This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/yINd0n3gP0x6qa8FJxhYKeddvro.roa File: yINd0n3gP0x6qa8FJxhYKeddvro.roa (raw, json) Hash identifier: Qs7Q1ePx1UCEL9KBD2PgxRBJH5bavRQ5dNwg0R51V6Q= Subject key identifier: C8:83:5D:D2:7D:E0:3F:4C:7A:A9:AF:05:27:18:58:29:E7:5D:BE:BA Certificate issuer: /CN=5bf81435ed13789895f375dc34d04ce91aca4744 Certificate serial: 019B7D5B37420FAB2CACB2E35CC01293F6A0 Authority key identifier: 5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/yINd0n3gP0x6qa8FJxhYKeddvro.roa Signing time: Fri 02 Jan 2026 06:18:08 +0000 ROA not before: Fri 02 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3301 IP address blocks: 158.233.228.0/24 maxlen: 24 158.233.229.0/24 maxlen: 24 158.233.242.0/24 maxlen: 24 158.233.243.0/24 maxlen: 24 158.233.244.0/24 maxlen: 24 158.233.245.0/24 maxlen: 24 158.233.246.0/24 maxlen: 24 158.233.247.0/24 maxlen: 24 158.233.248.0/24 maxlen: 24 158.233.249.0/24 maxlen: 24 158.233.250.0/24 maxlen: 24 158.233.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:37:42:0f:ab:2c:ac:b2:e3:5c:c0:12:93:f6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bf81435ed13789895f375dc34d04ce91aca4744 Validity Not Before: Jan 2 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8835dd27de03f4c7aa9af0527185829e75dbeba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5a:f4:58:04:a3:eb:9e:5d:33:74:7e:ef:b8: 23:41:72:e2:b8:ca:b4:f1:82:f4:a1:54:b9:f1:d4: da:b1:ef:8f:e6:f1:b8:9c:e6:ea:c3:80:2e:b5:05: b0:a1:cb:11:0c:e5:96:22:1c:39:98:bb:2d:cc:5e: b4:59:74:27:b3:e9:29:38:8b:cc:40:be:be:57:50: 26:fa:9f:fd:4f:e2:a7:dc:c8:39:bc:5d:13:7c:b4: 37:8c:56:c0:79:5f:99:4b:8a:e9:b9:47:56:21:3c: fc:70:8b:7b:17:1c:72:e3:db:af:50:b4:69:92:23: 9f:06:61:30:af:ab:7c:6b:e8:a3:08:fc:b5:c3:9b: 6d:29:05:7a:89:f8:60:87:a2:ac:a7:e4:e7:d8:73: e4:d1:75:3c:4d:7f:2c:0a:04:71:5e:11:66:dd:b1: 15:7e:e8:f3:27:b0:8e:97:9a:d1:6a:b4:d8:32:de: 36:df:cb:b5:b3:5a:9b:f5:36:45:59:f0:d6:3e:ee: ec:8b:6d:4e:8b:a5:b0:34:14:f9:f4:9f:29:e6:d5: a0:7d:b4:36:4d:04:29:d2:d1:43:24:20:97:8c:ab: da:21:86:90:e7:cb:ec:bc:dc:cd:bd:9e:72:e6:e8: ac:18:4a:57:93:69:ec:84:f6:06:bc:e1:da:01:98: 9f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:83:5D:D2:7D:E0:3F:4C:7A:A9:AF:05:27:18:58:29:E7:5D:BE:BA X509v3 Authority Key Identifier: keyid:5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/yINd0n3gP0x6qa8FJxhYKeddvro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.233.228.0/23 158.233.242.0-158.233.251.255 Signature Algorithm: sha256WithRSAEncryption 