This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/sKihYiTTeXtJMRlSivKaHc4znfk.roa File: sKihYiTTeXtJMRlSivKaHc4znfk.roa (raw, json) Hash identifier: 8vw/9Ifo/HeUu8hYlKJ2DwzAyaRMQWsLG25YhwxC+Wg= Subject key identifier: B0:A8:A1:62:24:D3:79:7B:49:31:19:52:8A:F2:9A:1D:CE:33:9D:F9 Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Certificate serial: 019B7AC94E892D8AAA805A8C40B06F3C17F0 Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/sKihYiTTeXtJMRlSivKaHc4znfk.roa Signing time: Thu 01 Jan 2026 18:19:31 +0000 ROA not before: Thu 01 Jan 2026 18:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202564 IP address blocks: 5.59.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4e:89:2d:8a:aa:80:5a:8c:40:b0:6f:3c:17:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Validity Not Before: Jan 1 18:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0a8a16224d3797b493119528af29a1dce339df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:d7:80:ae:0a:41:e2:b0:99:8b:96:c9:27: dd:88:a0:6d:22:ad:98:56:b3:8b:ad:42:6e:dd:b6: 3c:3b:7b:2b:74:77:52:dc:5c:08:4c:ad:70:5e:c2: 90:1c:81:8c:4f:95:f5:4c:e1:17:66:48:0d:d1:38: 2f:3d:28:cb:86:7d:8f:71:7a:92:3d:eb:b7:6f:ea: b7:7d:70:78:bb:53:68:f6:34:6c:8f:aa:b7:b5:b8: 62:ec:1d:10:b0:6a:92:45:1f:d8:4e:b3:6e:dc:08: ff:e2:c3:89:38:85:05:f3:59:9c:39:1a:74:50:1a: 6f:c2:b9:39:38:fe:4c:22:9a:a6:a5:84:5f:d2:b2: 3b:d2:3d:57:de:04:16:d9:50:f5:e6:86:9f:d5:6d: a2:59:08:cb:1d:d8:cb:ce:3d:fc:06:d0:e9:db:1a: 34:04:5a:72:ae:5b:79:19:9c:cb:c1:8f:52:ea:bf: 8b:a6:38:87:ed:67:6c:ed:e5:ba:fe:f7:28:69:61: 7d:1e:d3:4a:7d:ff:36:20:a9:a1:21:b3:91:61:c0: 3a:7e:4d:e1:76:86:b2:ef:30:54:6e:9e:5e:64:64: b0:87:5e:99:5d:4e:dc:e1:f8:df:74:3d:31:02:61: 2f:d2:cd:3c:b9:47:ea:60:c7:09:81:fc:17:84:c4: 8c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A8:A1:62:24:D3:79:7B:49:31:19:52:8A:F2:9A:1D:CE:33:9D:F9 X509v3 Authority Key Identifier: keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/sKihYiTTeXtJMRlSivKaHc4znfk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.59.10.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:21:7e:cf:64:4d:c4:15:a8:77:06:5d:4b:dd:80:74:21:96: 93:81:6b:9a:ae:ff:41:0e:a8:de:53:06:0d:d3:cf:16:bb:7a: 7a:9f:99:94:4b:98:e2:69:85:03:75:ea:49:07:0e:19:94:0a: 69:cb:93:b4:82:ec:d9:05:c7:0b:9a:b2:06:f7:64:08:a8:06: 3a:ce:76:0f:71:ff:d7:d8:69:50:32:99:a7:82:75:ce:b7:43: e6:60:ff:b4:fc:d8:86:0f:bd:e2:c9:18:ac:29:39:b5:c8:94: a7:41:b6:58:2a:67:2b:cb:b8:a7:bd:ee:4d:9c:60:60:d7:ef: 94:b2:d6:86:ef:66:e6:c6:89:f3:aa:98:20:8f:ba:0e:a7:55: 51:4e:99:45:11:fd:be:69:89:83:dc:d5:5f:00:50:16:f1:dc: ec:76:85:57:8b:1b:e4:ae:75:ed:0a:4e:be:7d:f2:84:ab:0b: d6:0d:2c:5f:d4:0a:1a:45:c9:2c:b0:83:6f:0e:ff:f2:90:22: ec:09:96:2d:f1:53:1f:80:2f:bf:d4:8c:05:bf:19:f5:8c:fc: 1e:68:6d:9b:86:98:8c:ca:db:f6:c1:8e:55:c0:e9:68:02:10: 96:c7:42:93:1f:2f:aa:de:67:de:03:97:6a:be:89:34:6a:13: 11:09:d9:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yU6JLYqqgFqMQLBvPBfwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh YmVhZjIwHhcNMjYwMTAxMTgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGE4YTE2MjI0ZDM3OTdiNDkzMTE5NTI4YWYyOWExZGNlMzM5ZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC/XgK4KQeKwmYuWySfdiKBtIq2Y VrOLrUJu3bY8O3srdHdS3FwITK1wXsKQHIGMT5X1TOEXZkgN0TgvPSjLhn2PcXqS Peu3b+q3fXB4u1No9jRsj6q3tbhi7B0QsGqSRR/YTrNu3Aj/4sOJOIUF81mcORp0 UBpvwrk5OP5MIpqmpYRf0rI70j1X3gQW2VD15oaf1W2iWQjLHdjLzj38BtDp2xo0 BFpyrlt5GZzLwY9S6r+LpjiH7Wds7eW6/vcoaWF9HtNKff82IKmhIbORYcA6fk3h doay7zBUbp5eZGSwh16ZXU7c4fjfdD0xAmEv0s08uUfqYMcJgfwXhMSM2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLCooWIk03l7STEZUorymh3OM535MB8GA1UdIwQY MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt OWI5YmNlMTVlMGM2LzEvc0tpaFlpVFRlWHRKTVJsU2l2S2FIYzR6bmZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2 LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTsKMA0G CSqGSIb3DQEBCwUAA4IBAQA6IX7PZE3EFah3Bl1L3YB0IZaTgWuarv9BDqjeUwYN 088Wu3p6n5mUS5jiaYUDdepJBw4ZlAppy5O0guzZBccLmrIG92QIqAY6znYPcf/X 2GlQMpmngnXOt0PmYP+0/NiGD73iyRisKTm1yJSnQbZYKmcry7inve5NnGBg1++U staG72bmxonzqpggj7oOp1VRTplFEf2+aYmD3NVfAFAW8dzsdoVXixvkrnXtCk6+ ffKEqwvWDSxf1AoaRckssINvDv/ykCLsCZYt8VMfgC+/1IwFvxn1jPweaG2bhpiM ytv2wY5VwOloAhCWx0KTHy+q3mfeA5dqvok0ahMRCdl/ -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:31 2026 by rpki-client