This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/vCOPMFkl8obfC07LcU3kLQqvM5g.roa File: vCOPMFkl8obfC07LcU3kLQqvM5g.roa (raw, json) Hash identifier: HDgUGi8EO5teQ0Pnr2hWI83xWKcDqJU1uA73vyitS80= Subject key identifier: BC:23:8F:30:59:25:F2:86:DF:0B:4E:CB:71:4D:E4:2D:0A:AF:33:98 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E381CBF54E4A9F9580B6124196D9FAB Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/vCOPMFkl8obfC07LcU3kLQqvM5g.roa Signing time: Fri 02 Jan 2026 10:19:25 +0000 ROA not before: Fri 02 Jan 2026 10:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39238 IP address blocks: 5.188.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1c:bf:54:e4:a9:f9:58:0b:61:24:19:6d:9f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc238f305925f286df0b4ecb714de42d0aaf3398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1d:8b:fd:e8:86:99:d2:82:e2:3d:76:d9:54: 5a:9e:f3:36:67:b1:46:11:a4:73:10:e0:7c:2c:80: 7b:fc:12:fd:73:40:11:61:eb:a4:8f:4b:92:ad:90: 8d:6e:c8:46:5f:f4:b4:82:ad:a8:7e:8f:f1:89:b6: 3a:39:5c:cf:ff:de:b7:50:e2:7b:97:6e:bf:00:df: 56:f4:bd:b8:8b:14:91:9e:be:99:51:35:37:c5:2c: 14:69:fa:41:a6:84:b7:95:3d:6c:0d:57:60:2d:c0: e4:1c:40:62:9c:b9:71:f6:80:77:3a:15:5f:4e:41: fb:f7:8d:ea:25:40:47:59:39:52:00:b2:d1:8f:ef: 95:7e:7f:86:c3:e9:a8:31:4d:43:eb:09:5b:22:58: 62:aa:a3:db:18:49:6f:a0:55:5c:c1:dc:48:15:1d: 49:81:54:a8:b4:16:0e:bf:7d:59:4a:69:72:75:a7: 22:33:06:b3:5a:64:44:b6:4c:b6:6a:32:8d:99:8e: e7:84:f6:7e:d9:bc:45:ec:29:3b:c9:9b:f9:27:2b: 08:d8:f9:05:16:a3:98:52:cb:a7:76:89:f9:5a:03: fb:d2:74:d3:ff:7d:9a:0a:35:b8:7b:f1:62:62:8b: f2:eb:64:e0:4c:01:16:9a:82:10:87:e4:5d:90:87: 47:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:23:8F:30:59:25:F2:86:DF:0B:4E:CB:71:4D:E4:2D:0A:AF:33:98 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/vCOPMFkl8obfC07LcU3kLQqvM5g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.188.164.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:0a:04:62:eb:97:64:ca:5d:b4:ce:ee:c8:6a:e0:8e:ba:ab: 03:69:54:98:d9:33:f6:86:3b:62:cc:34:34:66:f3:c2:0f:e2: ca:55:ab:9f:16:e9:fa:23:5e:ec:72:04:01:5e:28:fa:50:ce: b2:c8:51:fe:89:db:99:02:40:8d:8f:7f:e6:a6:91:b9:e6:63: fd:a2:60:3c:27:01:5c:15:2d:14:67:5b:8a:4c:43:85:32:c7: 59:4a:ee:eb:f4:59:63:75:a8:34:39:cc:ee:b0:86:13:e1:9f: 95:f2:96:e5:88:d2:c8:4a:64:67:8b:6e:c5:f6:de:fe:20:64: d0:a5:ad:63:e3:05:c4:0b:40:df:b7:60:9d:4a:55:7d:e2:c4: aa:90:76:4e:60:57:35:0e:94:15:a9:66:01:62:71:e8:4d:0e: 24:be:bb:c6:0d:d8:d7:d9:9e:72:d4:e6:ba:68:7b:e4:1c:98: fb:70:77:7c:33:0b:46:f5:e5:fd:16:1b:32:c5:f6:4b:e0:b9: 40:0a:03:2f:84:5e:da:62:7e:cd:26:78:ff:34:06:d7:15:17: e3:5d:15:5c:61:7c:00:ec:f5:af:fe:4a:d0:1c:6e:64:f7:ea: ca:cb:a5:99:34:52:68:dc:3c:ad:f0:e5:90:65:4a:0d:ca:14: 85:20:bb:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OBy/VOSp+VgLYSQZbZ+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzIzOGYzMDU5MjVmMjg2ZGYwYjRlY2I3MTRkZTQyZDBhYWYzMzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR2L/eiGmdKC4j122VRanvM2Z7FG EaRzEOB8LIB7/BL9c0ARYeukj0uSrZCNbshGX/S0gq2ofo/xibY6OVzP/963UOJ7 l26/AN9W9L24ixSRnr6ZUTU3xSwUafpBpoS3lT1sDVdgLcDkHEBinLlx9oB3OhVf TkH7943qJUBHWTlSALLRj++Vfn+Gw+moMU1D6wlbIlhiqqPbGElvoFVcwdxIFR1J gVSotBYOv31ZSmlydaciMwazWmREtky2ajKNmY7nhPZ+2bxF7Ck7yZv5JysI2PkF FqOYUsundon5WgP70nTT/32aCjW4e/FiYovy62TgTAEWmoIQh+RdkIdHzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLwjjzBZJfKG3wtOy3FN5C0KrzOYMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvdkNPUE1Ga2w4b2JmQzA3TGNVM2tMUXF2TTVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBbykMA0G CSqGSIb3DQEBCwUAA4IBAQBdCgRi65dkyl20zu7IauCOuqsDaVSY2TP2hjtizDQ0 ZvPCD+LKVaufFun6I17scgQBXij6UM6yyFH+iduZAkCNj3/mppG55mP9omA8JwFc FS0UZ1uKTEOFMsdZSu7r9Fljdag0OczusIYT4Z+V8pbliNLISmRni27F9t7+IGTQ pa1j4wXEC0Dft2CdSlV94sSqkHZOYFc1DpQVqWYBYnHoTQ4kvrvGDdjX2Z5y1Oa6 aHvkHJj7cHd8MwtG9eX9FhsyxfZL4LlACgMvhF7aYn7NJnj/NAbXFRfjXRVcYXwA 7PWv/krQHG5k9+rKy6WZNFJo3Dyt8OWQZUoNyhSFILuS -----END CERTIFICATE-----Generated at Tue Jan 20 09:21:48 2026 by rpki-client