This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/NeWYCfJtoNsBp5rdgu-Nuzmzh6E.roa File: NeWYCfJtoNsBp5rdgu-Nuzmzh6E.roa (raw, json) Hash identifier: jj46NUxQW2FGaQf4sxNxJ1Qys7+IMBV+yHi+2/HMAH4= Subject key identifier: 35:E5:98:09:F2:6D:A0:DB:01:A7:9A:DD:82:EF:8D:BB:39:B3:87:A1 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB8AFCC94F75A516B6D237F5A1D17B Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/NeWYCfJtoNsBp5rdgu-Nuzmzh6E.roa Signing time: Fri 02 Jan 2026 08:20:49 +0000 ROA not before: Fri 02 Jan 2026 08:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397373 IP address blocks: 5.182.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:8a:fc:c9:4f:75:a5:16:b6:d2:37:f5:a1:d1:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35e59809f26da0db01a79add82ef8dbb39b387a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:10:41:6d:79:e2:5b:28:1c:e1:eb:d7:ef:d4: 6e:65:c1:bb:c3:be:05:e6:48:7b:fb:c6:1f:f7:b7: 9c:2c:87:9f:23:a8:ee:23:f3:52:24:6f:a1:1a:4a: 5c:ae:b0:1a:0d:03:31:b8:76:72:63:4d:6c:96:46: 87:1c:58:52:ed:44:8a:d2:70:25:5b:5f:4b:96:b8: 11:14:19:bd:5a:c2:ff:0b:63:42:25:54:12:4d:95: ba:a7:73:86:4f:26:f9:c6:1f:78:50:06:69:81:04: ed:d2:c3:ca:80:5b:f6:82:e4:2b:ea:af:4d:28:48: 90:99:ca:08:d6:0b:68:42:74:d5:2b:3d:bc:18:cb: 53:86:57:0e:8a:60:cc:95:49:44:dc:c4:58:a5:3a: 74:f8:fa:9a:57:01:4b:d1:fc:68:b6:4b:ff:32:cf: 06:af:1d:91:e3:2b:fe:37:07:a1:56:88:85:90:69: 12:cb:9b:ca:12:b1:f1:cf:03:f4:20:fd:a2:f3:58: b4:50:c1:fb:cd:34:5b:49:ac:0f:98:5f:ff:4a:dd: 28:84:85:ef:63:fd:8f:0b:c5:e2:89:c6:c0:73:e0: 1c:60:6a:3d:e2:07:1e:4f:06:29:f7:d6:6d:4d:eb: db:56:0f:2a:5f:c2:9c:09:d3:0b:d0:20:0d:0b:d7: 9f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E5:98:09:F2:6D:A0:DB:01:A7:9A:DD:82:EF:8D:BB:39:B3:87:A1 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/NeWYCfJtoNsBp5rdgu-Nuzmzh6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.118.0/23 Signature Algorithm: sha256WithRSAEncryption 18:9b:e4:4e:6d:82:50:95:d1:78:3c:e1:5e:8a:45:d9:ea:80: 32:b5:58:0e:e6:b0:dd:af:8f:31:2c:9b:da:7e:c3:02:bd:f8: a0:7d:e4:39:c8:9b:fe:ea:f1:1a:ba:f0:65:66:d6:3e:84:5a: e6:a2:ad:5f:a2:37:ab:82:50:12:68:a5:2b:ea:6d:56:a4:4d: b0:ac:15:2d:97:2f:2b:8d:5a:37:d2:b7:a6:8e:d7:1e:98:b5: 7c:c5:3b:90:21:ef:c6:af:ed:1c:36:d4:b9:21:09:7d:3e:aa: 5b:18:20:4a:05:5e:e2:31:9b:1c:a4:ce:5a:b3:c4:57:18:47: fa:5a:a1:66:b9:b5:8c:36:8a:37:a6:53:62:f6:3c:06:94:d5: 7b:f0:4e:8b:0f:21:65:6b:cb:4b:5b:7c:70:ce:45:0c:2e:e9: eb:83:5f:3c:38:1a:eb:c4:13:ee:f8:69:87:ff:d1:f9:f6:c5: 0c:6a:85:d4:61:d8:bd:84:89:b0:d6:61:93:ad:ff:49:99:39: 87:ec:e7:ff:57:84:01:b6:00:7e:aa:25:9f:67:78:0a:a3:97: 0a:94:17:7c:e9:69:2b:02:27:13:95:f8:d7:62:3e:1a:7a:b9: 61:e2:34:8e:d3:6d:82:ef:5a:c3:c0:a6:a3:0d:89:40:66:d6: fc:0f:62:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y4r8yU91pRa20jf1odF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWU1OTgwOWYyNmRhMGRiMDFhNzlhZGQ4MmVmOGRiYjM5YjM4N2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthBBbXniWygc4evX79RuZcG7w74F 5kh7+8Yf97ecLIefI6juI/NSJG+hGkpcrrAaDQMxuHZyY01slkaHHFhS7USK0nAl W19LlrgRFBm9WsL/C2NCJVQSTZW6p3OGTyb5xh94UAZpgQTt0sPKgFv2guQr6q9N KEiQmcoI1gtoQnTVKz28GMtThlcOimDMlUlE3MRYpTp0+PqaVwFL0fxotkv/Ms8G rx2R4yv+NwehVoiFkGkSy5vKErHxzwP0IP2i81i0UMH7zTRbSawPmF//St0ohIXv Y/2PC8XiicbAc+AcYGo94gceTwYp99ZtTevbVg8qX8KcCdML0CANC9efsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDXlmAnybaDbAaea3YLvjbs5s4ehMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvTmVXWUNmSnRvTnNCcDVyZGd1LU51em16aDZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBbZ2MA0G CSqGSIb3DQEBCwUAA4IBAQAYm+RObYJQldF4POFeikXZ6oAytVgO5rDdr48xLJva fsMCvfigfeQ5yJv+6vEauvBlZtY+hFrmoq1fojerglASaKUr6m1WpE2wrBUtly8r jVo30remjtcemLV8xTuQIe/Gr+0cNtS5IQl9PqpbGCBKBV7iMZscpM5as8RXGEf6 WqFmubWMNoo3plNi9jwGlNV78E6LDyFla8tLW3xwzkUMLunrg188OBrrxBPu+GmH /9H59sUMaoXUYdi9hImw1mGTrf9JmTmH7Of/V4QBtgB+qiWfZ3gKo5cKlBd86Wkr AicTlfjXYj4aerlh4jSO022C71rDwKajDYlAZtb8D2KD -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:52 2026 by rpki-client