This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/g97yKKTw0qoO3z8jCDHeZy3h_sA.roa File: g97yKKTw0qoO3z8jCDHeZy3h_sA.roa (raw, json) Hash identifier: BG+WNmPh44Y/W0xYtmXHCAEYFDjw7vRLIThzcdS18hY= Subject key identifier: 83:DE:F2:28:A4:F0:D2:AA:0E:DF:3F:23:08:31:DE:67:2D:E1:FE:C0 Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf Certificate serial: 019B7AC8AFF30C9A2F07810039E04D4DE4B5 Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/g97yKKTw0qoO3z8jCDHeZy3h_sA.roa Signing time: Thu 01 Jan 2026 18:18:51 +0000 ROA not before: Thu 01 Jan 2026 18:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39383 IP address blocks: 5.183.170.0/24 maxlen: 24 5.183.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:af:f3:0c:9a:2f:07:81:00:39:e0:4d:4d:e4:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf Validity Not Before: Jan 1 18:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83def228a4f0d2aa0edf3f230831de672de1fec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ad:ee:19:61:b9:98:68:ac:1c:eb:ce:91:9e: 8d:68:bf:a7:a4:9b:4f:cf:5f:65:1a:06:5d:20:fd: ee:7c:79:01:de:f3:d3:6a:9d:77:42:dd:a0:34:5f: 55:84:04:f1:8e:bc:58:8f:32:64:d0:2c:85:bf:16: 09:95:22:b3:99:e9:ca:c4:d2:3f:58:6c:3c:ed:e3: 92:81:45:61:9c:43:85:b1:57:d4:ca:e8:c1:b2:8e: a4:af:ab:f1:64:0e:98:42:45:04:25:c9:57:86:63: d1:a4:fb:0f:3c:32:3c:e8:df:ae:e4:cf:d0:ed:78: 79:b5:c8:43:30:58:e6:25:95:bf:7c:46:81:53:8d: e1:1d:89:44:a1:13:55:3c:6b:bc:41:71:74:09:c6: c4:c4:7d:06:a9:67:bf:8d:8f:ae:f3:25:68:26:b0: 33:69:e7:77:46:94:a5:ee:33:8d:0c:e5:fe:2f:b3: 76:76:a1:92:0e:4b:25:32:b6:43:67:62:6c:cf:5d: ae:2b:5c:7c:9c:90:a4:0b:e7:5d:9b:f0:5c:52:8d: 7b:94:b8:40:82:c5:70:1f:6b:7f:66:40:06:b3:68: 19:05:a9:a1:91:fc:66:bd:79:55:d2:83:c1:ed:45: 89:8b:01:cd:90:42:5c:a6:41:aa:94:12:c9:b0:d9: 89:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DE:F2:28:A4:F0:D2:AA:0E:DF:3F:23:08:31:DE:67:2D:E1:FE:C0 X509v3 Authority Key Identifier: keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/g97yKKTw0qoO3z8jCDHeZy3h_sA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.170.0/23 Signature Algorithm: sha256WithRSAEncryption 65:7b:91:c4:bf:49:44:7d:da:77:c0:a4:da:15:74:0f:82:32: 97:f2:91:34:e3:ad:70:1e:0a:75:ff:02:b1:6e:98:bc:d7:af: 02:5b:b1:e7:c3:2a:e1:89:33:88:e8:a6:31:4b:e8:ed:ae:89: f7:63:b3:7c:a3:e7:ad:d6:7d:38:30:95:44:85:bc:a8:9d:5d: 36:c3:93:99:1f:68:0d:69:0b:28:2f:75:6c:03:95:95:b4:af: 19:13:a4:fe:e3:b0:75:29:4a:27:3d:f3:0a:04:ef:00:6a:f5: 84:0b:d1:4a:32:44:d1:1d:ac:d9:b7:4d:2d:5f:30:fb:47:be: 3b:ff:39:c9:00:a0:c5:ca:80:87:d3:d6:f3:a3:55:f1:68:05: 34:97:a6:b0:17:2c:c1:63:8c:2d:bb:17:f2:b2:b5:ea:90:e4: fd:1a:dd:d3:3c:24:f6:73:a3:9f:ab:ee:f4:18:e9:6c:a7:ff: fa:aa:9a:d6:58:81:1d:2a:e3:10:23:74:37:94:57:c5:ff:05: af:3b:8a:67:59:2f:35:ed:22:99:6f:35:74:f7:bc:d1:20:f6: 15:69:f7:11:e3:ab:05:3f:2f:f2:d4:39:7f:6e:03:e6:eb:21: 18:a6:f9:a0:56:de:61:ff:da:ba:37:5a:0b:ad:88:24:07:2f: 5d:c7:45:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yK/zDJovB4EAOeBNTeS1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYjg0OWI5YmM5MDQyYTE1NTczMzE5MzdlNGFkNzE1MThh ZjYxY2YwHhcNMjYwMTAxMTgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2RlZjIyOGE0ZjBkMmFhMGVkZjNmMjMwODMxZGU2NzJkZTFmZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu63uGWG5mGisHOvOkZ6NaL+npJtP z19lGgZdIP3ufHkB3vPTap13Qt2gNF9VhATxjrxYjzJk0CyFvxYJlSKzmenKxNI/ WGw87eOSgUVhnEOFsVfUyujBso6kr6vxZA6YQkUEJclXhmPRpPsPPDI86N+u5M/Q 7Xh5tchDMFjmJZW/fEaBU43hHYlEoRNVPGu8QXF0CcbExH0GqWe/jY+u8yVoJrAz aed3RpSl7jONDOX+L7N2dqGSDkslMrZDZ2Jsz12uK1x8nJCkC+ddm/BcUo17lLhA gsVwH2t/ZkAGs2gZBamhkfxmvXlV0oPB7UWJiwHNkEJcpkGqlBLJsNmJqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIPe8iik8NKqDt8/Iwgx3mct4f7AMB8GA1UdIwQY MBaAFNC4Sbm8kEKhVXMxk35K1xUYr2HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hM2ZiNjctZDUxNC00YWVlLWFkYjkt NzJiYWQ5ZDczYzgwLzEvZzk3eUtLVHcwcW9PM3o4akNESGVaeTNoX3NBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9hM2ZiNjctZDUxNC00YWVlLWFkYjktNzJiYWQ5ZDczYzgw LzEvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBbeqMA0G CSqGSIb3DQEBCwUAA4IBAQBle5HEv0lEfdp3wKTaFXQPgjKX8pE0461wHgp1/wKx bpi8168CW7HnwyrhiTOI6KYxS+jtron3Y7N8o+et1n04MJVEhbyonV02w5OZH2gN aQsoL3VsA5WVtK8ZE6T+47B1KUonPfMKBO8AavWEC9FKMkTRHazZt00tXzD7R747 /znJAKDFyoCH09bzo1XxaAU0l6awFyzBY4wtuxfysrXqkOT9Gt3TPCT2c6Ofq+70 GOlsp//6qprWWIEdKuMQI3Q3lFfF/wWvO4pnWS817SKZbzV097zRIPYVafcR46sF Py/y1Dl/bgPm6yEYpvmgVt5h/9q6N1oLrYgkBy9dx0VL -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:32 2026 by rpki-client