This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/3gGcFRvr1pwpGKp8J_owuE8piH4.roa File: 3gGcFRvr1pwpGKp8J_owuE8piH4.roa (raw, json) Hash identifier: NIgKE2RVbifnf8DXxCkQaZgBSHqic6iJrtoPDVmLBd4= Subject key identifier: DE:01:9C:15:1B:EB:D6:9C:29:18:AA:7C:27:FA:30:B8:4F:29:88:7E Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019B7AC78B330207FFC90BF51C9301CB46C5 Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/3gGcFRvr1pwpGKp8J_owuE8piH4.roa Signing time: Thu 01 Jan 2026 18:17:36 +0000 ROA not before: Thu 01 Jan 2026 18:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39364 IP address blocks: 5.202.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8b:33:02:07:ff:c9:0b:f5:1c:93:01:cb:46:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Jan 1 18:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de019c151bebd69c2918aa7c27fa30b84f29887e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8c:31:1a:a8:48:40:81:47:bb:d0:67:6c:35: 78:b9:4c:5d:91:d6:7b:6a:97:b1:db:9d:ec:48:c6: e4:2c:a4:9a:2c:d2:c5:af:8d:86:7a:78:68:fa:a4: 45:e1:7b:ea:c1:94:7b:f1:e1:26:49:0c:9f:0b:98: 42:ea:65:ec:23:e1:8d:af:c0:2d:91:81:81:4e:1e: d1:5e:9c:1f:70:c1:b0:5d:dc:82:4a:36:11:79:62: ca:7a:a5:ae:0c:a0:89:df:bf:82:e3:3a:43:83:fc: 88:99:ca:0c:d4:ac:dc:0a:83:ec:e1:af:c8:e6:0c: 0a:33:da:04:bd:d7:7c:f9:34:e4:4c:8f:2b:d1:65: f3:0b:0e:8d:f5:20:0d:71:dc:0b:fe:63:59:70:55: 73:0d:5f:0b:a0:18:02:02:a8:84:60:6d:3a:90:47: 62:f4:5a:be:18:31:3b:ec:f6:80:0f:7f:8c:5a:6b: 86:7e:6b:20:71:cc:d4:f6:03:4c:b9:e2:af:14:52: b5:e2:65:7f:fd:20:bf:7b:a3:77:9d:e5:db:3c:d2: 65:e6:bc:c5:84:47:28:66:c1:68:ab:6f:69:5d:52: f5:42:dd:59:44:7a:80:58:b3:9f:91:04:4f:89:b9: e0:63:01:fc:7d:f6:02:89:f7:6e:1c:cc:0b:35:f0: f8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:01:9C:15:1B:EB:D6:9C:29:18:AA:7C:27:FA:30:B8:4F:29:88:7E X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/3gGcFRvr1pwpGKp8J_owuE8piH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.202.44.0/22 Signature Algorithm: sha256WithRSAEncryption 47:c7:81:1a:cb:35:31:eb:32:16:34:b9:eb:d3:2b:a0:f1:42: b2:9a:68:23:a8:cd:9e:96:8f:30:49:59:78:20:6a:e3:4b:06: 83:57:d6:9c:a2:aa:7d:5b:d3:a9:c4:c2:30:e6:f8:3a:fb:72: df:ab:a6:56:b8:70:a6:f7:d3:ca:77:f4:67:9e:38:52:ba:ef: 75:09:62:d1:09:44:3a:88:50:2b:d6:a5:4a:8c:63:55:c5:01: 6a:16:d4:58:1a:2a:6f:e5:f1:4d:1b:42:bb:e1:22:30:64:ec: 4c:04:30:7d:03:c7:19:5e:1e:ea:54:da:fb:9b:e3:7e:0f:46: 67:92:a2:fb:7b:9b:b0:17:a7:8e:a4:27:b4:f1:a0:37:77:49: a6:b0:5b:e6:1b:fe:c4:47:20:f7:fa:7f:fd:c7:e7:e7:4b:74: 03:21:9e:c6:99:5d:01:fd:c0:b7:b3:29:a7:f8:2a:db:1c:99: 26:3a:03:f0:5e:32:28:71:2b:86:98:8b:b9:70:67:c8:b3:70: be:0e:74:4a:4c:18:d3:a3:44:a8:3c:76:1e:2d:42:c3:01:81: ba:a7:5b:0c:6d:9f:e0:0f:06:d3:64:3d:fb:82:bd:2a:56:ef: 5d:07:04:da:45:8b:ee:0d:41:15:a8:1b:56:e1:94:28:bb:7f: 03:bc:8a:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x4szAgf/yQv1HJMBy0bFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwMTAxMTgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTAxOWMxNTFiZWJkNjljMjkxOGFhN2MyN2ZhMzBiODRmMjk4ODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzowxGqhIQIFHu9BnbDV4uUxdkdZ7 apex253sSMbkLKSaLNLFr42Genho+qRF4XvqwZR78eEmSQyfC5hC6mXsI+GNr8At kYGBTh7RXpwfcMGwXdyCSjYReWLKeqWuDKCJ37+C4zpDg/yImcoM1KzcCoPs4a/I 5gwKM9oEvdd8+TTkTI8r0WXzCw6N9SANcdwL/mNZcFVzDV8LoBgCAqiEYG06kEdi 9Fq+GDE77PaAD3+MWmuGfmsgcczU9gNMueKvFFK14mV//SC/e6N3neXbPNJl5rzF hEcoZsFoq29pXVL1Qt1ZRHqAWLOfkQRPibngYwH8ffYCifduHMwLNfD4fwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN4BnBUb69acKRiqfCf6MLhPKYh+MB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvM2dHY0ZSdnIxcHdwR0twOEpfb3d1RThwaUg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBcosMA0G CSqGSIb3DQEBCwUAA4IBAQBHx4EayzUx6zIWNLnr0yug8UKymmgjqM2elo8wSVl4 IGrjSwaDV9acoqp9W9OpxMIw5vg6+3Lfq6ZWuHCm99PKd/RnnjhSuu91CWLRCUQ6 iFAr1qVKjGNVxQFqFtRYGipv5fFNG0K74SIwZOxMBDB9A8cZXh7qVNr7m+N+D0Zn kqL7e5uwF6eOpCe08aA3d0mmsFvmG/7ERyD3+n/9x+fnS3QDIZ7GmV0B/cC3symn +CrbHJkmOgPwXjIocSuGmIu5cGfIs3C+DnRKTBjTo0SoPHYeLULDAYG6p1sMbZ/g DwbTZD37gr0qVu9dBwTaRYvuDUEVqBtW4ZQou38DvIrT -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:55 2026 by rpki-client