This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/9KZJD2ELyP8QT34e4ZWqpnexLZs.roa File: 9KZJD2ELyP8QT34e4ZWqpnexLZs.roa (raw, json) Hash identifier: +RvslctYoQ5N5oNO5NIR0qwD1/GQqO6nH8Udf6SLDQw= Subject key identifier: F4:A6:49:0F:61:0B:C8:FF:10:4F:7E:1E:E1:95:AA:A6:77:B1:2D:9B Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E38312428CB670D0C56537A31AD0E42 Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/9KZJD2ELyP8QT34e4ZWqpnexLZs.roa Signing time: Fri 02 Jan 2026 10:19:30 +0000 ROA not before: Fri 02 Jan 2026 10:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204272 IP address blocks: 5.188.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:31:24:28:cb:67:0d:0c:56:53:7a:31:ad:0e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4a6490f610bc8ff104f7e1ee195aaa677b12d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7e:63:fc:d0:78:a5:a2:4e:85:c0:a7:0d:c3: 0a:31:46:a5:d5:2c:47:3a:b7:d8:51:a0:12:55:1b: 09:05:10:8c:84:5b:60:0d:5f:fe:41:60:79:86:73: c3:7b:68:e8:a7:b0:1e:f0:a6:56:aa:ec:8a:61:1a: 1b:51:80:19:94:3a:0d:e4:fa:03:a6:a5:79:56:78: 40:07:c1:0c:5a:00:ce:8e:7c:d7:37:71:ef:b9:be: 2e:1e:c5:d4:6e:8e:56:56:08:a7:83:05:f8:f5:b7: 35:c1:ff:26:d5:24:d3:1e:9a:ba:bd:51:11:99:a6: d8:76:a5:a5:69:94:89:c7:fe:44:d3:3a:88:e4:c4: 86:6f:15:c6:34:91:58:4b:49:17:ee:4e:eb:25:df: 68:d8:09:c7:49:20:cb:3f:21:86:b5:fb:3f:05:6e: 30:2d:87:55:46:b9:fc:34:7a:d7:fd:71:d1:11:8a: 97:75:cc:40:2e:f4:fc:2f:94:e1:69:bc:f0:11:c3: fb:a1:59:72:f7:5e:ce:4d:c9:42:ad:1b:6f:76:b8: 29:1e:d5:9b:15:e0:24:c0:54:9d:09:ae:cd:66:8f: 9c:a4:3d:fa:cd:af:23:9d:08:6e:87:8d:72:83:7c: 88:47:24:11:69:68:1c:59:7d:c6:5e:43:de:67:7a: 63:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A6:49:0F:61:0B:C8:FF:10:4F:7E:1E:E1:95:AA:A6:77:B1:2D:9B X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/9KZJD2ELyP8QT34e4ZWqpnexLZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.188.220.0/23 Signature Algorithm: sha256WithRSAEncryption ad:1b:f2:81:02:8b:af:de:23:42:e2:5f:f9:bf:0a:71:04:53: e5:82:e4:23:3b:7f:69:8e:11:9b:aa:1b:b4:d9:f5:11:7a:ce: 9f:06:4f:7d:a0:a2:45:b3:01:22:c0:3a:fd:5a:3b:6a:d2:24: f9:c0:f1:9c:b7:6e:6f:5a:5b:d5:b5:d4:ef:0e:f3:a9:9c:51: 62:9c:a9:34:3b:6f:b7:1d:d7:64:fb:3c:0f:c4:3b:4a:6a:ab: 02:05:63:fb:ec:41:e5:98:87:13:6e:a4:aa:be:2d:56:8f:b9: 9a:4d:ce:fd:d2:bc:a4:27:12:fa:f4:7f:4f:b5:53:24:33:c4: b8:ac:a9:d4:85:ec:13:ea:0b:40:90:d3:9a:3f:6e:32:02:e0: d3:34:3d:75:58:13:1d:66:14:d4:33:0a:96:d7:b1:01:cf:02: 10:ee:e6:9f:43:2a:b4:c8:05:fe:df:4b:66:a4:59:7d:2a:dc: 47:49:10:9e:2d:a9:cd:21:9b:32:d6:77:4e:93:4f:63:af:3f: 52:e6:e2:fa:45:30:ce:fd:c7:01:8a:a0:25:27:b1:13:5e:66: ff:24:4c:27:74:a1:a6:8e:2f:04:70:5e:48:d0:1b:16:5d:ca: 53:cd:51:2c:a7:b8:3f:7f:23:94:a6:e2:ca:6e:3b:9b:01:da: aa:88:c7:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ODEkKMtnDQxWU3oxrQ5CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGE2NDkwZjYxMGJjOGZmMTA0ZjdlMWVlMTk1YWFhNjc3YjEyZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn5j/NB4paJOhcCnDcMKMUal1SxH OrfYUaASVRsJBRCMhFtgDV/+QWB5hnPDe2jop7Ae8KZWquyKYRobUYAZlDoN5PoD pqV5VnhAB8EMWgDOjnzXN3Hvub4uHsXUbo5WVgingwX49bc1wf8m1STTHpq6vVER mabYdqWlaZSJx/5E0zqI5MSGbxXGNJFYS0kX7k7rJd9o2AnHSSDLPyGGtfs/BW4w LYdVRrn8NHrX/XHREYqXdcxALvT8L5ThabzwEcP7oVly917OTclCrRtvdrgpHtWb FeAkwFSdCa7NZo+cpD36za8jnQhuh41yg3yIRyQRaWgcWX3GXkPeZ3pjMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPSmSQ9hC8j/EE9+HuGVqqZ3sS2bMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvOUtaSkQyRUx5UDhRVDM0ZTRaV3FwbmV4TFpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBbzcMA0G CSqGSIb3DQEBCwUAA4IBAQCtG/KBAouv3iNC4l/5vwpxBFPlguQjO39pjhGbqhu0 2fURes6fBk99oKJFswEiwDr9Wjtq0iT5wPGct25vWlvVtdTvDvOpnFFinKk0O2+3 Hddk+zwPxDtKaqsCBWP77EHlmIcTbqSqvi1Wj7maTc790rykJxL69H9PtVMkM8S4 rKnUhewT6gtAkNOaP24yAuDTND11WBMdZhTUMwqW17EBzwIQ7uafQyq0yAX+30tm pFl9KtxHSRCeLanNIZsy1ndOk09jrz9S5uL6RTDO/ccBiqAlJ7ETXmb/JEwndKGm ji8EcF5I0BsWXcpTzVEsp7g/fyOUpuLKbjubAdqqiMeH -----END CERTIFICATE-----Generated at Tue Jan 20 09:21:58 2026 by rpki-client