This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Pdd92H_sni_faRZHdK0jKk2j9tU.roa File: Pdd92H_sni_faRZHdK0jKk2j9tU.roa (raw, json) Hash identifier: rMuuGnY/1eXwNG9eBPx30NQ9Hcoc29Ut6p+ZS2QG5mE= Subject key identifier: 3D:D7:7D:D8:7F:EC:9E:2F:DF:69:16:47:74:AD:23:2A:4D:A3:F6:D5 Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B88754FFCD24D0F70DA0239D3F000 Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Pdd92H_sni_faRZHdK0jKk2j9tU.roa Signing time: Thu 01 Jan 2026 16:19:37 +0000 ROA not before: Thu 01 Jan 2026 16:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214184 IP address blocks: 5.160.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:88:75:4f:fc:d2:4d:0f:70:da:02:39:d3:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3dd77dd87fec9e2fdf69164774ad232a4da3f6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:92:57:7d:8e:16:a8:3c:50:30:e8:74:95:d7: d8:bf:64:ea:dc:e6:d1:1a:47:b4:8c:78:3f:68:13: 81:42:cb:96:ca:49:96:48:76:47:0e:0f:21:4d:e7: d8:a3:c0:af:6b:ae:f1:57:bf:d9:28:7f:fd:75:52: 6f:9c:ea:ab:ea:f2:da:d0:c2:50:03:8d:ce:df:69: 0f:d7:0b:08:09:39:b2:fa:21:0b:c6:71:1a:40:87: 33:05:c7:70:1d:bc:7c:d7:79:d9:a0:25:8a:cc:58: f9:be:f0:bb:3f:d6:bd:d8:0b:75:1e:27:ea:72:12: 16:41:91:f5:70:a9:92:3b:d6:54:00:0b:69:45:b2: 35:4d:72:b7:d3:2d:4a:e4:e4:d7:1f:13:f4:1d:f6: 05:46:2c:42:31:bf:c9:eb:1d:cb:9d:5e:64:1b:a5: ce:fa:b2:9c:61:15:28:a3:d7:22:23:7b:e2:21:5d: fe:ed:ff:c7:43:7b:13:54:69:9e:dd:30:c9:ea:cf: e2:9a:0d:5a:74:82:5e:f0:ee:4f:da:24:14:f5:de: a8:39:13:40:9f:e5:36:b1:03:ca:23:e3:2a:bd:39: f1:52:93:9e:5d:48:ce:69:cf:4e:59:4a:22:2c:5b: de:81:57:cd:19:b1:5b:62:87:3d:4a:3d:30:ed:48: 5e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D7:7D:D8:7F:EC:9E:2F:DF:69:16:47:74:AD:23:2A:4D:A3:F6:D5 X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Pdd92H_sni_faRZHdK0jKk2j9tU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.145.0/24 Signature Algorithm: sha256WithRSAEncryption 05:4c:5b:88:44:0f:ca:fd:c2:26:fc:7e:20:17:e9:86:9a:fa: 13:10:a8:ef:ac:7a:2b:90:01:80:9f:f0:d1:96:7e:62:82:80: 90:8f:c5:3e:50:06:24:56:17:76:a1:1d:5b:96:c8:27:43:cc: 47:14:43:5d:cf:43:87:22:da:0a:b9:4c:1a:ce:ba:de:f7:e4: fd:ea:70:95:06:22:fb:b8:c9:71:65:a8:f3:42:24:f7:a1:74: d5:1c:de:83:35:54:85:54:16:5e:64:4b:8b:7c:63:4f:69:ee: 69:95:83:a2:c2:0f:bc:67:c9:f3:2a:9f:46:9e:69:27:37:2d: dd:e1:ab:7c:f6:58:ff:47:6c:a4:44:16:cb:46:3e:b1:7b:1f: d3:2a:94:9e:0d:b9:ee:52:bb:9b:af:68:a3:7c:05:1e:24:da: 70:fc:06:1c:10:80:12:ce:24:a5:5c:4e:98:43:cf:ff:26:82: 9d:0b:fb:5e:9d:a1:be:2b:31:52:40:45:17:31:00:b0:2f:9b: 2b:b1:48:9a:e8:3d:e2:99:cf:bc:54:d4:f8:b4:2d:a6:09:f2: 4a:e0:e4:af:4d:05:5e:e4:28:dd:be:f7:fc:3b:a7:6b:41:e2: 4f:9c:07:39:17:b2:3c:42:f0:a4:eb:a3:d1:81:ff:5d:60:81: 20:46:cb:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W4h1T/zSTQ9w2gI50/AAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGQ3N2RkODdmZWM5ZTJmZGY2OTE2NDc3NGFkMjMyYTRkYTNmNmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJJXfY4WqDxQMOh0ldfYv2Tq3ObR Gke0jHg/aBOBQsuWykmWSHZHDg8hTefYo8Cva67xV7/ZKH/9dVJvnOqr6vLa0MJQ A43O32kP1wsICTmy+iELxnEaQIczBcdwHbx813nZoCWKzFj5vvC7P9a92At1Hifq chIWQZH1cKmSO9ZUAAtpRbI1TXK30y1K5OTXHxP0HfYFRixCMb/J6x3LnV5kG6XO +rKcYRUoo9ciI3viIV3+7f/HQ3sTVGme3TDJ6s/img1adIJe8O5P2iQU9d6oORNA n+U2sQPKI+MqvTnxUpOeXUjOac9OWUoiLFvegVfNGbFbYoc9Sj0w7UheCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD3Xfdh/7J4v32kWR3StIypNo/bVMB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvUGRkOTJIX3NuaV9mYVJaSGRLMGpLazJqOXRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABaCRMA0G CSqGSIb3DQEBCwUAA4IBAQAFTFuIRA/K/cIm/H4gF+mGmvoTEKjvrHorkAGAn/DR ln5igoCQj8U+UAYkVhd2oR1blsgnQ8xHFENdz0OHItoKuUwazrre9+T96nCVBiL7 uMlxZajzQiT3oXTVHN6DNVSFVBZeZEuLfGNPae5plYOiwg+8Z8nzKp9GnmknNy3d 4at89lj/R2ykRBbLRj6xex/TKpSeDbnuUrubr2ijfAUeJNpw/AYcEIASziSlXE6Y Q8//JoKdC/tenaG+KzFSQEUXMQCwL5srsUia6D3imc+8VNT4tC2mCfJK4OSvTQVe 5Cjdvvf8O6drQeJPnAc5F7I8QvCk66PRgf9dYIEgRss6 -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:39 2026 by rpki-client