This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Uc6eLdJswXyPLq0Y-C34PorCDV0.roa File: Uc6eLdJswXyPLq0Y-C34PorCDV0.roa (raw, json) Hash identifier: 6NlYwrgPwPKxcErN1rGvKwKVY+TjNIdrPOUn7cTCsqY= Subject key identifier: 51:CE:9E:2D:D2:6C:C1:7C:8F:2E:AD:18:F8:2D:F8:3E:8A:C2:0D:5D Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B76521F9D49987F968555C5CA042F Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Uc6eLdJswXyPLq0Y-C34PorCDV0.roa Signing time: Thu 01 Jan 2026 16:19:32 +0000 ROA not before: Thu 01 Jan 2026 16:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42586 IP address blocks: 5.160.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:76:52:1f:9d:49:98:7f:96:85:55:c5:ca:04:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51ce9e2dd26cc17c8f2ead18f82df83e8ac20d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f8:f7:c5:ee:95:ad:26:af:17:12:34:ec:0b: ae:83:ed:1f:d1:e3:f9:a9:fc:6e:57:04:fd:15:cf: 46:9f:07:f0:9e:2b:34:e1:12:4c:07:18:48:be:86: 96:a0:89:00:49:cd:8e:e3:8f:f1:10:c3:fc:72:21: 25:57:98:ac:60:b6:6f:d4:f9:7a:0c:35:40:86:fc: 8e:67:c9:dd:b0:68:81:5b:f8:c2:d7:28:19:5c:1f: cf:1d:29:6b:25:11:72:6a:88:70:5a:43:1f:4f:ef: 80:00:fd:5c:7d:c2:b5:95:cb:22:71:a7:cf:bd:5c: 2b:ad:d0:a4:13:8a:00:f9:f0:07:21:9d:83:c1:33: d8:42:73:e2:7a:84:0c:78:c1:ac:c5:20:45:86:00: 20:d6:c8:72:31:89:59:8d:a0:24:62:66:7f:8b:dc: 14:a0:42:7b:59:f1:20:f7:9e:3a:c6:07:ce:65:a4: 8f:c5:92:b4:71:b2:ff:04:af:e1:e1:9c:9a:be:ef: 4d:af:05:e0:7f:84:66:e0:ac:65:13:88:55:04:0b: 25:33:b6:73:e4:61:10:57:dc:e8:33:dc:b4:43:00: 89:a8:05:e8:81:be:d4:81:fa:81:df:25:e9:e6:c3: c2:82:8d:5b:92:b5:ce:b2:5e:6b:74:1d:56:93:81: 1d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CE:9E:2D:D2:6C:C1:7C:8F:2E:AD:18:F8:2D:F8:3E:8A:C2:0D:5D X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Uc6eLdJswXyPLq0Y-C34PorCDV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.188.0/24 Signature Algorithm: sha256WithRSAEncryption 23:7f:b0:cf:9f:89:09:72:0b:62:b4:4a:91:92:59:22:46:29: 5a:95:c4:05:94:38:08:ea:56:08:3c:12:df:ca:c8:62:a4:76: e7:c8:25:0c:5d:48:58:4a:c2:fd:f3:98:b7:49:65:b6:1f:19: 3f:ff:c8:aa:22:47:be:60:a4:c5:c3:7c:f1:46:29:5e:8a:3a: ea:31:e5:52:61:e6:33:41:bb:cf:ed:55:cd:c0:49:69:2a:5f: e6:38:bb:68:18:64:3a:b0:3f:a1:2b:ef:bd:14:e6:5a:95:7f: a5:85:2f:c9:41:36:c3:c9:15:94:8d:30:6c:7c:25:a0:f9:15: fa:c7:b1:31:a4:69:93:69:99:1b:7e:14:54:c8:d2:2b:8a:a3: ce:f3:4b:1d:12:e2:b1:d9:47:85:38:4b:8c:6b:45:19:32:f3: 19:34:22:90:2f:c2:d1:9d:72:36:8c:b9:36:dd:37:3d:00:b2: 96:19:62:06:33:7e:51:d7:3c:07:e3:0a:df:7d:4d:61:44:da: 86:42:f1:7b:4f:9f:a2:60:8b:fd:26:6c:f6:09:dd:55:cd:b8: 11:90:ad:00:77:6b:1e:cf:f3:0b:ab:ee:48:55:80:e0:d1:b9: 6e:d9:4e:06:f6:7f:f3:74:e0:8a:e2:5a:57:e9:cf:9f:6a:f6: 6e:43:1a:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3ZSH51JmH+WhVXFygQvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWNlOWUyZGQyNmNjMTdjOGYyZWFkMThmODJkZjgzZThhYzIwZDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofj3xe6VrSavFxI07Auug+0f0eP5 qfxuVwT9Fc9Gnwfwnis04RJMBxhIvoaWoIkASc2O44/xEMP8ciElV5isYLZv1Pl6 DDVAhvyOZ8ndsGiBW/jC1ygZXB/PHSlrJRFyaohwWkMfT++AAP1cfcK1lcsicafP vVwrrdCkE4oA+fAHIZ2DwTPYQnPieoQMeMGsxSBFhgAg1shyMYlZjaAkYmZ/i9wU oEJ7WfEg9546xgfOZaSPxZK0cbL/BK/h4Zyavu9NrwXgf4Rm4KxlE4hVBAslM7Zz 5GEQV9zoM9y0QwCJqAXogb7UgfqB3yXp5sPCgo1bkrXOsl5rdB1Wk4Ed4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFHOni3SbMF8jy6tGPgt+D6Kwg1dMB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvVWM2ZUxkSnN3WHlQTHEwWS1DMzRQb3JDRFYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABaC8MA0G CSqGSIb3DQEBCwUAA4IBAQAjf7DPn4kJcgtitEqRklkiRilalcQFlDgI6lYIPBLf yshipHbnyCUMXUhYSsL985i3SWW2Hxk//8iqIke+YKTFw3zxRileijrqMeVSYeYz QbvP7VXNwElpKl/mOLtoGGQ6sD+hK++9FOZalX+lhS/JQTbDyRWUjTBsfCWg+RX6 x7ExpGmTaZkbfhRUyNIriqPO80sdEuKx2UeFOEuMa0UZMvMZNCKQL8LRnXI2jLk2 3Tc9ALKWGWIGM35R1zwH4wrffU1hRNqGQvF7T5+iYIv9Jmz2Cd1VzbgRkK0Ad2se z/MLq+5IVYDg0blu2U4G9n/zdOCK4lpX6c+favZuQxoA -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:31 2026 by rpki-client