This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/ao5k8aMHz2Rr-UFohnKN0Vsy0ts.roa File: ao5k8aMHz2Rr-UFohnKN0Vsy0ts.roa (raw, json) Hash identifier: qeXz8tDdKItxGK8qtWsvUAbM0Ooz+MmMiDN8cvBIyTQ= Subject key identifier: 6A:8E:64:F1:A3:07:CF:64:6B:F9:41:68:86:72:8D:D1:5B:32:D2:DB Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Certificate serial: 019B7B35C6AB309029D737118842226A93E8 Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/ao5k8aMHz2Rr-UFohnKN0Vsy0ts.roa Signing time: Thu 01 Jan 2026 20:18:00 +0000 ROA not before: Thu 01 Jan 2026 20:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6461 IP address blocks: 5.182.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c6:ab:30:90:29:d7:37:11:88:42:22:6a:93:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Validity Not Before: Jan 1 20:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a8e64f1a307cf646bf9416886728dd15b32d2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1c:a1:c4:c9:79:b4:36:88:76:62:c4:01:5e: 62:28:c1:fd:1d:e9:73:c1:77:ea:91:81:47:72:5b: ee:c5:aa:05:a0:2d:f2:ea:49:7a:eb:f7:b2:0a:63: a9:e6:ce:bd:1a:c3:bb:b3:bb:61:80:02:bf:e9:cb: 23:3b:85:31:45:ef:ce:31:5c:93:19:bd:7d:28:6f: 93:44:77:fa:56:c7:91:bb:53:c7:8a:dd:0c:c0:8b: e1:11:7d:66:39:82:d3:09:fa:25:6d:fb:96:fc:e9: 94:38:bb:4b:68:72:05:e8:5b:d2:23:db:36:3e:91: eb:ca:94:93:1f:b8:60:65:d0:ea:49:50:77:52:30: 75:2a:89:56:20:9f:a9:3e:a6:fa:f6:df:1d:d4:06: 9b:33:03:fe:f3:0c:d4:1a:c6:ce:3d:e5:75:11:ad: 5a:1d:26:16:dc:3b:19:ed:9b:78:e9:a4:de:a2:a7: c6:27:34:c5:4f:47:aa:44:ff:59:fa:60:19:af:51: c4:bb:63:a0:ea:bb:c0:c4:ae:58:8d:3d:e1:4d:58: 88:96:44:3d:28:88:24:b1:49:9e:65:b0:4b:da:ea: b9:19:85:a0:a9:5f:9b:92:e3:28:cb:58:c7:33:84: 09:d2:f2:d4:81:ab:6c:4c:e5:fa:50:53:cc:ac:1a: e4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8E:64:F1:A3:07:CF:64:6B:F9:41:68:86:72:8D:D1:5B:32:D2:DB X509v3 Authority Key Identifier: keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/ao5k8aMHz2Rr-UFohnKN0Vsy0ts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.120.0/22 Signature Algorithm: sha256WithRSAEncryption 39:c3:77:3d:a1:01:31:4b:fe:54:50:06:6d:11:5c:4a:00:9e: 10:e9:15:5b:a7:e0:4f:8a:a3:80:8d:4e:42:4f:cb:13:26:18: 8a:a7:e9:69:a1:e5:88:dd:0e:e1:c4:43:71:4f:0b:9b:d7:da: 6c:ba:36:3a:76:86:cb:80:51:d7:42:de:42:92:61:6a:1a:0e: 22:f8:3b:f8:64:82:a1:f2:73:91:7b:38:6a:ab:1c:66:f5:21: e4:f4:5b:fd:a4:f7:b1:b3:bb:72:b5:6f:c3:79:e0:6a:99:81: 6f:3d:35:67:37:0c:7e:bc:1c:17:ed:26:6b:77:ea:42:96:e2: b3:e0:b7:d5:c3:7b:4c:be:92:bc:9a:12:53:37:86:1a:b7:e0: b7:be:5e:8a:c9:4e:d4:ca:e1:84:3c:dd:8a:08:27:9a:f0:64: c5:ba:36:53:26:8c:c5:5f:7a:fd:99:5a:77:9b:3d:e7:4a:bb: 73:37:4d:1a:31:b7:ea:1c:b7:57:aa:71:be:86:cc:09:42:28: 01:2f:82:4f:a3:79:08:23:be:f8:96:02:ab:fd:01:ad:d7:8a: 0b:03:4b:76:7a:32:b0:5a:81:c7:e0:95:ce:65:26:53:6f:b6: 7a:d9:bc:7a:15:12:96:4f:4f:e8:8e:70:e4:bc:91:83:41:52: fc:29:22:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NcarMJAp1zcRiEIiapPoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx OGM5YmMwHhcNMjYwMTAxMjAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YThlNjRmMWEzMDdjZjY0NmJmOTQxNjg4NjcyOGRkMTViMzJkMmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwByhxMl5tDaIdmLEAV5iKMH9Helz wXfqkYFHclvuxaoFoC3y6kl66/eyCmOp5s69GsO7s7thgAK/6csjO4UxRe/OMVyT Gb19KG+TRHf6VseRu1PHit0MwIvhEX1mOYLTCfolbfuW/OmUOLtLaHIF6FvSI9s2 PpHrypSTH7hgZdDqSVB3UjB1KolWIJ+pPqb69t8d1AabMwP+8wzUGsbOPeV1Ea1a HSYW3DsZ7Zt46aTeoqfGJzTFT0eqRP9Z+mAZr1HEu2Og6rvAxK5YjT3hTViIlkQ9 KIgksUmeZbBL2uq5GYWgqV+bkuMoy1jHM4QJ0vLUgatsTOX6UFPMrBrk8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGqOZPGjB89ka/lBaIZyjdFbMtLbMB8GA1UdIwQY MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt YmQzYmZjOTliZGE5LzEvYW81azhhTUh6MlJyLVVGb2huS04wVnN5MHRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5 LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbZ4MA0G CSqGSIb3DQEBCwUAA4IBAQA5w3c9oQExS/5UUAZtEVxKAJ4Q6RVbp+BPiqOAjU5C T8sTJhiKp+lpoeWI3Q7hxENxTwub19psujY6dobLgFHXQt5CkmFqGg4i+Dv4ZIKh 8nORezhqqxxm9SHk9Fv9pPexs7tytW/DeeBqmYFvPTVnNwx+vBwX7SZrd+pCluKz 4LfVw3tMvpK8mhJTN4Yat+C3vl6KyU7UyuGEPN2KCCea8GTFujZTJozFX3r9mVp3 mz3nSrtzN00aMbfqHLdXqnG+hswJQigBL4JPo3kII774lgKr/QGt14oLA0t2ejKw WoHH4JXOZSZTb7Z62bx6FRKWT0/ojnDkvJGDQVL8KSK4 -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:12 2026 by rpki-client