This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sQnzqpgA1aOFZ3evehbjv6B_OVU.roa File: sQnzqpgA1aOFZ3evehbjv6B_OVU.roa (raw, json) Hash identifier: b1N+GHHh5ChO2cNJ3nTYpIB+H3y5bFztpwuheUZ4zpI= Subject key identifier: B1:09:F3:AA:98:00:D5:A3:85:67:77:AF:7A:16:E3:BF:A0:7F:39:55 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BB5BE2341F4CB37CD764E86A922829271 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sQnzqpgA1aOFZ3evehbjv6B_OVU.roa Signing time: Tue 13 Jan 2026 05:04:55 +0000 ROA not before: Tue 13 Jan 2026 05:04:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212057 IP address blocks: 5.230.5.0/24 maxlen: 24 77.90.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b5:be:23:41:f4:cb:37:cd:76:4e:86:a9:22:82:92:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 13 05:04:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b109f3aa9800d5a3856777af7a16e3bfa07f3955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5b:aa:93:53:6f:f6:14:1a:d6:0f:24:b1:69: 27:93:95:46:4f:a8:19:e2:42:c9:d6:9b:67:1d:10: 76:5a:cc:a6:c9:e6:ea:d3:1b:30:8a:1d:3e:ff:dd: 15:4c:66:5c:31:42:91:d3:06:23:9b:38:44:3c:7c: ae:49:fa:bb:72:f5:5d:27:5b:7e:dc:ad:2a:b7:b3: 88:6e:a3:f5:a2:3f:db:fd:40:68:03:41:7c:b6:46: 2f:90:a5:a8:18:9d:52:cb:30:02:98:f2:2f:61:42: 75:04:f3:93:e7:73:2c:b4:72:f3:de:e0:a4:a5:a8: c0:92:09:7f:e0:99:57:55:7c:1f:f8:95:64:3f:88: 43:b3:c9:06:28:77:0c:06:74:7d:e5:2c:0a:ab:42: 3a:83:aa:75:6a:21:67:bc:ea:60:27:4e:96:08:75: 17:4c:33:d9:1e:2c:2f:ec:2a:a1:65:1a:13:1f:cf: 25:fa:a4:5b:5a:a7:10:01:96:9f:a2:86:bd:74:19: 05:5e:1e:06:54:a4:f5:19:7a:cf:e3:02:f5:b0:05: 91:4c:10:38:8f:3e:3e:a5:1f:2e:fb:2a:30:3c:59: 24:ca:af:17:f9:6b:fd:2b:4e:c8:94:bd:ce:27:df: ac:e6:65:c1:6b:5c:8d:c7:c1:6e:a7:b9:1d:ad:de: 6e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:09:F3:AA:98:00:D5:A3:85:67:77:AF:7A:16:E3:BF:A0:7F:39:55 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sQnzqpgA1aOFZ3evehbjv6B_OVU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.230.5.0/24 77.90.46.0/24 Signature Algorithm: sha256WithRSAEncryption b4:ce:59:b1:63:4d:e2:8e:ad:85:77:10:1e:cf:9c:50:02:97: f4:85:ca:52:26:f7:68:f3:40:34:f4:6e:56:f4:bd:64:33:fd: da:2d:04:61:8d:f0:e5:89:a3:e6:6c:9b:2a:b2:ef:96:6a:fa: b9:c1:6c:82:c4:24:34:bf:67:ce:ca:35:12:59:6b:00:f3:bd: 2e:19:d1:da:ea:2e:25:86:21:3f:5b:1f:85:47:5f:ee:26:96: dc:15:0d:cd:fc:f7:3e:1b:17:74:0c:ab:27:e1:84:95:4e:85: 7b:d7:81:6b:9e:f1:f3:14:39:50:5f:d4:b5:fe:5f:77:06:ea: 5e:c4:02:47:d3:33:3b:bb:32:7c:70:a7:80:db:b0:e7:d7:2b: 08:2b:40:97:41:51:dd:a2:83:7f:ce:69:70:78:e8:ce:69:84: 9c:86:fd:21:c3:e0:d2:02:3f:9e:a3:8c:ec:66:01:e4:40:93: 82:79:9a:a8:26:d7:00:87:53:2d:36:94:59:b0:ac:03:79:3b: 0a:ed:c1:7a:fa:ff:0f:72:09:3e:70:2e:3c:e7:c8:82:47:e8: d4:9c:03:28:bd:ac:83:15:cf:7d:cd:12:df:7b:57:99:92:32: b8:a9:2c:32:1a:3b:30:80:61:74:1d:92:26:d0:96:41:7d:9d: a2:1e:96:c2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZu1viNB9Ms3zXZOhqkigpJxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTEzMDUwNDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTA5ZjNhYTk4MDBkNWEzODU2Nzc3YWY3YTE2ZTNiZmEwN2YzOTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVuqk1Nv9hQa1g8ksWknk5VGT6gZ 4kLJ1ptnHRB2Wsymyebq0xswih0+/90VTGZcMUKR0wYjmzhEPHyuSfq7cvVdJ1t+ 3K0qt7OIbqP1oj/b/UBoA0F8tkYvkKWoGJ1SyzACmPIvYUJ1BPOT53MstHLz3uCk pajAkgl/4JlXVXwf+JVkP4hDs8kGKHcMBnR95SwKq0I6g6p1aiFnvOpgJ06WCHUX TDPZHiwv7CqhZRoTH88l+qRbWqcQAZafooa9dBkFXh4GVKT1GXrP4wL1sAWRTBA4 jz4+pR8u+yowPFkkyq8X+Wv9K07IlL3OJ9+s5mXBa1yNx8Fup7kdrd5ueQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLEJ86qYANWjhWd3r3oW47+gfzlVMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvc1FuenFwZ0ExYU9GWjNldmVoYmp2NkJfT1ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABeYFAwQA TVouMA0GCSqGSIb3DQEBCwUAA4IBAQC0zlmxY03ijq2FdxAez5xQApf0hcpSJvdo 80A09G5W9L1kM/3aLQRhjfDliaPmbJsqsu+Wavq5wWyCxCQ0v2fOyjUSWWsA870u GdHa6i4lhiE/Wx+FR1/uJpbcFQ3N/Pc+Gxd0DKsn4YSVToV714FrnvHzFDlQX9S1 /l93BupexAJH0zM7uzJ8cKeA27Dn1ysIK0CXQVHdooN/zmlweOjOaYSchv0hw+DS Aj+eo4zsZgHkQJOCeZqoJtcAh1MtNpRZsKwDeTsK7cF6+v8Pcgk+cC4858iCR+jU nAMovayDFc99zRLfe1eZkjK4qSwyGjswgGF0HZIm0JZBfZ2iHpbC -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:15 2026 by rpki-client