This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/kIs6vU_5ljQb4cSVoWNBteZ0-H8.roa File: kIs6vU_5ljQb4cSVoWNBteZ0-H8.roa (raw, json) Hash identifier: OabjMAb0W2uKoTkr5HE3JkbIzlM2xxJX+I93/41q8w0= Subject key identifier: 90:8B:3A:BD:4F:F9:96:34:1B:E1:C4:95:A1:63:41:B5:E6:74:F8:7F Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a Certificate serial: 019B77C6658C6CC33C87B7795DF70917E7A2 Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/kIs6vU_5ljQb4cSVoWNBteZ0-H8.roa Signing time: Thu 01 Jan 2026 04:17:29 +0000 ROA not before: Thu 01 Jan 2026 04:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60475 IP address blocks: 5.253.196.0/22 maxlen: 24 5.253.196.0/24 maxlen: 24 5.253.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:65:8c:6c:c3:3c:87:b7:79:5d:f7:09:17:e7:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a Validity Not Before: Jan 1 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=908b3abd4ff996341be1c495a16341b5e674f87f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:29:13:94:c1:9e:f7:18:87:e7:fc:82:a0:3c: e5:c3:63:2a:71:71:53:2d:66:56:62:40:c1:59:31: 29:38:aa:3c:cd:00:54:d7:0b:be:fc:bf:dd:fb:64: a0:36:b6:7b:73:a0:c4:96:6a:58:f0:fe:d1:60:e4: c3:69:4b:a3:39:09:bc:b1:fa:2c:70:6a:25:e6:28: 26:64:b1:d6:5b:f8:49:dd:56:38:ff:33:76:85:25: 31:22:ce:7b:a5:86:74:d6:d4:3a:eb:9a:c0:f8:cf: 96:d8:2c:90:78:2b:a9:86:ef:7f:e4:19:30:76:61: 50:fc:46:84:05:db:d4:59:2e:92:4d:69:48:56:71: f8:78:31:06:a6:b4:e2:ef:db:ad:8a:cf:2a:27:1c: 53:1e:e8:11:25:c9:71:39:68:ee:19:7a:f1:51:37: ab:07:25:47:0d:9b:ba:15:03:d3:c6:a2:ef:49:95: 43:39:1b:2a:8b:9c:4b:40:eb:07:e7:98:dd:f0:7e: de:ba:9a:69:44:2f:b9:2a:e8:ad:27:26:08:3f:eb: 67:16:d0:18:b3:eb:db:ef:38:92:07:d4:52:8e:db: 5a:b5:2e:44:10:7f:c0:33:a0:73:f5:7c:43:1d:0f: 23:8d:b4:fd:73:92:ac:27:14:52:21:e3:35:c3:1d: 45:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8B:3A:BD:4F:F9:96:34:1B:E1:C4:95:A1:63:41:B5:E6:74:F8:7F X509v3 Authority Key Identifier: keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/kIs6vU_5ljQb4cSVoWNBteZ0-H8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.196.0/22 Signature Algorithm: sha256WithRSAEncryption 64:b4:a9:45:4a:85:3c:b3:aa:a7:68:95:ff:9c:e1:dc:bf:5e: 05:6d:c2:2f:8a:98:0a:41:a8:59:57:6a:8e:91:62:30:23:ee: 07:5f:88:e7:6d:ac:0a:a0:b0:7d:91:e0:ac:1a:a4:aa:36:d0: a9:e5:ce:60:d3:06:47:aa:46:87:70:8b:16:96:6a:e9:37:86: b4:ab:ff:69:b4:0a:e9:1a:c7:9f:b0:8b:61:e9:f4:bf:ca:19: 6a:78:32:84:5d:f6:68:e9:55:97:6f:6f:a2:0d:f5:3c:83:c0: 07:13:b3:34:76:31:ce:69:59:40:04:e1:9a:2e:e2:c7:16:bf: 38:44:c7:69:52:c5:9a:da:13:c5:91:35:5d:5f:0c:ae:8a:e2: af:7a:8c:7c:ed:6e:9b:8d:cd:d3:b0:2e:c3:e9:91:5a:fa:24: f3:d1:1b:d6:54:ed:5d:97:06:62:c3:d4:ee:56:ba:89:98:6b: ab:2c:e5:68:33:46:83:94:c9:cc:00:3c:06:c2:b3:33:23:fa: 05:f0:07:d5:57:ea:e2:cb:9f:c0:a0:3d:f7:34:5f:71:98:a3: 18:f6:4d:4f:31:b3:6d:7b:ec:1b:d0:0a:03:aa:ab:ef:bc:81: 78:4d:47:22:04:ae:ed:f6:7a:8f:8f:f6:32:db:2f:a8:0a:2c: fc:a6:17:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xmWMbMM8h7d5XfcJF+eiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NGU1ZWIxMTJlMTNhNDI3MDNkYmIzODdiYTU3N2EyZTc5 M2FjM2EwHhcNMjYwMTAxMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDhiM2FiZDRmZjk5NjM0MWJlMWM0OTVhMTYzNDFiNWU2NzRmODdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SkTlMGe9xiH5/yCoDzlw2MqcXFT LWZWYkDBWTEpOKo8zQBU1wu+/L/d+2SgNrZ7c6DElmpY8P7RYOTDaUujOQm8sfos cGol5igmZLHWW/hJ3VY4/zN2hSUxIs57pYZ01tQ665rA+M+W2CyQeCuphu9/5Bkw dmFQ/EaEBdvUWS6STWlIVnH4eDEGprTi79utis8qJxxTHugRJclxOWjuGXrxUTer ByVHDZu6FQPTxqLvSZVDORsqi5xLQOsH55jd8H7eupppRC+5KuitJyYIP+tnFtAY s+vb7ziSB9RSjttatS5EEH/AM6Bz9XxDHQ8jjbT9c5KsJxRSIeM1wx1F8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJCLOr1P+ZY0G+HElaFjQbXmdPh/MB8GA1UdIwQY MBaAFChOXrES4TpCcD27OHuld6Lnk6w6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYt MDdjYmVkZGQ2NDE4LzEva0lzNnZVXzVsalFiNGNTVm9XTkJ0ZVowLUg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYtMDdjYmVkZGQ2NDE4 LzEvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBf3EMA0G CSqGSIb3DQEBCwUAA4IBAQBktKlFSoU8s6qnaJX/nOHcv14FbcIvipgKQahZV2qO kWIwI+4HX4jnbawKoLB9keCsGqSqNtCp5c5g0wZHqkaHcIsWlmrpN4a0q/9ptArp GsefsIth6fS/yhlqeDKEXfZo6VWXb2+iDfU8g8AHE7M0djHOaVlABOGaLuLHFr84 RMdpUsWa2hPFkTVdXwyuiuKveox87W6bjc3TsC7D6ZFa+iTz0RvWVO1dlwZiw9Tu VrqJmGurLOVoM0aDlMnMADwGwrMzI/oF8AfVV+riy5/AoD33NF9xmKMY9k1PMbNt e+wb0AoDqqvvvIF4TUciBK7t9nqPj/Yy2y+oCiz8phce -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:22 2026 by rpki-client