This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/IvOT2y7obIoKxRaGNkNDfaL9i0s.roa File: IvOT2y7obIoKxRaGNkNDfaL9i0s.roa (raw, json) Hash identifier: PYfkZVph6t0LTi6cPjdXTl7ufUlYR2EM4mONniGl1NQ= Subject key identifier: 22:F3:93:DB:2E:E8:6C:8A:0A:C5:16:86:36:43:43:7D:A2:FD:8B:4B Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B8FEAFA3666DDF992832A2CB991C564DF Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/IvOT2y7obIoKxRaGNkNDfaL9i0s.roa Signing time: Mon 05 Jan 2026 20:48:19 +0000 ROA not before: Mon 05 Jan 2026 20:48:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 5.180.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8f:ea:fa:36:66:dd:f9:92:83:2a:2c:b9:91:c5:64:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 5 20:48:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22f393db2ee86c8a0ac516863643437da2fd8b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:73:67:e4:fb:d8:63:6c:f4:15:5c:a6:d0:6e: 80:32:4f:09:92:6c:0e:6f:3e:24:fd:96:f1:a9:40: 35:7f:a5:c5:71:6e:10:ca:ec:f8:72:7d:44:f4:d7: 6e:5b:fa:c5:de:b8:5b:94:49:11:68:c2:c2:bb:90: 88:16:f4:5e:fb:62:56:b7:4d:01:e0:62:68:00:4a: 36:30:62:19:24:a6:a3:47:1c:61:ec:f3:bc:02:28: 53:47:15:6c:26:29:f7:00:ba:bc:41:4f:e3:28:9b: 4f:9b:42:79:cb:f4:d8:42:63:95:bb:bd:61:54:e2: be:a9:a5:a8:a0:a5:a0:c3:ab:b4:37:93:2d:dc:6b: b5:af:da:85:63:68:2e:2f:87:aa:23:b9:74:88:bb: f3:ae:7f:6c:de:16:17:4e:3b:e4:1e:c3:2d:3f:9f: 74:4e:06:33:cf:1d:5f:52:7a:02:89:ac:27:88:05: a7:9c:b7:cb:56:5c:f1:14:c5:74:9f:f5:ed:53:5d: e4:7f:c3:3d:76:9c:7d:4d:06:34:dd:60:2e:d4:d2: 65:22:dc:41:b6:2b:1c:e0:c9:f0:8a:d5:97:ff:e9: 5b:5c:d1:9c:cd:25:a0:16:8e:b1:52:74:a0:40:a8: 92:5f:01:38:5d:79:b3:1b:38:b7:9f:b9:c7:8a:4a: 9a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F3:93:DB:2E:E8:6C:8A:0A:C5:16:86:36:43:43:7D:A2:FD:8B:4B X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/IvOT2y7obIoKxRaGNkNDfaL9i0s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.33.0/24 Signature Algorithm: sha256WithRSAEncryption 32:80:8e:13:4f:12:55:b6:8d:c4:5c:7c:41:98:1e:db:bd:1e: 7c:ed:aa:52:8d:f6:35:d7:8b:85:36:e0:bd:0c:49:c4:80:9a: 0e:6b:ac:14:93:2e:f8:9a:0c:38:ac:8e:8c:f4:96:74:89:73: 44:28:1c:c1:f7:de:07:a8:9d:3e:24:33:4c:83:ac:85:3b:7e: 06:91:0e:4d:0e:6f:44:87:45:18:d2:31:f8:75:0b:48:4b:fc: b2:68:e7:0d:fc:81:ba:77:19:d1:c4:46:15:bd:61:75:ba:ae: bb:c0:2b:12:51:71:17:14:da:8a:da:0d:cb:7a:f7:f4:30:07: 19:d2:ce:cd:5e:83:a3:fa:b6:e0:46:e1:0f:59:68:fa:20:1b: e7:ad:94:a2:b0:c2:26:70:23:d7:14:4d:89:77:28:6e:5f:88: 4f:47:ba:ae:c6:f9:19:5d:bc:50:18:a2:27:d9:fc:97:1e:2b: c9:e0:2f:6d:d4:9e:cd:ed:e7:7c:40:48:b5:a8:2c:29:eb:34: 3d:c1:d5:19:11:c6:81:ab:34:a4:f8:19:fa:6c:ce:9a:1a:f0: 1e:42:18:03:1e:08:56:bf:9b:f0:bc:ba:53:ef:ff:63:33:61: 3a:e3:9a:61:85:db:84:bd:b6:1b:8e:92:d6:d2:10:1f:2c:b2: 6e:ff:df:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuP6vo2Zt35koMqLLmRxWTfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTA1MjA0ODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmYzOTNkYjJlZTg2YzhhMGFjNTE2ODYzNjQzNDM3ZGEyZmQ4YjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3Nn5PvYY2z0FVym0G6AMk8JkmwO bz4k/ZbxqUA1f6XFcW4Qyuz4cn1E9NduW/rF3rhblEkRaMLCu5CIFvRe+2JWt00B 4GJoAEo2MGIZJKajRxxh7PO8AihTRxVsJin3ALq8QU/jKJtPm0J5y/TYQmOVu71h VOK+qaWooKWgw6u0N5Mt3Gu1r9qFY2guL4eqI7l0iLvzrn9s3hYXTjvkHsMtP590 TgYzzx1fUnoCiawniAWnnLfLVlzxFMV0n/XtU13kf8M9dpx9TQY03WAu1NJlItxB tisc4MnwitWX/+lbXNGczSWgFo6xUnSgQKiSXwE4XXmzGzi3n7nHikqaOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCLzk9su6GyKCsUWhjZDQ32i/YtLMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvSXZPVDJ5N29iSW9LeFJhR05rTkRmYUw5aTBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbQhMA0G CSqGSIb3DQEBCwUAA4IBAQAygI4TTxJVto3EXHxBmB7bvR587apSjfY114uFNuC9 DEnEgJoOa6wUky74mgw4rI6M9JZ0iXNEKBzB994HqJ0+JDNMg6yFO34GkQ5NDm9E h0UY0jH4dQtIS/yyaOcN/IG6dxnRxEYVvWF1uq67wCsSUXEXFNqK2g3Levf0MAcZ 0s7NXoOj+rbgRuEPWWj6IBvnrZSisMImcCPXFE2JdyhuX4hPR7quxvkZXbxQGKIn 2fyXHivJ4C9t1J7N7ed8QEi1qCwp6zQ9wdUZEcaBqzSk+Bn6bM6aGvAeQhgDHghW v5vwvLpT7/9jM2E645phhduEvbYbjpLW0hAfLLJu/993 -----END CERTIFICATE-----Generated at Mon Jan 19 17:13:35 2026 by rpki-client