This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/eZVOg16G_ygbig7ZbjOWg2WMoGA.roa File: eZVOg16G_ygbig7ZbjOWg2WMoGA.roa (raw, json) Hash identifier: b+HLkDnBpBRmzNRGIp8DKVvKf/mPaZ/HURvc9Bi5x6c= Subject key identifier: 79:95:4E:83:5E:86:FF:28:1B:8A:0E:D9:6E:33:96:83:65:8C:A0:60 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E3820F74EA5AB25CF6E305B3A7C7A63 Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/eZVOg16G_ygbig7ZbjOWg2WMoGA.roa Signing time: Fri 02 Jan 2026 10:19:26 +0000 ROA not before: Fri 02 Jan 2026 10:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47193 IP address blocks: 5.188.192.0/22 maxlen: 23 5.188.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:20:f7:4e:a5:ab:25:cf:6e:30:5b:3a:7c:7a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79954e835e86ff281b8a0ed96e339683658ca060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:be:7c:aa:bc:18:4a:b0:cc:92:11:40:9d:01: 24:e8:d7:e9:b1:39:17:aa:9a:66:6d:24:ad:cc:b1: e9:95:f1:80:8a:13:9b:37:e8:2a:84:3d:72:fc:47: 10:79:9d:6f:f9:fb:6e:12:ac:c0:dd:9c:9a:44:d5: 4d:b3:74:0a:23:0a:82:68:97:bb:62:05:e1:22:b3: a1:f4:da:57:dc:87:2c:5d:e1:a8:ab:0f:90:cc:65: 04:2a:40:23:a7:19:60:d7:fd:c2:b7:af:27:c6:a2: 1d:45:83:23:30:1e:0c:48:87:12:ff:79:57:c7:67: a4:10:a2:dd:5f:e5:6a:22:7a:ef:a8:ea:78:07:2d: 1d:70:fd:1a:ec:28:0f:3f:26:f0:94:f2:95:e6:6f: 2f:6e:85:29:7f:70:54:37:da:90:55:4c:ce:f4:91: ae:32:df:d5:a7:5f:2b:c9:fb:78:db:cc:45:d6:be: 43:93:65:ca:85:19:65:91:f2:49:84:bd:db:2e:8b: db:b2:d9:37:cb:8f:aa:72:47:da:4a:5b:d8:5b:1b: 7b:17:bd:3f:1c:fc:26:d1:5a:99:03:47:f2:62:d6: 26:c9:d1:f4:bc:29:ce:cc:58:fb:0d:b7:23:ab:b4: 8c:b9:f4:81:cb:89:7d:c4:0d:e2:6b:31:0a:51:e2: 12:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:95:4E:83:5E:86:FF:28:1B:8A:0E:D9:6E:33:96:83:65:8C:A0:60 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/eZVOg16G_ygbig7ZbjOWg2WMoGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.188.192.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:c5:55:0a:7d:6c:f4:c9:2d:59:10:38:4f:3b:5e:0c:77:7c: d4:0d:69:e6:05:2d:44:85:8e:d3:f0:dd:ac:05:89:2f:2b:af: bf:b2:d6:03:76:1f:c0:43:d3:4f:2d:99:cc:7b:a5:66:f3:6d: 2f:d1:b5:3a:ae:ea:39:88:3c:0e:df:28:d1:16:4d:82:74:f1: 32:ab:7b:01:93:91:51:e4:a9:45:8d:49:e0:ec:f3:4e:ba:5e: 10:4a:89:8e:3c:db:53:3a:58:51:8a:0f:0c:a6:85:1d:4b:b0: 9e:f7:7e:d2:73:38:83:2e:af:33:3c:89:99:66:bd:a8:5c:af: fb:15:5e:ce:15:85:85:47:6e:8f:d6:ac:06:bb:37:8b:71:c2: f8:59:c4:90:f1:67:eb:a7:55:e2:80:08:2a:21:a9:54:cd:e0: 6f:7c:d8:75:0d:95:16:27:0a:d7:6c:87:25:fb:d6:fe:62:2e: 89:6d:b7:aa:bc:8d:bb:b9:9c:bc:30:67:7d:fc:f6:7e:6f:28: c3:c8:5d:0d:b0:c8:fc:bb:81:28:bb:73:28:4e:06:d2:ce:9d: 30:58:f4:c0:52:cb:53:89:f9:68:52:f6:83:a9:c3:48:b9:0c: 6f:a6:31:6b:4e:b1:0a:5f:8b:ad:6a:59:19:2a:b7:34:1f:ca: 2c:72:50:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OCD3TqWrJc9uMFs6fHpjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTk1NGU4MzVlODZmZjI4MWI4YTBlZDk2ZTMzOTY4MzY1OGNhMDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk758qrwYSrDMkhFAnQEk6NfpsTkX qppmbSStzLHplfGAihObN+gqhD1y/EcQeZ1v+ftuEqzA3ZyaRNVNs3QKIwqCaJe7 YgXhIrOh9NpX3IcsXeGoqw+QzGUEKkAjpxlg1/3Ct68nxqIdRYMjMB4MSIcS/3lX x2ekEKLdX+VqInrvqOp4By0dcP0a7CgPPybwlPKV5m8vboUpf3BUN9qQVUzO9JGu Mt/Vp18ryft428xF1r5Dk2XKhRllkfJJhL3bLovbstk3y4+qckfaSlvYWxt7F70/ HPwm0VqZA0fyYtYmydH0vCnOzFj7Dbcjq7SMufSBy4l9xA3iazEKUeISrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHmVToNehv8oG4oO2W4zloNljKBgMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvZVpWT2cxNkdfeWdiaWc3WmJqT1dnMldNb0dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbzAMA0G CSqGSIb3DQEBCwUAA4IBAQAexVUKfWz0yS1ZEDhPO14Md3zUDWnmBS1EhY7T8N2s BYkvK6+/stYDdh/AQ9NPLZnMe6Vm820v0bU6ruo5iDwO3yjRFk2CdPEyq3sBk5FR 5KlFjUng7PNOul4QSomOPNtTOlhRig8MpoUdS7Ce937ScziDLq8zPImZZr2oXK/7 FV7OFYWFR26P1qwGuzeLccL4WcSQ8Wfrp1XigAgqIalUzeBvfNh1DZUWJwrXbIcl +9b+Yi6JbbeqvI27uZy8MGd9/PZ+byjDyF0NsMj8u4Eou3MoTgbSzp0wWPTAUstT ifloUvaDqcNIuQxvpjFrTrEKX4utalkZKrc0H8osclDV -----END CERTIFICATE-----Generated at Tue Jan 20 09:21:47 2026 by rpki-client