This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zR1Kx_1QWdwv6YV-lOWlkauK0gQ.roa File: zR1Kx_1QWdwv6YV-lOWlkauK0gQ.roa (raw, json) Hash identifier: sDs2HPKwp4/IEhCRivzlyau8BbgNR6I1M/pQNAQeLsE= Subject key identifier: CD:1D:4A:C7:FD:50:59:DC:2F:E9:85:7E:94:E5:A5:91:AB:8A:D2:04 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C130FC0667952594A4457F609ADF126 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zR1Kx_1QWdwv6YV-lOWlkauK0gQ.roa Signing time: Fri 02 Jan 2026 00:19:42 +0000 ROA not before: Fri 02 Jan 2026 00:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215685 IP address blocks: 5.175.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:0f:c0:66:79:52:59:4a:44:57:f6:09:ad:f1:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd1d4ac7fd5059dc2fe9857e94e5a591ab8ad204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:94:db:0b:a2:80:02:3b:d1:0f:5e:67:b1:2f: 64:a2:81:5f:59:50:af:10:e8:59:c0:6d:78:e9:cf: bb:e4:d6:23:15:ed:34:84:65:4e:18:10:68:90:45: ae:95:06:db:cf:24:92:17:47:5d:8b:a4:63:de:ca: a9:47:56:b5:42:ee:3e:46:a9:63:cd:25:49:b0:17: 3d:41:5b:e4:28:4c:9c:26:ab:ce:76:bd:73:87:3e: 92:13:3f:d1:9f:f4:57:5c:48:f3:bd:31:ab:5a:75: 61:65:3a:ab:59:6a:6c:4a:85:37:98:94:7f:d8:aa: e7:80:42:91:84:e0:7f:2e:90:6b:a4:b1:88:5b:a8: 33:75:98:a2:86:ef:b7:a1:40:c3:1f:66:65:32:3f: ac:44:ec:99:0d:c2:3e:d9:6b:ea:70:ad:5e:79:20: e7:8f:f8:ad:71:49:f6:d5:6c:c3:0f:25:f9:25:7e: ea:fa:88:fd:16:ae:dc:6c:e3:25:43:eb:e7:ec:b2: 3c:4d:00:28:9a:9c:62:4c:86:29:55:0d:25:1b:77: 00:99:60:98:a8:2e:e3:71:02:20:8d:a2:62:5e:ef: 89:e4:a3:b0:7e:ab:08:65:cf:5f:6b:d1:fe:22:c4: 6b:5f:2c:e4:c0:3b:50:d9:14:54:cf:7c:e2:73:c8: 4c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1D:4A:C7:FD:50:59:DC:2F:E9:85:7E:94:E5:A5:91:AB:8A:D2:04 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zR1Kx_1QWdwv6YV-lOWlkauK0gQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.239.0/24 Signature Algorithm: sha256WithRSAEncryption 53:7b:ed:f1:de:8f:12:92:d4:ee:92:13:02:e5:29:c4:60:d3: 9d:58:c4:ae:01:a5:4d:8b:60:cd:16:a7:6c:1f:80:76:01:35: f1:ab:1c:05:65:1e:0b:f0:d0:81:af:ea:8a:b2:81:e2:c6:40: 93:6c:b1:17:fc:2e:05:14:a6:23:3d:29:fe:cd:1e:b3:73:d9: 5b:41:3e:ce:46:b0:33:24:10:4e:3b:c8:9e:d0:43:46:57:a4: ac:7c:92:b6:46:2a:7e:79:b8:82:a9:00:14:b9:c0:31:4a:e0: f9:17:57:1b:16:e5:ff:ed:15:88:1c:f8:6b:dc:fe:71:79:5d: 8f:7e:ed:70:d4:12:ce:d6:c9:88:a8:ed:f8:8f:67:e3:9b:98: 26:e5:92:82:f1:81:f9:e9:02:9b:55:fa:e1:1d:3a:df:7e:9c: 0d:fc:93:14:6a:49:25:7b:d5:38:c1:25:09:2c:26:9b:f4:c1: 86:4a:9d:76:f2:b1:cc:72:1e:2e:b6:a7:a1:2c:6c:ec:17:3d: af:95:c5:7c:6c:5c:3e:26:1d:07:b9:3b:96:3a:69:34:50:af: b2:b0:6a:41:ed:88:5d:b6:71:8b:2c:92:20:2b:93:e4:0c:21: d5:31:2f:27:e4:93:7e:7d:6b:3a:e6:36:5f:8b:64:5b:3e:d4: 53:b8:43:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ew/AZnlSWUpEV/YJrfEmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDFkNGFjN2ZkNTA1OWRjMmZlOTg1N2U5NGU1YTU5MWFiOGFkMjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15TbC6KAAjvRD15nsS9kooFfWVCv EOhZwG146c+75NYjFe00hGVOGBBokEWulQbbzySSF0ddi6Rj3sqpR1a1Qu4+Rqlj zSVJsBc9QVvkKEycJqvOdr1zhz6SEz/Rn/RXXEjzvTGrWnVhZTqrWWpsSoU3mJR/ 2KrngEKRhOB/LpBrpLGIW6gzdZiihu+3oUDDH2ZlMj+sROyZDcI+2WvqcK1eeSDn j/itcUn21WzDDyX5JX7q+oj9Fq7cbOMlQ+vn7LI8TQAompxiTIYpVQ0lG3cAmWCY qC7jcQIgjaJiXu+J5KOwfqsIZc9fa9H+IsRrXyzkwDtQ2RRUz3zic8hMAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM0dSsf9UFncL+mFfpTlpZGritIEMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvelIxS3hfMVFXZHd2NllWLWxPV2xrYXVLMGdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa/vMA0G CSqGSIb3DQEBCwUAA4IBAQBTe+3x3o8SktTukhMC5SnEYNOdWMSuAaVNi2DNFqds H4B2ATXxqxwFZR4L8NCBr+qKsoHixkCTbLEX/C4FFKYjPSn+zR6zc9lbQT7ORrAz JBBOO8ie0ENGV6SsfJK2Rip+ebiCqQAUucAxSuD5F1cbFuX/7RWIHPhr3P5xeV2P fu1w1BLO1smIqO34j2fjm5gm5ZKC8YH56QKbVfrhHTrffpwN/JMUakkle9U4wSUJ LCab9MGGSp128rHMch4utqehLGzsFz2vlcV8bFw+Jh0HuTuWOmk0UK+ysGpB7Yhd tnGLLJIgK5PkDCHVMS8n5JN+fWs65jZfi2RbPtRTuEO9 -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:48 2026 by rpki-client