This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/_ogFXsnc26cwnEEfI1RwCOLLjKE.roa File: _ogFXsnc26cwnEEfI1RwCOLLjKE.roa (raw, json) Hash identifier: T8WBXJPVj3V1XgVoalRoALm/8/55OH4oJDKe47m+Cgk= Subject key identifier: FE:88:05:5E:C9:DC:DB:A7:30:9C:41:1F:23:54:70:08:E2:CB:8C:A1 Certificate issuer: /CN=c933481d3fa48710dcb973fdcd29340dedb6229a Certificate serial: 019B7F1524C5B2FF0507AF521E1A3B20C55F Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/_ogFXsnc26cwnEEfI1RwCOLLjKE.roa Signing time: Fri 02 Jan 2026 14:20:50 +0000 ROA not before: Fri 02 Jan 2026 14:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43578 IP address blocks: 5.226.168.0/24 maxlen: 24 5.226.172.0/24 maxlen: 24 2a04:b880::/48 maxlen: 48 2a04:b880:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:24:c5:b2:ff:05:07:af:52:1e:1a:3b:20:c5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a Validity Not Before: Jan 2 14:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe88055ec9dcdba7309c411f23547008e2cb8ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:99:3c:e0:41:33:ee:88:f8:7a:e2:54:53:4c: 1d:f0:e4:1e:5a:52:05:2b:f9:db:00:9f:ee:66:54: 74:43:56:05:6e:f7:58:93:de:f3:dd:8f:b1:9a:7c: 9d:b8:e9:c7:2c:0e:0f:ef:a1:bf:d7:f4:58:a7:cc: 6d:0d:b3:36:db:6b:6a:c6:35:53:1b:a0:03:02:76: db:b3:51:20:5c:d0:c3:de:9f:b9:75:76:a8:a6:ea: d7:49:c2:8c:e8:91:a2:a3:af:54:0d:c6:09:95:18: 4e:64:98:51:00:d5:98:ea:57:43:6e:7e:d9:ec:50: 96:bc:0a:91:62:88:af:da:2b:12:24:67:a5:ee:eb: 04:21:24:8b:0f:21:2c:d1:29:e9:04:b6:de:3c:1f: 01:3c:a6:71:8e:0e:88:39:91:65:7d:98:e9:eb:56: 3d:b1:e7:42:3f:aa:18:13:e9:3e:27:ef:3c:42:91: 2e:05:10:76:59:22:85:0f:e0:49:27:33:15:9a:c6: 57:5c:cc:4d:e9:57:04:57:97:e3:d6:ad:40:67:c2: 32:01:17:bb:ed:f8:1c:a0:12:0a:83:b9:0d:4a:29: 61:07:c1:12:db:09:92:26:c7:5e:5b:fd:03:7b:6c: 34:25:49:6b:83:b0:e7:46:23:ea:be:d3:95:ea:2f: 0c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:88:05:5E:C9:DC:DB:A7:30:9C:41:1F:23:54:70:08:E2:CB:8C:A1 X509v3 Authority Key Identifier: keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/_ogFXsnc26cwnEEfI1RwCOLLjKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.226.168.0/24 5.226.172.0/24 IPv6: 2a04:b880::/48 2a04:b880:5::/48 Signature Algorithm: sha256WithRSAEncryption 23:e8:94:61:01:e2:06:51:2f:6b:27:5a:e2:ea:ba:0e:ef:61: 2c:b8:79:ce:ea:b7:04:a7:f5:08:bb:a9:98:d2:4d:24:22:b0: f6:69:6d:93:dc:c4:bc:00:13:d4:ad:a2:4e:80:3a:e2:b0:b2: 