0/21 maxlen: 32 5.231.184.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c8:2f:b6:74:db:d0:34:47:16:19:5d:d6:d0:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3c1886c6f92cf3b38fc0a974ba6119078727b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:38:b1:07:42:83:a6:c9:de:0c:32:21:d0:4a: 9c:8a:44:54:4e:24:ea:b0:be:ac:94:37:9c:ad:ff: ec:02:2c:dc:5a:a3:ce:b4:86:99:0c:18:b5:c9:38: 71:18:81:e8:eb:f7:e8:b4:e1:7c:fb:8e:ef:3c:dd: 9d:e5:ed:0a:49:fb:ce:45:45:7e:3d:69:91:24:2b: d0:e0:83:3d:13:f0:20:d9:ab:66:41:29:cd:4e:4c: cc:c3:ab:cb:e5:97:52:4a:34:0a:8d:5e:fd:b9:fe: a1:de:f3:1d:c9:71:48:21:53:0a:66:53:0c:62:3d: c4:28:82:aa:b8:d8:d0:8c:52:2d:1a:36:c7:8f:0e: 0c:f9:cd:8e:b5:90:67:b3:db:9c:ca:30:e7:ef:cd: 45:a9:6c:83:da:45:22:79:fa:53:14:a5:50:65:6a: 3e:ee:91:26:d3:53:2d:3e:e5:fc:83:7b:eb:96:e5: 43:fc:9d:6c:89:fe:8f:72:35:19:6e:26:1e:65:ec: 83:be:a5:88:f0:55:e5:3c:51:8c:2b:7c:ee:c1:f1: 99:0d:e4:40:7f:ba:a9:0f:6f:51:92:e0:49:02:f8: cf:6d:e5:95:a6:17:5f:d3:ad:38:2e:fe:22:89:9f: f8:cb:c2:c7:37:b5:03:b3:21:c2:74:0a:80:f5:c0: 7d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C1:88:6C:6F:92:CF:3B:38:FC:0A:97:4B:A6:11:90:78:72:7B:62 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/s8GIbG-Szzs4_AqXS6YRkHhye2I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.128.0/18 Signature Algorithm: sha256WithRSAEncryption ac:01:36:38:79:c9:4f:c2:f2:6a:d3:e9:af:11:59:30:f8:cf: a2:e8:02:6a:e2:6e:f8:7a:85:67:73:a1:f0:ca:41:9e:6f:2a: 4c:d5:f0:e5:84:bd:12:a1:e8:04:a3:da:0d:da:fb:88:d0:c3: ad:25:f3:57:21:b8:2d:27:1c:61:2e:52:9b:32:4d:33:2b:2f: 97:47:8d:fc:c6:35:3e:ef:48:fd:d3:3b:d2:05:20:cc:3e:9f: a6:a1:89:86:1b:5a:e7:82:87:74:f5:01:dc:d9:15:d8:12:9c: 4e:0c:2a:84:62:73:ae:c1:b6:f6:2e:2b:05:85:f6:59:b1:30: 3b:96:5c:b1:88:1c:ee:49:a1:d7:b8:e2:2e:07:d3:a2:0d:f1: f9:cd:83:2b:3b:7f:fe:da:7f:b8:c1:79:28:20:d3:23:a3:7c: 8c:52:5c:89:c1:ea:10:2d:96:6c:33:92:5f:f2:7a:54:68:e7: 29:22:3f:5e:92:22:81:47:ee:fd:2c:d5:bb:88:ee:75:11:eb: 04:74:20:b7:23:fb:51:2c:f7:59:38:55:4e:c9:be:9f:c7:ca: bc:4b:80:0f:5b:58:57:bb:2c:9a:ac:27:cd:0b:95:56:95:ee: 5c:92:59:8a:c0:5b:b0:1a:23:92:fd:f6:09:2a:51:0c:ee:14: ad:ad:93:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EsgvtnTb0DRHFhld1tC/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2MxODg2YzZmOTJjZjNiMzhmYzBhOTc0YmE2MTE5MDc4NzI3YjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTixB0KDpsneDDIh0EqcikRUTiTq sL6slDecrf/sAizcWqPOtIaZDBi1yThxGIHo6/fotOF8+47vPN2d5e0KSfvORUV+ PWmRJCvQ4IM9E/Ag2atmQSnNTkzMw6vL5ZdSSjQKjV79uf6h3vMdyXFIIVMKZlMM Yj3EKIKquNjQjFItGjbHjw4M+c2OtZBns9ucyjDn781FqWyD2kUiefpTFKVQZWo+ 7pEm01MtPuX8g3vrluVD/J1sif6PcjUZbiYeZeyDvqWI8FXlPFGMK3zuwfGZDeRA f7qpD29RkuBJAvjPbeWVphdf0604Lv4iiZ/4y8LHN7UDsyHCdAqA9cB9/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLPBiGxvks87OPwKl0umEZB4cntiMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvczhHSWJHLVN6enM0X0FxWFM2WVJrSGh5ZTJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGBeeAMA0G CSqGSIb3DQEBCwUAA4IBAQCsATY4eclPwvJq0+mvEVkw+M+i6AJq4m74eoVnc6Hw ykGebypM1fDlhL0SoegEo9oN2vuI0MOtJfNXIbgtJxxhLlKbMk0zKy+XR438xjU+ 70j90zvSBSDMPp+moYmGG1rngod09QHc2RXYEpxODCqEYnOuwbb2LisFhfZZsTA7 llyxiBzuSaHXuOIuB9OiDfH5zYMrO3/+2n+4wXkoINMjo3yMUlyJweoQLZZsM5Jf 8npUaOcpIj9ekiKBR+79LNW7iO51EesEdCC3I/tRLPdZOFVOyb6fx8q8S4APW1hX uyyarCfNC5VWle5cklmKwFuwGiOS/fYJKlEM7hStrZOF -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:53 2026 by rpki-client