This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/KcN6TR6d6Dd86CaRLAt-QoV1uVg.roa File: KcN6TR6d6Dd86CaRLAt-QoV1uVg.roa (raw, json) Hash identifier: C7A4wurt3gZuDrghwGsgMO0xvx36nWSo9h1xi9c/P0A= Subject key identifier: 29:C3:7A:4D:1E:9D:E8:37:7C:E8:26:91:2C:0B:7E:42:85:75:B9:58 Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B802ED4E1227785F001887D72D874 Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/KcN6TR6d6Dd86CaRLAt-QoV1uVg.roa Signing time: Thu 01 Jan 2026 16:19:35 +0000 ROA not before: Thu 01 Jan 2026 16:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62157 IP address blocks: 5.160.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:80:2e:d4:e1:22:77:85:f0:01:88:7d:72:d8:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29c37a4d1e9de8377ce826912c0b7e428575b958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:12:f1:09:df:3e:90:ec:c7:76:35:98:2e:f6: b9:16:78:57:ae:ed:d1:17:6f:e6:03:d7:00:38:3a: 08:c5:8e:f6:4d:98:b4:51:c7:79:ec:9e:ea:81:43: 60:f7:cf:78:a7:a5:99:45:36:62:ff:01:06:be:28: 41:7a:9c:ff:08:7f:d3:04:1f:72:ec:60:fb:67:ca: f6:a5:ec:f1:3a:d9:60:cf:f6:db:ba:d6:63:d3:61: e2:ee:53:44:0c:42:87:6e:e3:76:f4:5d:5f:bf:8a: 94:f6:02:21:3f:52:a9:8f:0b:27:52:b5:4d:ef:de: 1c:ad:fd:91:17:0d:f6:b4:0b:ea:27:e2:c4:4e:8b: b6:08:29:c4:5b:a1:2b:21:4e:8c:61:61:a7:66:c2: 69:47:48:13:db:18:24:ac:66:e1:b1:f7:63:a6:6a: 17:02:78:ec:41:9b:5d:18:2c:34:a3:9a:a2:f8:95: 5d:f3:6d:8b:c3:05:52:ab:66:70:6b:4d:6b:9f:e5: 90:bc:20:50:52:8b:c0:88:1d:b6:63:a9:9f:87:35: 0b:e5:40:67:43:72:7b:29:a3:1a:cb:ff:93:ea:16: c1:5e:78:7b:c3:4e:4c:c2:f6:ad:03:bc:20:39:80: a2:b8:fe:31:28:64:01:f5:3c:1c:c1:f1:b7:5e:66: 0a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C3:7A:4D:1E:9D:E8:37:7C:E8:26:91:2C:0B:7E:42:85:75:B9:58 X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/KcN6TR6d6Dd86CaRLAt-QoV1uVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.55.0/24 Signature Algorithm: sha256WithRSAEncryption 30:6e:77:77:06:b2:2c:00:55:1b:e2:e5:dd:74:29:57:ce:3c: 54:e4:bf:57:c6:dc:bd:83:a2:fd:4c:4e:64:a3:46:a2:84:79: 8a:c5:4b:80:f4:75:bd:d8:a5:da:51:9a:e1:6d:5a:0b:a1:ac: aa:13:b7:85:5e:28:32:9d:94:9e:cb:4f:ab:bd:bd:61:3f:25: 85:f0:a6:b3:91:55:ee:a6:16:38:3a:bb:55:d9:2b:04:a4:f9: 4d:7e:00:08:56:a3:25:bb:c9:a5:13:79:4f:50:48:8f:bf:4b: 15:ff:0d:9b:d6:1d:1d:ae:48:51:b0:e8:02:b7:30:39:78:61: a6:02:8c:3b:d6:c3:32:d8:95:5c:fe:24:db:d6:81:4b:e8:06: 3a:11:fc:89:ca:0a:81:85:2e:ea:60:45:e6:e2:5a:64:f3:76: 58:c8:3f:44:6b:4b:27:eb:59:6f:2c:4d:4c:4d:07:b2:78:c1: 44:22:bb:be:ec:a1:89:22:5b:ff:12:67:1d:1a:ba:1a:6c:91: cf:a2:f2:e7:30:51:87:20:73:8a:60:70:4c:2d:09:e7:7a:fa: 8c:02:f0:3a:26:78:a7:6b:28:70:bf:47:fb:41:f5:2b:90:d7: ef:6a:fe:05:a2:c4:3b:c2:1d:08:f9:1c:59:6e:52:0f:29:15: 07:cc:1a:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W4Au1OEid4XwAYh9cth0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWMzN2E0ZDFlOWRlODM3N2NlODI2OTEyYzBiN2U0Mjg1NzViOTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xLxCd8+kOzHdjWYLva5FnhXru3R F2/mA9cAODoIxY72TZi0Ucd57J7qgUNg9894p6WZRTZi/wEGvihBepz/CH/TBB9y 7GD7Z8r2pezxOtlgz/bbutZj02Hi7lNEDEKHbuN29F1fv4qU9gIhP1KpjwsnUrVN 794crf2RFw32tAvqJ+LETou2CCnEW6ErIU6MYWGnZsJpR0gT2xgkrGbhsfdjpmoX AnjsQZtdGCw0o5qi+JVd822LwwVSq2Zwa01rn+WQvCBQUovAiB22Y6mfhzUL5UBn Q3J7KaMay/+T6hbBXnh7w05MwvatA7wgOYCiuP4xKGQB9TwcwfG3XmYKHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCnDek0eneg3fOgmkSwLfkKFdblYMB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvS2NONlRSNmQ2RGQ4NkNhUkxBdC1Rb1YxdVZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABaA3MA0G CSqGSIb3DQEBCwUAA4IBAQAwbnd3BrIsAFUb4uXddClXzjxU5L9Xxty9g6L9TE5k o0aihHmKxUuA9HW92KXaUZrhbVoLoayqE7eFXigynZSey0+rvb1hPyWF8KazkVXu phY4OrtV2SsEpPlNfgAIVqMlu8mlE3lPUEiPv0sV/w2b1h0drkhRsOgCtzA5eGGm Aow71sMy2JVc/iTb1oFL6AY6EfyJygqBhS7qYEXm4lpk83ZYyD9Ea0sn61lvLE1M TQeyeMFEIru+7KGJIlv/EmcdGroabJHPovLnMFGHIHOKYHBMLQnnevqMAvA6Jnin ayhwv0f7QfUrkNfvav4FosQ7wh0I+RxZblIPKRUHzBqm -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:40 2026 by rpki-client