This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1ukR5MBDoD_A4GmzxNtPwqmT6Yg.roa File: 1ukR5MBDoD_A4GmzxNtPwqmT6Yg.roa (raw, json) Hash identifier: yvSopk8J7bQjYjj72TUoiqikPd+cRN5LCvYgI6vzDq8= Subject key identifier: D6:E9:11:E4:C0:43:A0:3F:C0:E0:69:B3:C4:DB:4F:C2:A9:93:E9:88 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E382CE0CDA6771CDA55B17FDADBFF7B Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1ukR5MBDoD_A4GmzxNtPwqmT6Yg.roa Signing time: Fri 02 Jan 2026 10:19:29 +0000 ROA not before: Fri 02 Jan 2026 10:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134351 IP address blocks: 5.188.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:2c:e0:cd:a6:77:1c:da:55:b1:7f:da:db:ff:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6e911e4c043a03fc0e069b3c4db4fc2a993e988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e8:62:be:ba:61:c8:a0:d0:1e:af:45:ad:96: 40:66:31:7f:b7:9a:85:57:6d:cf:76:6e:7a:32:74: d0:73:85:2a:52:ac:37:00:4c:34:62:5a:82:6a:cf: cf:2b:d5:f4:f5:7f:85:77:f6:14:2b:eb:83:72:97: 8a:a0:b5:6e:a7:b8:70:14:23:ad:29:b0:b8:57:a1: 70:ef:2a:93:c2:3e:e4:55:bb:3f:f7:30:5d:5f:b1: f7:ab:2f:25:9b:98:39:98:8f:35:c0:b2:f1:a1:3c: 65:d6:b3:d6:af:ac:16:1d:aa:a3:90:10:a7:cf:ac: 9a:3c:9a:a2:39:df:d9:69:20:5e:09:62:bb:b0:78: 8e:bf:f4:e8:9e:a6:59:fb:ef:21:b0:29:37:29:1d: 62:1e:bd:68:11:54:5f:42:29:c9:fd:af:c4:f7:e9: 71:ad:8f:55:59:ec:11:8c:8e:0b:fc:92:f4:01:79: a0:a9:a2:c7:12:7d:15:b1:07:33:58:f8:90:5d:14: 63:8b:b1:96:f4:f0:38:b8:c6:3d:f7:91:1b:37:11: 81:65:10:66:0e:af:d5:33:1f:0e:e4:50:b7:0d:f6: 25:de:7b:18:9e:1d:ea:e2:fe:7d:fa:c6:fb:b0:49: f5:07:2c:e3:ae:bd:47:40:6a:28:aa:a8:18:26:3d: a2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E9:11:E4:C0:43:A0:3F:C0:E0:69:B3:C4:DB:4F:C2:A9:93:E9:88 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1ukR5MBDoD_A4GmzxNtPwqmT6Yg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.188.222.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:97:44:2b:ea:6a:40:6d:49:ec:82:36:cb:e4:81:91:ac:cd: 84:ad:4f:45:71:61:95:d9:c0:dc:91:0d:98:30:09:bf:99:66: 1e:f5:cf:d9:25:67:75:9a:91:9c:f3:a6:7b:2c:8f:a6:d7:47: a9:2a:21:35:ff:8c:6e:89:44:3a:ba:c0:4d:57:11:bb:59:c3: 6c:2a:d5:b6:22:97:fa:8a:b4:49:40:c1:25:6b:b5:a5:73:5a: 1f:b5:a9:0d:3d:58:d5:9b:93:fa:ee:0f:b0:f8:0d:98:82:9c: dd:07:ef:e4:85:5d:38:25:a4:f4:dc:d9:44:82:7d:30:1e:ac: 30:36:aa:ff:08:77:73:10:92:3f:fa:3a:9e:c7:69:19:5d:66: 7b:93:c3:2e:b6:7a:fa:ff:c1:fc:21:4f:48:68:ac:85:c8:37: d8:81:1e:76:bc:a0:83:d0:1d:88:9f:58:7b:71:55:7d:eb:3f: 87:e0:ad:cb:95:90:43:5b:ea:90:1f:be:e3:8c:2e:f0:aa:33: 59:b6:d7:64:6d:18:c6:ed:59:b7:d8:ff:0b:00:04:21:42:c0: b2:ac:8b:71:c4:ff:59:ac:1f:25:bc:d8:b2:8c:14:45:49:dd: 80:bc:f3:c9:89:97:ad:08:e6:0f:52:ce:35:fe:e1:78:93:c5: 1c:4c:96:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OCzgzaZ3HNpVsX/a2/97MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmU5MTFlNGMwNDNhMDNmYzBlMDY5YjNjNGRiNGZjMmE5OTNlOTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkehivrphyKDQHq9FrZZAZjF/t5qF V23Pdm56MnTQc4UqUqw3AEw0YlqCas/PK9X09X+Fd/YUK+uDcpeKoLVup7hwFCOt KbC4V6Fw7yqTwj7kVbs/9zBdX7H3qy8lm5g5mI81wLLxoTxl1rPWr6wWHaqjkBCn z6yaPJqiOd/ZaSBeCWK7sHiOv/TonqZZ++8hsCk3KR1iHr1oEVRfQinJ/a/E9+lx rY9VWewRjI4L/JL0AXmgqaLHEn0VsQczWPiQXRRji7GW9PA4uMY995EbNxGBZRBm Dq/VMx8O5FC3DfYl3nsYnh3q4v59+sb7sEn1Byzjrr1HQGooqqgYJj2ibQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNbpEeTAQ6A/wOBps8TbT8Kpk+mIMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvMXVrUjVNQkRvRF9BNEdtenhOdFB3cW1UNllnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbzeMA0G CSqGSIb3DQEBCwUAA4IBAQBsl0Qr6mpAbUnsgjbL5IGRrM2ErU9FcWGV2cDckQ2Y MAm/mWYe9c/ZJWd1mpGc86Z7LI+m10epKiE1/4xuiUQ6usBNVxG7WcNsKtW2Ipf6 irRJQMEla7Wlc1oftakNPVjVm5P67g+w+A2YgpzdB+/khV04JaT03NlEgn0wHqww Nqr/CHdzEJI/+jqex2kZXWZ7k8Mutnr6/8H8IU9IaKyFyDfYgR52vKCD0B2In1h7 cVV96z+H4K3LlZBDW+qQH77jjC7wqjNZttdkbRjG7Vm32P8LAAQhQsCyrItxxP9Z rB8lvNiyjBRFSd2AvPPJiZetCOYPUs41/uF4k8UcTJaP -----END CERTIFICATE-----Generated at Tue Jan 20 09:23:16 2026 by rpki-client