This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/N70XxhXahOWN-bJRkQuA6R5YciE.roa File: N70XxhXahOWN-bJRkQuA6R5YciE.roa (raw, json) Hash identifier: 1GAH9fBjTX1tIK3p8QgIIyWRcnIPBnAOKx1/G/At2X4= Subject key identifier: 37:BD:17:C6:15:DA:84:E5:8D:F9:B2:51:91:0B:80:E9:1E:58:72:21 Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Certificate serial: 019B7758EBBD8AC41D946D4A7213D53E767D Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/N70XxhXahOWN-bJRkQuA6R5YciE.roa Signing time: Thu 01 Jan 2026 02:17:54 +0000 ROA not before: Thu 01 Jan 2026 02:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 5.134.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:eb:bd:8a:c4:1d:94:6d:4a:72:13:d5:3e:76:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Validity Not Before: Jan 1 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37bd17c615da84e58df9b251910b80e91e587221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:46:32:92:32:47:e7:0e:fc:a0:5e:c2:50:54: f6:81:ca:f5:9e:4c:c6:58:e3:f5:cf:17:a0:8e:a9: b1:26:54:4c:c7:1f:8a:04:1f:5e:40:09:26:20:d6: 30:da:07:c2:93:f3:e6:54:a5:2a:81:a8:17:2f:92: dc:63:9b:e4:45:bb:77:49:aa:0c:02:83:91:da:e5: 4a:c9:cd:95:f5:31:29:54:1e:e4:4d:fc:60:68:46: 6c:9c:9c:2e:5b:05:35:9e:dc:0f:bb:a9:20:4c:70: c2:1c:d1:ed:26:b4:16:ca:61:8b:b2:df:49:a9:1c: c4:6f:5a:bb:69:8a:a0:2f:8a:d1:f7:4b:40:38:54: 92:3b:25:bb:5c:63:d9:12:33:f9:0f:a4:5e:ff:41: 35:ca:0b:a6:ad:ba:fa:d4:5d:40:19:40:d5:bd:46: fb:ec:4e:d8:74:a6:9f:8a:ec:78:88:a0:26:28:96: 0a:5e:e8:14:51:75:66:5d:ff:fa:dd:85:10:d7:41: ab:7f:f7:a3:a3:4f:4c:4e:8b:4f:b4:a7:fc:76:3d: 98:a2:8f:40:b7:65:8f:eb:a0:79:55:9a:6f:9e:26: d3:13:cc:de:46:8f:f6:ad:16:25:52:22:7a:bb:6d: 93:27:24:be:c6:13:66:b3:e6:1b:c5:ad:15:6f:72: 4e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BD:17:C6:15:DA:84:E5:8D:F9:B2:51:91:0B:80:E9:1E:58:72:21 X509v3 Authority Key Identifier: keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/N70XxhXahOWN-bJRkQuA6R5YciE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.134.80.0/22 Signature Algorithm: sha256WithRSAEncryption b4:9c:fc:e8:3e:b9:35:aa:4b:68:e1:59:03:68:6d:48:17:61: 47:c4:ee:9e:b9:0b:0f:63:d7:7e:fa:da:fc:71:da:c0:58:01: c7:fc:f9:cc:7c:b1:05:ab:14:31:de:08:24:e9:0d:cb:27:93: 2d:94:ba:67:2e:c7:87:ee:86:f6:e7:18:64:07:80:a2:b6:7e: e0:76:c8:40:58:49:db:e3:66:f1:1d:3b:4c:c8:eb:29:02:9d: 1f:51:49:5b:22:1c:e4:b5:71:b9:c0:c1:a8:c0:ab:64:8f:3c: 21:b1:32:0c:84:18:b5:ce:1f:35:b9:64:62:73:15:1a:50:ee: a4:e0:f3:ec:5f:eb:c5:19:7d:6d:97:9c:f8:2a:7e:1b:19:03: c1:7d:60:96:fd:b4:6b:f6:05:c6:3c:c9:3c:85:1d:df:21:66: c9:4e:49:84:8c:77:74:23:33:5e:92:12:5a:ec:64:e5:41:6b: c6:03:ad:17:b1:12:22:c4:53:33:dc:0c:6d:8e:82:f1:39:48: 95:1a:03:44:59:d4:cd:0b:c6:ec:4d:95:43:45:bc:e8:88:cd: b7:1d:cc:2a:20:1a:b2:ad:de:e5:2c:38:9f:b2:b3:79:6a:21: c8:25:5f:66:74:df:e9:37:e9:e2:d7:bd:a7:b5:83:b7:7d:eb: 2b:e1:a6:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WOu9isQdlG1KchPVPnZ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1 ZjU2NzQwHhcNMjYwMTAxMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2JkMTdjNjE1ZGE4NGU1OGRmOWIyNTE5MTBiODBlOTFlNTg3MjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUYykjJH5w78oF7CUFT2gcr1nkzG WOP1zxegjqmxJlRMxx+KBB9eQAkmINYw2gfCk/PmVKUqgagXL5LcY5vkRbt3SaoM AoOR2uVKyc2V9TEpVB7kTfxgaEZsnJwuWwU1ntwPu6kgTHDCHNHtJrQWymGLst9J qRzEb1q7aYqgL4rR90tAOFSSOyW7XGPZEjP5D6Re/0E1ygumrbr61F1AGUDVvUb7 7E7YdKafiux4iKAmKJYKXugUUXVmXf/63YUQ10Grf/ejo09MTotPtKf8dj2Yoo9A t2WP66B5VZpvnibTE8zeRo/2rRYlUiJ6u22TJyS+xhNms+Ybxa0Vb3JOgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDe9F8YV2oTljfmyUZELgOkeWHIhMB8GA1UdIwQY MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt MWZjMTllYTczYTJhLzEvTjcwWHhoWGFoT1dOLWJKUmtRdUE2UjVZY2lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBYZQMA0G CSqGSIb3DQEBCwUAA4IBAQC0nPzoPrk1qkto4VkDaG1IF2FHxO6euQsPY9d++tr8 cdrAWAHH/PnMfLEFqxQx3ggk6Q3LJ5MtlLpnLseH7ob25xhkB4Citn7gdshAWEnb 42bxHTtMyOspAp0fUUlbIhzktXG5wMGowKtkjzwhsTIMhBi1zh81uWRicxUaUO6k 4PPsX+vFGX1tl5z4Kn4bGQPBfWCW/bRr9gXGPMk8hR3fIWbJTkmEjHd0IzNekhJa 7GTlQWvGA60XsRIixFMz3AxtjoLxOUiVGgNEWdTNC8bsTZVDRbzoiM23HcwqIBqy rd7lLDifsrN5aiHIJV9mdN/pN+ni172ntYO3fesr4ab1 -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:57 2026 by rpki-client