This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/NDlIKuHvI_l3WoEI8RI3lOSpsFQ.roa File: NDlIKuHvI_l3WoEI8RI3lOSpsFQ.roa (raw, json) Hash identifier: FONvY/q4opwoaPq/3biKiEUt3jOWtxB1MNcPdsqqWMI= Subject key identifier: 34:39:48:2A:E1:EF:23:F9:77:5A:81:08:F1:12:37:94:E4:A9:B0:54 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EADD03CA3C91A638EA5276C0147155 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/NDlIKuHvI_l3WoEI8RI3lOSpsFQ.roa Signing time: Thu 01 Jan 2026 00:17:42 +0000 ROA not before: Thu 01 Jan 2026 00:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215703 IP address blocks: 5.180.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:dd:03:ca:3c:91:a6:38:ea:52:76:c0:14:71:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3439482ae1ef23f9775a8108f1123794e4a9b054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:76:62:0d:c3:b4:04:2d:42:73:13:45:ed:32: 0c:f2:16:9f:a0:47:38:07:83:57:c5:e4:57:28:10: a0:9f:8f:79:7f:a9:4f:9e:74:8e:56:e7:d3:c2:3b: 3c:9b:90:c7:eb:09:69:28:de:ac:b2:22:67:86:58: 24:03:b7:0d:c5:79:eb:4c:e1:59:08:14:d4:96:3f: 7a:40:bb:83:fa:74:63:ef:87:30:59:fa:0e:a3:4b: 3f:e6:68:60:cc:a0:7b:4b:3c:e1:79:75:a4:f7:54: 04:77:1e:6a:2c:77:22:f7:55:55:f4:e3:c6:28:d5: 23:6f:70:1f:90:a5:1e:dc:e3:17:b6:87:9d:a3:51: 4a:73:ea:04:c7:2d:a4:c0:cb:3d:59:e2:24:2a:15: d6:4a:21:1b:64:dc:1c:cb:70:fe:a3:c0:29:2a:36: 48:9e:d5:47:a5:d9:e9:c5:ed:f4:82:b3:a4:4f:89: 05:e6:02:44:bb:8b:ef:67:13:80:85:f9:2a:f9:b1: 23:8b:79:7f:ec:3a:96:18:b9:a8:4f:b3:0f:fe:1b: 0b:5b:86:60:b7:35:0c:58:99:98:a5:9a:6b:47:aa: b5:1a:b9:20:31:07:11:6b:87:26:45:3e:93:b0:55: b6:7e:98:d1:e3:aa:7b:57:62:8d:53:16:7f:f4:3c: 98:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:39:48:2A:E1:EF:23:F9:77:5A:81:08:F1:12:37:94:E4:A9:B0:54 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/NDlIKuHvI_l3WoEI8RI3lOSpsFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.82.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:5b:e2:fe:84:6f:79:20:d5:c0:0a:5f:ab:f5:9e:aa:92:d1: 07:b5:a5:f0:0d:6b:21:03:a7:59:ee:66:55:48:24:53:9f:de: 7d:95:59:be:da:39:c0:d1:2a:7c:0d:1c:a4:2c:9d:52:24:38: 3f:ff:d8:18:06:3d:53:c3:10:e0:85:ec:44:8c:f6:8f:c6:7a: 88:6e:c5:fe:ad:41:b2:8c:b8:b2:ad:e3:d3:9d:83:dd:2c:61: 2a:53:b0:15:2b:26:f5:20:08:36:1b:71:64:8a:c8:d2:46:ad: 19:28:6c:6a:6a:7b:bd:86:bb:b4:9d:cf:50:63:d1:72:e9:c3: 6e:f1:eb:79:21:09:6f:25:fb:2b:01:d8:72:ab:cd:df:21:9d: ad:9e:17:25:04:c6:21:8b:4e:f0:44:b8:b2:34:2c:ad:de:44: 1f:dc:b7:45:4a:02:90:31:fc:8b:d2:dc:ab:cc:d7:46:be:e9: 37:23:2f:87:b2:fa:76:7f:1f:6f:ee:94:56:6c:4f:d3:bb:88: e4:21:4e:07:6a:1b:ae:da:cb:df:72:c8:0c:21:39:b1:cd:a4: a1:4e:e6:4a:5f:7f:bb:bb:32:3f:80:96:55:c6:bb:16:dd:59: 3f:68:a5:4b:ca:87:d4:8f:50:c7:96:82:a0:67:3d:e9:01:33: 36:87:d8:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26t0DyjyRpjjqUnbAFHFVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDM5NDgyYWUxZWYyM2Y5Nzc1YTgxMDhmMTEyMzc5NGU0YTliMDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHZiDcO0BC1CcxNF7TIM8hafoEc4 B4NXxeRXKBCgn495f6lPnnSOVufTwjs8m5DH6wlpKN6ssiJnhlgkA7cNxXnrTOFZ CBTUlj96QLuD+nRj74cwWfoOo0s/5mhgzKB7SzzheXWk91QEdx5qLHci91VV9OPG KNUjb3AfkKUe3OMXtoedo1FKc+oExy2kwMs9WeIkKhXWSiEbZNwcy3D+o8ApKjZI ntVHpdnpxe30grOkT4kF5gJEu4vvZxOAhfkq+bEji3l/7DqWGLmoT7MP/hsLW4Zg tzUMWJmYpZprR6q1GrkgMQcRa4cmRT6TsFW2fpjR46p7V2KNUxZ/9DyYWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDQ5SCrh7yP5d1qBCPESN5TkqbBUMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvTkRsSUt1SHZJX2wzV29FSThSSTNsT1Nwc0ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbRSMA0G CSqGSIb3DQEBCwUAA4IBAQB8W+L+hG95INXACl+r9Z6qktEHtaXwDWshA6dZ7mZV SCRTn959lVm+2jnA0Sp8DRykLJ1SJDg//9gYBj1TwxDghexEjPaPxnqIbsX+rUGy jLiyrePTnYPdLGEqU7AVKyb1IAg2G3FkisjSRq0ZKGxqanu9hru0nc9QY9Fy6cNu 8et5IQlvJfsrAdhyq83fIZ2tnhclBMYhi07wRLiyNCyt3kQf3LdFSgKQMfyL0tyr zNdGvuk3Iy+Hsvp2fx9v7pRWbE/Tu4jkIU4Hahuu2svfcsgMITmxzaShTuZKX3+7 uzI/gJZVxrsW3Vk/aKVLyofUj1DHloKgZz3pATM2h9ju -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:38 2026 by rpki-client