This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/4QMeey6hVccNCXBg7ZGr8IBHbJo.roa File: 4QMeey6hVccNCXBg7ZGr8IBHbJo.roa (raw, json) Hash identifier: mGigxFZrLLKUmCZiCO6qYKujBS/kQGDHxNWi1v7IdFA= Subject key identifier: E1:03:1E:7B:2E:A1:55:C7:0D:09:70:60:ED:91:AB:F0:80:47:6C:9A Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B7F6DAB18CCA894FD189CF0068EE6 Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/4QMeey6hVccNCXBg7ZGr8IBHbJo.roa Signing time: Thu 01 Jan 2026 16:19:35 +0000 ROA not before: Thu 01 Jan 2026 16:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62039 IP address blocks: 5.160.204.0/23 maxlen: 23 5.160.205.0/24 maxlen: 24 5.160.206.0/23 maxlen: 23 5.160.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7f:6d:ab:18:cc:a8:94:fd:18:9c:f0:06:8e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1031e7b2ea155c70d097060ed91abf080476c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:10:fd:d9:a1:57:95:fa:5e:3c:f8:df:17:15: 33:84:85:ca:3c:75:50:e9:1f:4b:98:5d:ed:94:36: 05:d1:8d:e8:9e:67:55:4b:6d:dd:6e:1b:ce:f6:56: c4:a9:a8:46:d5:99:bd:76:b7:40:1c:1c:ba:94:f3: 71:dc:88:82:a5:e9:44:3b:f6:c0:22:24:55:f3:34: 60:0c:6c:23:31:2c:5c:68:f7:4f:d8:23:bb:98:f5: 7f:ec:2e:24:71:a9:e8:23:f4:23:a0:ca:5c:20:49: 81:14:c2:f8:0e:70:5b:76:b6:ee:09:a4:b8:3c:bd: 47:9d:3f:be:91:b5:78:74:a5:a2:96:16:10:90:92: 49:f1:9b:2f:d0:ee:23:6f:80:7c:e5:d0:1e:ac:8f: 00:50:ac:de:0d:d9:1c:f0:14:67:aa:f5:63:d3:de: 2a:ee:d2:fc:01:e8:ef:df:27:0a:3b:bb:8b:0c:ea: 65:c0:7f:62:11:2e:f5:31:9f:f9:2d:7e:d9:82:29: b3:53:be:92:0c:12:2f:74:f0:a8:b2:05:00:d8:91: 00:3d:03:5a:fd:ef:50:b5:13:77:fa:ea:4c:5e:d7: f8:2c:2e:75:cf:ac:4b:50:64:51:71:ac:d7:2b:94: c2:08:25:34:44:67:7d:0f:b3:a9:7d:37:1a:11:2b: 75:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:03:1E:7B:2E:A1:55:C7:0D:09:70:60:ED:91:AB:F0:80:47:6C:9A X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/4QMeey6hVccNCXBg7ZGr8IBHbJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.204.0/22 Signature Algorithm: sha256WithRSAEncryption 63:20:df:c0:a1:54:0f:33:7f:1c:e4:5c:52:7a:53:e8:40:78: 77:e9:f8:1e:0c:66:d7:72:36:3a:d1:5f:d6:c5:5b:7d:b6:c1: 3f:ea:fe:be:ee:b3:f8:26:54:71:ed:68:6e:0c:97:5e:b3:71: ea:61:75:be:08:77:bd:e4:b6:b0:04:32:da:81:9f:26:c3:e5: fc:cd:60:85:cd:4c:a9:4a:91:40:f0:76:c9:20:c1:e8:69:d7: ff:49:12:55:0b:75:a8:6f:e6:2e:04:b2:49:d7:b0:e5:ba:75: 24:74:80:00:08:4b:40:4f:b3:d6:b5:73:93:96:3a:bd:a4:60: 84:2c:02:37:f1:7b:87:7d:d4:08:87:b3:b7:ab:66:97:bd:e4: 15:a9:63:43:4e:2d:00:b4:dc:6b:b5:26:42:2c:1a:eb:1b:f8: 29:e8:e7:05:5a:51:88:0d:ff:e1:00:0d:eb:d1:34:c0:07:4f: 09:73:38:cd:fd:97:2e:5e:10:6e:2a:6a:3c:00:32:25:63:dd: 72:ca:e4:f7:b2:54:44:0d:dc:8e:44:8a:42:7e:df:b7:ca:34: d7:fd:c9:b8:38:77:30:c3:42:b9:57:bb:82:e6:91:07:3a:ef: 42:fd:98:55:d8:4e:60:ef:25:fd:9d:0b:7f:43:95:59:0b:62: 45:86:c4:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W39tqxjMqJT9GJzwBo7mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTAzMWU3YjJlYTE1NWM3MGQwOTcwNjBlZDkxYWJmMDgwNDc2YzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BD92aFXlfpePPjfFxUzhIXKPHVQ 6R9LmF3tlDYF0Y3onmdVS23dbhvO9lbEqahG1Zm9drdAHBy6lPNx3IiCpelEO/bA IiRV8zRgDGwjMSxcaPdP2CO7mPV/7C4kcanoI/QjoMpcIEmBFML4DnBbdrbuCaS4 PL1HnT++kbV4dKWilhYQkJJJ8Zsv0O4jb4B85dAerI8AUKzeDdkc8BRnqvVj094q 7tL8Aejv3ycKO7uLDOplwH9iES71MZ/5LX7ZgimzU76SDBIvdPCosgUA2JEAPQNa /e9QtRN3+upMXtf4LC51z6xLUGRRcazXK5TCCCU0RGd9D7OpfTcaESt1VwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOEDHnsuoVXHDQlwYO2Rq/CAR2yaMB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvNFFNZWV5NmhWY2NOQ1hCZzdaR3I4SUJIYkpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBaDMMA0G CSqGSIb3DQEBCwUAA4IBAQBjIN/AoVQPM38c5FxSelPoQHh36fgeDGbXcjY60V/W xVt9tsE/6v6+7rP4JlRx7WhuDJdes3HqYXW+CHe95LawBDLagZ8mw+X8zWCFzUyp SpFA8HbJIMHoadf/SRJVC3Wob+YuBLJJ17DlunUkdIAACEtAT7PWtXOTljq9pGCE LAI38XuHfdQIh7O3q2aXveQVqWNDTi0AtNxrtSZCLBrrG/gp6OcFWlGIDf/hAA3r 0TTAB08JczjN/ZcuXhBuKmo8ADIlY91yyuT3slREDdyORIpCft+3yjTX/cm4OHcw w0K5V7uC5pEHOu9C/ZhV2E5g7yX9nQt/Q5VZC2JFhsRk -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:50 2026 by rpki-client