95:67:9f:df:ee:33:6e:83:5a:e9:fc:d7:8a:7e:56:1c:10:f1: bd:2c:13:d9:73:d8:fe:a8:04:c6:c7:b6:fc:79:da:e2:da:88: 51:9d:2c:e5:76:27:e9:6b:aa:4e:b4:a3:b5:a8:0e:0c:3d:41: d6:f1:d6:d2:2e:5c:8f:17:94:1e:32:6d:9a:7a:37:49:7b:54: a9:59:37:af:91:e7:3a:af:ec:7d:14:d8:a2:19:9f:9f:f5:bf: 77:f4:73:08:ee:8e:ef:57:9b:1f:27:1c:2d:72:f8:e3:20:02: 0d:43:42:ee:76:72:4f:9a:1f:d0:16:56:b4:59:36:c4:90:d0: 25:68:65:c2:a2:4e:5e:64:d2:f2:06:72:e5:76:72:ea:c4:2a: 0b:c4:e8:4a:cb:79:70:e0:1f:3b:38:74:64:44:b5:c8:69:d9: e1:b0:a8:08:80:30:47:9f:08:8d:52:2c:91:b5:7a:7c:9d:22: 23:5e:44:f1:8b:f2:64:66:8a:91:72:02:75:cb:9b:7e:a9:47: 20:68:d6:cb:ad:80:5f:b3:be:70:0b:4d:b0:5c:2a:2a:62:3a: c4:94:e3:3c:8a:81:95:06:4f:34:02:b9:8c:33:82:7d:83:d9: ac:0f:f1:b9:c9:2b:d5:f0:76:9d:cf:e5:5b:be:83:7a:52:92: e7:2e:19:79 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9WzdCD6ssrLLjXMASk/agMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZjgxNDM1ZWQxMzc4OTg5NWYzNzVkYzM0ZDA0Y2U5MWFj YTQ3NDQwHhcNMjYwMTAyMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODgzNWRkMjdkZTAzZjRjN2FhOWFmMDUyNzE4NTgyOWU3NWRiZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlr0WASj655dM3R+77gjQXLiuMq0 8YL0oVS58dTase+P5vG4nObqw4AutQWwocsRDOWWIhw5mLstzF60WXQns+kpOIvM QL6+V1Am+p/9T+Kn3Mg5vF0TfLQ3jFbAeV+ZS4rpuUdWITz8cIt7Fxxy49uvULRp kiOfBmEwr6t8a+ijCPy1w5ttKQV6ifhgh6Ksp+Tn2HPk0XU8TX8sCgRxXhFm3bEV fujzJ7COl5rRarTYMt4238u1s1qb9TZFWfDWPu7si21Oi6WwNBT59J8p5tWgfbQ2 TQQp0tFDJCCXjKvaIYaQ58vsvNzNvZ5y5uisGEpXk2nshPYGvOHaAZifMwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFMiDXdJ94D9MeqmvBScYWCnnXb66MB8GA1UdIwQY MBaAFFv4FDXtE3iYlfN13DTQTOkaykdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV19nVU5lMFRlSmlWODNYY05OQk02UnJLUjBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zZDRiYzUtYzM2My00MTVmLWIzZGEt NDhlNGNjNmIzM2EzLzEveUlOZDBuM2dQMHg2cWE4Rkp4aFlLZWRkdnJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8zZDRiYzUtYzM2My00MTVmLWIzZGEtNDhlNGNjNmIzM2Ez LzEvV19nVU5lMFRlSmlWODNYY05OQk02UnJLUjBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBnunkMAwD BAGe6fIDBAKe6fgwDQYJKoZIhvcNAQELBQADggEBAJVnn9/uM26DWun814p+VhwQ 8b0sE9lz2P6oBMbHtvx52uLaiFGdLOV2J+lrqk60o7WoDgw9Qdbx1tIuXI8XlB4y bZp6N0l7VKlZN6+R5zqv7H0U2KIZn5/1v3f0cwjuju9Xmx8nHC1y+OMgAg1DQu52 ck+aH9AWVrRZNsSQ0CVoZcKiTl5k0vIGcuV2curEKgvE6ErLeXDgHzs4dGREtchp 2eGwqAiAMEefCI1SLJG1enydIiNeRPGL8mRmipFyAnXLm36pRyBo1sutgF+zvnAL TbBcKipiOsSU4zyKgZUGTzQCuYwzgn2D2awP8bnJK9Xwdp3P5Vu+g3pSkucuGXk= -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:44 2026 by rpki-client