This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eZvMCyOmCLBAhhAc6fYpFxNtB-M.roa File: eZvMCyOmCLBAhhAc6fYpFxNtB-M.roa (raw, json) Hash identifier: tIuwCEM9mzHiBpxBXdMs5exY5cg7GbPFCQKUWvC/2Ao= Subject key identifier: 79:9B:CC:0B:23:A6:08:B0:40:86:10:1C:E9:F6:29:17:13:6D:07:E3 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15E2883FEE57049AEBB4747F2367FC Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eZvMCyOmCLBAhhAc6fYpFxNtB-M.roa Signing time: Fri 02 Jan 2026 14:21:39 +0000 ROA not before: Fri 02 Jan 2026 14:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43260 IP address blocks: 5.181.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e2:88:3f:ee:57:04:9a:eb:b4:74:7f:23:67:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=799bcc0b23a608b04086101ce9f62917136d07e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5e:20:de:bd:e3:78:94:1e:bb:2a:a3:a4:44: c6:1b:a0:7c:09:bf:01:81:d9:69:86:a5:0a:b8:c1: a0:c9:fc:50:52:99:89:24:06:f2:ce:e3:2e:c7:74: dd:35:86:ed:b8:0c:cb:5a:55:b8:2a:56:c5:37:7c: c2:ae:06:c6:95:98:fe:52:ab:28:8d:8d:3a:f5:99: 1d:80:13:02:c9:18:68:7f:a5:03:df:0f:d3:16:4f: 64:7c:91:f0:df:df:f5:d2:6b:8f:da:54:1a:7b:f3: 81:92:92:06:ad:16:0e:98:f2:06:91:66:5a:10:3e: 87:57:6c:5e:10:df:be:6a:ba:12:2c:9a:59:dd:b9: 8b:60:95:21:ea:06:fe:9b:cf:d0:eb:94:06:6a:09: 24:de:e7:f7:88:32:fd:ac:20:5f:c7:6d:17:d3:c6: c8:ef:7c:29:d0:70:6f:7e:01:0f:6a:ae:cb:ca:0a: 42:e7:53:28:8f:0a:4d:dd:2a:68:6d:f1:83:2c:e9: 02:1f:35:6c:a3:9d:be:3f:59:8b:b7:b5:86:58:80: 08:53:7b:db:a9:ab:22:60:71:f1:4b:06:9b:4e:ff: e4:87:e1:35:7b:88:5f:14:59:48:e5:48:d7:8c:cc: d7:fb:8d:d7:79:bf:0f:be:ec:5c:f5:cb:27:94:3f: 23:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9B:CC:0B:23:A6:08:B0:40:86:10:1C:E9:F6:29:17:13:6D:07:E3 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eZvMCyOmCLBAhhAc6fYpFxNtB-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.84.0/24 Signature Algorithm: sha256WithRSAEncryption 93:4c:ec:19:7f:ce:c5:80:8e:cc:26:6a:43:03:39:61:cf:f2: 44:f3:bf:f3:bc:d8:74:13:fd:d3:41:fa:8d:46:b1:37:c5:bd: 19:d4:af:53:63:cd:09:aa:9c:2f:0f:e2:75:4e:81:f9:02:41: a4:ad:7b:db:71:89:22:0a:8c:6a:77:85:22:92:93:e2:e4:78: 42:ae:cc:d5:75:ce:37:0a:2f:5a:90:f4:2d:2f:20:16:b9:2e: 18:0b:68:16:20:92:a1:2c:eb:21:8d:03:14:41:b9:1e:9e:67: b2:3c:ca:e1:01:5a:d8:98:9d:1d:78:58:f8:4e:b5:58:08:79: 67:a2:e8:9e:72:1f:8f:25:95:98:54:39:36:43:7d:2c:5b:8b: b5:6f:a6:86:07:60:27:f1:cc:9d:ab:e5:13:a1:70:ff:68:e3: 76:55:45:4c:84:a0:1e:9d:5a:95:dc:2f:4a:32:a1:2b:22:aa: fe:3c:23:4b:5c:54:a2:2c:f7:24:f3:30:e2:f2:d2:fe:43:eb: 43:40:8a:89:7a:7f:5c:96:8a:8c:50:57:9a:b2:90:66:e6:37: 03:f6:5a:b6:f2:8c:da:dd:16:e4:f3:28:09:e8:0b:80:51:97: b0:51:2c:99:6b:ab:d6:fe:5b:5a:2d:69:d2:a1:9f:b9:3d:84: 45:3b:76:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FeKIP+5XBJrrtHR/I2f8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTliY2MwYjIzYTYwOGIwNDA4NjEwMWNlOWY2MjkxNzEzNmQwN2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw14g3r3jeJQeuyqjpETGG6B8Cb8B gdlphqUKuMGgyfxQUpmJJAbyzuMux3TdNYbtuAzLWlW4KlbFN3zCrgbGlZj+Uqso jY069ZkdgBMCyRhof6UD3w/TFk9kfJHw39/10muP2lQae/OBkpIGrRYOmPIGkWZa ED6HV2xeEN++aroSLJpZ3bmLYJUh6gb+m8/Q65QGagkk3uf3iDL9rCBfx20X08bI 73wp0HBvfgEPaq7LygpC51MojwpN3SpobfGDLOkCHzVso52+P1mLt7WGWIAIU3vb qasiYHHxSwabTv/kh+E1e4hfFFlI5UjXjMzX+43Xeb8Pvuxc9csnlD8j9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHmbzAsjpgiwQIYQHOn2KRcTbQfjMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvZVp2TUN5T21DTEJBaGhBYzZmWXBGeE50Qi1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbVUMA0G CSqGSIb3DQEBCwUAA4IBAQCTTOwZf87FgI7MJmpDAzlhz/JE87/zvNh0E/3TQfqN RrE3xb0Z1K9TY80JqpwvD+J1ToH5AkGkrXvbcYkiCoxqd4UikpPi5HhCrszVdc43 Ci9akPQtLyAWuS4YC2gWIJKhLOshjQMUQbkenmeyPMrhAVrYmJ0deFj4TrVYCHln ouiech+PJZWYVDk2Q30sW4u1b6aGB2An8cydq+UToXD/aON2VUVMhKAenVqV3C9K MqErIqr+PCNLXFSiLPck8zDi8tL+Q+tDQIqJen9cloqMUFeaspBm5jcD9lq28oza 3Rbk8ygJ6AuAUZewUSyZa6vW/ltaLWnSoZ+5PYRFO3ZN -----END CERTIFICATE-----Generated at Tue Jan 6 20:50:44 2026 by rpki-client