This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wHikWf1MvCgxcZ0_9xWHZVgSc8E.roa File: wHikWf1MvCgxcZ0_9xWHZVgSc8E.roa (raw, json) Hash identifier: F+lHMJg8uCoP5WJbgabVkQSi2R+JByby9hwa5ZaTPpY= Subject key identifier: C0:78:A4:59:FD:4C:BC:28:31:71:9D:3F:F7:15:87:65:58:12:73:C1 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12F8A80D4892D05D25EC307BC44198 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wHikWf1MvCgxcZ0_9xWHZVgSc8E.roa Signing time: Fri 02 Jan 2026 00:19:36 +0000 ROA not before: Fri 02 Jan 2026 00:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210915 IP address blocks: 5.175.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f8:a8:0d:48:92:d0:5d:25:ec:30:7b:c4:41:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c078a459fd4cbc2831719d3ff7158765581273c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bb:bf:bd:e4:76:4d:4b:c1:42:3e:9e:1c:a3: be:43:e0:32:e4:68:84:d0:fa:81:9c:e5:8a:48:19: af:3e:81:75:60:17:f9:e4:dd:98:5d:ea:fa:f1:51: 6d:68:73:ee:dd:d2:c8:00:62:6c:6a:fd:f7:b8:1f: 10:da:b4:74:a2:3d:e9:f7:94:a2:0f:e6:e5:ca:df: e5:8a:7b:32:0f:2c:9b:5d:14:73:fd:53:fb:1e:f0: a7:ca:4c:18:ff:0f:31:3a:84:d9:07:cc:45:07:fa: 0c:d5:07:0a:49:7a:c4:b6:c3:73:17:45:9f:d9:25: 06:6e:b2:44:36:70:61:20:63:8c:45:49:c1:dd:93: eb:90:08:4f:d4:5d:a6:79:10:a5:fe:3a:5a:e5:85: 2d:fb:71:a9:d9:16:ca:48:93:7c:18:eb:05:f6:63: 75:90:d1:22:4f:b5:be:5f:b9:2b:c8:28:8f:07:6a: ef:5b:bb:c9:aa:ab:3d:9a:f9:3d:b9:b5:64:83:91: 2a:8e:01:49:8e:3b:bf:ec:a3:01:2f:1e:e1:e9:32: 85:80:51:ba:79:ca:c4:ae:9e:4e:29:ff:b5:85:29: 83:d8:9f:db:e2:67:b8:63:04:b4:2a:18:28:75:3e: d5:05:f6:99:67:fe:1f:05:1e:46:7d:e4:33:d8:7e: 8d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:78:A4:59:FD:4C:BC:28:31:71:9D:3F:F7:15:87:65:58:12:73:C1 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wHikWf1MvCgxcZ0_9xWHZVgSc8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.191.0/24 Signature Algorithm: sha256WithRSAEncryption dd:16:f8:84:d1:89:52:6f:3d:38:4d:7c:1a:53:13:47:89:dd: 86:1b:b5:c9:24:3a:ff:e8:f9:74:ab:87:6a:ff:06:2e:8e:22: 94:a5:79:a0:f6:db:18:52:20:1e:fc:7b:9f:21:1e:5b:f2:62: 54:03:68:6d:83:dd:85:07:1f:ab:1b:bf:9b:46:4a:6f:11:7b: 97:48:73:fc:53:77:7f:50:3e:44:41:1c:ad:b2:1f:fc:8e:90: 14:db:fe:ca:dc:ab:48:b8:ce:22:3f:8c:27:9f:08:f3:bf:36: ab:d6:d2:a0:d3:5f:99:b6:f3:ab:0f:e2:d3:78:da:49:d4:6c: 04:4b:86:5a:08:40:b5:61:64:f5:60:57:a2:1f:a9:48:af:f7: 5c:bf:4d:72:f8:28:66:3f:8b:e0:8c:e8:e4:ba:2c:08:86:c6: 05:54:3c:08:44:b4:16:7d:b2:e8:6f:6b:f5:e6:a9:2c:29:a6: 26:96:f9:c4:d7:72:fe:e5:b5:b0:72:2e:70:98:46:7c:1a:c8: 0a:1e:6b:03:ec:e5:2e:d4:3e:ec:10:bf:2b:72:ba:81:5b:06: 45:e8:af:bf:b3:ab:99:4d:2b:a3:0e:93:35:71:2f:8a:61:31: da:de:17:bb:31:34:09:88:fa:bd:e6:cf:ac:81:73:db:3a:de: e8:05:cb:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EvioDUiS0F0l7DB7xEGYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDc4YTQ1OWZkNGNiYzI4MzE3MTlkM2ZmNzE1ODc2NTU4MTI3M2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bu/veR2TUvBQj6eHKO+Q+Ay5GiE 0PqBnOWKSBmvPoF1YBf55N2YXer68VFtaHPu3dLIAGJsav33uB8Q2rR0oj3p95Si D+blyt/linsyDyybXRRz/VP7HvCnykwY/w8xOoTZB8xFB/oM1QcKSXrEtsNzF0Wf 2SUGbrJENnBhIGOMRUnB3ZPrkAhP1F2meRCl/jpa5YUt+3Gp2RbKSJN8GOsF9mN1 kNEiT7W+X7kryCiPB2rvW7vJqqs9mvk9ubVkg5EqjgFJjju/7KMBLx7h6TKFgFG6 ecrErp5OKf+1hSmD2J/b4me4YwS0KhgodT7VBfaZZ/4fBR5GfeQz2H6N0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMB4pFn9TLwoMXGdP/cVh2VYEnPBMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvd0hpa1dmMU12Q2d4Y1owXzl4V0haVmdTYzhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa+/MA0G CSqGSIb3DQEBCwUAA4IBAQDdFviE0YlSbz04TXwaUxNHid2GG7XJJDr/6Pl0q4dq /wYujiKUpXmg9tsYUiAe/HufIR5b8mJUA2htg92FBx+rG7+bRkpvEXuXSHP8U3d/ UD5EQRytsh/8jpAU2/7K3KtIuM4iP4wnnwjzvzar1tKg01+ZtvOrD+LTeNpJ1GwE S4ZaCEC1YWT1YFeiH6lIr/dcv01y+ChmP4vgjOjkuiwIhsYFVDwIRLQWfbLob2v1 5qksKaYmlvnE13L+5bWwci5wmEZ8GsgKHmsD7OUu1D7sEL8rcrqBWwZF6K+/s6uZ TSujDpM1cS+KYTHa3he7MTQJiPq95s+sgXPbOt7oBcu+ -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:17 2026 by rpki-client