This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/IlmmCphtbxCSj-g8MGUHlc5fMJI.roa File: IlmmCphtbxCSj-g8MGUHlc5fMJI.roa (raw, json) Hash identifier: ogImPjEXfsHsVXyMK+YnBJnOYbD+aI/1HsAtRVA/WoY= Subject key identifier: 22:59:A6:0A:98:6D:6F:10:92:8F:E8:3C:30:65:07:95:CE:5F:30:92 Certificate issuer: /CN=44a88637498b188fc0bceae0bbf0681761a49d4b Certificate serial: 019B7B3650C9639C8C4E21D2A6053CDC8B6D Authority key identifier: 44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/IlmmCphtbxCSj-g8MGUHlc5fMJI.roa Signing time: Thu 01 Jan 2026 20:18:35 +0000 ROA not before: Thu 01 Jan 2026 20:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6830 IP address blocks: 5.133.162.0/24 maxlen: 24 5.133.163.0/24 maxlen: 24 5.133.164.0/24 maxlen: 24 5.133.165.0/24 maxlen: 24 5.133.166.0/24 maxlen: 24 5.133.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:50:c9:63:9c:8c:4e:21:d2:a6:05:3c:dc:8b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44a88637498b188fc0bceae0bbf0681761a49d4b Validity Not Before: Jan 1 20:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2259a60a986d6f10928fe83c30650795ce5f3092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f3:c5:34:f9:f2:60:29:f9:5d:b0:58:da:2b: 77:6c:82:1b:a9:c7:46:52:b9:ca:c6:6f:8d:c2:d7: e3:91:9a:eb:65:ac:07:76:bd:e3:26:a0:e5:8a:ff: 32:2f:0b:49:f2:0f:65:1e:4c:c5:87:ad:df:31:0b: 4e:c2:8b:84:c0:7a:52:28:b5:cf:42:5c:b7:b3:74: 98:d8:8e:b8:79:0b:a1:8a:80:74:6e:bb:75:92:05: b4:db:56:e4:fd:a4:c1:ed:13:a4:a5:be:a6:28:3a: 69:73:24:a2:f0:af:74:d9:5d:ff:08:df:20:ca:3e: e1:e7:69:be:e1:47:3b:1e:40:6f:31:30:e3:13:dc: 84:f1:05:45:1d:af:89:4f:61:62:46:90:05:a9:71: a3:a9:10:70:ca:f3:e6:b4:0c:20:58:d7:8c:43:b7: a3:24:1c:f3:13:31:e7:21:8c:d7:a6:e1:02:a9:9d: d6:b4:c5:de:14:4f:d7:58:69:f6:ba:d5:e0:4d:de: a3:51:eb:9c:fd:8d:d5:42:0d:34:b1:6a:bd:b3:c5: a3:7d:cc:af:12:2c:91:bf:b2:20:65:22:a6:8f:3e: 58:37:0f:94:f6:73:5d:83:01:9d:e0:e7:88:37:5a: 35:08:be:35:fb:92:1b:70:eb:90:2e:95:10:a5:4e: eb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:59:A6:0A:98:6D:6F:10:92:8F:E8:3C:30:65:07:95:CE:5F:30:92 X509v3 Authority Key Identifier: keyid:44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/IlmmCphtbxCSj-g8MGUHlc5fMJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.162.0-5.133.167.255 Signature Algorithm: sha256WithRSAEncryption 17:49:8d:8a:b4:03:d6:5b:67:f8:8a:7c:dd:5e:87:11:85:89: 98:f1:5b:93:47:9c:62:b8:dd:e4:65:46:ea:4f:46:a4:16:c4: 