This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/jH2YcyMfRCJPEM4wh_-M0jIYlsY.roa File: jH2YcyMfRCJPEM4wh_-M0jIYlsY.roa (raw, json) Hash identifier: xLWqMtRWZ3Re7rPrJoN5MiGMyOpeqQZKBclM52e1XSU= Subject key identifier: 8C:7D:98:73:23:1F:44:22:4F:10:CE:30:87:FF:8C:D2:32:18:96:C6 Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B789EF841FD3F003EEE06827D056D Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/jH2YcyMfRCJPEM4wh_-M0jIYlsY.roa Signing time: Thu 01 Jan 2026 16:19:33 +0000 ROA not before: Thu 01 Jan 2026 16:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50692 IP address blocks: 5.160.220.0/23 maxlen: 23 5.160.220.0/24 maxlen: 24 5.160.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:78:9e:f8:41:fd:3f:00:3e:ee:06:82:7d:05:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c7d9873231f44224f10ce3087ff8cd2321896c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3b:bb:67:48:22:b8:5f:46:6b:0d:1f:40:11: 86:a6:53:2a:7c:28:6d:5c:e9:8f:d0:bf:4b:e9:90: 6b:44:d9:9e:9c:ec:66:46:81:ab:67:a1:02:fa:ae: 9f:9f:df:77:70:25:41:00:8c:b9:0a:a8:83:7e:5a: f1:26:05:a3:b3:9a:fd:dc:62:e3:52:e0:60:7f:b8: 79:83:9b:27:e2:ea:e6:8b:00:0e:d3:95:6c:60:27: 46:4d:85:e9:da:d5:c0:de:0e:e2:d6:36:45:b3:70: b4:ad:50:f8:6b:a2:05:02:34:c7:0d:27:32:c8:4d: 70:15:cc:c0:43:d9:13:df:e5:7c:0f:99:14:55:7c: 22:3b:1c:f8:c3:c5:0a:2f:c2:ff:99:2b:47:26:28: 2c:00:59:1a:d8:36:fe:16:c2:7a:70:73:84:60:05: a8:13:4f:e9:54:40:50:8c:47:6e:5c:d0:33:68:1a: f0:bd:48:36:3e:15:99:c8:25:15:fa:5f:8c:cf:1a: 95:8d:2d:a7:db:1e:15:62:e5:d4:56:ab:d4:a7:68: f4:ba:56:cd:93:c9:d0:98:b1:5e:3c:92:f2:24:fc: a2:0b:ce:ee:16:8a:fe:83:4c:d3:d2:86:d2:a1:a1: d8:43:c2:e2:0f:49:a6:40:7f:46:1f:9b:04:64:2b: e6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7D:98:73:23:1F:44:22:4F:10:CE:30:87:FF:8C:D2:32:18:96:C6 X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/jH2YcyMfRCJPEM4wh_-M0jIYlsY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.220.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:ff:fd:5e:72:c6:c7:e1:b6:aa:16:c4:74:d6:84:bf:89:11: cb:a2:87:e9:26:d5:62:9e:d6:de:4c:2b:bf:d8:5e:7b:68:65: 10:84:a8:32:5c:61:63:ea:2a:e8:90:aa:c9:f0:65:ff:12:17: 8b:51:a0:ee:e1:3a:6c:e6:4a:2e:db:68:9b:fe:9a:ae:53:ed: 0b:32:d6:8a:8f:d9:65:e1:b4:46:98:47:3e:30:a0:0a:af:b9: b6:70:0f:2c:e7:f3:5a:27:c5:9d:a7:ed:41:a9:80:d2:a7:3e: 25:3a:62:d9:9d:4a:ef:d5:b7:ca:8b:eb:94:77:3e:cb:da:66: e6:f7:c7:15:80:37:19:35:7f:f4:52:a0:e0:ab:7f:7e:5c:6a: 36:25:34:22:9e:8b:3d:81:cd:38:7b:c6:c5:68:82:eb:35:24: fe:ba:a3:c1:a2:6e:b3:71:65:b9:8b:61:c9:72:46:b3:a6:54: 96:e8:22:17:9a:c5:8b:b8:06:f7:a0:ec:e6:2b:42:e1:ae:cb: e9:2c:15:b0:9b:88:63:e0:27:7b:49:94:8c:27:59:9f:87:87: 54:44:1e:60:d4:80:b1:8e:36:51:b7:df:81:cd:1d:a8:49:f3: 51:28:8d:79:cb:f8:1a:a7:be:90:f2:bc:a9:9d:c7:c9:95:6b: da:62:52:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3ie+EH9PwA+7gaCfQVtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzdkOTg3MzIzMWY0NDIyNGYxMGNlMzA4N2ZmOGNkMjMyMTg5NmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTu7Z0giuF9Gaw0fQBGGplMqfCht XOmP0L9L6ZBrRNmenOxmRoGrZ6EC+q6fn993cCVBAIy5CqiDflrxJgWjs5r93GLj UuBgf7h5g5sn4urmiwAO05VsYCdGTYXp2tXA3g7i1jZFs3C0rVD4a6IFAjTHDScy yE1wFczAQ9kT3+V8D5kUVXwiOxz4w8UKL8L/mStHJigsAFka2Db+FsJ6cHOEYAWo E0/pVEBQjEduXNAzaBrwvUg2PhWZyCUV+l+MzxqVjS2n2x4VYuXUVqvUp2j0ulbN k8nQmLFePJLyJPyiC87uFor+g0zT0obSoaHYQ8LiD0mmQH9GH5sEZCvmAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIx9mHMjH0QiTxDOMIf/jNIyGJbGMB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvakgyWWN5TWZSQ0pQRU00d2hfLU0waklZbHNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBaDcMA0G CSqGSIb3DQEBCwUAA4IBAQAK//1ecsbH4baqFsR01oS/iRHLoofpJtVintbeTCu/ 2F57aGUQhKgyXGFj6irokKrJ8GX/EheLUaDu4Tps5kou22ib/pquU+0LMtaKj9ll 4bRGmEc+MKAKr7m2cA8s5/NaJ8Wdp+1BqYDSpz4lOmLZnUrv1bfKi+uUdz7L2mbm 98cVgDcZNX/0UqDgq39+XGo2JTQinos9gc04e8bFaILrNST+uqPBom6zcWW5i2HJ ckazplSW6CIXmsWLuAb3oOzmK0LhrsvpLBWwm4hj4Cd7SZSMJ1mfh4dURB5g1ICx jjZRt9+BzR2oSfNRKI15y/gap76Q8rypncfJlWvaYlIm -----END CERTIFICATE-----Generated at Sun Jan 25 23:51:17 2026 by rpki-client