This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/sipyhYZTDUoVqJQxzsKOL-8LAkw.roa File: sipyhYZTDUoVqJQxzsKOL-8LAkw.roa (raw, json) Hash identifier: VV0MN0WQekFnJFeON5niYNrkxCw6xaFz74ZyByZEACQ= Subject key identifier: B2:2A:72:85:86:53:0D:4A:15:A8:94:31:CE:C2:8E:2F:EF:0B:02:4C Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 019B78A22CA2759E129BD2326884AC2AA0AC Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/sipyhYZTDUoVqJQxzsKOL-8LAkw.roa Signing time: Thu 01 Jan 2026 08:17:32 +0000 ROA not before: Thu 01 Jan 2026 08:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44547 IP address blocks: 5.10.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2c:a2:75:9e:12:9b:d2:32:68:84:ac:2a:a0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Jan 1 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b22a728586530d4a15a89431cec28e2fef0b024c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:2d:58:e3:d4:8d:3d:8a:e6:f5:f0:16:ea: 3b:70:39:ab:bc:e7:1a:f5:b4:0b:e1:3f:ec:97:22: f6:1b:66:89:62:f7:91:78:a5:0d:d4:9c:8c:3f:c9: 5e:7f:83:27:4c:aa:ed:6a:20:12:ce:7d:01:a0:95: b3:70:8d:88:83:c9:d0:41:c1:67:41:8d:5c:e2:6f: cb:5c:a8:7a:4d:dd:94:41:32:9a:ea:f6:02:de:11: c7:e4:0a:50:e1:13:7c:ce:c3:2a:a4:c3:ba:18:cd: 63:27:7a:e9:c6:68:56:6d:5e:d6:a4:aa:ea:f9:33: f3:1a:9b:2c:9b:1b:e4:0e:8f:83:64:0d:da:7a:27: cc:e9:7a:10:c2:aa:61:1d:17:da:c4:be:22:9d:a2: a1:0d:17:f9:f3:e4:4d:c4:b4:9a:15:07:b3:1a:7e: 23:8c:b9:56:51:cf:15:84:b5:2a:6a:bf:d9:2d:30: 48:cb:11:24:ad:af:3f:a3:19:3d:7e:fe:6d:82:0b: 67:f5:08:70:ae:ca:36:c3:c1:70:73:57:ea:27:03: 56:76:e8:d2:d3:03:9a:8c:e4:cb:58:78:c4:39:e3: 55:a3:35:3a:77:8b:3b:53:58:86:8d:9f:b3:56:a9: ce:70:8f:d4:2f:36:00:86:1b:ee:c9:5a:9b:7b:91: 28:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2A:72:85:86:53:0D:4A:15:A8:94:31:CE:C2:8E:2F:EF:0B:02:4C X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/sipyhYZTDUoVqJQxzsKOL-8LAkw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.220.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:d8:40:21:1e:fd:55:62:cf:0e:5f:9c:56:f4:82:eb:32:7a: 5f:a7:1d:2f:92:1b:6c:60:09:5a:5a:a2:12:b0:3d:0c:67:d2: 2c:3a:66:b5:9a:26:5c:a8:4f:b2:5a:26:85:cb:92:cf:be:30: 00:f5:ce:98:53:ca:c8:cf:4c:46:44:4f:d6:cf:f5:eb:ca:2d: 50:a9:11:2d:a4:1c:7b:35:90:c7:85:b8:80:71:f5:6c:98:26: 91:11:82:60:1d:35:05:aa:80:a0:7e:5e:13:9a:5c:cf:29:cf: 8c:f5:b3:f2:64:31:52:53:67:eb:12:dd:b6:84:19:04:80:58: e0:eb:ee:a3:46:98:0a:ea:48:0c:e7:16:e7:50:6d:e4:fd:25: ae:2d:61:22:9b:f0:28:2e:1d:d8:8c:eb:24:d6:9f:2e:94:af: 04:d1:47:6c:de:f7:1c:98:9f:0b:9c:83:90:5c:df:98:75:e5: a1:a1:64:71:8d:f3:31:97:37:67:1f:13:46:10:e2:d6:bd:19: eb:f9:f5:56:43:96:27:76:f9:29:d5:4f:fb:13:51:c8:6c:58: 86:23:f9:fd:b2:43:0d:b3:4e:f3:fe:90:2d:d9:3b:57:8d:0d: 4a:df:4d:2d:be:b1:da:39:77:bb:7a:56:ac:38:b2:cc:b9:a3: 44:90:de:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oiyidZ4Sm9IyaISsKqCsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjYwMTAxMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjJhNzI4NTg2NTMwZDRhMTVhODk0MzFjZWMyOGUyZmVmMGIwMjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpEtWOPUjT2K5vXwFuo7cDmrvOca 9bQL4T/slyL2G2aJYveReKUN1JyMP8lef4MnTKrtaiASzn0BoJWzcI2Ig8nQQcFn QY1c4m/LXKh6Td2UQTKa6vYC3hHH5ApQ4RN8zsMqpMO6GM1jJ3rpxmhWbV7WpKrq +TPzGpssmxvkDo+DZA3aeifM6XoQwqphHRfaxL4inaKhDRf58+RNxLSaFQezGn4j jLlWUc8VhLUqar/ZLTBIyxEkra8/oxk9fv5tggtn9Qhwrso2w8Fwc1fqJwNWdujS 0wOajOTLWHjEOeNVozU6d4s7U1iGjZ+zVqnOcI/ULzYAhhvuyVqbe5EoIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLIqcoWGUw1KFaiUMc7Cji/vCwJMMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvc2lweWhZWlREVW9WcUpReHpzS09MLThMQWt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQrcMA0G CSqGSIb3DQEBCwUAA4IBAQBb2EAhHv1VYs8OX5xW9ILrMnpfpx0vkhtsYAlaWqIS sD0MZ9IsOma1miZcqE+yWiaFy5LPvjAA9c6YU8rIz0xGRE/Wz/Xryi1QqREtpBx7 NZDHhbiAcfVsmCaREYJgHTUFqoCgfl4TmlzPKc+M9bPyZDFSU2frEt22hBkEgFjg 6+6jRpgK6kgM5xbnUG3k/SWuLWEim/AoLh3YjOsk1p8ulK8E0Uds3vccmJ8LnIOQ XN+YdeWhoWRxjfMxlzdnHxNGEOLWvRnr+fVWQ5Yndvkp1U/7E1HIbFiGI/n9skMN s07z/pAt2TtXjQ1K300tvrHaOXe7elasOLLMuaNEkN4+ -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:21 2026 by rpki-client