This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/xONbiFdv7WgdPOzaSwULCD22ElY.roa File: xONbiFdv7WgdPOzaSwULCD22ElY.roa (raw, json) Hash identifier: Ekujh3YjMgKH3iZJ1wo4eY8GMUVTfT7Ex6aMEVCo3TE= Subject key identifier: C4:E3:5B:88:57:6F:ED:68:1D:3C:EC:DA:4B:05:0B:08:3D:B6:12:56 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019B7D5CFD3043857CE4DB4CD6D05DCBEAC3 Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/xONbiFdv7WgdPOzaSwULCD22ElY.roa Signing time: Fri 02 Jan 2026 06:20:04 +0000 ROA not before: Fri 02 Jan 2026 06:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42689 IP address blocks: 5.134.192.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fd:30:43:85:7c:e4:db:4c:d6:d0:5d:cb:ea:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4e35b88576fed681d3cecda4b050b083db61256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:35:21:8b:93:d4:25:51:42:da:43:9d:4c:32: 65:4b:6a:66:25:11:0e:19:94:0d:a7:94:9d:61:f6: 48:7d:9e:e9:fc:b9:29:f2:c9:f9:c1:a9:d9:22:f3: 44:a8:c9:c4:c7:9e:45:9f:a8:08:13:9a:c3:41:3c: f6:c7:28:ae:61:38:ef:5c:17:78:e6:7e:b0:97:b5: 24:0a:31:bb:a0:a2:9b:e8:e1:63:0c:f0:10:b3:30: e0:3c:21:8f:a9:83:29:c3:b2:1e:1e:35:45:d4:15: aa:28:bc:e6:32:10:c8:bd:f6:bd:14:17:5e:c8:1b: fc:0e:bf:81:7a:67:6c:b9:55:1e:fb:97:94:80:f4: a6:53:cc:14:b3:81:bc:8d:e2:d7:96:b4:3c:0d:17: 76:31:31:62:37:7c:33:9d:fe:7a:b1:75:03:15:e9: 17:42:95:4f:59:06:71:f0:b5:9f:d2:fe:a7:a0:45: 3f:2c:0a:e2:b6:65:b3:67:ac:c6:39:62:68:2c:f9: cd:d9:51:fe:d1:28:48:e4:0a:b1:bb:93:7b:96:27: b6:cf:ce:68:50:0d:6e:86:01:98:0f:b1:3d:ef:e3: 7f:49:70:09:40:dc:5c:f2:92:24:08:d8:1f:1b:f9: 15:89:28:a3:dd:82:43:87:ca:af:06:1a:b5:58:e5: ce:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E3:5B:88:57:6F:ED:68:1D:3C:EC:DA:4B:05:0B:08:3D:B6:12:56 X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/xONbiFdv7WgdPOzaSwULCD22ElY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.134.192.0/21 Signature Algorithm: sha256WithRSAEncryption 23:4f:05:fd:97:7a:da:3f:fb:21:67:30:b1:51:ec:74:0e:44: 97:5a:9f:e3:81:6d:c3:ad:43:56:10:1e:6d:b3:58:ed:ba:76: bd:fa:d6:70:cc:4a:69:4d:67:2a:b4:ce:6b:63:1f:22:61:39: 09:2a:77:09:c8:d4:77:b4:1f:39:a0:c6:64:a3:f7:99:58:5a: 59:25:3c:bf:85:8a:2d:8c:f1:1b:ba:bc:a1:ce:25:c1:4e:fd: 20:91:49:cc:56:23:d0:9d:b8:dd:d7:3b:1b:0c:ce:0c:9d:aa: 6c:1b:64:ab:f5:17:8d:d3:29:f0:e9:75:60:68:33:f0:12:6c: 6c:76:f3:e3:8e:be:b9:45:dd:d6:06:ed:c8:30:ff:d0:10:fa: 16:b0:a9:7c:e7:d8:d7:20:f9:91:29:83:d9:c7:d1:25:e9:f4: 24:5c:1d:68:33:a6:0d:23:e1:e4:8b:32:79:cb:3a:62:e8:57: f0:11:34:47:70:86:d5:1f:ae:2a:64:c0:d8:67:d1:58:11:10: 6f:a2:29:96:4e:dd:fe:73:d0:72:6d:46:1f:4d:80:61:fb:a0: 4b:d7:e8:ed:bf:f4:1c:12:4c:70:41:c2:3f:64:4d:ea:3f:9a: 5d:39:3b:06:15:2a:91:e3:38:02:20:fc:ab:bf:38:6b:33:2e: af:6b:c6:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XP0wQ4V85NtM1tBdy+rDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGUzNWI4ODU3NmZlZDY4MWQzY2VjZGE0YjA1MGIwODNkYjYxMjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjUhi5PUJVFC2kOdTDJlS2pmJREO GZQNp5SdYfZIfZ7p/Lkp8sn5wanZIvNEqMnEx55Fn6gIE5rDQTz2xyiuYTjvXBd4 5n6wl7UkCjG7oKKb6OFjDPAQszDgPCGPqYMpw7IeHjVF1BWqKLzmMhDIvfa9FBde yBv8Dr+BemdsuVUe+5eUgPSmU8wUs4G8jeLXlrQ8DRd2MTFiN3wznf56sXUDFekX QpVPWQZx8LWf0v6noEU/LAritmWzZ6zGOWJoLPnN2VH+0ShI5Aqxu5N7lie2z85o UA1uhgGYD7E97+N/SXAJQNxc8pIkCNgfG/kViSij3YJDh8qvBhq1WOXO9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMTjW4hXb+1oHTzs2ksFCwg9thJWMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEveE9OYmlGZHY3V2dkUE96YVN3VUxDRDIyRWxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDBYbAMA0G CSqGSIb3DQEBCwUAA4IBAQAjTwX9l3raP/shZzCxUex0DkSXWp/jgW3DrUNWEB5t s1jtuna9+tZwzEppTWcqtM5rYx8iYTkJKncJyNR3tB85oMZko/eZWFpZJTy/hYot jPEburyhziXBTv0gkUnMViPQnbjd1zsbDM4MnapsG2Sr9ReN0ynw6XVgaDPwEmxs dvPjjr65Rd3WBu3IMP/QEPoWsKl859jXIPmRKYPZx9El6fQkXB1oM6YNI+HkizJ5 yzpi6FfwETRHcIbVH64qZMDYZ9FYERBvoimWTt3+c9BybUYfTYBh+6BL1+jtv/Qc EkxwQcI/ZE3qP5pdOTsGFSqR4zgCIPyrvzhrMy6va8Z6 -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:55 2026 by rpki-client