This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GZpvCy5dQ5htAGFuHWWguQizvTs.roa File: GZpvCy5dQ5htAGFuHWWguQizvTs.roa (raw, json) Hash identifier: 9LARHtdCtR8HktXN/4Uifg8+qKjjMb86I+TTnbZwgXo= Subject key identifier: 19:9A:6F:0B:2E:5D:43:98:6D:00:61:6E:1D:65:A0:B9:08:B3:BD:3B Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BE8EA0B3A4CDD3EE26EBFEB8470838A92 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GZpvCy5dQ5htAGFuHWWguQizvTs.roa Signing time: Fri 23 Jan 2026 03:33:30 +0000 ROA not before: Fri 23 Jan 2026 03:33:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44477 IP address blocks: 5.175.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e8:ea:0b:3a:4c:dd:3e:e2:6e:bf:eb:84:70:83:8a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 23 03:33:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=199a6f0b2e5d43986d00616e1d65a0b908b3bd3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7a:ba:f8:f0:27:f8:82:b1:03:49:29:14:e1: b4:c0:81:3c:73:a9:68:09:78:e5:b1:94:19:fc:6f: 21:c8:ca:90:69:28:93:bc:6d:58:b1:a7:86:3a:82: 32:ba:04:cf:8a:e7:f9:e0:36:d3:52:b9:94:80:84: a9:3e:75:3e:42:b1:9a:73:e2:e5:79:49:41:18:9f: 05:75:b4:cd:90:1f:bd:eb:0a:78:db:3f:d2:cc:0f: 2b:df:0f:7f:26:6b:a5:4a:86:6c:a1:d8:2c:5a:84: d1:7e:f3:ab:06:80:fc:c2:07:f1:ad:3c:60:b1:c2: 8b:71:b6:b5:24:93:15:5d:3a:a0:03:e5:de:d5:fd: e9:bf:b0:ee:ef:c2:0e:e5:a8:2a:c0:39:03:4a:15: 4a:92:38:50:e8:43:09:bc:5c:e3:fc:69:c3:7e:eb: 68:39:cb:00:4b:f9:0f:71:da:c8:1a:7b:35:f8:72: d9:83:ff:bb:60:66:ad:fd:36:84:a9:3e:09:5e:1c: e5:b9:99:fc:0f:6c:53:b1:56:15:e8:ac:04:a9:00: fb:72:f0:1d:13:0f:12:16:13:b3:14:7e:fe:5a:43: 79:9a:ba:5f:cb:7c:0e:2d:1b:1e:b7:05:8f:18:07: 00:f8:79:1c:dc:a7:e9:d4:10:28:48:28:40:28:c0: da:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9A:6F:0B:2E:5D:43:98:6D:00:61:6E:1D:65:A0:B9:08:B3:BD:3B X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GZpvCy5dQ5htAGFuHWWguQizvTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.250.0/24 Signature Algorithm: sha256WithRSAEncryption d2:0e:37:1c:f9:dc:b6:d3:10:d8:c7:40:bf:43:93:20:d0:1d: c6:fa:5d:18:ed:88:78:e3:a2:ab:62:2d:4a:c8:82:8f:07:fe: 66:97:7f:b6:50:cb:c5:65:96:7c:2c:b7:ed:2c:0d:10:ab:af: a2:53:8c:ac:a7:d0:78:35:68:c1:b7:96:30:b0:1c:6e:cd:f8: 07:56:83:55:9a:2c:8c:11:d8:13:76:92:a4:0c:9e:64:db:f7: 1d:eb:32:bd:7c:a0:65:9a:a2:23:88:52:b9:1c:51:bf:2d:07: 32:03:15:10:57:7e:9e:23:a6:28:3e:62:96:1c:e5:7b:b8:41: 03:23:94:79:32:00:68:11:be:f1:cb:5d:ba:de:45:4c:07:7b: 4f:b5:23:5e:f1:4b:d8:a8:f6:09:a3:59:4c:70:5c:01:4f:b0: 3a:4d:0a:2b:4f:e7:47:63:17:ee:05:bf:9d:6d:70:a8:23:13: d6:13:32:cd:26:e7:4d:b9:4f:60:96:d8:8c:bb:70:99:d1:7a: 04:2d:53:6b:ec:eb:ca:68:f4:15:75:0a:6c:a4:7b:59:45:02: 9a:60:b5:17:1d:0f:c8:f2:87:67:07:e9:f5:31:d0:89:71:c0: ac:1b:1a:14:0d:21:e9:09:66:a2:fd:d3:3a:cd:73:30:72:01: b8:b8:4d:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvo6gs6TN0+4m6/64Rwg4qSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTIzMDMzMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTlhNmYwYjJlNWQ0Mzk4NmQwMDYxNmUxZDY1YTBiOTA4YjNiZDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3q6+PAn+IKxA0kpFOG0wIE8c6lo CXjlsZQZ/G8hyMqQaSiTvG1YsaeGOoIyugTPiuf54DbTUrmUgISpPnU+QrGac+Ll eUlBGJ8FdbTNkB+96wp42z/SzA8r3w9/JmulSoZsodgsWoTRfvOrBoD8wgfxrTxg scKLcba1JJMVXTqgA+Xe1f3pv7Du78IO5agqwDkDShVKkjhQ6EMJvFzj/GnDfuto OcsAS/kPcdrIGns1+HLZg/+7YGat/TaEqT4JXhzluZn8D2xTsVYV6KwEqQD7cvAd Ew8SFhOzFH7+WkN5mrpfy3wOLRsetwWPGAcA+Hkc3Kfp1BAoSChAKMDa+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBmabwsuXUOYbQBhbh1loLkIs707MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvR1pwdkN5NWRRNWh0QUdGdUhXV2d1UWl6dlRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa/6MA0G CSqGSIb3DQEBCwUAA4IBAQDSDjcc+dy20xDYx0C/Q5Mg0B3G+l0Y7Yh446KrYi1K yIKPB/5ml3+2UMvFZZZ8LLftLA0Qq6+iU4ysp9B4NWjBt5YwsBxuzfgHVoNVmiyM EdgTdpKkDJ5k2/cd6zK9fKBlmqIjiFK5HFG/LQcyAxUQV36eI6YoPmKWHOV7uEED I5R5MgBoEb7xy1263kVMB3tPtSNe8UvYqPYJo1lMcFwBT7A6TQorT+dHYxfuBb+d bXCoIxPWEzLNJudNuU9gltiMu3CZ0XoELVNr7OvKaPQVdQpspHtZRQKaYLUXHQ/I 8odnB+n1MdCJccCsGxoUDSHpCWai/dM6zXMwcgG4uE38 -----END CERTIFICATE-----Generated at Sun Jan 25 07:08:00 2026 by rpki-client