This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/cGGVKDLDGMZDfNI81Jk5VFaqwtQ.roa File: cGGVKDLDGMZDfNI81Jk5VFaqwtQ.roa (raw, json) Hash identifier: tEZa9C6o1kI3sr+oOxxeQ2RILcQ+l9HGUOyzVl1dE2s= Subject key identifier: 70:61:95:28:32:C3:18:C6:43:7C:D2:3C:D4:99:39:54:56:AA:C2:D4 Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B7B303C6627F94BAB96BD066C80A1 Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/cGGVKDLDGMZDfNI81Jk5VFaqwtQ.roa Signing time: Thu 01 Jan 2026 16:19:34 +0000 ROA not before: Thu 01 Jan 2026 16:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59501 IP address blocks: 5.160.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7b:30:3c:66:27:f9:4b:ab:96:bd:06:6c:80:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7061952832c318c6437cd23cd499395456aac2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fc:58:de:f8:9c:59:60:2c:e5:be:ca:87:35: 53:79:ea:fe:72:87:87:6c:8d:78:c5:a1:0c:b9:44: 43:1e:8a:12:34:e4:53:49:ae:57:2b:43:34:45:74: 50:2b:f0:99:b3:29:e7:05:92:4d:95:2d:63:81:0a: 82:ee:f8:30:0a:91:33:94:a3:bd:a4:45:b9:17:67: 50:f4:a0:54:53:f9:4c:4a:0f:9c:ae:1b:48:f5:df: 43:b4:96:5a:a2:b7:7c:bd:b3:e4:2d:62:45:fb:a1: 65:35:c5:96:90:7a:d6:5f:fd:89:b4:3a:b7:e9:b2: dc:45:48:77:3d:d9:b3:39:99:75:d8:07:d1:b5:f0: 43:ef:33:23:c2:5b:f3:d6:2b:1b:bf:3c:5c:3e:45: 6f:2d:e1:01:ea:ba:43:5c:d7:50:ba:dc:50:2c:fc: db:2c:43:08:82:24:e9:28:d1:dc:28:50:e2:01:f2: 14:1d:bf:c4:88:9d:b1:42:44:80:3f:34:7f:04:3b: c5:65:a2:26:96:87:36:2f:b7:41:14:c0:18:d4:a4: 7c:38:bb:d6:fa:67:54:57:0a:d4:6f:2e:d7:b8:6e: c2:8e:87:e2:dc:b3:d3:a4:5a:fa:87:db:13:3d:7b: 40:2c:dd:17:60:8c:f3:6b:7a:01:fc:df:8d:ec:11: e6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:61:95:28:32:C3:18:C6:43:7C:D2:3C:D4:99:39:54:56:AA:C2:D4 X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/cGGVKDLDGMZDfNI81Jk5VFaqwtQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.217.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:3f:93:72:04:d9:19:40:a8:59:31:49:51:d7:4f:9e:06:28: c0:a9:ba:ec:00:be:73:ba:56:95:16:bc:f7:30:3c:f4:5e:45: 77:6d:29:c8:cb:77:16:45:fb:4c:e4:8b:61:ce:26:94:49:d0: 6d:a4:71:1b:83:52:53:85:71:70:f3:bf:78:57:e6:e1:7a:f0: ba:27:43:53:ba:6d:df:dd:f7:d1:63:f8:1b:3f:e1:ca:ae:7d: 50:58:b5:aa:c4:78:1f:a0:1c:bb:13:bb:0b:11:63:97:e5:64: 28:d1:cf:49:10:5d:22:fd:40:66:ed:d5:c3:83:85:f3:e7:8e: 4e:9b:09:f7:e6:c3:02:2a:4a:c5:f7:80:e2:00:b0:e1:59:93: 55:50:38:4a:24:4f:04:f3:3a:b3:3b:00:5b:71:dc:a4:3f:e0: 77:0d:e5:34:9e:22:ec:f3:03:10:0d:e9:9b:45:c1:eb:f2:74: 46:84:3d:43:ff:03:d8:ae:2d:21:e6:d9:e8:78:4f:dc:52:2d: 4d:d5:2c:36:3a:75:3c:0a:cb:8f:af:28:f3:84:23:bb:0d:c0: 18:aa:7e:3b:a3:62:a1:8b:78:9f:9b:98:e3:47:c1:39:12:35: e4:df:0c:8a:3a:54:bc:60:10:ed:e8:37:1e:fc:51:e6:f5:87: f4:f8:27:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3swPGYn+Uurlr0GbIChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDYxOTUyODMyYzMxOGM2NDM3Y2QyM2NkNDk5Mzk1NDU2YWFjMmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfxY3vicWWAs5b7KhzVTeer+coeH bI14xaEMuURDHooSNORTSa5XK0M0RXRQK/CZsynnBZJNlS1jgQqC7vgwCpEzlKO9 pEW5F2dQ9KBUU/lMSg+crhtI9d9DtJZaord8vbPkLWJF+6FlNcWWkHrWX/2JtDq3 6bLcRUh3PdmzOZl12AfRtfBD7zMjwlvz1isbvzxcPkVvLeEB6rpDXNdQutxQLPzb LEMIgiTpKNHcKFDiAfIUHb/EiJ2xQkSAPzR/BDvFZaImloc2L7dBFMAY1KR8OLvW +mdUVwrUby7XuG7Cjofi3LPTpFr6h9sTPXtALN0XYIzza3oB/N+N7BHmTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHBhlSgywxjGQ3zSPNSZOVRWqsLUMB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvY0dHVktETERHTVpEZk5JODFKazVWRmFxd3RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABaDZMA0G CSqGSIb3DQEBCwUAA4IBAQBMP5NyBNkZQKhZMUlR10+eBijAqbrsAL5zulaVFrz3 MDz0XkV3bSnIy3cWRftM5IthziaUSdBtpHEbg1JThXFw8794V+bhevC6J0NTum3f 3ffRY/gbP+HKrn1QWLWqxHgfoBy7E7sLEWOX5WQo0c9JEF0i/UBm7dXDg4Xz545O mwn35sMCKkrF94DiALDhWZNVUDhKJE8E8zqzOwBbcdykP+B3DeU0niLs8wMQDemb RcHr8nRGhD1D/wPYri0h5tnoeE/cUi1N1Sw2OnU8CsuPryjzhCO7DcAYqn47o2Kh i3ifm5jjR8E5EjXk3wyKOlS8YBDt6Dce/FHm9Yf0+Ccs -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:30 2026 by rpki-client