This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/8Yvrnf3Td2A-XqcljsmN2iMX0Wg.roa File: 8Yvrnf3Td2A-XqcljsmN2iMX0Wg.roa (raw, json) Hash identifier: Ly7ycaIppx0oSve3OzyYS+imL97VzcfMEc3XW9GMN6g= Subject key identifier: F1:8B:EB:9D:FD:D3:77:60:3E:5E:A7:25:8E:C9:8D:DA:23:17:D1:68 Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B8528756D5503F7EDA31B6735B54F Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/8Yvrnf3Td2A-XqcljsmN2iMX0Wg.roa Signing time: Thu 01 Jan 2026 16:19:36 +0000 ROA not before: Thu 01 Jan 2026 16:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200554 IP address blocks: 5.160.10.0/24 maxlen: 24 5.160.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:85:28:75:6d:55:03:f7:ed:a3:1b:67:35:b5:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f18beb9dfdd377603e5ea7258ec98dda2317d168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:a0:b5:42:55:1d:c3:4b:8f:51:03:51:fc: 4e:ed:b3:9a:c5:76:95:48:5c:9c:dd:35:5e:2b:0d: d6:24:ba:06:85:80:89:72:01:60:ff:e0:cc:bc:97: 1e:a8:dc:f2:bc:46:88:40:ae:9a:a7:c6:c4:53:21: 56:d7:3a:4a:1f:a3:be:d1:ac:17:d3:2a:aa:b3:5b: fc:e1:e7:9f:5f:13:de:63:1f:e2:98:f3:43:ef:89: 68:62:6a:71:16:9d:5d:72:5f:7f:d6:b2:ad:7e:0f: 2a:eb:ab:85:4e:a9:84:43:46:4e:26:a9:78:3e:cf: 56:3f:22:38:11:5f:91:42:e9:a6:59:50:a2:9e:b7: 71:22:d2:d0:cd:d5:f6:ff:dd:c2:ac:03:85:4c:02: 8d:bd:dc:e4:c3:17:30:81:e6:6c:39:14:e3:b4:68: ff:eb:a1:d8:07:76:8d:69:ed:e6:7a:ed:94:bf:f0: da:5d:1d:1a:e3:77:fa:5a:92:6e:45:4a:1b:53:4f: 03:4d:a1:03:13:e4:0c:ae:b1:8a:06:1d:02:97:c3: a8:04:42:aa:8d:d8:bf:7b:33:00:4c:80:88:66:6e: c6:14:eb:f3:ca:f1:f9:64:55:0b:b1:7e:3e:16:34: 23:97:a3:21:2f:ba:7c:ea:2f:f0:d1:82:a8:a9:bc: 4e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8B:EB:9D:FD:D3:77:60:3E:5E:A7:25:8E:C9:8D:DA:23:17:D1:68 X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/8Yvrnf3Td2A-XqcljsmN2iMX0Wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.10.0/24 5.160.196.0/24 Signature Algorithm: sha256WithRSAEncryption 85:9b:2d:98:87:03:2f:2b:76:8a:7e:8b:86:6b:74:df:6a:55: 75:3a:76:cd:ff:15:d4:68:3b:0a:e2:74:93:4c:a9:91:d1:b5: ee:01:6d:5b:3c:59:87:c6:39:4e:81:ad:5e:59:f0:b9:92:4b: a6:6e:3b:e3:c2:9f:a3:75:60:76:4a:20:70:fe:a2:8c:af:72: 48:c6:9d:44:56:3c:cb:af:0b:c3:f2:32:55:22:98:55:0d:fe: c6:12:86:35:d8:db:c3:ea:ae:cc:d3:0b:7b:f8:fc:f4:3f:5c: fc:6f:82:16:a8:04:36:b1:85:f2:bc:2f:e0:b0:d5:fd:1a:93: a2:f1:b5:7c:01:b5:c6:fe:ca:2b:41:08:33:09:cc:26:98:13: d8:99:4d:ac:82:ef:f3:73:72:3f:70:0e:a7:50:29:31:40:9c: d8:51:ed:5f:0b:79:01:e0:b6:d4:de:56:3e:ab:d7:72:4b:9c: ba:b6:ea:b2:c8:3a:ba:0f:ef:50:01:09:22:0d:ba:aa:ef:f4: 24:16:e9:b8:05:a4:89:82:c3:03:b7:d8:a3:d1:fd:6f:90:52: 27:7d:8d:5b:7b:ca:5c:20:7f:0e:d8:7c:71:1a:09:1a:58:1f: 87:c8:2f:48:9c:b0:75:ac:f5:6f:28:80:16:f2:63:d8:91:99: ff:7a:c4:d8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W4UodW1VA/ftoxtnNbVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMThiZWI5ZGZkZDM3NzYwM2U1ZWE3MjU4ZWM5OGRkYTIzMTdkMTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQegtUJVHcNLj1EDUfxO7bOaxXaV SFyc3TVeKw3WJLoGhYCJcgFg/+DMvJceqNzyvEaIQK6ap8bEUyFW1zpKH6O+0awX 0yqqs1v84eefXxPeYx/imPND74loYmpxFp1dcl9/1rKtfg8q66uFTqmEQ0ZOJql4 Ps9WPyI4EV+RQummWVCinrdxItLQzdX2/93CrAOFTAKNvdzkwxcwgeZsORTjtGj/ 66HYB3aNae3meu2Uv/DaXR0a43f6WpJuRUobU08DTaEDE+QMrrGKBh0Cl8OoBEKq jdi/ezMATICIZm7GFOvzyvH5ZFULsX4+FjQjl6MhL7p86i/w0YKoqbxOQQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPGL653903dgPl6nJY7JjdojF9FoMB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvOFl2cm5mM1RkMkEtWHFjbGpzbU4yaU1YMFdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABaAKAwQA BaDEMA0GCSqGSIb3DQEBCwUAA4IBAQCFmy2YhwMvK3aKfouGa3TfalV1OnbN/xXU aDsK4nSTTKmR0bXuAW1bPFmHxjlOga1eWfC5kkumbjvjwp+jdWB2SiBw/qKMr3JI xp1EVjzLrwvD8jJVIphVDf7GEoY12NvD6q7M0wt7+Pz0P1z8b4IWqAQ2sYXyvC/g sNX9GpOi8bV8AbXG/sorQQgzCcwmmBPYmU2sgu/zc3I/cA6nUCkxQJzYUe1fC3kB 4LbU3lY+q9dyS5y6tuqyyDq6D+9QAQkiDbqq7/QkFum4BaSJgsMDt9ij0f1vkFIn fY1be8pcIH8O2HxxGgkaWB+HyC9InLB1rPVvKIAW8mPYkZn/esTY -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:28 2026 by rpki-client