This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/byIbTZ0AkPcu_g48seHTTfUsi9w.roa File: byIbTZ0AkPcu_g48seHTTfUsi9w.roa (raw, json) Hash identifier: aIB3oQU/RZ8QwPT9THrCd5L64Hag4dLboNDDvTQzHk4= Subject key identifier: 6F:22:1B:4D:9D:00:90:F7:2E:FE:0E:3C:B1:E1:D3:4D:F5:2C:8B:DC Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019A9BE611C3499A76913EB950162E14EEB8 Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/byIbTZ0AkPcu_g48seHTTfUsi9w.roa Signing time: Wed 19 Nov 2025 11:35:37 +0000 ROA not before: Wed 19 Nov 2025 11:35:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209836 IP address blocks: 5.160.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:e6:11:c3:49:9a:76:91:3e:b9:50:16:2e:14:ee:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Nov 19 11:35:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6f221b4d9d0090f72efe0e3cb1e1d34df52c8bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2d:14:c5:fb:15:ef:ca:d1:6f:f4:69:80:b7: 6f:f9:2f:01:db:cc:bd:40:4b:08:28:41:fe:6d:b0: 1d:9d:fe:d4:e9:7d:b9:6e:22:e1:b2:8f:47:dd:75: 28:0d:2c:ef:e1:05:6f:c5:1a:1c:17:02:6c:b1:4e: 85:a3:f6:50:03:77:f2:d9:57:03:cc:84:03:2c:97: b8:90:a6:8b:83:53:8f:d2:d9:52:d7:37:5d:f4:70: e5:cb:fc:63:ef:8f:09:e7:14:c0:60:1c:7a:69:23: 7d:35:af:94:1f:c5:11:77:9c:f4:ab:0e:25:e9:bd: 0b:af:46:ed:33:00:19:77:4e:44:80:48:17:c7:12: 33:e8:42:f0:8a:2e:39:f5:ae:ba:aa:95:0b:a4:0f: 54:77:53:25:76:74:23:a9:08:00:cb:d4:21:a8:67: 0e:f0:49:4d:08:b0:01:1a:f9:a6:4b:1f:4b:23:3a: d6:19:7b:85:92:8c:88:59:f6:9a:7f:a2:c5:a6:68: 96:78:14:e8:5c:ea:44:f0:97:2f:ae:56:b8:5c:54: 40:18:d4:56:e5:d0:3c:d1:52:3d:08:e3:ac:7d:29: 39:b3:57:ee:25:8f:8c:22:e5:3a:03:b8:22:c8:79: eb:92:74:5f:a6:b4:97:e0:2c:11:18:bd:51:dc:ff: e2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:22:1B:4D:9D:00:90:F7:2E:FE:0E:3C:B1:E1:D3:4D:F5:2C:8B:DC X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/byIbTZ0AkPcu_g48seHTTfUsi9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.46.0/24 Signature Algorithm: sha256WithRSAEncryption 41:b6:09:3a:3d:bd:3c:fb:74:93:5e:12:74:8e:f1:ce:de:c6: be:23:c7:e5:3e:9a:d0:64:ca:df:83:28:c4:83:69:92:26:34: 14:03:ac:5d:7e:e7:54:3e:56:b8:26:1b:1e:23:21:6b:5e:40: fd:f2:86:2b:2d:99:b1:41:bd:06:20:bb:e7:1d:c8:fe:ec:40: b2:63:a5:b0:83:b5:f1:7a:1b:8b:51:bd:fa:f0:43:36:6d:10: 61:f9:15:c9:aa:ba:a8:59:ce:0d:a1:09:ca:42:8d:1c:0f:a5: 10:90:c4:15:6c:6b:e0:c1:92:3b:c1:24:99:1a:d4:6d:fe:35: 5f:ca:79:05:1f:25:ad:2b:33:71:1a:30:3f:8e:a0:e9:d4:67: 6c:e0:9f:51:21:55:e2:a3:53:75:82:bf:6d:02:fd:ec:1b:81: 3b:8a:1d:c5:0f:b3:7f:0b:38:b4:b1:30:98:09:f6:4e:78:1b: 39:0e:11:cd:91:08:8c:7a:09:75:1b:9c:ca:2b:8d:98:28:bb: da:dc:46:6e:87:3c:df:a0:a4:a5:f5:65:13:c6:d7:45:06:81: d6:62:61:43:5b:89:95:ce:23:e1:ef:dc:5e:70:c6:52:9d:85: 34:75:bd:cb:22:7e:d3:02:9f:71:aa:d1:09:23:f6:0d:66:a9: 12:fa:87:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqb5hHDSZp2kT65UBYuFO64MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjUxMTE5MTEzNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjIyMWI0ZDlkMDA5MGY3MmVmZTBlM2NiMWUxZDM0ZGY1MmM4YmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy0UxfsV78rRb/RpgLdv+S8B28y9 QEsIKEH+bbAdnf7U6X25biLhso9H3XUoDSzv4QVvxRocFwJssU6Fo/ZQA3fy2VcD zIQDLJe4kKaLg1OP0tlS1zdd9HDly/xj748J5xTAYBx6aSN9Na+UH8URd5z0qw4l 6b0Lr0btMwAZd05EgEgXxxIz6ELwii459a66qpULpA9Ud1MldnQjqQgAy9QhqGcO 8ElNCLABGvmmSx9LIzrWGXuFkoyIWfaaf6LFpmiWeBToXOpE8Jcvrla4XFRAGNRW 5dA80VI9COOsfSk5s1fuJY+MIuU6A7giyHnrknRfprSX4CwRGL1R3P/iewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG8iG02dAJD3Lv4OPLHh0031LIvcMB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvYnlJYlRaMEFrUGN1X2c0OHNlSFRUZlVzaTl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABaAuMA0G CSqGSIb3DQEBCwUAA4IBAQBBtgk6Pb08+3STXhJ0jvHO3sa+I8flPprQZMrfgyjE g2mSJjQUA6xdfudUPla4JhseIyFrXkD98oYrLZmxQb0GILvnHcj+7ECyY6Wwg7Xx ehuLUb368EM2bRBh+RXJqrqoWc4NoQnKQo0cD6UQkMQVbGvgwZI7wSSZGtRt/jVf ynkFHyWtKzNxGjA/jqDp1Gds4J9RIVXio1N1gr9tAv3sG4E7ih3FD7N/Czi0sTCY CfZOeBs5DhHNkQiMegl1G5zKK42YKLva3EZuhzzfoKSl9WUTxtdFBoHWYmFDW4mV ziPh79xecMZSnYU0db3LIn7TAp9xqtEJI/YNZqkS+oek -----END CERTIFICATE-----Generated at Sat Dec 6 09:45:48 2025 by rpki-client