This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zFu7wbe7SKE6Uo_CwLW4sq8hpQo.roa File: zFu7wbe7SKE6Uo_CwLW4sq8hpQo.roa (raw, json) Hash identifier: dnFhOVR8mEeQSpTAwvBkH5VOgcEvmCvPXtGYQNtPuPI= Subject key identifier: CC:5B:BB:C1:B7:BB:48:A1:3A:52:8F:C2:C0:B5:B8:B2:AF:21:A5:0A Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C130F804E894A392B7FDB1EE71AE51C Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zFu7wbe7SKE6Uo_CwLW4sq8hpQo.roa Signing time: Fri 02 Jan 2026 00:19:42 +0000 ROA not before: Fri 02 Jan 2026 00:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215666 IP address blocks: 5.175.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:0f:80:4e:89:4a:39:2b:7f:db:1e:e7:1a:e5:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc5bbbc1b7bb48a13a528fc2c0b5b8b2af21a50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:81:f8:23:30:a5:3b:2e:4a:ad:43:b4:ad:f6: c2:98:f3:b5:a7:59:07:7a:d8:b6:3f:eb:8d:54:ef: 3e:e2:bd:73:53:c7:78:37:89:ea:4e:9c:1b:80:d1: 34:a1:90:db:3b:77:2d:5f:58:df:b3:2a:cf:98:a2: b8:1e:72:0d:b0:fb:7a:97:b2:5d:fa:c7:dd:bc:71: 1a:3d:4a:ee:c8:33:cf:af:d8:4a:eb:60:f1:46:5f: 2c:e8:89:5b:92:19:22:dc:2b:1b:cd:2e:55:9a:e7: b8:54:2e:18:59:88:9f:8d:45:f1:dd:40:9e:63:fd: b3:e1:b2:dd:08:d0:3d:dd:3a:fc:0d:19:ee:0b:fa: 82:67:3f:7b:b3:ca:f2:72:53:a0:34:ca:56:f2:2e: db:c5:cc:c1:99:34:c5:69:69:d1:e8:6b:b4:a8:c8: c4:03:56:6d:df:81:03:05:9d:38:3b:38:b1:cc:c6: 6c:cf:16:e4:77:7f:56:8a:0e:f5:76:9c:b0:80:05: 43:2b:30:83:b2:3a:9e:75:e4:c2:16:15:d5:b5:cb: 89:7b:b1:17:98:76:bb:ad:79:a5:53:8d:a1:53:8a: 2d:6f:1e:ae:56:91:3b:62:0e:46:08:e8:a3:e6:4f: 49:2a:93:99:27:ce:20:08:ad:ca:62:dc:49:ce:53: 19:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5B:BB:C1:B7:BB:48:A1:3A:52:8F:C2:C0:B5:B8:B2:AF:21:A5:0A X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zFu7wbe7SKE6Uo_CwLW4sq8hpQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.209.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:d5:a7:bb:fe:be:9a:76:28:9e:97:a5:73:d0:6d:cc:c6:4b: 8c:ce:56:b1:39:a7:af:1e:73:0f:30:d5:3c:d1:5d:5c:3c:79: a1:ba:ad:08:01:b2:f8:c6:45:67:28:44:9a:3f:17:62:1b:1e: ec:d2:17:e0:f3:71:07:ef:8a:1e:aa:57:3f:64:6a:5a:a2:9e: a9:28:a0:bc:ec:c8:b3:91:d1:7a:d8:21:fa:4c:78:a2:6a:90: 58:e6:62:af:66:7b:b5:73:d2:77:03:f3:75:cd:f7:38:ce:ae: 36:84:8c:52:4a:91:a9:73:7e:12:d0:a3:11:21:99:d2:e2:2f: ca:7d:ca:41:5b:d8:b4:14:bc:4f:9e:14:a3:28:17:ad:b3:79: 0b:d8:62:de:13:c8:8e:ea:9e:97:ce:a5:bd:3b:19:a2:a5:6f: 0b:da:cb:9c:3a:65:43:7d:ba:4a:a9:52:96:91:da:b8:30:c7: 1f:7a:a1:97:ee:92:b2:d1:47:7c:f3:27:b8:bd:dc:f5:b1:3b: d1:0a:04:68:1f:77:18:f5:15:a6:a5:b4:08:99:4e:5d:6b:f6: 90:b6:5d:2e:bc:e1:5d:a8:9a:51:a8:5b:19:c9:5c:0a:33:7b: 1f:ef:22:2b:8b:2c:9d:34:7e:53:aa:19:17:ce:08:77:e6:fc: 40:81:45:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ew+ATolKOSt/2x7nGuUcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzViYmJjMWI3YmI0OGExM2E1MjhmYzJjMGI1YjhiMmFmMjFhNTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4H4IzClOy5KrUO0rfbCmPO1p1kH eti2P+uNVO8+4r1zU8d4N4nqTpwbgNE0oZDbO3ctX1jfsyrPmKK4HnINsPt6l7Jd +sfdvHEaPUruyDPPr9hK62DxRl8s6Ilbkhki3CsbzS5Vmue4VC4YWYifjUXx3UCe Y/2z4bLdCNA93Tr8DRnuC/qCZz97s8ryclOgNMpW8i7bxczBmTTFaWnR6Gu0qMjE A1Zt34EDBZ04OzixzMZszxbkd39Wig71dpywgAVDKzCDsjqedeTCFhXVtcuJe7EX mHa7rXmlU42hU4otbx6uVpE7Yg5GCOij5k9JKpOZJ84gCK3KYtxJzlMZ/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMxbu8G3u0ihOlKPwsC1uLKvIaUKMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvekZ1N3diZTdTS0U2VW9fQ3dMVzRzcThocFFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa/RMA0G CSqGSIb3DQEBCwUAA4IBAQAa1ae7/r6adiiel6Vz0G3MxkuMzlaxOaevHnMPMNU8 0V1cPHmhuq0IAbL4xkVnKESaPxdiGx7s0hfg83EH74oeqlc/ZGpaop6pKKC87Miz kdF62CH6THiiapBY5mKvZnu1c9J3A/N1zfc4zq42hIxSSpGpc34S0KMRIZnS4i/K fcpBW9i0FLxPnhSjKBets3kL2GLeE8iO6p6XzqW9OxmipW8L2sucOmVDfbpKqVKW kdq4MMcfeqGX7pKy0Ud88ye4vdz1sTvRCgRoH3cY9RWmpbQImU5da/aQtl0uvOFd qJpRqFsZyVwKM3sf7yIriyydNH5TqhkXzgh35vxAgUWx -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:13 2026 by rpki-client