1c:b5:cc:ab:86:bd:02:ae:fa:90:99:39:01:16:d0:0c:0a:71: 42:54:9c:fc:32:55:e8:c3:ac:75:51:60:9a:50:58:ba:49:05: fb:df:fa:52:47:45:d5:9d:3b:1a:69:64:a9:4d:09:b4:38:a4: 3d:d7:a9:15:54:25:37:03:fa:d6:a5:a3:9a:c8:d3:8f:68:04: 47:fb:c5:d5:db:35:c6:8b:c3:c3:36:fd:0d:d9:ed:b3:72:e0: c5:d7:b8:f9:2f:8a:81:c1:f0:a6:13:eb:35:24:fe:21:92:36: e2:49:bc:3b:61:26:99:60:9b:f0:9e:dc:eb:1e:7e:f9:f9:1f: 68:00:2e:c5:ef:d4:a3:0e:6c:d1:55:26:1c:f0:3d:69:4b:cf: 53:de:7f:12:bf:82:99:99:db:1c:0c:c7:f6:5d:d4:01:d2:21: 43:9e:c8:2b:c9:2e:cd:c4:6d:9e:6d:d4:dc:3a:a2:e8:48:01: 46:11:fe:7f:3c:89:0e:c0:2c:9b:c0:2a:d2:1e:f2:07:ce:e0: 01:15:1f:78 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt/FSTFsv8FB69SHho7IMVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MzM0ODFkM2ZhNDg3MTBkY2I5NzNmZGNkMjkzNDBkZWRi NjIyOWEwHhcNMjYwMTAyMTQyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTg4MDU1ZWM5ZGNkYmE3MzA5YzQxMWYyMzU0NzAwOGUyY2I4Y2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Jk84EEz7oj4euJUU0wd8OQeWlIF K/nbAJ/uZlR0Q1YFbvdYk97z3Y+xmnyduOnHLA4P76G/1/RYp8xtDbM222tqxjVT G6ADAnbbs1EgXNDD3p+5dXaopurXScKM6JGio69UDcYJlRhOZJhRANWY6ldDbn7Z 7FCWvAqRYoiv2isSJGel7usEISSLDyEs0SnpBLbePB8BPKZxjg6IOZFlfZjp61Y9 sedCP6oYE+k+J+88QpEuBRB2WSKFD+BJJzMVmsZXXMxN6VcEV5fj1q1AZ8IyARe7 7fgcoBIKg7kNSilhB8ES2wmSJsdeW/0De2w0JUlrg7DnRiPqvtOV6i8MfwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFP6IBV7J3NunMJxBHyNUcAjiy4yhMB8GA1UdIwQY MBaAFMkzSB0/pIcQ3Llz/c0pNA3ttiKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVROSUhULWtoeERjdVhQOXpTazBEZTIySXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MzI4MDEtNjI5NC00MTJiLTk1NWUt ZmVmZDM3NjY2NzQxLzEvX29nRlhzbmMyNmN3bkVFZkkxUndDT0xMaktFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS83MzI4MDEtNjI5NC00MTJiLTk1NWUtZmVmZDM3NjY2NzQx LzEveVROSUhULWtoeERjdVhQOXpTazBEZTIySXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQABeKoAwQA BeKsMBgEAgACMBIDBwAqBLiAAAADBwAqBLiAAAUwDQYJKoZIhvcNAQELBQADggEB ACPolGEB4gZRL2snWuLqug7vYSy4ec7qtwSn9Qi7qZjSTSQisPZpbZPcxLwAE9St ok6AOuKwshy1zKuGvQKu+pCZOQEW0AwKcUJUnPwyVejDrHVRYJpQWLpJBfvf+lJH RdWdOxppZKlNCbQ4pD3XqRVUJTcD+talo5rI049oBEf7xdXbNcaLw8M2/Q3Z7bNy 4MXXuPkvioHB8KYT6zUk/iGSNuJJvDthJplgm/Ce3Osefvn5H2gALsXv1KMObNFV JhzwPWlLz1PefxK/gpmZ2xwMx/Zd1AHSIUOeyCvJLs3EbZ5t1Nw6ouhIAUYR/n88 iQ7ALJvAKtIe8gfO4AEVH3g= -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:39 2026 by rpki-client