This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/6iU5q2O8knwO6rsCxrpEDYfQfwc.roa File: 6iU5q2O8knwO6rsCxrpEDYfQfwc.roa (raw, json) Hash identifier: wn70AHhkmwh/HEbVbZLkEYQ5m0ssl6kZ6p4p/pcbYdw= Subject key identifier: EA:25:39:AB:63:BC:92:7C:0E:EA:BB:02:C6:BA:44:0D:87:D0:7F:07 Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e Certificate serial: 019B775975C7CAB3E68F896FA6CDF051CE80 Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/6iU5q2O8knwO6rsCxrpEDYfQfwc.roa Signing time: Thu 01 Jan 2026 02:18:30 +0000 ROA not before: Thu 01 Jan 2026 02:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198690 IP address blocks: 5.181.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:75:c7:ca:b3:e6:8f:89:6f:a6:cd:f0:51:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e Validity Not Before: Jan 1 02:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea2539ab63bc927c0eeabb02c6ba440d87d07f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:57:94:00:e8:74:e3:6e:f5:83:58:e0:8e:ea: 6a:67:46:2f:e8:c5:d2:27:34:62:ee:38:52:d7:f5: 5d:75:a8:05:1c:be:de:50:59:e2:d3:c6:be:59:5b: 4e:44:20:99:99:f3:99:c4:b4:ab:bb:35:2d:2b:8b: ea:d1:07:e8:2a:ae:5b:79:ff:15:ec:84:7a:38:d0: a0:4a:59:2d:0a:0d:c1:0e:48:98:26:a6:03:5c:f4: 96:98:77:f2:c8:b3:78:c6:7b:38:1f:83:02:11:25: 2a:86:d8:a2:fd:e8:ab:5c:38:d2:1b:a0:e1:7b:12: e0:d0:fd:0d:6c:1d:22:2a:8b:8a:a0:84:e7:d8:02: 7e:53:db:55:8a:5c:0d:76:14:f8:9f:3a:4f:f1:ae: 5c:98:dc:cb:45:1c:25:7a:60:6a:26:f8:0e:4a:39: be:ec:12:41:ab:99:c3:48:49:52:25:71:82:95:f6: 72:83:f1:35:27:80:05:5f:2c:0f:6d:15:dc:46:22: 5d:72:66:d6:90:bd:70:d0:bc:e1:df:05:98:53:82: 18:06:7f:96:92:02:85:fd:2c:a0:1c:62:b4:d4:ea: 0e:2d:96:b5:9d:f2:df:2d:df:a3:11:bc:4e:96:f3: 99:5b:ef:fa:ef:28:18:d6:e9:96:9c:53:42:d7:da: 0b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:25:39:AB:63:BC:92:7C:0E:EA:BB:02:C6:BA:44:0D:87:D0:7F:07 X509v3 Authority Key Identifier: keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/6iU5q2O8knwO6rsCxrpEDYfQfwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.244.0/22 Signature Algorithm: sha256WithRSAEncryption 05:da:c2:aa:3e:75:9c:4b:cc:57:cc:8f:cc:da:3c:6e:44:f8: 3c:0f:8f:0e:54:1f:2b:8e:75:f4:d1:f5:93:29:10:55:8a:d2: e8:59:3f:5f:7a:2b:cc:9c:37:2f:d4:c4:80:13:b0:28:b3:3e: 34:34:2b:e0:a9:a2:f6:b8:a3:aa:7b:9c:3d:b7:8f:de:3c:76: 11:09:5b:ae:b6:8d:97:6d:ac:e4:78:23:4b:60:ed:59:59:fa: 39:99:03:7b:be:65:2f:7f:b9:50:58:8b:38:d6:3b:4a:39:19: d2:b8:21:cb:df:4b:33:e9:e4:a1:e1:61:17:c1:8e:aa:ab:19: 57:6d:ac:56:f9:9a:04:7a:66:e1:98:14:5a:d0:10:69:75:06: b4:50:18:3b:9c:3c:89:f4:07:a4:64:6c:05:21:ee:43:ea:f7: a0:b3:23:84:9a:29:0b:4b:9b:f0:c5:8c:f1:10:8b:6f:71:88: 21:8d:2b:d3:24:95:81:48:6b:4e:16:c8:c2:7f:07:a7:17:8d: bc:11:b2:cf:1c:36:45:7d:2d:90:d5:41:6e:88:8a:78:ee:51: 39:50:f4:d2:97:46:2b:58:d9:ec:ab:ca:f8:2f:e6:7c:34:48: dd:fb:3e:27:ac:67:0b:87:88:fb:f5:ad:6a:05:7b:60:89:69: ce:79:01:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WXXHyrPmj4lvps3wUc6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm ZmExOWUwHhcNMjYwMTAxMDIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTI1MzlhYjYzYmM5MjdjMGVlYWJiMDJjNmJhNDQwZDg3ZDA3ZjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FeUAOh04271g1jgjupqZ0Yv6MXS JzRi7jhS1/VddagFHL7eUFni08a+WVtORCCZmfOZxLSruzUtK4vq0QfoKq5bef8V 7IR6ONCgSlktCg3BDkiYJqYDXPSWmHfyyLN4xns4H4MCESUqhtii/eirXDjSG6Dh exLg0P0NbB0iKouKoITn2AJ+U9tVilwNdhT4nzpP8a5cmNzLRRwlemBqJvgOSjm+ 7BJBq5nDSElSJXGClfZyg/E1J4AFXywPbRXcRiJdcmbWkL1w0Lzh3wWYU4IYBn+W kgKF/SygHGK01OoOLZa1nfLfLd+jEbxOlvOZW+/67ygY1umWnFNC19oL0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOolOatjvJJ8Duq7Asa6RA2H0H8HMB8GA1UdIwQY MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt YTM1ZmM0MzhkNGNhLzEvNmlVNXEyTzhrbndPNnJzQ3hycEVEWWZRZndjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbX0MA0G CSqGSIb3DQEBCwUAA4IBAQAF2sKqPnWcS8xXzI/M2jxuRPg8D48OVB8rjnX00fWT KRBVitLoWT9feivMnDcv1MSAE7Aosz40NCvgqaL2uKOqe5w9t4/ePHYRCVuuto2X bazkeCNLYO1ZWfo5mQN7vmUvf7lQWIs41jtKORnSuCHL30sz6eSh4WEXwY6qqxlX baxW+ZoEembhmBRa0BBpdQa0UBg7nDyJ9AekZGwFIe5D6vegsyOEmikLS5vwxYzx EItvcYghjSvTJJWBSGtOFsjCfwenF428EbLPHDZFfS2Q1UFuiIp47lE5UPTSl0Yr WNnsq8r4L+Z8NEjd+z4nrGcLh4j79a1qBXtgiWnOeQEr -----END CERTIFICATE-----Generated at Sun Jan 25 23:04:39 2026 by rpki-client