This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/Y5g5oBOGc1untW-b8R0nkKOlMYM.roa File: Y5g5oBOGc1untW-b8R0nkKOlMYM.roa (raw, json) Hash identifier: zoXYFGWu10XAJabbTcHy0gp5U0/ZFRaMgSjLnS5OevA= Subject key identifier: 63:98:39:A0:13:86:73:5B:A7:B5:6F:9B:F1:1D:27:90:A3:A5:31:83 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 019B77C67C09BDD2ADB71009B2ADF3C81C84 Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/Y5g5oBOGc1untW-b8R0nkKOlMYM.roa Signing time: Thu 01 Jan 2026 04:17:35 +0000 ROA not before: Thu 01 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 5.249.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7c:09:bd:d2:ad:b7:10:09:b2:ad:f3:c8:1c:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=639839a01386735ba7b56f9bf11d2790a3a53183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:63:af:46:b6:ee:a7:47:81:bc:e7:eb:dc:23: c9:28:6e:fd:8d:c9:64:99:91:59:d4:dc:80:d6:32: 2e:10:04:6a:3e:99:94:9a:05:13:d1:a2:f5:de:f8: ba:26:81:66:47:ed:5c:fc:76:94:04:a3:95:3c:69: 9e:3b:18:fe:09:c7:d3:35:9c:31:ef:9c:54:ce:5e: f0:6c:cf:2e:f1:5b:57:6a:bb:c6:f5:96:f2:3e:ed: 84:ff:f2:c0:6a:61:8e:4c:ce:f7:13:d9:36:d9:24: 20:7f:5b:7e:b7:4c:b8:8c:45:34:83:50:ad:95:b7: f5:7a:1c:d6:6b:a0:ae:1c:0d:7d:fb:a4:2d:96:cc: 02:b3:88:93:db:ac:e3:14:ce:c3:34:0a:65:ba:2f: 16:d8:75:2a:2f:8b:f0:d6:56:42:2c:d8:ef:e0:0c: 64:37:8f:6a:d7:5d:92:89:0c:b8:bb:97:44:50:bc: 91:f5:c8:d5:1a:2f:3c:7a:e8:cf:03:ed:e9:18:00: ac:a0:94:dd:43:0a:05:94:88:29:da:71:79:e9:4a: 0c:11:46:9b:a9:f5:34:c9:17:91:9c:11:18:0b:c0: d5:66:39:3f:20:fe:57:8e:c0:97:a9:3d:08:10:09: 76:e0:22:31:0c:08:0d:c4:48:89:a8:46:b0:99:d5: 17:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:98:39:A0:13:86:73:5B:A7:B5:6F:9B:F1:1D:27:90:A3:A5:31:83 X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/Y5g5oBOGc1untW-b8R0nkKOlMYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.249.188.0/22 Signature Algorithm: sha256WithRSAEncryption ca:e1:c2:ad:8f:8f:00:3e:ea:2b:45:e5:12:4a:af:4e:ee:72: be:5f:ef:35:5c:1a:b7:ab:5a:83:57:54:16:75:62:02:fd:d1: 84:69:4d:57:ff:c1:15:fc:92:90:2d:ce:db:d3:c7:13:16:d6: 57:ea:b5:9b:de:ef:36:9b:a0:93:b0:1f:71:60:65:20:b5:d5: b4:f3:f8:b9:68:4c:0d:4d:b1:8e:9f:b6:18:3d:c7:1d:10:4c: fd:d9:f4:24:ad:c4:90:af:9b:56:ab:db:33:31:a0:8b:af:55: a1:4e:54:31:c8:0e:61:54:81:bf:9d:33:4b:80:4b:b3:de:52: 06:83:fb:60:ee:f9:c3:5b:65:fe:e5:2b:a0:68:70:bf:b3:ec: 4c:4d:7f:d2:fb:6e:65:54:a1:7c:05:36:d1:cf:5d:37:b3:4f: 0d:65:a5:77:08:25:39:09:b3:17:bc:00:83:09:54:56:10:d9: 76:b4:c7:a4:af:f7:eb:62:eb:01:ae:27:1a:2e:ce:9f:b3:7c: 3a:6e:9e:d8:5f:11:39:d1:5d:f3:0c:8f:fa:da:87:aa:b2:39: 7c:5a:6e:4b:2f:be:4c:df:86:48:63:6c:d3:34:8e:1b:d2:b6: 34:b2:79:d3:0e:29:ef:23:56:32:b5:77:72:f5:a8:1a:a8:86: 0d:13:15:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xnwJvdKttxAJsq3zyByEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mzk4MzlhMDEzODY3MzViYTdiNTZmOWJmMTFkMjc5MGEzYTUzMTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWOvRrbup0eBvOfr3CPJKG79jclk mZFZ1NyA1jIuEARqPpmUmgUT0aL13vi6JoFmR+1c/HaUBKOVPGmeOxj+CcfTNZwx 75xUzl7wbM8u8VtXarvG9ZbyPu2E//LAamGOTM73E9k22SQgf1t+t0y4jEU0g1Ct lbf1ehzWa6CuHA19+6QtlswCs4iT26zjFM7DNAplui8W2HUqL4vw1lZCLNjv4Axk N49q112SiQy4u5dEULyR9cjVGi88eujPA+3pGACsoJTdQwoFlIgp2nF56UoMEUab qfU0yReRnBEYC8DVZjk/IP5XjsCXqT0IEAl24CIxDAgNxEiJqEawmdUXrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGOYOaAThnNbp7Vvm/EdJ5CjpTGDMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvWTVnNW9CT0djMXVudFctYjhSMG5rS09sTVlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBfm8MA0G CSqGSIb3DQEBCwUAA4IBAQDK4cKtj48APuorReUSSq9O7nK+X+81XBq3q1qDV1QW dWIC/dGEaU1X/8EV/JKQLc7b08cTFtZX6rWb3u82m6CTsB9xYGUgtdW08/i5aEwN TbGOn7YYPccdEEz92fQkrcSQr5tWq9szMaCLr1WhTlQxyA5hVIG/nTNLgEuz3lIG g/tg7vnDW2X+5SugaHC/s+xMTX/S+25lVKF8BTbRz103s08NZaV3CCU5CbMXvACD CVRWENl2tMekr/frYusBricaLs6fs3w6bp7YXxE50V3zDI/62oeqsjl8Wm5LL75M 34ZIY2zTNI4b0rY0snnTDinvI1YytXdy9agaqIYNExUK -----END CERTIFICATE-----Generated at Mon Jan 19 11:50:04 2026 by rpki-client