This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/tE16M_oj0HN7khP9LpWG-VsS-lk.roa File: tE16M_oj0HN7khP9LpWG-VsS-lk.roa (raw, json) Hash identifier: YD3Q/wnc9KLj2uuqp8CKyxE+UkvLbkC3vNCiGzZPqEw= Subject key identifier: B4:4D:7A:33:FA:23:D0:73:7B:92:13:FD:2E:95:86:F9:5B:12:FA:59 Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B82A8F3C5148F6520EF80ADA87C82 Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/tE16M_oj0HN7khP9LpWG-VsS-lk.roa Signing time: Thu 01 Jan 2026 16:19:36 +0000 ROA not before: Thu 01 Jan 2026 16:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198341 IP address blocks: 5.160.253.0/24 maxlen: 24 46.209.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:82:a8:f3:c5:14:8f:65:20:ef:80:ad:a8:7c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b44d7a33fa23d0737b9213fd2e9586f95b12fa59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ab:8b:63:eb:16:d5:95:c5:2a:66:8b:a8:b5: 15:d9:dd:f7:5d:10:34:5c:7e:09:70:e8:6f:86:01: 7b:9b:5d:92:fd:f4:34:2a:9c:a1:47:c1:2e:dd:49: 07:0a:65:8d:89:61:f9:29:4f:ff:b0:f1:80:ed:7e: b9:ab:e4:74:0c:81:c1:87:04:8d:a2:f1:11:35:aa: 44:1a:fc:02:98:72:45:34:fd:99:a5:d3:de:7b:8e: e5:1c:ba:94:c6:82:18:cc:64:0e:23:e5:47:4c:95: c4:04:e3:4f:be:c1:f6:46:72:89:ae:88:69:be:1e: 89:f8:f3:30:7e:e1:f8:66:df:38:84:95:8d:c2:24: 41:4b:6b:4c:11:af:3d:06:88:69:30:d6:04:70:e6: 30:ee:0c:7a:e1:5e:46:72:b0:d0:f1:7e:8c:0d:a9: 04:7f:84:ff:51:99:53:4d:f7:89:b7:4d:e0:10:66: 74:5c:ec:17:b0:fb:8d:e2:16:89:d5:0e:fc:95:fd: 3b:76:21:e7:3f:30:78:b4:fb:ec:96:db:8c:ab:0d: d4:2c:1d:d1:ba:ed:52:bf:c1:d6:af:b6:81:ee:3f: e1:0c:cc:4d:0a:43:d4:9c:5c:49:79:b9:14:81:5a: 25:87:34:ff:7b:8c:e6:ae:9f:77:9b:0e:71:2c:9e: 1c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4D:7A:33:FA:23:D0:73:7B:92:13:FD:2E:95:86:F9:5B:12:FA:59 X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/tE16M_oj0HN7khP9LpWG-VsS-lk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.253.0/24 46.209.101.0/24 Signature Algorithm: sha256WithRSAEncryption 17:ff:66:03:19:c0:5e:f5:5b:ca:03:e4:25:0c:c4:dc:04:f1: 7e:61:4d:59:e9:8a:37:4f:6a:bd:1b:84:57:36:51:16:41:da: a6:35:c7:97:d3:a9:c5:c2:0f:63:77:70:f9:34:2c:21:d9:d9: c0:86:d6:c5:0c:fe:61:db:ba:c8:7c:6b:3a:bc:c0:57:dd:23: 1a:4f:2a:ae:b0:19:31:35:76:56:b9:6f:2f:48:2c:01:a6:f3: ae:23:2c:1c:a7:41:41:67:36:87:fb:51:96:a1:8e:09:e3:b1: 29:1b:32:cc:4e:e3:bc:f8:08:36:82:9f:54:d2:3c:e1:ac:4e: c3:3f:4f:ef:24:d2:3e:f4:8f:20:ec:8c:35:c1:3c:92:8e:0f: a2:5f:72:ae:a2:5f:64:eb:e3:00:25:88:1e:29:e3:d6:f6:24: 01:03:f2:a2:32:52:dd:58:2c:5c:12:bf:d1:3a:b2:3e:e2:3b: 92:47:cb:22:ca:a2:e4:aa:e3:34:86:01:c9:0b:51:9d:e9:7b: 03:17:48:bb:26:d5:5d:f5:bf:5a:b3:b5:28:2d:44:6b:9a:78: d5:89:ec:b3:2f:c2:ba:a9:61:39:af:75:af:47:a4:d1:07:a2: 52:ee:09:bf:6a:d2:88:af:5f:32:12:e0:8f:66:5c:d6:5f:58: 56:53:15:5e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W4Ko88UUj2Ug74CtqHyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDRkN2EzM2ZhMjNkMDczN2I5MjEzZmQyZTk1ODZmOTViMTJmYTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6uLY+sW1ZXFKmaLqLUV2d33XRA0 XH4JcOhvhgF7m12S/fQ0KpyhR8Eu3UkHCmWNiWH5KU//sPGA7X65q+R0DIHBhwSN ovERNapEGvwCmHJFNP2ZpdPee47lHLqUxoIYzGQOI+VHTJXEBONPvsH2RnKJrohp vh6J+PMwfuH4Zt84hJWNwiRBS2tMEa89BohpMNYEcOYw7gx64V5GcrDQ8X6MDakE f4T/UZlTTfeJt03gEGZ0XOwXsPuN4haJ1Q78lf07diHnPzB4tPvsltuMqw3ULB3R uu1Sv8HWr7aB7j/hDMxNCkPUnFxJebkUgVolhzT/e4zmrp93mw5xLJ4c8wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLRNejP6I9Bze5IT/S6VhvlbEvpZMB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvdEUxNk1fb2owSE43a2hQOUxwV0ctVnNTLWxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABaD9AwQA LtFlMA0GCSqGSIb3DQEBCwUAA4IBAQAX/2YDGcBe9VvKA+QlDMTcBPF+YU1Z6Yo3 T2q9G4RXNlEWQdqmNceX06nFwg9jd3D5NCwh2dnAhtbFDP5h27rIfGs6vMBX3SMa TyqusBkxNXZWuW8vSCwBpvOuIywcp0FBZzaH+1GWoY4J47EpGzLMTuO8+Ag2gp9U 0jzhrE7DP0/vJNI+9I8g7Iw1wTySjg+iX3Kuol9k6+MAJYgeKePW9iQBA/KiMlLd WCxcEr/ROrI+4juSR8siyqLkquM0hgHJC1Gd6XsDF0i7JtVd9b9as7UoLURrmnjV ieyzL8K6qWE5r3WvR6TRB6JS7gm/atKIr18yEuCPZlzWX1hWUxVe -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:50 2026 by rpki-client