This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/KqDc1QFRcs67DMDv5nh6ooZeAwU.roa File: KqDc1QFRcs67DMDv5nh6ooZeAwU.roa (raw, json) Hash identifier: MbfGv9Hke9FTdUnqhb4GS+mpjcwMdNWma1brC24LcoY= Subject key identifier: 2A:A0:DC:D5:01:51:72:CE:BB:0C:C0:EF:E6:78:7A:A2:86:5E:03:05 Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B7EFA57626CFCB61E855B45A53428 Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/KqDc1QFRcs67DMDv5nh6ooZeAwU.roa Signing time: Thu 01 Jan 2026 16:19:35 +0000 ROA not before: Thu 01 Jan 2026 16:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61176 IP address blocks: 5.160.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7e:fa:57:62:6c:fc:b6:1e:85:5b:45:a5:34:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2aa0dcd5015172cebb0cc0efe6787aa2865e0305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2e:8f:e3:c4:c8:c1:82:2e:ab:e8:9b:94:cf: 11:87:0c:7e:88:bf:12:28:ed:f0:d3:7a:88:e1:e2: d0:0a:73:76:11:c3:17:be:c7:1d:2f:25:ba:3e:df: 9e:24:72:5f:28:18:b2:70:9e:74:bf:f4:36:ac:eb: a0:89:2e:da:2c:60:64:ff:dd:15:fe:54:35:8a:86: ce:b5:e2:cb:d7:ba:28:49:db:d3:09:6a:96:27:df: 85:2f:e0:8e:13:59:e7:20:c8:8b:f2:8b:b5:ec:83: 5b:d8:f8:b3:13:fd:7d:a3:fd:02:8d:73:75:0d:0c: 49:a8:9d:2b:74:51:5d:3d:70:5c:c6:d4:83:04:19: 8c:44:d3:65:17:b8:19:b2:2c:60:63:5d:e6:69:18: ff:ab:8f:3a:c5:bc:e9:10:7a:db:c6:81:11:95:b0: f9:9d:d8:57:01:e8:a3:53:f7:79:ef:6b:3e:61:43: dc:ea:08:25:1a:3d:ef:72:93:a2:aa:db:f5:72:88: 76:c7:ee:c8:fd:d0:56:e5:89:37:ee:8a:df:82:f8: 60:28:02:38:12:ba:43:49:d5:88:0a:66:1c:e3:66: 77:d0:f0:9c:ad:35:b4:31:76:89:0b:36:5e:ad:0a: 6a:38:0d:73:25:8d:ba:8e:03:66:8f:67:64:46:5d: 8d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A0:DC:D5:01:51:72:CE:BB:0C:C0:EF:E6:78:7A:A2:86:5E:03:05 X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/KqDc1QFRcs67DMDv5nh6ooZeAwU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.15.0/24 Signature Algorithm: sha256WithRSAEncryption 28:33:18:87:a6:da:9d:99:9b:f3:fb:f7:89:82:9f:cd:9d:c5: e8:f4:c4:8e:cd:8d:3c:59:89:65:8d:95:9e:6a:07:eb:da:62: d8:10:82:ed:41:79:c2:11:c5:1c:5d:4b:c3:a7:c4:17:8f:b4: ec:e7:62:d8:f1:bd:72:79:48:33:a7:a9:71:fb:84:c8:15:ed: cd:1b:e2:34:6e:fa:52:6c:b9:6e:ee:65:62:8f:76:f1:d3:a8: 2d:4c:70:76:48:06:9c:d2:bb:cb:de:35:36:e8:5a:97:0e:77: 2b:f7:70:95:8b:e2:7d:d7:8a:65:6c:dc:f7:5c:ca:29:90:49: f3:e6:4b:9a:82:e1:04:0a:c0:30:72:da:1b:3c:99:c6:c4:4f: ee:a9:69:1b:f4:db:7d:09:6e:7a:52:a4:ec:53:72:d4:77:3b: 08:3a:95:6c:af:ae:08:0c:8f:aa:1b:1f:c5:ce:d9:6c:14:61: d1:9c:60:a6:84:e2:d9:8f:49:df:22:60:c5:fa:c2:1f:4d:77: 2d:a5:c6:04:ba:12:82:ed:15:5d:bf:6d:46:d3:fa:c8:0b:88: 6b:38:d3:4a:d1:ec:ef:e8:a1:56:6e:35:68:23:0a:3d:46:a2: 2d:fe:23:4d:c6:e2:b4:7c:0e:d8:a8:0f:cf:59:9d:d1:06:57: e5:6d:9c:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W376V2Js/LYehVtFpTQoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWEwZGNkNTAxNTE3MmNlYmIwY2MwZWZlNjc4N2FhMjg2NWUwMzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC6P48TIwYIuq+iblM8Rhwx+iL8S KO3w03qI4eLQCnN2EcMXvscdLyW6Pt+eJHJfKBiycJ50v/Q2rOugiS7aLGBk/90V /lQ1iobOteLL17ooSdvTCWqWJ9+FL+COE1nnIMiL8ou17INb2PizE/19o/0CjXN1 DQxJqJ0rdFFdPXBcxtSDBBmMRNNlF7gZsixgY13maRj/q486xbzpEHrbxoERlbD5 ndhXAeijU/d572s+YUPc6gglGj3vcpOiqtv1coh2x+7I/dBW5Yk37orfgvhgKAI4 ErpDSdWICmYc42Z30PCcrTW0MXaJCzZerQpqOA1zJY26jgNmj2dkRl2NLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCqg3NUBUXLOuwzA7+Z4eqKGXgMFMB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvS3FEYzFRRlJjczY3RE1EdjVuaDZvb1plQXdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABaAPMA0G CSqGSIb3DQEBCwUAA4IBAQAoMxiHptqdmZvz+/eJgp/NncXo9MSOzY08WYlljZWe agfr2mLYEILtQXnCEcUcXUvDp8QXj7Ts52LY8b1yeUgzp6lx+4TIFe3NG+I0bvpS bLlu7mVij3bx06gtTHB2SAac0rvL3jU26FqXDncr93CVi+J914plbNz3XMopkEnz 5kuaguEECsAwctobPJnGxE/uqWkb9Nt9CW56UqTsU3LUdzsIOpVsr64IDI+qGx/F ztlsFGHRnGCmhOLZj0nfImDF+sIfTXctpcYEuhKC7RVdv21G0/rIC4hrONNK0ezv 6KFWbjVoIwo9RqIt/iNNxuK0fA7YqA/PWZ3RBlflbZwn -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:12 2026 by rpki-client