This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/JaT12oYilJhgYVKyiHNIVy6Ca7w.roa File: JaT12oYilJhgYVKyiHNIVy6Ca7w.roa (raw, json) Hash identifier: 18/fdq6P1/4MpP8xKvcSNU9qOj7e6dDXb9SeqVsiS5o= Subject key identifier: 25:A4:F5:DA:86:22:94:98:60:61:52:B2:88:73:48:57:2E:82:6B:BC Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B756678C73D9ED9E06CBA82E5E5C5 Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/JaT12oYilJhgYVKyiHNIVy6Ca7w.roa Signing time: Thu 01 Jan 2026 16:19:32 +0000 ROA not before: Thu 01 Jan 2026 16:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35615 IP address blocks: 5.160.244.0/23 maxlen: 23 5.160.244.0/24 maxlen: 24 5.160.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:75:66:78:c7:3d:9e:d9:e0:6c:ba:82:e5:e5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25a4f5da86229498606152b2887348572e826bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:12:6a:fd:57:d8:ad:85:9e:f6:98:83:f4: 64:98:89:27:2b:b4:35:98:7b:b5:26:ec:62:11:e5: fb:a4:86:e7:0d:5d:2f:bb:c7:4d:a1:04:7f:90:a7: 89:51:fa:cc:b1:25:46:32:ca:54:43:c2:ac:66:8a: e3:78:8e:52:2b:ca:d0:98:93:77:30:7a:e8:26:7c: a1:98:77:b8:98:d6:5e:7f:c4:55:44:1f:e7:44:d5: b9:86:97:b0:fb:21:81:51:37:7d:ae:a4:73:a9:fb: ab:51:2e:2d:0a:4f:d4:33:0c:60:96:72:c3:cc:f1: 8c:82:77:91:1f:d4:08:03:9d:92:7b:51:e9:0a:ef: fc:4d:c3:d4:32:7b:13:7f:cc:95:f5:1e:ca:ea:47: 10:82:3b:bb:49:b9:67:a4:76:44:e7:91:c5:c7:5d: 11:77:bd:d2:53:b9:5a:1b:f7:98:0b:63:33:2a:f0: 55:21:63:8e:13:7d:39:b3:d9:c4:fe:3f:2f:6e:e6: 45:6a:40:c5:31:6f:2d:fd:0e:94:a9:d9:3d:79:50: 58:9a:cf:2f:1b:9e:30:e9:86:5f:27:08:e8:2f:2e: 5f:55:da:85:0a:72:63:4d:dd:5c:f4:d5:9c:6d:d1: 96:e4:d9:d7:f2:72:c3:4b:8b:aa:dc:d4:40:53:3c: e2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A4:F5:DA:86:22:94:98:60:61:52:B2:88:73:48:57:2E:82:6B:BC X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/JaT12oYilJhgYVKyiHNIVy6Ca7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.244.0/23 Signature Algorithm: sha256WithRSAEncryption 54:76:eb:a4:ae:69:17:34:4a:ec:88:08:75:f3:3d:8c:77:d2: b1:9d:1e:70:7b:95:c1:11:74:67:b2:ac:30:d9:fa:90:c6:e0: a9:2e:fa:03:86:32:b9:66:ca:55:c6:df:d5:f9:f3:59:b4:b5: 0b:b6:8f:03:a0:84:8c:af:4e:be:f6:69:fa:fb:c7:aa:44:05: a1:7f:3c:2e:e5:b9:0f:0e:e3:e3:e4:44:8f:10:bb:ea:09:21: d9:a0:3a:25:c0:e8:e3:d6:46:f4:69:77:93:f8:11:33:8b:a4: 6c:71:71:0c:35:e7:60:05:0b:f6:0b:d4:53:84:14:a2:41:a9: 41:3c:62:bc:5e:88:75:f4:54:1d:89:67:c1:67:f2:9d:dc:f8: 1b:27:f9:b6:a0:0b:7b:5f:64:2e:76:ba:8e:68:d3:73:3c:a8: 51:3f:d9:29:5e:55:34:04:e2:2d:b9:6d:ed:f5:65:6b:30:85: 79:12:85:b8:93:15:66:d6:3a:49:f2:25:7d:a6:84:31:52:b9: 3d:50:9f:78:10:c9:86:77:1f:58:81:00:f1:55:40:30:ba:06: 65:de:12:50:4c:5d:6a:3d:ac:fb:b9:7e:7f:e9:34:bc:41:65: 23:da:bc:41:ac:2a:cc:b5:98:73:15:51:b8:57:19:f3:89:3b: 2d:8b:b6:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3VmeMc9ntngbLqC5eXFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWE0ZjVkYTg2MjI5NDk4NjA2MTUyYjI4ODczNDg1NzJlODI2YmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjMSav1X2K2FnvaYg/RkmIknK7Q1 mHu1JuxiEeX7pIbnDV0vu8dNoQR/kKeJUfrMsSVGMspUQ8KsZorjeI5SK8rQmJN3 MHroJnyhmHe4mNZef8RVRB/nRNW5hpew+yGBUTd9rqRzqfurUS4tCk/UMwxglnLD zPGMgneRH9QIA52Se1HpCu/8TcPUMnsTf8yV9R7K6kcQgju7SblnpHZE55HFx10R d73SU7laG/eYC2MzKvBVIWOOE305s9nE/j8vbuZFakDFMW8t/Q6Uqdk9eVBYms8v G54w6YZfJwjoLy5fVdqFCnJjTd1c9NWcbdGW5NnX8nLDS4uq3NRAUzzizwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCWk9dqGIpSYYGFSsohzSFcugmu8MB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvSmFUMTJvWWlsSmhnWVZLeWlITklWeTZDYTd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBaD0MA0G CSqGSIb3DQEBCwUAA4IBAQBUduukrmkXNErsiAh18z2Md9KxnR5we5XBEXRnsqww 2fqQxuCpLvoDhjK5ZspVxt/V+fNZtLULto8DoISMr06+9mn6+8eqRAWhfzwu5bkP DuPj5ESPELvqCSHZoDolwOjj1kb0aXeT+BEzi6RscXEMNedgBQv2C9RThBSiQalB PGK8Xoh19FQdiWfBZ/Kd3PgbJ/m2oAt7X2QudrqOaNNzPKhRP9kpXlU0BOItuW3t 9WVrMIV5EoW4kxVm1jpJ8iV9poQxUrk9UJ94EMmGdx9YgQDxVUAwugZl3hJQTF1q Paz7uX5/6TS8QWUj2rxBrCrMtZhzFVG4VxnziTsti7Yw -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:47 2026 by rpki-client