This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eCteStWJlsZRr0JQBO2S-I9AjxI.roa File: eCteStWJlsZRr0JQBO2S-I9AjxI.roa (raw, json) Hash identifier: OvnO8mELxRBiuXDwJOa+mcOfpJhx+7bQjsOIomrJrcE= Subject key identifier: 78:2B:5E:4A:D5:89:96:C6:51:AF:42:50:04:ED:92:F8:8F:40:8F:12 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BE416154BBEDC9C8238FD876AA9AD2915 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eCteStWJlsZRr0JQBO2S-I9AjxI.roa Signing time: Thu 22 Jan 2026 05:03:30 +0000 ROA not before: Thu 22 Jan 2026 05:03:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214639 IP address blocks: 5.83.129.0/24 maxlen: 24 5.175.178.0/24 maxlen: 24 85.93.10.0/24 maxlen: 24 89.144.35.0/24 maxlen: 24 94.249.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e4:16:15:4b:be:dc:9c:82:38:fd:87:6a:a9:ad:29:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 22 05:03:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=782b5e4ad58996c651af425004ed92f88f408f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:10:a9:79:c5:bf:01:c2:49:11:93:28:3f:60: 37:cc:b9:21:7c:42:d7:65:5a:e7:32:4e:ac:01:a5: 0e:e1:2a:32:16:db:e4:6e:e9:79:83:63:39:73:7d: 91:01:70:57:e3:67:2e:81:43:59:b7:76:0e:01:c5: 40:d1:ae:24:af:97:8b:f3:bb:71:28:a5:65:69:f5: fb:c3:84:4b:b0:03:07:81:62:eb:20:53:fa:9c:2c: 72:1d:d3:fe:9f:45:b6:2c:bb:62:58:f9:46:4d:10: 48:ff:31:82:95:94:ff:b0:ce:bb:e8:18:3a:8d:e7: a0:83:b1:7a:a3:45:40:94:17:8c:fb:35:4a:05:ec: 0e:9f:dc:fd:65:aa:f0:f3:f7:59:c9:ed:cd:03:9e: 2f:09:b5:78:6f:b0:4b:a7:bc:ff:0b:2b:5b:d5:42: f6:71:b5:46:b0:24:99:44:61:0b:6b:26:f8:73:a0: f0:6c:15:5f:ec:b1:91:7f:49:31:24:08:d4:19:3c: b2:ca:96:26:c7:92:22:8b:7e:b5:22:be:e2:83:0c: 98:89:43:0b:83:c2:75:1c:d5:b1:01:9d:ba:ee:76: 60:91:b4:0d:6b:18:ec:54:d9:11:f9:63:26:09:89: b2:f2:a6:69:7d:00:bd:7d:14:df:08:23:04:c9:10: a1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2B:5E:4A:D5:89:96:C6:51:AF:42:50:04:ED:92:F8:8F:40:8F:12 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eCteStWJlsZRr0JQBO2S-I9AjxI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.129.0/24 5.175.178.0/24 85.93.10.0/24 89.144.35.0/24 94.249.176.0/24 Signature Algorithm: sha256WithRSAEncryption d5:f1:27:b6:88:b0:60:05:44:68:0c:90:2f:da:20:3b:32:dd: 5a:2b:48:91:43:73:f3:09:a0:76:99:b8:24:b9:74:b8:f3:68: d6:9c:34:9e:1f:17:3d:33:ef:51:45:4d:8a:55:d3:b3:18:1d: 6b:2d:fc:d6:ad:fa:46:cb:28:06:0a:79:f9:ee:b2:78:85:94: e7:56:87:46:62:05:51:cc:cc:03:8d:82:7e:0b:aa:8c:d3:75: 8a:2a:c7:de:13:92:63:95:9c:a0:af:80:25:e5:1c:cd:e5:d1: 05:4b:22:17:9b:7c:8f:f9:9d:7d:95:f6:ef:11:76:4c:3d:89: 49:a9:d8:2d:6e:8b:6a:2c:0b:56:ea:51:97:5e:83:a5:7d:fa: 1d:37:c9:17:e4:6a:67:d6:69:ff:a0:47:c7:f7:7b:cb:ee:c8: d1:09:ee:34:03:95:8e:29:20:c8:6e:06:03:ee:01:0b:ca:81: 9e:bd:9e:7b:75:74:1e:25:9e:79:52:86:d7:96:2d:e2:30:04: d7:45:27:ee:9a:af:5c:b6:30:86:60:26:a2:6c:cc:82:5a:93: c6:dc:bf:4d:63:b5:d9:1e:97:8a:f4:60:9d:8c:ad:84:57:15: a5:ba:e0:89:24:11:0c:f3:4e:3c:f5:92:5e:9a:55:65:cd:a7: 1b:6c:bd:dd -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZvkFhVLvtycgjj9h2qprSkVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTIyMDUwMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODJiNWU0YWQ1ODk5NmM2NTFhZjQyNTAwNGVkOTJmODhmNDA4ZjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RCpecW/AcJJEZMoP2A3zLkhfELX ZVrnMk6sAaUO4SoyFtvkbul5g2M5c32RAXBX42cugUNZt3YOAcVA0a4kr5eL87tx KKVlafX7w4RLsAMHgWLrIFP6nCxyHdP+n0W2LLtiWPlGTRBI/zGClZT/sM676Bg6 jeegg7F6o0VAlBeM+zVKBewOn9z9Zarw8/dZye3NA54vCbV4b7BLp7z/Cytb1UL2 cbVGsCSZRGELayb4c6DwbBVf7LGRf0kxJAjUGTyyypYmx5Iii361Ir7igwyYiUML g8J1HNWxAZ267nZgkbQNaxjsVNkR+WMmCYmy8qZpfQC9fRTfCCMEyRChfwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFHgrXkrViZbGUa9CUATtkviPQI8SMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvZUN0ZVN0V0psc1pScjBKUUJPMlMtSTlBanhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABVOBAwQA Ba+yAwQAVV0KAwQAWZAjAwQAXvmwMA0GCSqGSIb3DQEBCwUAA4IBAQDV8Se2iLBg BURoDJAv2iA7Mt1aK0iRQ3PzCaB2mbgkuXS482jWnDSeHxc9M+9RRU2KVdOzGB1r LfzWrfpGyygGCnn57rJ4hZTnVodGYgVRzMwDjYJ+C6qM03WKKsfeE5JjlZygr4Al 5RzN5dEFSyIXm3yP+Z19lfbvEXZMPYlJqdgtbotqLAtW6lGXXoOlffodN8kX5Gpn 1mn/oEfH93vL7sjRCe40A5WOKSDIbgYD7gELyoGevZ57dXQeJZ55UobXli3iMATX RSfumq9ctjCGYCaibMyCWpPG3L9NY7XZHpeK9GCdjK2EVxWluuCJJBEM80489ZJe mlVlzacbbL3d -----END CERTIFICATE-----Generated at Sun Jan 25 07:08:33 2026 by rpki-client