This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/YCjuxWxWXFaEB0Ax37_aM8Noi0o.roa File: YCjuxWxWXFaEB0Ax37_aM8Noi0o.roa (raw, json) Hash identifier: W21iL4xwyDO0woZJPtUIK92/p6K6v0gVgx9towqPpwc= Subject key identifier: 60:28:EE:C5:6C:56:5C:56:84:07:40:31:DF:BF:DA:33:C3:68:8B:4A Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B87AA1044CEF3527A493D70DC5B37 Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/YCjuxWxWXFaEB0Ax37_aM8Noi0o.roa Signing time: Thu 01 Jan 2026 16:19:37 +0000 ROA not before: Thu 01 Jan 2026 16:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213644 IP address blocks: 5.160.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:87:aa:10:44:ce:f3:52:7a:49:3d:70:dc:5b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6028eec56c565c5684074031dfbfda33c3688b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6f:8c:3d:f6:4f:5a:d9:c2:d7:c3:e4:19:bd: 68:bf:07:6a:45:c9:72:84:b1:ae:75:d0:dc:6f:8a: 4a:70:08:12:24:f6:fc:ab:ce:a8:37:7b:5b:91:ba: 38:05:30:83:25:d6:59:14:90:40:f5:c6:86:2a:4a: fb:85:14:eb:17:e9:a0:02:93:bb:31:e8:03:bc:5e: d0:67:3a:c7:ed:89:17:7b:99:1c:fd:36:89:c4:8d: 5f:57:4f:a2:c6:70:9d:e6:ae:1b:04:bb:4d:d3:95: f5:76:cd:9b:cb:d3:77:e0:98:12:5e:94:9e:f5:4d: a4:77:81:a4:eb:00:d5:1a:53:a9:98:d2:07:e7:42: 75:51:7b:5e:30:67:1d:7c:90:bc:77:bb:f9:2d:63: 66:ca:c4:80:f5:e1:fe:74:ce:14:9c:08:8e:bd:74: 12:8c:9b:8c:bb:d7:db:c1:22:ec:01:07:6a:72:bf: 04:3a:8a:7c:af:81:e2:16:ad:35:2d:76:f7:98:f1: 8e:89:fe:70:28:a9:08:58:21:ab:a8:2c:2c:96:d4: 15:63:c9:86:58:8b:7f:7b:cd:42:4b:4e:c0:66:a9: 5a:55:20:e4:2f:ba:e3:95:4e:6a:fa:a9:27:8b:6c: 95:69:9d:1b:99:04:4f:c6:f7:f7:ee:31:a6:e8:5e: 02:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:28:EE:C5:6C:56:5C:56:84:07:40:31:DF:BF:DA:33:C3:68:8B:4A X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/YCjuxWxWXFaEB0Ax37_aM8Noi0o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.132.0/24 Signature Algorithm: sha256WithRSAEncryption 65:56:36:be:b0:29:61:a1:fa:e6:42:c3:49:eb:51:e1:d7:eb: d6:6c:2d:6e:66:44:84:dc:d0:fa:34:04:1b:e2:c1:3c:75:a9: 9d:e2:c5:00:2e:54:b5:dc:22:72:52:5c:0d:cd:e3:24:87:66: e0:2f:06:bf:7f:aa:a7:2b:8c:1e:aa:62:12:27:a0:77:40:55: 91:a5:f0:cb:8a:d5:61:de:b4:c0:0f:20:89:75:74:ba:ca:eb: 4c:1b:f6:43:2b:fb:b5:a1:e9:1a:00:d8:49:10:27:66:ef:fb: 90:05:18:2e:79:57:7d:48:6a:4d:70:71:66:ac:7c:12:cc:81: 8a:23:1b:bb:13:16:38:78:8f:a5:81:3b:87:61:22:6a:d6:8b: c0:a6:8f:52:c3:70:0e:43:88:4e:31:9b:da:2e:69:a2:41:8a: cb:1e:5a:c7:3b:97:33:f9:6a:6b:2d:22:70:99:20:d9:a4:9a: ee:88:fe:c0:64:17:85:01:6e:fa:09:bf:57:2f:55:2a:33:8b: 20:da:17:28:d4:21:38:9d:cc:b9:68:80:34:cf:15:66:a3:dc: 59:c8:1a:99:f9:30:ad:8f:1d:28:16:75:ff:cb:fe:8d:8c:0c: e5:6f:60:18:a1:f1:60:99:66:dd:9c:c8:7c:0c:e2:a0:22:de: b3:11:16:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W4eqEETO81J6ST1w3Fs3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDI4ZWVjNTZjNTY1YzU2ODQwNzQwMzFkZmJmZGEzM2MzNjg4YjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm+MPfZPWtnC18PkGb1ovwdqRcly hLGuddDcb4pKcAgSJPb8q86oN3tbkbo4BTCDJdZZFJBA9caGKkr7hRTrF+mgApO7 MegDvF7QZzrH7YkXe5kc/TaJxI1fV0+ixnCd5q4bBLtN05X1ds2by9N34JgSXpSe 9U2kd4Gk6wDVGlOpmNIH50J1UXteMGcdfJC8d7v5LWNmysSA9eH+dM4UnAiOvXQS jJuMu9fbwSLsAQdqcr8EOop8r4HiFq01LXb3mPGOif5wKKkIWCGrqCwsltQVY8mG WIt/e81CS07AZqlaVSDkL7rjlU5q+qkni2yVaZ0bmQRPxvf37jGm6F4CowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGAo7sVsVlxWhAdAMd+/2jPDaItKMB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvWUNqdXhXeFdYRmFFQjBBeDM3X2FNOE5vaTBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABaCEMA0G CSqGSIb3DQEBCwUAA4IBAQBlVja+sClhofrmQsNJ61Hh1+vWbC1uZkSE3ND6NAQb 4sE8damd4sUALlS13CJyUlwNzeMkh2bgLwa/f6qnK4weqmISJ6B3QFWRpfDLitVh 3rTADyCJdXS6yutMG/ZDK/u1oekaANhJECdm7/uQBRgueVd9SGpNcHFmrHwSzIGK Ixu7ExY4eI+lgTuHYSJq1ovApo9Sw3AOQ4hOMZvaLmmiQYrLHlrHO5cz+WprLSJw mSDZpJruiP7AZBeFAW76Cb9XL1UqM4sg2hco1CE4ncy5aIA0zxVmo9xZyBqZ+TCt jx0oFnX/y/6NjAzlb2AYofFgmWbdnMh8DOKgIt6zERYl -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:09 2026 by rpki-client