This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/NIj8ATzibOIfDrx8ZuBJ1XZxRcM.roa File: NIj8ATzibOIfDrx8ZuBJ1XZxRcM.roa (raw, json) Hash identifier: yigjXCzthTHtqVxf9QNfcw30Aom0QT/1CLhAs1JpMFE= Subject key identifier: 34:88:FC:01:3C:E2:6C:E2:1F:0E:BC:7C:66:E0:49:D5:76:71:45:C3 Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B7EAFC2DCD5242A91DC0446C3112A Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/NIj8ATzibOIfDrx8ZuBJ1XZxRcM.roa Signing time: Thu 01 Jan 2026 16:19:35 +0000 ROA not before: Thu 01 Jan 2026 16:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60811 IP address blocks: 5.160.192.0/24 maxlen: 24 5.160.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7e:af:c2:dc:d5:24:2a:91:dc:04:46:c3:11:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3488fc013ce26ce21f0ebc7c66e049d5767145c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c8:b7:5a:39:06:95:b0:82:1c:53:44:da:e3: 91:5c:99:0e:cc:07:d1:8b:0e:4a:90:40:9e:bc:62: 05:59:ab:99:91:65:9d:a0:e3:5f:37:42:f5:8d:5c: 34:45:30:59:05:37:17:fb:b7:82:c0:ab:d3:91:bc: fa:a2:bb:85:e6:b2:0b:64:9f:f9:1f:25:71:6c:af: 3b:cc:af:da:d6:e5:0b:b3:03:78:21:35:77:de:c8: ec:14:76:71:b5:67:f6:b8:eb:ac:3f:5d:27:3d:b7: ed:19:f9:90:37:66:53:70:9e:28:c4:ec:43:5a:0b: fc:7a:70:cb:06:39:6e:ba:ad:cc:b0:fe:98:4e:d4: 02:c2:80:5b:bf:00:7f:6e:da:b2:9c:42:8a:04:9f: 6a:28:5f:c9:9f:cc:4e:60:e7:f3:37:8e:22:12:91: 0c:fd:83:b0:51:76:ba:67:fa:3b:43:d4:89:5e:0a: 6f:3d:5a:ab:f0:48:dc:4f:88:9d:d3:3b:d8:30:2a: 16:e7:83:64:04:38:59:c1:bf:18:a3:90:f2:42:55: 2c:a0:74:d9:12:ef:1a:7e:f7:08:db:55:6c:0f:29: 55:c5:81:f8:29:31:e5:89:09:3e:ac:3d:da:a7:fb: a8:56:a6:68:11:0d:b1:0f:17:de:90:42:72:7e:31: 60:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:88:FC:01:3C:E2:6C:E2:1F:0E:BC:7C:66:E0:49:D5:76:71:45:C3 X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/NIj8ATzibOIfDrx8ZuBJ1XZxRcM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.192.0/23 Signature Algorithm: sha256WithRSAEncryption 65:94:b8:ec:7d:27:c5:d1:4c:98:fe:32:f2:bb:c8:fb:f9:c2: cf:3b:ff:0a:2c:d8:65:12:20:e5:fb:06:b6:1e:75:20:07:0a: 14:6e:b3:a0:12:e9:d7:cd:0f:ef:cd:ef:04:5b:c7:23:48:3c: aa:12:b6:65:34:40:0d:84:80:17:52:61:52:08:2c:db:37:25: dd:24:82:2f:fe:4f:01:0e:41:e9:cc:70:0b:3b:ff:ba:3a:d9: 47:07:0f:40:2d:d8:4f:4f:53:05:d4:66:cc:4e:74:d5:af:fc: bc:22:7d:e5:37:29:a5:93:af:d9:a4:26:84:f8:29:f1:30:89: 57:a9:6a:95:fb:f2:99:dc:5b:0a:40:c2:df:c2:7c:36:93:dc: 90:29:7d:ec:a6:e6:98:c5:bd:c7:9b:71:59:c9:b3:a8:1d:68: e0:f4:b9:97:67:8b:e0:53:52:ce:d9:64:60:26:b5:3e:9e:16: cd:cb:d5:ec:b6:bc:36:b1:42:8e:5f:ed:04:5e:99:fe:f9:d3: cc:4a:c8:c1:20:ac:35:73:ed:d2:49:bc:97:e6:26:25:bc:2e: 5b:7f:5d:64:24:ea:8a:d4:58:66:5b:10:e8:ca:24:06:d2:ad: 6e:7b:af:55:19:62:99:87:9f:e0:25:fb:24:21:ef:75:e1:7b: c5:51:da:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W36vwtzVJCqR3ARGwxEqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDg4ZmMwMTNjZTI2Y2UyMWYwZWJjN2M2NmUwNDlkNTc2NzE0NWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5si3WjkGlbCCHFNE2uORXJkOzAfR iw5KkECevGIFWauZkWWdoONfN0L1jVw0RTBZBTcX+7eCwKvTkbz6oruF5rILZJ/5 HyVxbK87zK/a1uULswN4ITV33sjsFHZxtWf2uOusP10nPbftGfmQN2ZTcJ4oxOxD Wgv8enDLBjluuq3MsP6YTtQCwoBbvwB/btqynEKKBJ9qKF/Jn8xOYOfzN44iEpEM /YOwUXa6Z/o7Q9SJXgpvPVqr8EjcT4id0zvYMCoW54NkBDhZwb8Yo5DyQlUsoHTZ Eu8afvcI21VsDylVxYH4KTHliQk+rD3ap/uoVqZoEQ2xDxfekEJyfjFguwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDSI/AE84mziHw68fGbgSdV2cUXDMB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvTklqOEFUemliT0lmRHJ4OFp1QkoxWFp4UmNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBaDAMA0G CSqGSIb3DQEBCwUAA4IBAQBllLjsfSfF0UyY/jLyu8j7+cLPO/8KLNhlEiDl+wa2 HnUgBwoUbrOgEunXzQ/vze8EW8cjSDyqErZlNEANhIAXUmFSCCzbNyXdJIIv/k8B DkHpzHALO/+6OtlHBw9ALdhPT1MF1GbMTnTVr/y8In3lNymlk6/ZpCaE+CnxMIlX qWqV+/KZ3FsKQMLfwnw2k9yQKX3spuaYxb3Hm3FZybOoHWjg9LmXZ4vgU1LO2WRg JrU+nhbNy9Xstrw2sUKOX+0EXpn++dPMSsjBIKw1c+3SSbyX5iYlvC5bf11kJOqK 1FhmWxDoyiQG0q1ue69VGWKZh5/gJfskIe914XvFUdri -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:26 2026 by rpki-client