This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/psZCOvqSpcWDmIacsRfs1gzaOsg.roa File: psZCOvqSpcWDmIacsRfs1gzaOsg.roa (raw, json) Hash identifier: dBILPQHnKwPogr2qELM79YPUQo3WafFsFfBe9j3SP0U= Subject key identifier: A6:C6:42:3A:FA:92:A5:C5:83:98:86:9C:B1:17:EC:D6:0C:DA:3A:C8 Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B81735340B0C7DBC8A0C8B0BF1B67 Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/psZCOvqSpcWDmIacsRfs1gzaOsg.roa Signing time: Thu 01 Jan 2026 16:19:35 +0000 ROA not before: Thu 01 Jan 2026 16:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64460 IP address blocks: 5.160.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:81:73:53:40:b0:c7:db:c8:a0:c8:b0:bf:1b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6c6423afa92a5c58398869cb117ecd60cda3ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8a:2f:77:19:6e:92:eb:75:f8:9a:fe:2a:54: 1b:de:56:e8:e6:4e:63:53:9b:da:ba:ed:e8:d4:35: 1e:11:db:96:90:76:f4:29:dc:ae:89:e1:61:50:27: ce:80:17:d3:43:c0:1e:83:53:87:6c:e5:a9:da:f5: 39:12:6f:f7:e1:97:bb:11:d9:d3:84:2c:d2:23:75: 6d:bd:f1:31:af:6b:2c:bb:82:15:44:99:2c:6e:fa: 7e:e1:48:9d:83:2e:55:1e:2a:b9:19:4c:86:9a:0a: c3:15:cb:18:f5:90:6a:08:31:90:7f:cc:d2:21:bb: c4:47:0a:36:07:8f:a6:25:f9:b0:91:49:3a:3c:70: 57:5d:15:7f:2d:0d:5b:eb:4a:45:46:69:8f:44:c5: 26:e9:91:7c:1d:79:91:b4:98:b1:c7:83:02:07:0f: ee:dc:58:eb:99:42:d9:20:63:23:da:d5:ee:32:bc: 96:09:8d:c5:7b:d1:5e:82:20:9c:df:81:c7:e5:95: 39:8a:d4:6a:02:55:be:45:7c:b5:f5:fa:98:d8:ab: a1:50:17:44:c3:08:73:cd:28:9a:d2:d4:d3:6e:6e: ae:a6:50:e1:6d:6f:15:73:f3:57:cb:16:21:86:6f: 0f:0d:59:63:77:22:42:b0:86:cb:d3:63:34:4f:d0: 55:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C6:42:3A:FA:92:A5:C5:83:98:86:9C:B1:17:EC:D6:0C:DA:3A:C8 X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/psZCOvqSpcWDmIacsRfs1gzaOsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.141.0/24 Signature Algorithm: sha256WithRSAEncryption 02:4e:b8:ac:aa:85:73:56:a1:30:0b:1a:f1:6d:06:55:64:16: 0f:9f:90:9d:7b:99:61:70:11:93:89:92:6c:4a:05:af:ea:cc: cd:85:a9:bf:3b:c2:d5:a3:f5:c5:15:46:ca:53:61:13:0c:c6: c0:1f:54:5a:05:f9:df:e2:46:2f:6b:c6:a6:76:58:32:5e:df: 11:a5:50:37:10:45:ea:d1:30:26:14:fa:b6:ab:3d:27:c5:19: 1e:84:98:ab:ab:51:e6:2a:ae:39:ee:9b:05:f6:a7:03:57:30: 47:80:ab:03:9f:fc:d4:66:bf:1d:cb:40:15:04:51:73:9c:21: ce:19:1e:9f:f9:ab:08:23:90:1e:b5:60:e5:d7:6f:f5:e8:ad: 2d:1a:df:30:72:e9:8a:81:b3:f4:5d:c5:82:94:58:36:95:3b: e2:14:22:da:40:60:1b:8d:fa:5a:48:1c:b6:d8:2f:2c:80:ac: 8e:b0:3d:66:56:1b:38:1b:2f:a1:43:e6:9d:2e:7b:b8:60:24: fc:c3:ec:0e:a3:0e:bc:70:6e:60:dd:b4:c6:ff:71:3f:c7:f0: 21:ce:46:2a:35:3c:8e:bd:89:d5:49:b3:9d:66:e8:08:d0:f7: b3:20:bf:9a:13:50:b6:54:bf:66:39:9a:f7:a3:ff:84:f5:bf: 72:84:03:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W4FzU0Cwx9vIoMiwvxtnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmM2NDIzYWZhOTJhNWM1ODM5ODg2OWNiMTE3ZWNkNjBjZGEzYWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIovdxlukut1+Jr+KlQb3lbo5k5j U5vauu3o1DUeEduWkHb0KdyuieFhUCfOgBfTQ8Aeg1OHbOWp2vU5Em/34Ze7EdnT hCzSI3VtvfExr2ssu4IVRJksbvp+4Uidgy5VHiq5GUyGmgrDFcsY9ZBqCDGQf8zS IbvERwo2B4+mJfmwkUk6PHBXXRV/LQ1b60pFRmmPRMUm6ZF8HXmRtJixx4MCBw/u 3FjrmULZIGMj2tXuMryWCY3Fe9FegiCc34HH5ZU5itRqAlW+RXy19fqY2KuhUBdE wwhzzSia0tTTbm6uplDhbW8Vc/NXyxYhhm8PDVljdyJCsIbL02M0T9BVFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKbGQjr6kqXFg5iGnLEX7NYM2jrIMB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvcHNaQ092cVNwY1dEbUlhY3NSZnMxZ3phT3NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABaCNMA0G CSqGSIb3DQEBCwUAA4IBAQACTrisqoVzVqEwCxrxbQZVZBYPn5Cde5lhcBGTiZJs SgWv6szNham/O8LVo/XFFUbKU2ETDMbAH1RaBfnf4kYva8amdlgyXt8RpVA3EEXq 0TAmFPq2qz0nxRkehJirq1HmKq457psF9qcDVzBHgKsDn/zUZr8dy0AVBFFznCHO GR6f+asII5AetWDl12/16K0tGt8wcumKgbP0XcWClFg2lTviFCLaQGAbjfpaSBy2 2C8sgKyOsD1mVhs4Gy+hQ+adLnu4YCT8w+wOow68cG5g3bTG/3E/x/AhzkYqNTyO vYnVSbOdZugI0PezIL+aE1C2VL9mOZr3o/+E9b9yhANT -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:53 2026 by rpki-client