48:7b:36:ce:a0:4a:55:d7:31:3a:19:64:93:e2:fc:a3:68:4c: b9:27:79:af:80:1f:5f:81:db:b0:49:79:46:3f:fd:8d:32:02: fa:5f:02:a5:57:b7:15:c3:f9:63:60:b9:50:a6:fd:4c:d8:99: d4:b7:0c:cb:df:1b:a3:49:a2:57:12:09:11:a2:9e:b1:54:d8: 02:6d:ea:ea:a3:0c:55:0d:16:fb:34:1f:7f:6b:ef:a6:2d:57: df:ef:0a:f1:cb:e8:c2:0a:03:9e:1e:ef:24:6b:3f:3d:aa:e8: c5:d0:ef:d9:15:de:21:b1:e0:e3:ff:a6:9b:45:37:87:ce:17: ac:71:2b:7f:97:66:b0:05:8e:2c:e0:9d:d6:f4:96:c5:ad:da: 99:79:97:84:ac:e2:c1:dc:28:02:5a:a1:79:f7:fd:09:4e:60: 03:6b:2a:f5:0f:3d:8f:1e:a4:16:d7:3f:fe:99:bc:cb:fb:33: 60:42:09:9b:13:32:5c:14:25:23:5f:99:18:71:15:79:b3:4d: 94:4d:87:f7:f5:2f:7d:ef:c3:5d:a3:ca:88:53:35:48:ff:4d: 8f:fa:83:4f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NlDJY5yMTiHSpgU83IttMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YTg4NjM3NDk4YjE4OGZjMGJjZWFlMGJiZjA2ODE3NjFh NDlkNGIwHhcNMjYwMTAxMjAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjU5YTYwYTk4NmQ2ZjEwOTI4ZmU4M2MzMDY1MDc5NWNlNWYzMDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvPFNPnyYCn5XbBY2it3bIIbqcdG UrnKxm+NwtfjkZrrZawHdr3jJqDliv8yLwtJ8g9lHkzFh63fMQtOwouEwHpSKLXP Qly3s3SY2I64eQuhioB0brt1kgW021bk/aTB7ROkpb6mKDppcySi8K902V3/CN8g yj7h52m+4Uc7HkBvMTDjE9yE8QVFHa+JT2FiRpAFqXGjqRBwyvPmtAwgWNeMQ7ej JBzzEzHnIYzXpuECqZ3WtMXeFE/XWGn2utXgTd6jUeuc/Y3VQg00sWq9s8Wjfcyv EiyRv7IgZSKmjz5YNw+U9nNdgwGd4OeIN1o1CL41+5IbcOuQLpUQpU7ruwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCJZpgqYbW8Qko/oPDBlB5XOXzCSMB8GA1UdIwQY MBaAFESohjdJixiPwLzq4LvwaBdhpJ1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUktpR04wbUxHSV9Bdk9yZ3VfQm9GMkdrblVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS81YmU4MGItMzM4Mi00NDQ4LWExY2Mt ZGNhMDQyNzBiOWQ1LzEvSWxtbUNwaHRieENTai1nOE1HVUhsYzVmTUpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS81YmU4MGItMzM4Mi00NDQ4LWExY2MtZGNhMDQyNzBiOWQ1 LzEvUktpR04wbUxHSV9Bdk9yZ3VfQm9GMkdrblVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAEFhaID BAMFhaAwDQYJKoZIhvcNAQELBQADggEBABdJjYq0A9ZbZ/iKfN1ehxGFiZjxW5NH nGK43eRlRupPRqQWxEh7Ns6gSlXXMToZZJPi/KNoTLknea+AH1+B27BJeUY//Y0y AvpfAqVXtxXD+WNguVCm/UzYmdS3DMvfG6NJolcSCRGinrFU2AJt6uqjDFUNFvs0 H39r76YtV9/vCvHL6MIKA54e7yRrPz2q6MXQ79kV3iGx4OP/pptFN4fOF6xxK3+X ZrAFjizgndb0lsWt2pl5l4Ss4sHcKAJaoXn3/QlOYANrKvUPPY8epBbXP/6ZvMv7 M2BCCZsTMlwUJSNfmRhxFXmzTZRNh/f1L33vw12jyohTNUj/TY/6g08= -----END CERTIFICATE-----Generated at Wed Jan 21 04:57:27 2026 by rpki-client