This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/GiohiP6-hJsXmBkeQ4ssdR2E4n8.roa File: GiohiP6-hJsXmBkeQ4ssdR2E4n8.roa (raw, json) Hash identifier: pqSW7fBGShN3faaXvv/wQqywfNfnOMQcJckDtVU0jmM= Subject key identifier: 1A:2A:21:88:FE:BE:84:9B:17:98:19:1E:43:8B:2C:75:1D:84:E2:7F Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B7758FA222C73535E21A0F0633EF08345 Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/GiohiP6-hJsXmBkeQ4ssdR2E4n8.roa Signing time: Thu 01 Jan 2026 02:17:58 +0000 ROA not before: Thu 01 Jan 2026 02:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197812 IP address blocks: 5.226.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fa:22:2c:73:53:5e:21:a0:f0:63:3e:f0:83:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a2a2188febe849b1798191e438b2c751d84e27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0d:87:d0:9c:65:14:00:3a:e6:69:28:ec:28: 81:8d:3f:1a:3f:2d:21:47:fe:57:ae:93:9b:d3:9a: 9b:31:33:47:58:76:b9:4d:70:7e:17:0c:1d:79:75: 96:a7:5b:a4:69:7c:e0:85:5b:95:a0:9a:fa:c8:98: fa:f1:bd:9c:2b:2a:25:64:48:1f:0d:1b:a4:14:ab: 1a:1e:97:3b:16:27:6d:b4:43:7e:ee:8d:3c:e9:ba: 95:23:84:24:4a:31:e5:b2:a0:94:ca:b6:8f:13:a3: ef:90:5c:ff:a9:90:4b:85:7a:b2:23:19:32:a9:23: 71:4a:32:f8:02:a6:ce:d7:96:a8:19:90:c7:3f:06: bb:53:c4:45:77:b4:2d:24:b5:d1:71:44:6e:0d:c7: ce:74:e7:22:11:d7:e4:91:a8:73:a0:59:96:c4:90: bf:87:4f:5b:6d:bb:33:57:bf:0a:31:ab:4d:58:6a: 27:39:3d:bc:3f:2d:51:ba:71:2f:b1:28:78:8a:2d: ae:77:d9:b7:66:60:13:45:9f:af:20:f6:2c:de:bf: f2:cf:41:93:95:82:0e:3e:7c:18:48:da:15:a7:59: 8a:5a:73:5c:ce:70:6a:c3:18:59:97:71:37:49:3a: 90:7d:c6:e5:cf:88:ea:5d:99:38:b9:d2:a2:6a:8b: cb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2A:21:88:FE:BE:84:9B:17:98:19:1E:43:8B:2C:75:1D:84:E2:7F X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/GiohiP6-hJsXmBkeQ4ssdR2E4n8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.226.133.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:90:ca:66:d3:5f:b5:02:a0:74:b8:e5:5c:a4:da:79:c5:38: b8:33:cd:6c:fc:35:73:7d:84:c8:14:d8:fd:83:95:69:91:44: d8:5a:44:31:a6:e2:5b:36:aa:ce:c7:ed:4b:63:74:ea:0c:b2: 96:55:b9:43:2f:85:1b:8d:eb:c2:3e:17:ff:62:33:2f:09:ab: 5b:7d:8a:b8:49:bb:3f:b3:3e:d6:1b:22:56:97:74:62:34:04: 6f:50:fe:c5:c4:5d:e8:51:85:5d:ee:64:ba:cc:d2:0e:1a:6d: 9e:a1:47:99:95:69:73:9d:54:87:1f:ee:27:81:4d:ea:a6:9e: 49:f1:78:00:ed:77:18:b9:bb:cb:e7:92:f2:5c:d9:f0:41:59: aa:fe:5a:71:61:0f:b4:9b:6d:96:21:b0:4b:53:ae:be:ee:70: eb:56:61:a9:1c:2a:35:5e:8c:02:76:3d:cb:45:1c:6c:c7:54: f3:69:98:1f:6a:69:29:31:98:c7:cc:e9:0b:dd:b7:63:59:80: 64:50:58:bf:bf:25:19:0a:6b:1a:16:95:d8:f7:fb:fa:73:83: 0c:7f:24:3b:88:fe:00:13:40:2f:3c:80:5b:ab:1e:36:7e:1f: 37:1a:af:50:ab:5c:d5:3e:f3:77:2f:9f:73:13:f1:ab:8f:3d: ae:73:a5:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPoiLHNTXiGg8GM+8INFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTJhMjE4OGZlYmU4NDliMTc5ODE5MWU0MzhiMmM3NTFkODRlMjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA2H0JxlFAA65mko7CiBjT8aPy0h R/5XrpOb05qbMTNHWHa5TXB+FwwdeXWWp1ukaXzghVuVoJr6yJj68b2cKyolZEgf DRukFKsaHpc7FidttEN+7o086bqVI4QkSjHlsqCUyraPE6PvkFz/qZBLhXqyIxky qSNxSjL4AqbO15aoGZDHPwa7U8RFd7QtJLXRcURuDcfOdOciEdfkkahzoFmWxJC/ h09bbbszV78KMatNWGonOT28Py1RunEvsSh4ii2ud9m3ZmATRZ+vIPYs3r/yz0GT lYIOPnwYSNoVp1mKWnNcznBqwxhZl3E3STqQfcblz4jqXZk4udKiaovL4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBoqIYj+voSbF5gZHkOLLHUdhOJ/MB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvR2lvaGlQNi1oSnNYbUJrZVE0c3NkUjJFNG44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABeKFMA0G CSqGSIb3DQEBCwUAA4IBAQBKkMpm01+1AqB0uOVcpNp5xTi4M81s/DVzfYTIFNj9 g5VpkUTYWkQxpuJbNqrOx+1LY3TqDLKWVblDL4UbjevCPhf/YjMvCatbfYq4Sbs/ sz7WGyJWl3RiNARvUP7FxF3oUYVd7mS6zNIOGm2eoUeZlWlznVSHH+4ngU3qpp5J 8XgA7XcYubvL55LyXNnwQVmq/lpxYQ+0m22WIbBLU66+7nDrVmGpHCo1XowCdj3L RRxsx1TzaZgfamkpMZjHzOkL3bdjWYBkUFi/vyUZCmsaFpXY9/v6c4MMfyQ7iP4A E0AvPIBbqx42fh83Gq9Qq1zVPvN3L59zE/Grjz2uc6X8 -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:12 2026 by rpki-client