This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/kMb-Oyn-sGikc7AdD0FB1YwizZ0.roa File: kMb-Oyn-sGikc7AdD0FB1YwizZ0.roa (raw, json) Hash identifier: B0k6YXSTq1unhKTbD7kzMF9IUc+74LsQ4uA+pEsnDRA= Subject key identifier: 90:C6:FE:3B:29:FE:B0:68:A4:73:B0:1D:0F:41:41:D5:8C:22:CD:9D Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B805962AA13C0296A3DD996282C46 Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/kMb-Oyn-sGikc7AdD0FB1YwizZ0.roa Signing time: Thu 01 Jan 2026 16:19:35 +0000 ROA not before: Thu 01 Jan 2026 16:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62265 IP address blocks: 5.160.222.0/23 maxlen: 23 5.160.222.0/24 maxlen: 24 5.160.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:80:59:62:aa:13:c0:29:6a:3d:d9:96:28:2c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90c6fe3b29feb068a473b01d0f4141d58c22cd9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:89:0f:39:e3:26:92:38:98:03:d1:14:5c:5f: 11:9d:36:cf:f2:8e:30:0a:2c:52:e1:7c:6e:5f:b8: 0d:5b:ab:dc:68:7a:a3:25:76:e3:c6:25:fe:9b:e0: 1e:3b:f4:8b:21:7d:e5:c1:4e:f6:15:27:9b:b8:5c: a6:4f:9e:ee:f8:5e:ce:a6:01:69:c1:d9:b3:8e:29: ad:81:de:b3:17:59:62:ad:b9:43:00:f1:fc:33:f9: 6c:8d:5c:9c:8c:d3:d4:58:61:a7:26:33:46:0a:92: 35:3f:c3:f7:ef:a4:81:72:23:6f:a8:fc:96:39:00: 21:40:a4:94:d2:73:15:3b:0c:be:2a:68:91:92:d1: be:51:d5:94:5e:d8:c4:f1:17:e8:89:01:73:f5:cf: c7:68:fe:7a:be:9b:0f:5e:15:87:92:10:7d:9a:f4: 89:0f:31:49:48:83:61:4d:37:60:ac:ac:90:1e:44: 10:e9:5c:03:e5:79:1d:c4:7d:d6:77:be:60:80:e9: 18:63:c1:ad:a6:48:7f:3c:5e:fb:d6:bf:4f:4f:98: d6:4e:e3:63:91:de:80:90:73:d5:1c:2c:81:59:8d: c0:49:de:62:65:fa:22:0a:42:bf:94:d1:09:0f:ab: b4:7e:5b:1d:ff:47:89:d8:50:56:16:42:36:b4:0d: ce:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C6:FE:3B:29:FE:B0:68:A4:73:B0:1D:0F:41:41:D5:8C:22:CD:9D X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/kMb-Oyn-sGikc7AdD0FB1YwizZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.222.0/23 Signature Algorithm: sha256WithRSAEncryption 31:3a:81:54:3d:1a:54:97:ca:6e:25:18:bb:6b:ba:9b:55:2e: 0a:d4:0d:92:c1:c3:7c:64:61:71:f8:08:24:99:93:96:64:2f: cb:44:78:24:44:4f:e2:99:1e:7d:76:45:70:fa:4b:64:10:5e: d5:69:15:f2:4d:6c:38:ff:66:50:02:55:b4:2b:8b:30:03:71: 0f:9f:22:70:e7:4f:09:6a:56:da:91:40:51:a6:6a:12:15:bc: 71:02:50:e7:42:c1:58:a6:b7:64:5e:57:7a:f5:65:47:6d:7d: 51:d7:05:1b:29:0c:5b:bd:3c:33:26:09:ea:8a:a9:f9:e7:a9: 15:55:f7:1c:27:04:20:3e:67:bf:9b:1d:ad:1d:21:3b:b0:d0: 82:b3:e9:87:e4:3d:d4:02:50:a1:7b:cf:c4:bc:5c:cd:48:2d: 8e:16:b9:e1:c0:46:64:c7:dc:ab:32:0c:be:d2:45:27:c2:81: 35:f2:70:14:d8:53:d0:7b:1a:e7:36:dc:ce:98:53:d1:cb:2b: 6a:35:1c:4b:dd:60:e7:27:f8:0a:e4:38:8b:bf:a9:ea:e1:e6: bb:fd:a1:52:f6:33:6e:68:f2:37:bc:ca:a9:b9:90:b7:fa:92: 59:a5:e2:d8:7d:cd:7b:4b:95:e6:af:c6:d7:05:b3:20:12:95: 10:7b:fa:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W4BZYqoTwClqPdmWKCxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGM2ZmUzYjI5ZmViMDY4YTQ3M2IwMWQwZjQxNDFkNThjMjJjZDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4kPOeMmkjiYA9EUXF8RnTbP8o4w CixS4XxuX7gNW6vcaHqjJXbjxiX+m+AeO/SLIX3lwU72FSebuFymT57u+F7OpgFp wdmzjimtgd6zF1lirblDAPH8M/lsjVycjNPUWGGnJjNGCpI1P8P376SBciNvqPyW OQAhQKSU0nMVOwy+KmiRktG+UdWUXtjE8RfoiQFz9c/HaP56vpsPXhWHkhB9mvSJ DzFJSINhTTdgrKyQHkQQ6VwD5XkdxH3Wd75ggOkYY8Gtpkh/PF771r9PT5jWTuNj kd6AkHPVHCyBWY3ASd5iZfoiCkK/lNEJD6u0flsd/0eJ2FBWFkI2tA3OhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJDG/jsp/rBopHOwHQ9BQdWMIs2dMB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEva01iLU95bi1zR2lrYzdBZEQwRkIxWXdpelowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBaDeMA0G CSqGSIb3DQEBCwUAA4IBAQAxOoFUPRpUl8puJRi7a7qbVS4K1A2SwcN8ZGFx+Agk mZOWZC/LRHgkRE/imR59dkVw+ktkEF7VaRXyTWw4/2ZQAlW0K4swA3EPnyJw508J albakUBRpmoSFbxxAlDnQsFYprdkXld69WVHbX1R1wUbKQxbvTwzJgnqiqn556kV VfccJwQgPme/mx2tHSE7sNCCs+mH5D3UAlChe8/EvFzNSC2OFrnhwEZkx9yrMgy+ 0kUnwoE18nAU2FPQexrnNtzOmFPRyytqNRxL3WDnJ/gK5DiLv6nq4ea7/aFS9jNu aPI3vMqpuZC3+pJZpeLYfc17S5Xmr8bXBbMgEpUQe/pJ -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:32 2026 by rpki-client