This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tHjFv2a6zlv8krI1mHvE_vU8TCg.roa File: tHjFv2a6zlv8krI1mHvE_vU8TCg.roa (raw, json) Hash identifier: 0bY59+pzPnMJHJMSi/mi0LO1t+Lc2k4nBMgD1DDCiik= Subject key identifier: B4:78:C5:BF:66:BA:CE:5B:FC:92:B2:35:98:7B:C4:FE:F5:3C:4C:28 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B9DDB513B610814F5241C372BFFF0B458 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tHjFv2a6zlv8krI1mHvE_vU8TCg.roa Signing time: Thu 08 Jan 2026 13:45:54 +0000 ROA not before: Thu 08 Jan 2026 13:45:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58015 IP address blocks: 5.231.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:db:51:3b:61:08:14:f5:24:1c:37:2b:ff:f0:b4:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 8 13:45:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b478c5bf66bace5bfc92b235987bc4fef53c4c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:9a:32:c8:ea:f5:f5:b1:71:66:be:88:df: 07:92:77:fd:e9:54:ed:61:06:a1:af:7d:22:e9:1f: 8c:41:2c:7f:36:ca:44:55:d7:c7:7a:90:67:72:37: f2:9c:d7:41:4d:0b:36:55:a2:ab:ea:d7:92:4d:0d: 8e:45:75:54:b8:c7:ec:70:45:af:0f:f7:d5:42:e3: b5:11:b3:d5:41:ba:6b:e3:f4:fd:f2:8e:2f:66:5f: cd:3d:89:ba:89:55:ad:1d:21:b2:f2:2d:31:1f:9b: 9f:da:cb:f5:93:f1:89:60:5e:21:fa:8b:e0:7a:e8: cb:c9:62:11:c4:f2:47:5c:bc:c1:81:50:c2:0a:1c: 67:8c:2c:b1:00:44:2c:89:a6:df:59:55:f4:2f:c1: 5a:88:43:6c:10:25:f3:c1:cd:7c:7a:e4:be:4b:14: ee:8b:59:c1:c7:88:44:60:74:63:39:de:d4:30:e5: f2:12:b4:9e:66:80:33:ce:3a:6a:39:7e:cb:83:a1: 89:76:c8:8b:40:58:4d:eb:e1:11:11:2b:8b:b7:1e: 2f:4c:f4:d1:8c:4b:7e:b8:73:a6:64:b9:34:23:d9: dd:0b:12:a2:fe:d0:b1:1b:1a:cb:b6:76:27:3a:13: 40:2e:4a:af:b8:a1:a9:9f:56:9d:7a:44:d9:99:25: 60:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:78:C5:BF:66:BA:CE:5B:FC:92:B2:35:98:7B:C4:FE:F5:3C:4C:28 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tHjFv2a6zlv8krI1mHvE_vU8TCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.97.0/24 Signature Algorithm: sha256WithRSAEncryption 74:e2:7a:ed:bb:1c:0d:7b:4e:06:29:06:a1:63:4d:40:f7:d0: 20:e2:2e:65:47:df:e8:99:37:ac:11:c4:81:1a:49:a4:db:02: 25:1f:2f:ab:e1:a3:3e:88:f2:5d:ef:eb:e1:fb:75:64:ba:78: 95:59:d0:88:96:60:ef:56:df:f8:fb:bf:ae:55:e8:b7:d9:82: cb:61:3e:05:71:ff:79:09:71:ad:14:ad:b0:62:f0:4c:95:49: 13:32:47:74:f0:f7:a6:cc:91:60:18:06:f6:6f:dd:2b:69:6c: ef:02:c5:70:71:3b:3e:e6:4c:89:6a:7a:75:ba:ec:67:ff:18: 39:a0:42:da:8f:a7:64:06:73:6f:94:d2:2e:b8:14:3f:ed:33: 78:97:a2:74:ef:68:ef:57:10:e6:63:bd:e3:ab:96:31:11:ac: 19:e0:1b:ff:b2:79:9b:4f:f7:15:b1:aa:0d:fe:67:72:e3:31: 78:fd:a3:c1:8a:9f:dd:01:0a:84:95:4c:31:d3:10:65:d8:fd: 26:74:95:6b:e4:bf:91:d0:c2:7f:0d:51:f0:82:45:97:1c:ad: 8e:88:59:9b:3d:c3:e0:a8:0f:ac:c5:93:14:fa:ee:b7:c9:3c: 1e:ff:21:e9:af:a9:1d:fc:50:46:42:61:c6:f0:7a:03:e9:4d: 1c:78:20:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZud21E7YQgU9SQcNyv/8LRYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTA4MTM0NTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDc4YzViZjY2YmFjZTViZmM5MmIyMzU5ODdiYzRmZWY1M2M0YzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttuaMsjq9fWxcWa+iN8Hknf96VTt YQahr30i6R+MQSx/NspEVdfHepBncjfynNdBTQs2VaKr6teSTQ2ORXVUuMfscEWv D/fVQuO1EbPVQbpr4/T98o4vZl/NPYm6iVWtHSGy8i0xH5uf2sv1k/GJYF4h+ovg eujLyWIRxPJHXLzBgVDCChxnjCyxAEQsiabfWVX0L8FaiENsECXzwc18euS+SxTu i1nBx4hEYHRjOd7UMOXyErSeZoAzzjpqOX7Lg6GJdsiLQFhN6+ERESuLtx4vTPTR jEt+uHOmZLk0I9ndCxKi/tCxGxrLtnYnOhNALkqvuKGpn1adekTZmSVgswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLR4xb9mus5b/JKyNZh7xP71PEwoMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvdEhqRnYyYTZ6bHY4a3JJMW1IdkVfdlU4VENnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABedhMA0G CSqGSIb3DQEBCwUAA4IBAQB04nrtuxwNe04GKQahY01A99Ag4i5lR9/omTesEcSB Gkmk2wIlHy+r4aM+iPJd7+vh+3VkuniVWdCIlmDvVt/4+7+uVei32YLLYT4Fcf95 CXGtFK2wYvBMlUkTMkd08PemzJFgGAb2b90raWzvAsVwcTs+5kyJanp1uuxn/xg5 oELaj6dkBnNvlNIuuBQ/7TN4l6J072jvVxDmY73jq5YxEawZ4Bv/snmbT/cVsaoN /mdy4zF4/aPBip/dAQqElUwx0xBl2P0mdJVr5L+R0MJ/DVHwgkWXHK2OiFmbPcPg qA+sxZMU+u63yTwe/yHpr6kd/FBGQmHG8HoD6U0ceCDy -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:53 2026 by rpki-client