This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/erTyk-NZmQoahF6qFvWEDixRNvA.roa File: erTyk-NZmQoahF6qFvWEDixRNvA.roa (raw, json) Hash identifier: 4/Aceh6U+ZXyioaf0l40x2rOo8NQiAc0kDO/mepRISE= Subject key identifier: 7A:B4:F2:93:E3:59:99:0A:1A:84:5E:AA:16:F5:84:0E:2C:51:36:F0 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAD6BDED2CFEFAD674174F591E55E0 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/erTyk-NZmQoahF6qFvWEDixRNvA.roa Signing time: Thu 01 Jan 2026 00:17:40 +0000 ROA not before: Thu 01 Jan 2026 00:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212335 IP address blocks: 5.180.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d6:bd:ed:2c:fe:fa:d6:74:17:4f:59:1e:55:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ab4f293e359990a1a845eaa16f5840e2c5136f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bb:1f:10:d7:3a:8d:0b:0c:26:14:69:de:3a: d8:36:69:36:0f:dc:26:74:58:ae:64:18:42:2c:0d: 61:c4:74:03:5d:18:a1:32:e9:70:3c:91:43:e0:5e: 37:e0:bf:c2:5f:f4:88:8d:4e:69:1a:60:5d:03:f4: 4b:c1:fe:2b:6e:0e:32:ec:a8:39:b0:e2:06:99:d6: 37:02:97:9b:90:d5:fa:bb:80:ba:f0:5e:e8:8f:d5: 0e:c6:be:cd:65:59:8a:04:34:37:06:48:70:f7:a7: f2:b0:4e:bd:4f:b2:5d:48:5f:3b:df:00:c9:1d:e9: 7b:7b:4b:7a:0f:46:c6:22:71:ba:6b:62:db:d9:05: 2b:7d:5d:57:b5:f7:9c:af:80:e3:9f:d5:8a:bd:7f: e1:f1:76:75:a6:53:62:be:af:33:1c:1d:dc:2c:f6: a6:4e:33:0c:31:c9:f3:d5:be:54:17:7d:85:57:ba: 03:2e:9f:e3:45:a1:98:5b:59:e2:98:2a:3a:f0:d3: d9:c3:0c:24:3f:cd:a0:ed:e3:ad:c1:a2:ba:84:95: 28:a8:22:ec:63:aa:02:7c:7c:e8:e4:52:be:23:46: eb:05:67:cd:bf:6c:c1:80:d8:8c:c5:9e:92:44:2b: 86:2a:31:53:a8:df:de:de:0a:d3:11:29:13:a9:03: d4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B4:F2:93:E3:59:99:0A:1A:84:5E:AA:16:F5:84:0E:2C:51:36:F0 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/erTyk-NZmQoahF6qFvWEDixRNvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.233.0/24 Signature Algorithm: sha256WithRSAEncryption c2:86:2b:05:c4:26:e6:65:d7:31:55:c8:30:7a:ee:7e:6e:d1: c8:0c:2a:dd:8c:05:70:f0:39:10:68:8d:24:6f:f1:5e:fc:a9: 2d:a0:0e:e2:ca:c7:53:62:55:56:cb:62:5c:15:e2:8d:36:ad: d6:62:04:8a:0d:cb:ef:f7:1e:f8:47:44:8c:9a:bb:37:89:4d: 2a:c9:5b:02:d0:36:c0:42:4b:b4:6d:2b:20:2c:49:1e:8f:2b: a6:07:57:20:9e:ab:3a:1b:b5:ca:59:d3:5d:c5:a0:19:5f:a0: 0b:96:17:2f:46:3c:8f:2e:d3:53:0c:28:77:5a:1d:74:49:0e: 8a:21:fa:33:4f:c9:bd:c6:85:88:5f:21:e1:ab:0f:27:c7:67: 0f:10:7a:72:14:75:29:76:8f:cc:9d:33:1c:47:46:b1:05:37: 17:7b:2c:ca:ca:4b:f4:a6:d1:94:1f:29:a0:ab:5c:97:d2:10: 07:8c:4f:6f:04:a7:5c:68:b8:f8:f2:e9:fc:6d:bc:e8:1d:40: 5f:9b:de:e6:06:12:3c:ed:cd:9e:67:f8:ca:ea:cb:5e:be:f2: 00:cd:9d:4b:95:ae:5e:17:85:5a:66:0e:3e:b1:57:16:55:39: 4b:c5:6f:3b:25:49:aa:15:50:2f:e6:dc:9f:9d:b2:81:f0:13: 45:4a:ba:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26ta97Sz++tZ0F09ZHlXgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWI0ZjI5M2UzNTk5OTBhMWE4NDVlYWExNmY1ODQwZTJjNTEzNmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LsfENc6jQsMJhRp3jrYNmk2D9wm dFiuZBhCLA1hxHQDXRihMulwPJFD4F434L/CX/SIjU5pGmBdA/RLwf4rbg4y7Kg5 sOIGmdY3ApebkNX6u4C68F7oj9UOxr7NZVmKBDQ3Bkhw96fysE69T7JdSF873wDJ Hel7e0t6D0bGInG6a2Lb2QUrfV1Xtfecr4Djn9WKvX/h8XZ1plNivq8zHB3cLPam TjMMMcnz1b5UF32FV7oDLp/jRaGYW1nimCo68NPZwwwkP82g7eOtwaK6hJUoqCLs Y6oCfHzo5FK+I0brBWfNv2zBgNiMxZ6SRCuGKjFTqN/e3grTESkTqQPUbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHq08pPjWZkKGoReqhb1hA4sUTbwMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvZXJUeWstTlptUW9haEY2cUZ2V0VEaXhSTnZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbTpMA0G CSqGSIb3DQEBCwUAA4IBAQDChisFxCbmZdcxVcgweu5+btHIDCrdjAVw8DkQaI0k b/Fe/KktoA7iysdTYlVWy2JcFeKNNq3WYgSKDcvv9x74R0SMmrs3iU0qyVsC0DbA Qku0bSsgLEkejyumB1cgnqs6G7XKWdNdxaAZX6ALlhcvRjyPLtNTDCh3Wh10SQ6K IfozT8m9xoWIXyHhqw8nx2cPEHpyFHUpdo/MnTMcR0axBTcXeyzKykv0ptGUHymg q1yX0hAHjE9vBKdcaLj48un8bbzoHUBfm97mBhI87c2eZ/jK6stevvIAzZ1Lla5e F4VaZg4+sVcWVTlLxW87JUmqFVAv5tyfnbKB8BNFSrrJ -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:41 2026 by rpki-client