This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/PKnIAhIJ1MzVjAQXI0_VYyNe5uk.roa File: PKnIAhIJ1MzVjAQXI0_VYyNe5uk.roa (raw, json) Hash identifier: 2+uHp+hvwIMWnnMuQUjkf9G75eaKGy1/wz0Pfj8UxD0= Subject key identifier: 3C:A9:C8:02:12:09:D4:CC:D5:8C:04:17:23:4F:D5:63:23:5E:E6:E9 Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12 Certificate serial: 019B7A5A8C3F49FA80C0317CB9E0EBFAEFF8 Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/PKnIAhIJ1MzVjAQXI0_VYyNe5uk.roa Signing time: Thu 01 Jan 2026 16:18:33 +0000 ROA not before: Thu 01 Jan 2026 16:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205800 IP address blocks: 5.10.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:8c:3f:49:fa:80:c0:31:7c:b9:e0:eb:fa:ef:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12 Validity Not Before: Jan 1 16:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ca9c8021209d4ccd58c0417234fd563235ee6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8c:22:01:34:12:a6:fc:f2:cb:53:ba:ec:8c: 76:23:d0:24:b5:d1:91:d8:48:81:8f:b6:32:f0:76: 75:25:67:25:75:ba:13:dc:6a:19:12:89:01:93:95: d0:a5:ca:dd:8d:88:97:d3:f4:c9:92:19:d1:0a:92: 80:5a:dd:1e:c7:5c:27:19:34:59:95:b1:70:32:44: d4:eb:90:15:78:0a:6e:ea:d0:f4:1a:b5:76:e4:fa: 31:db:92:68:93:52:9f:1b:da:13:72:b2:cc:da:c7: bd:26:b5:0f:80:f6:cb:10:7b:b3:97:bc:c0:9c:e3: d8:5a:97:ee:73:b0:e8:7f:3e:2e:47:b6:fb:7c:30: de:65:47:c5:c9:be:d6:42:46:26:84:03:83:85:ab: ec:91:26:79:d8:16:97:61:99:d3:a3:63:0b:8b:5a: 73:9a:3d:6e:2f:d0:4a:37:6d:24:9c:d9:f9:b3:20: 13:e1:b1:9c:23:58:a6:a6:52:33:bb:4a:e6:fc:12: 78:13:98:41:05:6a:c3:29:86:59:1e:b0:18:20:7d: 99:23:12:d8:53:04:32:68:bf:58:dc:7e:0e:81:df: f7:1b:d5:ad:5f:e1:88:ed:b6:0b:2c:14:e0:d8:c7: 4d:dd:a4:86:0c:42:e8:67:97:7a:1f:8b:30:3e:11: ae:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A9:C8:02:12:09:D4:CC:D5:8C:04:17:23:4F:D5:63:23:5E:E6:E9 X509v3 Authority Key Identifier: keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/PKnIAhIJ1MzVjAQXI0_VYyNe5uk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.226.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:93:c0:61:2f:bc:d3:6d:73:8a:b5:fa:1f:bc:95:63:9b:92: 69:80:0e:43:8d:e6:8e:e3:74:df:5a:27:1d:c0:4b:58:63:1c: f1:82:b5:19:d2:2a:96:4b:49:49:f7:99:bc:58:1a:d7:8a:02: 49:ab:e4:b6:c5:8c:97:3b:51:74:eb:db:21:c3:d7:c8:46:e5: 2f:88:93:65:37:e2:79:0e:38:1b:f2:60:cf:79:50:12:b6:0e: 52:9c:43:c0:b9:ac:84:8f:c3:f8:ea:74:85:dd:20:a3:df:0a: a9:a0:f9:07:4f:93:d5:f2:8d:5d:14:8f:f0:3e:0b:2a:67:1f: 43:2b:a5:14:65:83:cc:5d:46:4c:60:89:4d:f7:4c:d4:66:e8: d9:90:48:cc:6d:71:3e:f5:38:27:00:89:d9:1c:d5:08:c7:86: d0:c1:c2:cb:25:34:2b:75:28:df:4d:44:76:4a:ba:7b:0f:b3: dd:0d:21:00:c0:1a:06:21:68:79:e2:ac:31:50:3b:71:37:e1: a5:3f:0d:95:cc:0b:e9:cf:e5:03:96:ff:c6:a9:34:d3:f6:ee: 01:d1:eb:e5:8a:4b:69:85:2c:d2:24:19:2a:db:24:cd:9b:28: b8:cf:c5:f8:5a:5e:dd:92:c7:77:2b:eb:10:8e:b9:ed:14:30: 5e:23:a8:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wow/SfqAwDF8ueDr+u/4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NzBiZjRmOTUzNTBkMDM3N2ZhODkzOGJmNGYyZGNiN2U3 MmZmMTIwHhcNMjYwMTAxMTYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2E5YzgwMjEyMDlkNGNjZDU4YzA0MTcyMzRmZDU2MzIzNWVlNmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04wiATQSpvzyy1O67Ix2I9AktdGR 2EiBj7Yy8HZ1JWcldboT3GoZEokBk5XQpcrdjYiX0/TJkhnRCpKAWt0ex1wnGTRZ lbFwMkTU65AVeApu6tD0GrV25Pox25Jok1KfG9oTcrLM2se9JrUPgPbLEHuzl7zA nOPYWpfuc7Dofz4uR7b7fDDeZUfFyb7WQkYmhAODhavskSZ52BaXYZnTo2MLi1pz mj1uL9BKN20knNn5syAT4bGcI1implIzu0rm/BJ4E5hBBWrDKYZZHrAYIH2ZIxLY UwQyaL9Y3H4Ogd/3G9WtX+GI7bYLLBTg2MdN3aSGDELoZ5d6H4swPhGuGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDypyAISCdTM1YwEFyNP1WMjXubpMB8GA1UdIwQY MBaAFJhwv0+VNQ0Dd/qJOL9PLct+cv8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82MDBhMzctZjk2Ny00NWIxLWExZGQt MDdhMzE1ZTkwMzNkLzEvUEtuSUFoSUoxTXpWakFRWEkwX1ZZeU5lNXVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi82MDBhMzctZjk2Ny00NWIxLWExZGQtMDdhMzE1ZTkwMzNk LzEvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQriMA0G CSqGSIb3DQEBCwUAA4IBAQBMk8BhL7zTbXOKtfofvJVjm5JpgA5DjeaO43TfWicd wEtYYxzxgrUZ0iqWS0lJ95m8WBrXigJJq+S2xYyXO1F069shw9fIRuUviJNlN+J5 Djgb8mDPeVAStg5SnEPAuayEj8P46nSF3SCj3wqpoPkHT5PV8o1dFI/wPgsqZx9D K6UUZYPMXUZMYIlN90zUZujZkEjMbXE+9TgnAInZHNUIx4bQwcLLJTQrdSjfTUR2 Srp7D7PdDSEAwBoGIWh54qwxUDtxN+GlPw2VzAvpz+UDlv/GqTTT9u4B0evliktp hSzSJBkq2yTNmyi4z8X4Wl7dksd3K+sQjrntFDBeI6h7 -----END CERTIFICATE-----Generated at Mon Jan 26 00:16:25 2026 by rpki-client