This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/gODxSRHwWTf0AdhEf-vZlAdcT8Y.roa File: gODxSRHwWTf0AdhEf-vZlAdcT8Y.roa (raw, json) Hash identifier: 3YgISHwQEuO0iWUQza0xD+9L4RrntGi+pZDu8veL4Yo= Subject key identifier: 80:E0:F1:49:11:F0:59:37:F4:01:D8:44:7F:EB:D9:94:07:5C:4F:C6 Certificate issuer: /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822 Certificate serial: 019B7CECDC94A7047F6BC02C6553DF7BD42E Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/gODxSRHwWTf0AdhEf-vZlAdcT8Y.roa Signing time: Fri 02 Jan 2026 04:17:36 +0000 ROA not before: Fri 02 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33915 IP address blocks: 5.199.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:dc:94:a7:04:7f:6b:c0:2c:65:53:df:7b:d4:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822 Validity Not Before: Jan 2 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80e0f14911f05937f401d8447febd994075c4fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:83:18:b0:8f:f9:82:33:ac:12:9c:b7:02:6d: 3f:55:e5:4c:84:28:17:8d:c4:05:9e:28:59:d3:9c: 6b:7e:ff:45:9b:79:c1:15:38:f5:ca:a2:df:0b:1f: 73:25:c7:71:f7:dc:3c:f9:6e:df:8c:36:69:9d:54: 54:f4:f8:59:34:f7:79:37:02:8b:4b:bd:29:b6:0c: 4a:2c:e3:c9:0d:19:0a:78:c8:05:8e:35:48:41:26: 68:fe:2b:3f:ec:1d:93:19:22:00:e7:8f:61:ef:9f: c5:3d:22:a2:26:51:c8:ae:b8:7a:73:95:f0:c4:a8: ad:a7:29:6f:4e:44:09:4b:38:f1:38:d0:84:96:1a: fb:86:43:c3:79:fd:39:58:30:12:08:5d:1c:43:af: 20:bd:c6:71:db:8c:f0:d3:d1:91:90:06:3a:ca:a4: 39:05:ad:53:a9:54:27:25:b2:4a:77:89:81:eb:4e: 12:bb:26:3b:6d:68:b1:9f:06:8b:30:e7:54:85:54: e8:08:45:41:74:4b:65:f5:f8:58:57:ca:70:8c:09: 83:1b:93:75:54:23:21:6b:08:5f:b4:e0:c4:6c:8a: fa:4c:e9:c9:2b:9e:08:f9:0f:89:0a:34:cc:da:81: cf:14:55:44:12:08:eb:87:88:a5:9d:db:b1:25:3f: 20:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E0:F1:49:11:F0:59:37:F4:01:D8:44:7F:EB:D9:94:07:5C:4F:C6 X509v3 Authority Key Identifier: keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/gODxSRHwWTf0AdhEf-vZlAdcT8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.188.0/22 Signature Algorithm: sha256WithRSAEncryption 42:64:cd:9f:51:eb:97:79:ac:0e:70:60:88:bd:53:ab:8a:8b: 38:0b:ea:a4:a1:e1:45:f5:be:04:86:d0:27:6f:71:01:68:6b: 31:11:17:97:72:e5:73:98:07:39:e8:8a:71:3c:e0:af:8c:79: 74:e7:58:de:0e:a4:14:55:01:95:7b:ce:61:72:b2:5c:cd:a6: fb:3a:f1:95:53:41:2c:6a:bc:17:51:e5:34:73:9b:fa:4a:45: f3:b5:70:32:38:42:07:eb:93:34:8d:ed:2f:1d:37:53:48:9a: f5:10:70:27:26:2b:18:27:24:ab:88:93:a7:76:a0:50:53:b2: b3:79:03:70:47:21:0f:d9:cb:51:5c:35:12:54:06:a3:1c:42: 70:63:da:90:c9:22:94:5e:7e:1d:a5:92:9c:ac:d0:a2:9c:af: a5:15:db:34:79:32:80:62:12:c9:27:23:90:51:5a:d7:9f:e0: b1:5f:21:8c:89:89:f2:fb:f6:1a:22:c4:28:7d:a4:7a:1e:5b: 45:3b:3f:58:47:25:46:ce:ab:e9:7e:0c:7c:83:b8:54:92:98: 86:38:1e:2d:39:39:9c:00:90:6f:1e:ad:89:51:f0:a9:b9:5b: bf:28:4e:56:4c:56:2d:ec:2c:5d:7f:e5:3d:b0:2a:e6:c6:60: f7:b5:21:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87NyUpwR/a8AsZVPfe9QuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMzgzZGNmYzlkMzk5ZjAzOTdhODgxYTRiNmE2ZWU2YWUx NjE4MjIwHhcNMjYwMTAyMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGUwZjE0OTExZjA1OTM3ZjQwMWQ4NDQ3ZmViZDk5NDA3NWM0ZmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YMYsI/5gjOsEpy3Am0/VeVMhCgX jcQFnihZ05xrfv9Fm3nBFTj1yqLfCx9zJcdx99w8+W7fjDZpnVRU9PhZNPd5NwKL S70ptgxKLOPJDRkKeMgFjjVIQSZo/is/7B2TGSIA549h75/FPSKiJlHIrrh6c5Xw xKitpylvTkQJSzjxONCElhr7hkPDef05WDASCF0cQ68gvcZx24zw09GRkAY6yqQ5 Ba1TqVQnJbJKd4mB604SuyY7bWixnwaLMOdUhVToCEVBdEtl9fhYV8pwjAmDG5N1 VCMhawhftODEbIr6TOnJK54I+Q+JCjTM2oHPFFVEEgjrh4ilnduxJT8gDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIDg8UkR8Fk39AHYRH/r2ZQHXE/GMB8GA1UdIwQY MBaAFEI4Pc/J05nwOXqIGktqbuauFhgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEt Zjg4MGQwY2FlMDkwLzEvZ09EeFNSSHdXVGYwQWRoRWYtdlpsQWRjVDhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEtZjg4MGQwY2FlMDkw LzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBce8MA0G CSqGSIb3DQEBCwUAA4IBAQBCZM2fUeuXeawOcGCIvVOrios4C+qkoeFF9b4EhtAn b3EBaGsxEReXcuVzmAc56IpxPOCvjHl051jeDqQUVQGVe85hcrJczab7OvGVU0Es arwXUeU0c5v6SkXztXAyOEIH65M0je0vHTdTSJr1EHAnJisYJySriJOndqBQU7Kz eQNwRyEP2ctRXDUSVAajHEJwY9qQySKUXn4dpZKcrNCinK+lFds0eTKAYhLJJyOQ UVrXn+CxXyGMiYny+/YaIsQofaR6HltFOz9YRyVGzqvpfgx8g7hUkpiGOB4tOTmc AJBvHq2JUfCpuVu/KE5WTFYt7Cxdf+U9sCrmxmD3tSGp -----END CERTIFICATE-----Generated at Mon Jan 12 07:01:37 2026 by rpki-client