This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5aqaCYK3E0ACVF3yThZ0PGnwkQc.roa File: 5aqaCYK3E0ACVF3yThZ0PGnwkQc.roa (raw, json) Hash identifier: rxMxaIbdJTnPEZZSMeP7Gn7C7+q8BIeuq6E4BsS/KTE= Subject key identifier: E5:AA:9A:09:82:B7:13:40:02:54:5D:F2:4E:16:74:3C:69:F0:91:07 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F85403EFA3889DC5E4F7A282AD56EA6 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5aqaCYK3E0ACVF3yThZ0PGnwkQc.roa Signing time: Fri 02 Jan 2026 16:23:17 +0000 ROA not before: Fri 02 Jan 2026 16:23:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202469 IP address blocks: 5.180.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:40:3e:fa:38:89:dc:5e:4f:7a:28:2a:d5:6e:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5aa9a0982b7134002545df24e16743c69f09107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:59:84:59:a9:a4:7e:5e:5d:57:42:3d:c5:7f: 6a:8d:16:0a:bd:fc:ff:b1:a1:e9:4d:14:a0:f6:ca: 1b:10:72:57:b1:c2:a2:fd:ce:bc:57:31:45:7e:dc: 9d:99:22:d4:af:bf:4b:0a:45:5c:0a:af:ae:5c:a4: 12:db:f1:da:27:94:c5:2c:01:61:6c:4f:94:8a:c0: 95:d9:3f:09:d4:5f:3b:30:fc:41:88:b5:0f:e2:d4: 18:fe:3d:e4:13:55:a5:86:2c:5b:4d:41:7e:88:2e: c9:98:c5:6a:2e:e6:9f:02:00:01:fb:76:9d:ce:71: 9c:46:b8:c5:9b:22:c2:73:e8:27:33:86:62:91:7c: 24:31:f4:89:84:ed:bd:00:06:6c:41:bc:58:2b:b8: 30:d4:eb:87:07:85:93:57:51:8a:30:5f:bf:47:c8: 02:35:b3:a5:a9:36:c8:b5:48:49:ed:7e:e2:25:1f: 99:b9:b2:be:d0:9c:43:30:ac:49:d5:a3:62:f7:8f: 64:ba:21:c7:66:71:c6:44:73:2c:b5:53:82:a9:4b: e9:21:8c:20:d0:c8:d8:26:af:4e:2c:62:cd:96:41: 08:a2:ca:ce:3b:ba:96:51:eb:11:c0:a9:c4:c7:f5: 06:e9:1b:80:2b:5c:a9:64:0d:5a:27:51:91:7a:df: c3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AA:9A:09:82:B7:13:40:02:54:5D:F2:4E:16:74:3C:69:F0:91:07 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5aqaCYK3E0ACVF3yThZ0PGnwkQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.4.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:7d:d4:cc:ee:45:70:b7:25:1c:57:7d:eb:07:e3:60:6a:c0: ff:ad:44:08:75:c2:f0:04:6e:1a:ce:b5:42:5f:fa:fc:e3:4e: 80:e4:aa:20:67:63:b2:56:ad:24:89:1e:7a:4c:58:b4:6b:09: d7:9d:21:82:de:d4:1c:ae:9b:4c:95:cb:18:45:fa:64:b4:f8: ea:3f:91:61:fe:a8:51:7b:f2:17:8e:3d:8e:40:fb:ba:bd:2e: 2a:e0:e9:11:b4:47:a5:cc:35:b9:a9:b0:c8:50:ba:d5:6a:06: 73:bd:4d:c3:88:25:a3:2d:9b:40:18:c4:61:b6:19:17:a5:5b: 9a:27:8e:fa:c6:1a:da:13:cd:d9:25:7a:ad:6b:37:0d:13:25: 53:96:b7:90:29:d1:a1:df:4f:dc:43:e3:41:96:00:78:5e:da: cc:9f:54:74:90:28:3a:c5:f8:d0:c2:9f:73:bd:23:60:5c:72: fe:49:4b:c8:02:89:0b:20:3f:52:61:4e:ef:67:72:b8:40:a2: ba:f2:8b:92:cf:30:5a:e2:f2:0b:e9:6a:78:08:de:d1:65:b9: 31:91:44:fd:70:58:f7:4b:94:e5:47:95:ba:38:4f:a3:57:8c: 27:1b:6c:3f:5f:1c:d2:72:56:b2:39:4c:75:f2:a2:b9:ac:d6: 02:0c:df:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hUA++jiJ3F5Peigq1W6mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWFhOWEwOTgyYjcxMzQwMDI1NDVkZjI0ZTE2NzQzYzY5ZjA5MTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1mEWamkfl5dV0I9xX9qjRYKvfz/ saHpTRSg9sobEHJXscKi/c68VzFFftydmSLUr79LCkVcCq+uXKQS2/HaJ5TFLAFh bE+UisCV2T8J1F87MPxBiLUP4tQY/j3kE1WlhixbTUF+iC7JmMVqLuafAgAB+3ad znGcRrjFmyLCc+gnM4ZikXwkMfSJhO29AAZsQbxYK7gw1OuHB4WTV1GKMF+/R8gC NbOlqTbItUhJ7X7iJR+ZubK+0JxDMKxJ1aNi949kuiHHZnHGRHMstVOCqUvpIYwg 0MjYJq9OLGLNlkEIosrOO7qWUesRwKnEx/UG6RuAK1ypZA1aJ1GRet/DjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOWqmgmCtxNAAlRd8k4WdDxp8JEHMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvNWFxYUNZSzNFMEFDVkYzeVRoWjBQR253a1FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbQEMA0G CSqGSIb3DQEBCwUAA4IBAQBafdTM7kVwtyUcV33rB+NgasD/rUQIdcLwBG4azrVC X/r8406A5KogZ2OyVq0kiR56TFi0awnXnSGC3tQcrptMlcsYRfpktPjqP5Fh/qhR e/IXjj2OQPu6vS4q4OkRtEelzDW5qbDIULrVagZzvU3DiCWjLZtAGMRhthkXpVua J476xhraE83ZJXqtazcNEyVTlreQKdGh30/cQ+NBlgB4XtrMn1R0kCg6xfjQwp9z vSNgXHL+SUvIAokLID9SYU7vZ3K4QKK68ouSzzBa4vIL6Wp4CN7RZbkxkUT9cFj3 S5TlR5W6OE+jV4wnG2w/XxzSclayOUx18qK5rNYCDN/L -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:21 2026 by rpki-client