This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/8f5770STBPDk-MUANbbcMKKq0y4.roa File: 8f5770STBPDk-MUANbbcMKKq0y4.roa (raw, json) Hash identifier: e0QEmgK80cM58G7rUnkCBJwbbG/TaI+tRjhBp9Dcu+8= Subject key identifier: F1:FE:7B:EF:44:93:04:F0:E4:F8:C5:00:35:B6:DC:30:A2:AA:D3:2E Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B79F14534769431152F7CFCE459F9 Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/8f5770STBPDk-MUANbbcMKKq0y4.roa Signing time: Thu 01 Jan 2026 16:19:33 +0000 ROA not before: Thu 01 Jan 2026 16:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51235 IP address blocks: 5.160.128.0/24 maxlen: 24 5.160.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:79:f1:45:34:76:94:31:15:2f:7c:fc:e4:59:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1fe7bef449304f0e4f8c50035b6dc30a2aad32e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:35:bb:97:b6:b4:b9:6c:d7:59:3f:78:d3:c5: 0b:8b:df:de:2d:e7:b8:f7:f1:dd:ff:d9:7e:31:4a: bf:0a:ba:44:cb:64:41:53:45:53:ce:90:ee:40:44: b2:63:43:49:81:5e:31:57:77:d3:57:e5:dd:c5:3f: 7e:d0:f8:79:12:88:3c:02:4a:5d:f7:80:b1:cd:dd: 2b:b0:70:af:fe:f8:c0:dd:fd:2e:90:80:87:51:23: 59:b1:a9:24:40:5b:48:3d:8d:a7:f8:c2:cf:2c:39: 2e:2c:a2:21:ba:05:4a:10:cd:2e:c0:c5:34:0a:be: e5:a1:e3:e1:22:6b:c5:b6:88:e9:54:e3:69:04:2b: 88:5c:8d:ec:e9:92:84:78:07:78:32:e7:87:97:ed: d6:54:a4:36:1f:2f:92:7f:b7:6a:48:98:6d:46:29: 4b:18:90:99:dd:7c:05:77:79:d3:dd:17:34:04:f1: 25:a3:50:70:3f:49:53:6a:40:97:b1:dd:1b:ff:fa: 25:1c:22:29:69:e3:05:ed:cd:8d:71:b9:b4:a9:3d: 99:fc:1f:2f:38:42:66:3c:2e:30:fb:7a:ce:39:03: 9d:bd:59:72:45:7c:30:83:8d:a6:79:15:a9:7e:bb: 41:cd:f3:02:48:5a:c7:3e:fb:40:40:f9:6a:2e:6b: 56:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FE:7B:EF:44:93:04:F0:E4:F8:C5:00:35:B6:DC:30:A2:AA:D3:2E X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/8f5770STBPDk-MUANbbcMKKq0y4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.128.0/24 5.160.149.0/24 Signature Algorithm: sha256WithRSAEncryption 20:31:bd:17:6e:0d:a5:cd:a1:aa:0b:5b:71:f9:e2:37:d4:46: 7b:ba:11:ac:e5:16:b5:e2:c3:d3:9b:c9:64:fb:60:19:97:9b: 4b:16:2a:ae:43:00:dc:22:65:28:f1:1c:85:d1:8a:56:cc:3b: 3a:c8:e4:35:23:09:db:9c:18:63:b9:fb:96:19:38:79:22:f9: 2d:5e:c6:34:c9:df:06:0f:b1:48:5f:98:c5:9a:66:2d:e2:1e: b3:89:f2:fb:4e:09:d8:b2:10:3b:f0:7f:5d:4f:68:3d:aa:9f: db:e2:0e:58:a7:d5:29:a6:1b:6a:a1:f6:65:29:b3:1b:d9:fe: d8:43:3a:0e:b4:68:6c:79:bb:d8:41:4a:e8:64:6c:2a:09:f3: 1c:63:2f:df:ca:5e:80:a1:d5:4c:78:21:bc:f6:1c:cd:3a:12: 56:16:38:f8:ed:d5:e9:5d:3f:21:e9:dc:3b:19:41:19:7f:50: fc:7f:a7:f5:26:c0:4a:c5:94:59:f1:e6:c7:c0:41:10:f8:45: 77:0c:3f:11:bc:7f:bb:45:82:04:4d:df:06:1c:0f:a2:ed:5a: 3d:e2:fd:a4:cf:52:93:59:c2:18:d4:b3:ca:5b:5a:1f:47:46: 9b:b1:d3:77:d8:33:72:cd:a2:98:88:7f:04:48:aa:a3:7b:16: 72:ba:01:2a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W3nxRTR2lDEVL3z85Fn5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWZlN2JlZjQ0OTMwNGYwZTRmOGM1MDAzNWI2ZGMzMGEyYWFkMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijW7l7a0uWzXWT9408ULi9/eLee4 9/Hd/9l+MUq/CrpEy2RBU0VTzpDuQESyY0NJgV4xV3fTV+XdxT9+0Ph5Eog8Akpd 94Cxzd0rsHCv/vjA3f0ukICHUSNZsakkQFtIPY2n+MLPLDkuLKIhugVKEM0uwMU0 Cr7loePhImvFtojpVONpBCuIXI3s6ZKEeAd4MueHl+3WVKQ2Hy+Sf7dqSJhtRilL GJCZ3XwFd3nT3Rc0BPElo1BwP0lTakCXsd0b//olHCIpaeMF7c2Ncbm0qT2Z/B8v OEJmPC4w+3rOOQOdvVlyRXwwg42meRWpfrtBzfMCSFrHPvtAQPlqLmtWwQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPH+e+9EkwTw5PjFADW23DCiqtMuMB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvOGY1NzcwU1RCUERrLU1VQU5iYmNNS0txMHk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABaCAAwQA BaCVMA0GCSqGSIb3DQEBCwUAA4IBAQAgMb0Xbg2lzaGqC1tx+eI31EZ7uhGs5Ra1 4sPTm8lk+2AZl5tLFiquQwDcImUo8RyF0YpWzDs6yOQ1IwnbnBhjufuWGTh5Ivkt XsY0yd8GD7FIX5jFmmYt4h6zifL7TgnYshA78H9dT2g9qp/b4g5Yp9UpphtqofZl KbMb2f7YQzoOtGhsebvYQUroZGwqCfMcYy/fyl6AodVMeCG89hzNOhJWFjj47dXp XT8h6dw7GUEZf1D8f6f1JsBKxZRZ8ebHwEEQ+EV3DD8RvH+7RYIETd8GHA+i7Vo9 4v2kz1KTWcIY1LPKW1ofR0absdN32DNyzaKYiH8ESKqjexZyugEq -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:26 2026 by rpki-client