This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lW1IgFRM9LYgTE_IEAgR_z-tLf0.roa File: lW1IgFRM9LYgTE_IEAgR_z-tLf0.roa (raw, json) Hash identifier: kUeF9aHUyukFKHNJ6owhUE4xIeZ2eSDjoRSveSmesZE= Subject key identifier: 95:6D:48:80:54:4C:F4:B6:20:4C:4F:C8:10:08:11:FF:3F:AD:2D:FD Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BEE658CA462A92D62E9BD0634015AF042 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lW1IgFRM9LYgTE_IEAgR_z-tLf0.roa Signing time: Sat 24 Jan 2026 05:06:30 +0000 ROA not before: Sat 24 Jan 2026 05:06:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 5.231.92.0/24 maxlen: 24 5.231.207.0/24 maxlen: 24 94.249.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ee:65:8c:a4:62:a9:2d:62:e9:bd:06:34:01:5a:f0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 24 05:06:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=956d4880544cf4b6204c4fc8100811ff3fad2dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5a:18:eb:fb:24:b8:24:a5:b9:a4:b7:d3:c7: df:b2:ab:8d:be:66:d9:ee:75:0e:af:4c:0b:dd:c7: df:91:39:27:fa:71:05:75:c8:8b:ab:11:1e:b6:c3: d0:ff:62:5a:3f:e7:80:a5:e5:d8:e1:f0:9a:7a:c5: 78:ea:6a:d1:bf:93:1b:76:43:b0:b8:a7:7b:08:b0: 44:c0:f4:a3:f9:8a:21:8e:a7:23:a9:2d:36:f0:3e: 39:c8:ee:82:a3:4f:47:b1:c9:2b:95:69:6c:1e:a1: 6d:21:92:06:b3:82:dd:d5:37:f5:19:23:cf:e3:b5: 1d:99:94:65:b9:a9:55:21:9c:48:5f:a6:18:cb:b6: 2e:bf:3f:db:cd:b0:0d:af:61:df:c9:8f:cb:f8:2f: c6:a9:ab:56:2b:51:94:2e:df:5b:fb:1e:13:a8:6d: 31:38:3c:06:74:ba:64:cb:fb:c5:a9:28:ce:ab:7c: e5:76:61:45:8b:74:8c:6b:e6:32:fe:4b:d2:66:c8: b9:74:d1:07:58:dc:ba:bc:17:1c:06:46:cb:a9:af: 64:47:76:ec:a7:8d:56:59:95:85:92:fc:6b:64:c9: a7:83:f9:88:0b:f3:29:b1:a0:be:e2:c2:70:0d:b2: e5:fd:1d:6a:7a:52:1b:bc:ac:ec:ad:d1:d4:6f:9f: aa:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6D:48:80:54:4C:F4:B6:20:4C:4F:C8:10:08:11:FF:3F:AD:2D:FD X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lW1IgFRM9LYgTE_IEAgR_z-tLf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.92.0/24 5.231.207.0/24 94.249.205.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:25:32:86:e8:b2:8a:2b:c2:e9:c9:29:4c:47:e8:f1:9b:5b: b5:12:bd:b4:22:d1:40:05:0d:08:42:39:92:d8:1b:20:55:e4: ff:01:eb:3d:f4:e9:4b:55:5a:68:43:51:ca:ba:87:97:98:e5: bb:17:de:80:f0:19:36:9a:e6:42:55:2f:48:fe:3e:49:ef:1e: 79:c5:f2:4c:42:fc:98:e0:16:ae:83:d7:c6:50:a6:4d:6b:88: 7c:37:f3:ca:82:41:6d:88:24:00:d2:51:7f:cb:df:1f:45:a4: 08:91:32:ea:45:b9:5b:24:38:ea:b5:da:4f:48:3b:c1:52:ce: 4b:5b:59:bf:59:5d:3d:d0:14:f5:5e:eb:b7:49:18:66:d0:30: 17:62:a5:59:1c:30:a1:04:37:9f:e9:a2:57:94:89:f0:6f:f4: 52:75:1a:0e:b4:62:0d:05:c0:b9:61:2b:d1:bf:ea:77:f4:61: 0f:9b:1e:83:07:1f:60:f4:37:94:40:e1:e6:12:a0:99:1d:0e: 84:b1:42:fb:fd:49:c9:df:ce:f0:5c:46:ef:33:cc:15:37:96: e2:69:83:e0:cb:8a:50:10:7a:e1:c0:84:10:37:be:27:79:21: 14:2c:51:9c:2a:6f:52:16:8a:15:b4:1f:0d:9a:e5:93:89:05: c4:81:74:64 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvuZYykYqktYum9BjQBWvBCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTI0MDUwNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTZkNDg4MDU0NGNmNGI2MjA0YzRmYzgxMDA4MTFmZjNmYWQyZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmloY6/skuCSluaS308ffsquNvmbZ 7nUOr0wL3cffkTkn+nEFdciLqxEetsPQ/2JaP+eApeXY4fCaesV46mrRv5MbdkOw uKd7CLBEwPSj+YohjqcjqS028D45yO6Co09HsckrlWlsHqFtIZIGs4Ld1Tf1GSPP 47UdmZRlualVIZxIX6YYy7Yuvz/bzbANr2HfyY/L+C/GqatWK1GULt9b+x4TqG0x ODwGdLpky/vFqSjOq3zldmFFi3SMa+Yy/kvSZsi5dNEHWNy6vBccBkbLqa9kR3bs p41WWZWFkvxrZMmng/mIC/MpsaC+4sJwDbLl/R1qelIbvKzsrdHUb5+qkwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJVtSIBUTPS2IExPyBAIEf8/rS39MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvbFcxSWdGUk05TFlnVEVfSUVBZ1Jfei10TGYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABedcAwQA BefPAwQAXvnNMA0GCSqGSIb3DQEBCwUAA4IBAQCeJTKG6LKKK8LpySlMR+jxm1u1 Er20ItFABQ0IQjmS2BsgVeT/Aes99OlLVVpoQ1HKuoeXmOW7F96A8Bk2muZCVS9I /j5J7x55xfJMQvyY4Baug9fGUKZNa4h8N/PKgkFtiCQA0lF/y98fRaQIkTLqRblb JDjqtdpPSDvBUs5LW1m/WV090BT1Xuu3SRhm0DAXYqVZHDChBDef6aJXlInwb/RS dRoOtGINBcC5YSvRv+p39GEPmx6DBx9g9DeUQOHmEqCZHQ6EsUL7/UnJ387wXEbv M8wVN5biaYPgy4pQEHrhwIQQN74neSEULFGcKm9SFooVtB8NmuWTiQXEgXRk -----END CERTIFICATE-----Generated at Sun Jan 25 07:09:07 2026 by rpki-client