This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Y2BsvmzySLPiV5ZuTXqg4_zqDng.roa File: Y2BsvmzySLPiV5ZuTXqg4_zqDng.roa (raw, json) Hash identifier: /BRUiZI7IyIxDupGRE4MWp1g4RD+x/OqPhDRgfrxAj8= Subject key identifier: 63:60:6C:BE:6C:F2:48:B3:E2:57:96:6E:4D:7A:A0:E3:FC:EA:0E:78 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019B7EA6F1734D0EE4A690EF0CE68B621E74 Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Y2BsvmzySLPiV5ZuTXqg4_zqDng.roa Signing time: Fri 02 Jan 2026 12:20:28 +0000 ROA not before: Fri 02 Jan 2026 12:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199315 IP address blocks: 5.172.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f1:73:4d:0e:e4:a6:90:ef:0c:e6:8b:62:1e:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jan 2 12:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63606cbe6cf248b3e257966e4d7aa0e3fcea0e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e2:f0:02:d5:ef:ec:65:01:96:a7:5e:60:56: 59:02:a0:92:a5:2f:04:0f:c2:b7:23:86:ca:76:de: f2:80:eb:a8:85:aa:c5:b3:8a:c5:8d:c3:16:9d:f6: ca:96:c3:a9:d9:19:07:69:0f:0a:1b:45:9c:cc:ab: 39:7c:df:51:54:cd:38:74:6b:71:22:94:0f:80:ea: 0d:60:e7:1a:89:ac:1c:b3:56:ff:d8:c5:bc:3c:86: 8c:4e:85:8f:0c:61:ad:e7:f0:af:4b:5c:0d:1a:3f: 36:77:e9:14:7a:c9:30:e7:54:d7:33:03:3f:3b:b0: 48:d9:db:77:30:c2:37:c5:6e:57:4d:f3:34:1c:42: cc:8b:2c:dc:ab:a7:84:f5:b6:2f:ad:a6:6b:7a:fc: a0:e7:7b:d2:43:58:bf:d3:a4:13:ea:65:a9:45:18: 62:32:d9:cc:75:bd:5a:0e:9d:25:32:23:71:77:a7: b0:9f:90:c9:a7:55:41:01:b0:30:8c:4b:f1:58:fa: 53:f8:2c:71:17:fe:ed:43:34:0f:19:20:70:a6:60: a2:5f:85:f4:63:f7:6a:e1:17:92:79:a3:8a:09:5c: 4c:d5:6e:61:15:7e:62:6e:23:8a:fb:06:82:0f:c5: d5:13:61:cb:5b:0f:bc:91:ba:b0:02:41:3d:54:80: cf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:60:6C:BE:6C:F2:48:B3:E2:57:96:6E:4D:7A:A0:E3:FC:EA:0E:78 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Y2BsvmzySLPiV5ZuTXqg4_zqDng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.38.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:3f:31:51:0b:07:c3:3e:6c:60:4f:58:a2:d3:3b:16:a7:5f: e0:c8:a4:94:e5:5f:aa:32:7f:a3:a8:a7:c1:43:ad:86:9f:2c: 82:95:77:15:ba:8d:1b:5d:21:59:cf:9a:ff:56:a0:f2:6d:03: 55:95:d4:b7:92:ab:fd:15:53:fb:77:f4:a8:15:c3:e8:15:16: cf:64:ac:e6:ee:8a:e7:56:19:1d:68:d5:df:6e:9e:cb:2f:2e: e6:8e:01:5a:0b:1d:0f:43:2c:2b:ec:01:68:43:db:ad:e3:28: 7f:9c:4e:92:57:22:8d:c4:11:69:f8:2b:83:4c:81:00:0f:74: 16:cb:d2:8a:5d:17:5f:64:45:32:8f:9c:68:16:50:4f:07:4e: 04:78:64:b2:94:29:96:6e:d1:1c:49:2b:a0:ba:4d:21:4b:bf: 2e:bf:e4:4a:ce:7f:e7:2a:ac:3a:98:b7:c3:c1:73:c5:a2:51: 7e:85:58:1b:f6:fc:51:38:48:18:bd:b4:99:be:e4:ec:40:e7: 8c:53:1a:ec:b8:b4:dc:85:97:7c:6a:fe:db:5e:86:5d:55:79: e6:69:fb:d8:5d:3d:03:dc:70:35:d9:c3:13:6f:31:96:51:d9: b1:09:f9:dd:df:b9:a7:79:c7:2f:e7:6d:92:e3:4b:4b:11:20: dd:c9:f9:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pvFzTQ7kppDvDOaLYh50MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjYwMTAyMTIyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzYwNmNiZTZjZjI0OGIzZTI1Nzk2NmU0ZDdhYTBlM2ZjZWEwZTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+LwAtXv7GUBlqdeYFZZAqCSpS8E D8K3I4bKdt7ygOuoharFs4rFjcMWnfbKlsOp2RkHaQ8KG0WczKs5fN9RVM04dGtx IpQPgOoNYOcaiawcs1b/2MW8PIaMToWPDGGt5/CvS1wNGj82d+kUeskw51TXMwM/ O7BI2dt3MMI3xW5XTfM0HELMiyzcq6eE9bYvraZrevyg53vSQ1i/06QT6mWpRRhi MtnMdb1aDp0lMiNxd6ewn5DJp1VBAbAwjEvxWPpT+CxxF/7tQzQPGSBwpmCiX4X0 Y/dq4ReSeaOKCVxM1W5hFX5ibiOK+waCD8XVE2HLWw+8kbqwAkE9VIDPNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGNgbL5s8kiz4leWbk16oOP86g54MB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvWTJCc3ZtenlTTFBpVjVadVRYcWc0X3pxRG5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABawmMA0G CSqGSIb3DQEBCwUAA4IBAQCKPzFRCwfDPmxgT1ii0zsWp1/gyKSU5V+qMn+jqKfB Q62GnyyClXcVuo0bXSFZz5r/VqDybQNVldS3kqv9FVP7d/SoFcPoFRbPZKzm7orn VhkdaNXfbp7LLy7mjgFaCx0PQywr7AFoQ9ut4yh/nE6SVyKNxBFp+CuDTIEAD3QW y9KKXRdfZEUyj5xoFlBPB04EeGSylCmWbtEcSSuguk0hS78uv+RKzn/nKqw6mLfD wXPFolF+hVgb9vxROEgYvbSZvuTsQOeMUxrsuLTchZd8av7bXoZdVXnmafvYXT0D 3HA12cMTbzGWUdmxCfnd37mneccv522S40tLESDdyfnV -----END CERTIFICATE-----Generated at Sun Jan 25 12:03:19 2026 by rpki-client