This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/BYf7RoVtzwx1yTG9FshawkhjTK4.roa File: BYf7RoVtzwx1yTG9FshawkhjTK4.roa (raw, json) Hash identifier: sDDf+aqw1FGJKYG+5FCvmvbUR9TO2CTrbICWskjL/F0= Subject key identifier: 05:87:FB:46:85:6D:CF:0C:75:C9:31:BD:16:C8:5A:C2:48:63:4C:AE Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019B7BA36C403666D454D06A436F09CBF83B Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/BYf7RoVtzwx1yTG9FshawkhjTK4.roa Signing time: Thu 01 Jan 2026 22:17:46 +0000 ROA not before: Thu 01 Jan 2026 22:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41081 IP address blocks: 5.153.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:6c:40:36:66:d4:54:d0:6a:43:6f:09:cb:f8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Jan 1 22:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0587fb46856dcf0c75c931bd16c85ac248634cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8b:af:b3:41:6f:1f:f0:98:50:93:90:97:8c: be:e6:5d:70:51:25:cc:92:b5:3c:44:ed:12:4c:32: e8:eb:da:ce:e1:36:82:5b:f1:be:b8:20:05:60:8c: b1:fb:18:f2:2c:a1:9f:43:5b:f6:c7:0b:1a:96:4f: 33:26:3a:2d:b3:5a:ce:a5:3a:67:fc:be:a4:fa:5a: 25:1e:74:d4:5d:b5:bb:97:43:f6:06:c5:ed:bc:f0: f1:ef:6d:87:e5:ed:04:14:e0:d6:79:c7:29:8a:8d: 09:84:09:71:0c:15:00:ba:a5:58:4e:50:15:8d:6a: 19:af:0d:54:61:ee:9d:3d:f2:bc:44:a7:66:37:65: 6d:dd:f0:8a:e3:ed:ee:f2:90:6a:f8:a4:c3:a7:cf: c8:17:0c:53:57:d1:81:77:30:b2:a5:d1:31:f7:9a: 8b:6a:53:05:b6:f8:8b:f6:25:69:d2:af:7b:e5:44: 4b:02:55:c1:1b:44:cc:e7:92:e9:25:bd:b6:35:c3: 21:a9:48:9e:98:c5:c6:dc:2a:0e:31:c2:b4:38:d1: 35:68:3d:ed:5b:67:a7:38:61:19:3f:30:a7:0f:e8: d3:d8:c7:be:8a:ef:82:df:f4:9f:7f:80:14:a4:3b: 3b:a7:49:9f:02:02:d7:a9:25:2a:5d:db:67:f7:01: 33:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:87:FB:46:85:6D:CF:0C:75:C9:31:BD:16:C8:5A:C2:48:63:4C:AE X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/BYf7RoVtzwx1yTG9FshawkhjTK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.153.182.0/23 Signature Algorithm: sha256WithRSAEncryption 79:e5:36:70:1f:be:a7:b5:f2:57:8e:25:25:cb:9c:03:be:13: d5:6c:80:de:6b:05:7a:72:3a:14:f5:43:06:4c:5c:4d:67:ba: 7e:4a:1f:6a:45:f4:ab:3b:db:97:d7:c0:bf:0b:7e:f2:62:82: ce:1c:b6:5b:ff:3d:56:43:c5:d7:53:7e:88:18:d1:fc:63:12: 02:3a:45:c2:38:44:41:b0:86:7a:55:5f:17:72:a4:7d:d3:be: 88:9e:88:88:d8:42:41:ba:37:14:ed:78:91:ba:a5:e2:40:e9: c4:eb:ff:f6:e9:42:78:0b:c9:40:5b:e8:fd:dd:c0:5d:ab:24: 39:3a:17:2f:33:67:2a:ab:f0:5d:8b:76:e2:8a:0d:f4:2a:21: 27:db:84:b1:c3:c7:ef:13:3d:00:63:c0:f8:9f:a6:85:d2:b2: 1f:a0:c1:08:a9:01:99:30:9a:2f:05:ce:f2:87:72:a9:68:f1: 0d:f4:5f:b4:4d:b6:ae:d0:18:91:d1:3a:39:37:45:88:84:34: 99:5d:6e:29:e3:2d:08:a0:be:50:0e:07:f2:af:0e:ba:1c:68: 7a:e8:b0:52:01:1b:ae:e0:cf:fa:59:8f:ba:a1:dc:88:ff:d2: fe:16:25:3f:8f:7b:b0:ed:b3:1b:e9:52:a1:30:a8:b2:c8:70: cb:f1:25:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o2xANmbUVNBqQ28Jy/g7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjYwMTAxMjIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTg3ZmI0Njg1NmRjZjBjNzVjOTMxYmQxNmM4NWFjMjQ4NjM0Y2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYuvs0FvH/CYUJOQl4y+5l1wUSXM krU8RO0STDLo69rO4TaCW/G+uCAFYIyx+xjyLKGfQ1v2xwsalk8zJjots1rOpTpn /L6k+lolHnTUXbW7l0P2BsXtvPDx722H5e0EFODWeccpio0JhAlxDBUAuqVYTlAV jWoZrw1UYe6dPfK8RKdmN2Vt3fCK4+3u8pBq+KTDp8/IFwxTV9GBdzCypdEx95qL alMFtviL9iVp0q975URLAlXBG0TM55LpJb22NcMhqUiemMXG3CoOMcK0ONE1aD3t W2enOGEZPzCnD+jT2Me+iu+C3/Sff4AUpDs7p0mfAgLXqSUqXdtn9wEzGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAWH+0aFbc8MdckxvRbIWsJIY0yuMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQllmN1JvVnR6d3gxeVRHOUZzaGF3a2hqVEs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBZm2MA0G CSqGSIb3DQEBCwUAA4IBAQB55TZwH76ntfJXjiUly5wDvhPVbIDeawV6cjoU9UMG TFxNZ7p+Sh9qRfSrO9uX18C/C37yYoLOHLZb/z1WQ8XXU36IGNH8YxICOkXCOERB sIZ6VV8XcqR9076InoiI2EJBujcU7XiRuqXiQOnE6//26UJ4C8lAW+j93cBdqyQ5 OhcvM2cqq/Bdi3biig30KiEn24Sxw8fvEz0AY8D4n6aF0rIfoMEIqQGZMJovBc7y h3KpaPEN9F+0Tbau0BiR0To5N0WIhDSZXW4p4y0IoL5QDgfyrw66HGh66LBSARuu 4M/6WY+6odyI/9L+FiU/j3uw7bMb6VKhMKiyyHDL8SV7 -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:16 2026 by rpki-client