This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/mBnpKQzN82DTgBXT15vQ0pDxxuk.roa File: mBnpKQzN82DTgBXT15vQ0pDxxuk.roa (raw, json) Hash identifier: BB/R8ussVr+rpHeyjsXFlY5JPmqyqQ2M8hc89qfehhk= Subject key identifier: 98:19:E9:29:0C:CD:F3:60:D3:80:15:D3:D7:9B:D0:D2:90:F1:C6:E9 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E3822ED1A3B9C13BFFC76B09850158F Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/mBnpKQzN82DTgBXT15vQ0pDxxuk.roa Signing time: Fri 02 Jan 2026 10:19:26 +0000 ROA not before: Fri 02 Jan 2026 10:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48031 IP address blocks: 5.188.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:22:ed:1a:3b:9c:13:bf:fc:76:b0:98:50:15:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9819e9290ccdf360d38015d3d79bd0d290f1c6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:fe:56:ba:d2:e9:26:01:ee:e6:30:02:d0: 17:17:13:c4:07:61:09:9c:2d:7e:5f:a9:35:d1:0f: 68:ff:2c:63:50:bf:ec:0f:ea:e0:5c:ac:ed:45:ab: be:aa:93:a1:3f:b2:d9:95:97:34:98:a0:28:59:79: 87:50:3d:10:54:d6:26:b8:6a:1f:b6:70:dd:9b:5e: 0f:4a:1e:b5:4b:35:c3:b9:9c:4b:b4:6e:8a:f7:59: 4b:39:b9:29:ea:ee:c3:d4:ab:d1:c6:53:b2:fe:39: 8b:5e:35:b4:28:80:55:31:a8:3c:4b:0f:b8:7f:dc: ca:ca:bb:3b:b5:9d:c7:74:73:d8:59:b1:eb:0c:6f: c5:8a:ae:8f:1a:60:c3:bb:83:14:1a:f3:64:2b:53: 18:e7:be:35:36:fa:d5:97:a2:3d:df:a4:2e:8c:1f: a5:a2:7c:dd:dd:3a:9f:3b:73:d6:d7:90:8e:c4:49: ae:11:6b:92:c5:f8:a3:73:ac:c6:d7:2b:51:a8:79: 89:52:84:f8:bc:e8:f8:bd:72:92:09:26:65:7e:76: 7d:39:07:48:38:27:73:fd:95:78:e8:81:6e:d3:c4: 30:f6:91:0b:31:6d:34:e3:b9:cc:bc:41:6a:e2:09: 30:4d:fa:cb:c7:f0:62:b5:81:ec:89:da:be:9d:a7: 30:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:19:E9:29:0C:CD:F3:60:D3:80:15:D3:D7:9B:D0:D2:90:F1:C6:E9 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/mBnpKQzN82DTgBXT15vQ0pDxxuk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.188.60.0/23 Signature Algorithm: sha256WithRSAEncryption 39:a5:6e:96:25:b6:17:9b:ff:ac:f2:21:63:0b:5b:b9:c3:90: 47:e9:58:d1:c9:ad:ff:6e:7e:8b:e2:ab:28:b4:6f:1e:2c:98: fa:e8:25:8c:39:dd:34:04:08:1a:a5:72:a7:a7:0b:fa:ec:2d: 1a:f3:2d:b6:72:5c:bf:b4:7d:aa:13:f4:08:07:6c:a6:99:16: f7:17:d4:6a:9a:65:29:f1:2d:db:02:d4:52:72:ea:1a:62:9a: 20:88:b1:be:ad:b4:07:e9:31:0e:50:03:0e:be:fe:94:22:00: 82:9b:77:b1:b7:5d:b3:91:f0:79:e3:98:af:23:54:6a:7a:b8: 7a:39:18:ef:4e:34:6e:4c:57:7e:f0:4d:ed:d3:fb:b0:c1:a7: 25:04:e8:d6:e5:85:f5:ce:a2:d6:fd:8e:47:74:fd:a4:e7:7b: d2:db:0b:a3:76:74:ee:83:40:17:9e:cc:1a:c7:d7:07:28:fe: 02:18:2c:24:8d:59:36:4e:35:18:f7:0c:9a:c1:79:62:f1:80: 7e:e7:2b:f3:a3:d4:0d:a5:4c:38:b8:57:df:50:50:8c:88:97: b3:15:67:90:41:30:b5:54:60:4b:a5:59:30:81:71:dd:7a:b4: c9:fb:d7:32:de:f5:9a:e0:c5:1a:82:c3:0d:55:02:e9:4d:89: aa:f4:93:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OCLtGjucE7/8drCYUBWPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODE5ZTkyOTBjY2RmMzYwZDM4MDE1ZDNkNzliZDBkMjkwZjFjNmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4n+VrrS6SYB7uYwAtAXFxPEB2EJ nC1+X6k10Q9o/yxjUL/sD+rgXKztRau+qpOhP7LZlZc0mKAoWXmHUD0QVNYmuGof tnDdm14PSh61SzXDuZxLtG6K91lLObkp6u7D1KvRxlOy/jmLXjW0KIBVMag8Sw+4 f9zKyrs7tZ3HdHPYWbHrDG/Fiq6PGmDDu4MUGvNkK1MY5741NvrVl6I936QujB+l onzd3TqfO3PW15COxEmuEWuSxfijc6zG1ytRqHmJUoT4vOj4vXKSCSZlfnZ9OQdI OCdz/ZV46IFu08Qw9pELMW0047nMvEFq4gkwTfrLx/BitYHsidq+nacw1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJgZ6SkMzfNg04AV09eb0NKQ8cbpMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvbUJucEtRek44MkRUZ0JYVDE1dlEwcER4eHVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBbw8MA0G CSqGSIb3DQEBCwUAA4IBAQA5pW6WJbYXm/+s8iFjC1u5w5BH6VjRya3/bn6L4qso tG8eLJj66CWMOd00BAgapXKnpwv67C0a8y22cly/tH2qE/QIB2ymmRb3F9RqmmUp 8S3bAtRScuoaYpogiLG+rbQH6TEOUAMOvv6UIgCCm3ext12zkfB545ivI1Rqerh6 ORjvTjRuTFd+8E3t0/uwwaclBOjW5YX1zqLW/Y5HdP2k53vS2wujdnTug0AXnswa x9cHKP4CGCwkjVk2TjUY9wyawXli8YB+5yvzo9QNpUw4uFffUFCMiJezFWeQQTC1 VGBLpVkwgXHderTJ+9cy3vWa4MUagsMNVQLpTYmq9JP9 -----END CERTIFICATE-----Generated at Tue Jan 20 00:01:15 2026 by rpki-client