This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/5AijEti-HcNXwniWHsbH152C1Z4.roa File: 5AijEti-HcNXwniWHsbH152C1Z4.roa (raw, json) Hash identifier: ibGOFvLxanS5CIErygh1i82Hb9gI9oZVrjZKEjZmGRg= Subject key identifier: E4:08:A3:12:D8:BE:1D:C3:57:C2:78:96:1E:C6:C7:D7:9D:82:D5:9E Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 019BBC12FB6C19C8FE2E382678A29131EC2A Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/5AijEti-HcNXwniWHsbH152C1Z4.roa Signing time: Wed 14 Jan 2026 10:35:18 +0000 ROA not before: Wed 14 Jan 2026 10:35:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202831 IP address blocks: 212.115.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:12:fb:6c:19:c8:fe:2e:38:26:78:a2:91:31:ec:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Jan 14 10:35:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e408a312d8be1dc357c278961ec6c7d79d82d59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:df:dd:58:d5:93:e8:6c:03:1e:80:91:bb:90: 0a:64:62:ca:97:96:73:97:b2:69:3d:93:98:47:a1: c8:ea:b5:64:77:0f:d6:f7:4c:ae:d1:3f:54:fa:5c: b5:c4:9d:02:77:05:e4:c2:f5:98:c2:f1:87:7d:92: d1:40:da:df:8a:66:44:59:d9:ed:41:aa:70:c1:54: e5:b7:f8:b5:b6:c1:44:45:a1:b3:5d:1c:57:a1:95: 40:f6:e4:cd:59:ba:1a:cb:cc:e1:23:c8:7f:0a:82: c0:ab:c7:9c:db:84:63:90:f3:61:d8:fe:3a:e5:d3: f4:12:e8:fb:67:57:f0:fa:86:4c:0a:b2:8d:44:e9: 61:34:12:5f:8d:b8:82:ce:c5:0a:d2:b6:5b:74:30: 96:26:fc:67:8f:06:8d:68:3a:5b:16:a6:14:18:b2: d2:52:d2:e3:2a:63:93:f5:a8:78:d5:09:cd:7c:34: 2b:23:8a:a0:6d:e7:51:e0:84:b7:ee:5f:91:fa:c4: c6:90:3d:33:c5:de:98:75:20:6d:40:49:07:f1:ff: de:3d:00:94:5a:8a:21:46:02:fb:8b:f8:44:49:af: 2e:5a:79:42:78:38:6e:59:58:2f:7b:4c:01:8f:cd: 72:a3:78:5f:e1:65:7e:6f:e9:82:98:e5:13:7d:9a: cb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:08:A3:12:D8:BE:1D:C3:57:C2:78:96:1E:C6:C7:D7:9D:82:D5:9E X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/5AijEti-HcNXwniWHsbH152C1Z4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.115.52.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:c8:5f:d1:8a:86:a0:83:af:cf:c1:ca:5c:f2:be:e4:dc:45: 00:e7:1c:50:16:6c:2b:4d:0a:a6:e4:46:f4:92:db:e0:e9:80: e8:b7:45:1f:22:8d:7c:8f:f4:14:e3:e5:7f:11:78:d6:99:28: 81:bc:fc:0b:f5:ff:4c:59:f5:d9:55:72:9c:64:e5:e7:ef:7f: 16:88:7f:33:9e:a8:5f:6e:55:88:4f:f6:bc:b5:75:64:a5:aa: bf:fc:41:e4:64:e5:e8:a1:78:bd:c6:da:b9:f2:3b:3e:2f:5c: 60:4c:7a:fa:a3:b7:d1:3b:d9:1f:5e:eb:d6:e2:ad:f1:20:6b: d1:0b:75:10:42:4c:bb:71:ed:97:80:c3:d1:e0:7b:05:e2:b3: aa:ba:51:9c:40:48:37:0b:da:88:b4:ba:df:3e:38:08:e5:dc: 80:33:94:79:c3:2a:cb:cb:dd:a0:a9:1e:16:09:78:26:d7:39: 0f:66:bc:ef:3a:ae:11:53:b4:41:2a:c0:14:68:f3:55:96:54: 09:72:cd:f7:57:14:d9:c7:ef:73:fa:35:ed:23:52:9a:d0:1e: c5:c6:6e:f2:ba:e6:fd:00:0b:48:b0:d7:4f:71:78:41:9d:a5: c0:63:eb:ab:86:c4:e2:2f:ce:a9:12:60:82:37:89:9e:94:8a: 70:12:56:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu8EvtsGcj+LjgmeKKRMewqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjYwMTE0MTAzNTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDA4YTMxMmQ4YmUxZGMzNTdjMjc4OTYxZWM2YzdkNzlkODJkNTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8N/dWNWT6GwDHoCRu5AKZGLKl5Zz l7JpPZOYR6HI6rVkdw/W90yu0T9U+ly1xJ0CdwXkwvWYwvGHfZLRQNrfimZEWdnt QapwwVTlt/i1tsFERaGzXRxXoZVA9uTNWboay8zhI8h/CoLAq8ec24RjkPNh2P46 5dP0Euj7Z1fw+oZMCrKNROlhNBJfjbiCzsUK0rZbdDCWJvxnjwaNaDpbFqYUGLLS UtLjKmOT9ah41QnNfDQrI4qgbedR4IS37l+R+sTGkD0zxd6YdSBtQEkH8f/ePQCU WoohRgL7i/hESa8uWnlCeDhuWVgve0wBj81yo3hf4WV+b+mCmOUTfZrLWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOQIoxLYvh3DV8J4lh7Gx9edgtWeMB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvNUFpakV0aS1IY05Yd25pV0hzYkgxNTJDMVo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HM0MA0G CSqGSIb3DQEBCwUAA4IBAQCNyF/Rioagg6/Pwcpc8r7k3EUA5xxQFmwrTQqm5Eb0 ktvg6YDot0UfIo18j/QU4+V/EXjWmSiBvPwL9f9MWfXZVXKcZOXn738WiH8znqhf blWIT/a8tXVkpaq//EHkZOXooXi9xtq58js+L1xgTHr6o7fRO9kfXuvW4q3xIGvR C3UQQky7ce2XgMPR4HsF4rOqulGcQEg3C9qItLrfPjgI5dyAM5R5wyrLy92gqR4W CXgm1zkPZrzvOq4RU7RBKsAUaPNVllQJcs33VxTZx+9z+jXtI1Ka0B7Fxm7yuub9 AAtIsNdPcXhBnaXAY+urhsTiL86pEmCCN4melIpwElZp -----END CERTIFICATE-----Generated at Sun Jan 25 15:06:23 2026 by rpki-client