This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/dnQ3S_JMt6FTyxYRCvz52wxc6r4.roa File: dnQ3S_JMt6FTyxYRCvz52wxc6r4.roa (raw, json) Hash identifier: WFR7NvOYvnrGt0VvmZ3sKuRAZ3fX5hXr4cy+Kv7Rv8I= Subject key identifier: 76:74:37:4B:F2:4C:B7:A1:53:CB:16:11:0A:FC:F9:DB:0C:5C:EA:BE Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B7A53758A26F0929139745EE2E914 Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/dnQ3S_JMt6FTyxYRCvz52wxc6r4.roa Signing time: Thu 01 Jan 2026 16:19:34 +0000 ROA not before: Thu 01 Jan 2026 16:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51431 IP address blocks: 5.160.47.0/24 maxlen: 24 5.160.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7a:53:75:8a:26:f0:92:91:39:74:5e:e2:e9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7674374bf24cb7a153cb16110afcf9db0c5ceabe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c7:19:09:7e:16:fc:5c:9f:b1:76:d4:40:e4: d9:49:43:f7:5d:07:b8:72:a8:fa:54:40:6d:14:df: 14:93:42:40:da:ed:73:76:1c:f4:83:77:b7:c9:93: 7a:17:0d:6e:71:c5:82:37:62:58:4f:f1:d4:f4:2e: 0a:66:44:1e:db:7f:e0:a4:42:1a:71:2b:40:b2:f1: c6:cd:31:d4:cc:74:54:22:3e:87:e4:dc:18:3c:ba: 95:b8:1b:92:1d:bd:83:1d:6b:f5:5a:0d:54:35:53: 0e:ce:83:3a:7d:ae:8d:8e:f4:92:74:8e:53:4d:e5: 40:06:f4:f3:77:87:cf:56:1b:f1:7b:d1:0f:7a:11: f3:cb:4d:d4:19:aa:dc:d0:eb:4d:a2:93:28:2d:db: 05:b2:04:d9:2d:94:c6:80:da:99:fd:b7:9a:86:ed: 57:60:a5:5d:55:01:8f:5f:89:38:24:1c:4d:a7:c2: 6f:92:bf:0a:7b:c2:66:e8:6d:6f:91:fe:79:0b:28: 71:7e:77:69:fa:d1:8c:aa:fe:4d:f3:d2:13:8c:c3: 41:e9:78:a7:9e:7c:8c:57:38:a6:ad:13:29:fd:7a: 4a:2d:e9:e5:79:55:fa:00:52:31:06:0c:17:71:69: ed:ed:32:13:69:de:aa:d4:c9:cd:3f:06:22:c9:97: bd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:74:37:4B:F2:4C:B7:A1:53:CB:16:11:0A:FC:F9:DB:0C:5C:EA:BE X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/dnQ3S_JMt6FTyxYRCvz52wxc6r4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.47.0/24 5.160.197.0/24 Signature Algorithm: sha256WithRSAEncryption 67:51:d2:9f:af:c0:a1:20:e9:99:f4:d4:6c:f4:bd:58:12:ec: 9a:a0:4c:8e:7c:4e:0e:16:11:5e:8e:e3:fb:b7:da:11:bf:82: c5:aa:a9:e7:91:80:28:26:24:da:6b:4f:07:06:86:f8:36:ff: 2a:da:19:07:d5:50:41:97:31:48:4c:d5:3f:c8:fb:f1:59:97: e9:14:b5:37:bb:92:e8:4d:38:48:dc:67:a3:7b:bb:de:4b:5d: 0e:53:2c:5e:9e:d3:33:ff:07:9f:42:1f:3f:fe:e5:5e:8b:69: 90:79:85:e2:ce:41:12:fd:0c:a7:65:93:29:f9:42:b7:57:04: 75:f7:a9:c4:08:d7:45:ef:72:70:f0:71:e1:ef:57:37:af:81: a7:0c:79:ff:85:6f:51:49:5f:1b:c4:92:6f:f1:b1:82:77:57: 4e:07:bf:b2:c4:0f:33:87:1a:36:b9:92:9c:67:c8:85:ab:e3: df:9f:87:07:8a:3e:3a:ba:5e:9d:2a:11:e3:44:63:ec:42:30: e5:f4:4a:b9:c4:64:06:f8:f7:b7:65:e7:4c:11:79:a8:cf:40: 4f:95:61:28:6a:1d:60:f3:b0:7d:b0:f5:ff:48:93:5a:2f:5e: e3:4a:2c:de:fc:af:dd:d4:21:83:ed:98:ac:b3:e5:11:88:99: e8:84:33:86 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W3pTdYom8JKROXRe4ukUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Njc0Mzc0YmYyNGNiN2ExNTNjYjE2MTEwYWZjZjlkYjBjNWNlYWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxccZCX4W/FyfsXbUQOTZSUP3XQe4 cqj6VEBtFN8Uk0JA2u1zdhz0g3e3yZN6Fw1uccWCN2JYT/HU9C4KZkQe23/gpEIa cStAsvHGzTHUzHRUIj6H5NwYPLqVuBuSHb2DHWv1Wg1UNVMOzoM6fa6NjvSSdI5T TeVABvTzd4fPVhvxe9EPehHzy03UGarc0OtNopMoLdsFsgTZLZTGgNqZ/beahu1X YKVdVQGPX4k4JBxNp8Jvkr8Ke8Jm6G1vkf55Cyhxfndp+tGMqv5N89ITjMNB6Xin nnyMVzimrRMp/XpKLenleVX6AFIxBgwXcWnt7TITad6q1MnNPwYiyZe98QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHZ0N0vyTLehU8sWEQr8+dsMXOq+MB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvZG5RM1NfSk10NkZUeXhZUkN2ejUyd3hjNnI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABaAvAwQA BaDFMA0GCSqGSIb3DQEBCwUAA4IBAQBnUdKfr8ChIOmZ9NRs9L1YEuyaoEyOfE4O FhFejuP7t9oRv4LFqqnnkYAoJiTaa08HBob4Nv8q2hkH1VBBlzFITNU/yPvxWZfp FLU3u5LoTThI3Geje7veS10OUyxentMz/wefQh8//uVei2mQeYXizkES/QynZZMp +UK3VwR196nECNdF73Jw8HHh71c3r4GnDHn/hW9RSV8bxJJv8bGCd1dOB7+yxA8z hxo2uZKcZ8iFq+Pfn4cHij46ul6dKhHjRGPsQjDl9Eq5xGQG+Pe3ZedMEXmoz0BP lWEoah1g87B9sPX/SJNaL17jSize/K/d1CGD7Ziss+URiJnohDOG -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:09 2026 by rpki-client