This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/OIjLxs6VmAGUTEzh8PSJtLBopGY.roa File: OIjLxs6VmAGUTEzh8PSJtLBopGY.roa (raw, json) Hash identifier: 8AceMO5tWwuUpBtpE1+qoQkFOUmeBKGly65yw/hi+sk= Subject key identifier: 38:88:CB:C6:CE:95:98:01:94:4C:4C:E1:F0:F4:89:B4:B0:68:A4:66 Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Certificate serial: 019B7758F654A078BF4EF1DE152DAC2473F4 Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/OIjLxs6VmAGUTEzh8PSJtLBopGY.roa Signing time: Thu 01 Jan 2026 02:17:57 +0000 ROA not before: Thu 01 Jan 2026 02:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215501 IP address blocks: 5.134.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f6:54:a0:78:bf:4e:f1:de:15:2d:ac:24:73:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Validity Not Before: Jan 1 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3888cbc6ce959801944c4ce1f0f489b4b068a466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:38:40:9c:df:7f:51:06:d8:98:f2:25:5e:37: 66:0a:49:34:3e:f5:8b:33:46:e5:eb:d3:a0:5b:1d: fb:4f:44:79:73:e6:71:9a:f4:8e:bc:99:09:0f:8b: 1f:54:96:e1:4c:6b:5e:0c:39:0d:24:2b:b7:f3:da: a1:a8:ef:fe:23:e5:26:cf:eb:5e:fa:4b:eb:7c:a9: b9:87:6b:08:73:be:17:30:fb:2c:fa:c9:16:20:ee: 93:48:2f:e7:10:8b:63:99:f8:2e:3b:f4:8e:71:7f: 17:bd:6d:37:28:0f:b4:97:f1:1f:40:00:d6:61:17: 7d:66:0a:13:10:c8:5d:94:a9:4e:8d:05:95:6a:96: 07:70:c4:c6:d8:a9:cb:67:3c:63:94:55:47:07:b2: d2:b6:4f:d4:07:28:f0:5c:3e:3e:e4:e7:ad:dd:d1: a8:8f:d3:92:30:3d:93:2c:92:5b:61:82:3b:fa:a7: 39:31:aa:f6:9a:5b:a6:0a:5e:92:fe:6a:02:37:1d: c6:0f:a9:89:df:0a:3f:ce:fa:7a:3e:95:d5:58:fa: c0:bb:5d:04:69:e2:d7:54:5b:d4:86:4c:97:05:65: ef:8f:cc:1e:3b:0d:2e:e7:44:fb:cc:95:bc:ba:0c: ca:af:3e:4b:1c:cf:2d:ee:4a:3e:bb:69:f6:39:26: be:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:88:CB:C6:CE:95:98:01:94:4C:4C:E1:F0:F4:89:B4:B0:68:A4:66 X509v3 Authority Key Identifier: keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/OIjLxs6VmAGUTEzh8PSJtLBopGY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.134.86.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:02:1b:10:75:71:46:2a:ac:e2:98:28:82:6f:c3:24:e0:56: 89:a3:70:88:b5:7e:48:c6:24:3b:44:d3:83:e4:17:3a:d4:06: 0c:47:17:a5:32:fe:a6:68:7c:d2:6c:1c:e7:dd:64:fb:14:8e: fa:54:d0:1d:11:26:bc:ec:cf:e5:6b:2a:34:c2:e0:75:dc:00: c9:8a:ac:3b:7f:87:b6:85:f9:4b:1d:56:0f:8f:26:19:ba:65: e7:2e:76:a1:d1:29:33:c2:ff:d8:c6:2d:3e:d4:e6:95:22:4d: a2:b0:e9:78:f2:e4:15:ec:30:e0:31:60:05:f7:8b:8f:fb:ba: 02:9a:7b:c8:1c:6a:7e:23:c6:ca:0a:06:2d:4e:de:1e:a6:05: 05:8f:73:76:5b:5b:33:e3:b2:a8:f1:51:95:3b:b2:c6:32:d1: 23:d8:8c:c5:69:12:e8:03:2c:fd:6a:d8:8a:bd:bb:ee:3b:c8: 3e:dd:0a:cf:61:76:66:81:c5:84:ea:d3:40:9f:d1:cf:8a:10: c1:33:80:fa:58:76:eb:6b:97:cf:6c:fb:61:7b:ec:33:ca:21: 59:a1:66:54:76:45:ad:9f:f7:66:02:25:e9:4b:6d:52:3e:0d: f5:f7:6d:93:34:7a:60:5b:18:48:ea:ce:26:a6:2d:73:b4:45: 2e:45:a8:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPZUoHi/TvHeFS2sJHP0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1 ZjU2NzQwHhcNMjYwMTAxMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODg4Y2JjNmNlOTU5ODAxOTQ0YzRjZTFmMGY0ODliNGIwNjhhNDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArThAnN9/UQbYmPIlXjdmCkk0PvWL M0bl69OgWx37T0R5c+ZxmvSOvJkJD4sfVJbhTGteDDkNJCu389qhqO/+I+Umz+te +kvrfKm5h2sIc74XMPss+skWIO6TSC/nEItjmfguO/SOcX8XvW03KA+0l/EfQADW YRd9ZgoTEMhdlKlOjQWVapYHcMTG2KnLZzxjlFVHB7LStk/UByjwXD4+5Oet3dGo j9OSMD2TLJJbYYI7+qc5Mar2mlumCl6S/moCNx3GD6mJ3wo/zvp6PpXVWPrAu10E aeLXVFvUhkyXBWXvj8weOw0u50T7zJW8ugzKrz5LHM8t7ko+u2n2OSa+VwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDiIy8bOlZgBlExM4fD0ibSwaKRmMB8GA1UdIwQY MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt MWZjMTllYTczYTJhLzEvT0lqTHhzNlZtQUdVVEV6aDhQU0p0TEJvcEdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABYZWMA0G CSqGSIb3DQEBCwUAA4IBAQA/AhsQdXFGKqzimCiCb8Mk4FaJo3CItX5IxiQ7RNOD 5Bc61AYMRxelMv6maHzSbBzn3WT7FI76VNAdESa87M/layo0wuB13ADJiqw7f4e2 hflLHVYPjyYZumXnLnah0Skzwv/Yxi0+1OaVIk2isOl48uQV7DDgMWAF94uP+7oC mnvIHGp+I8bKCgYtTt4epgUFj3N2W1sz47Ko8VGVO7LGMtEj2IzFaRLoAyz9atiK vbvuO8g+3QrPYXZmgcWE6tNAn9HPihDBM4D6WHbra5fPbPthe+wzyiFZoWZUdkWt n/dmAiXpS21SPg31922TNHpgWxhI6s4mpi1ztEUuRajv -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:35 2026 by rpki-client