This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/gNLOIvbjNjZQxuxvki_lYJJt8Mo.roa File: gNLOIvbjNjZQxuxvki_lYJJt8Mo.roa (raw, json) Hash identifier: Ad1G4KqZUjpch2lYtIzvzOnF7bYFB2kEOungCIY8APE= Subject key identifier: 80:D2:CE:22:F6:E3:36:36:50:C6:EC:6F:92:2F:E5:60:92:6D:F0:CA Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B735AC6C41BD18B1A57383CF6F61D Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/gNLOIvbjNjZQxuxvki_lYJJt8Mo.roa Signing time: Thu 01 Jan 2026 16:19:32 +0000 ROA not before: Thu 01 Jan 2026 16:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16018 IP address blocks: 5.160.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:73:5a:c6:c4:1b:d1:8b:1a:57:38:3c:f6:f6:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80d2ce22f6e3363650c6ec6f922fe560926df0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6b:6a:c3:70:9b:2a:2d:b5:7a:05:6d:be:a7: 42:da:08:e7:4e:e8:fe:3a:69:a2:eb:64:35:81:fd: 33:fd:e6:34:28:25:68:a7:3b:40:1d:67:fb:37:46: fd:e8:c9:f0:d0:97:f1:41:e1:bf:0e:24:da:af:7d: db:ac:43:3f:8e:6d:07:f3:d4:ed:c1:d6:c1:6e:aa: 0c:82:50:9e:ed:7b:7b:41:d5:a8:cd:07:de:99:30: 7f:b1:17:fc:59:03:6f:0e:de:8d:93:e7:67:71:bb: 59:b1:c6:85:55:94:db:ea:85:9a:03:4d:c5:c4:d7: 3b:73:aa:41:d6:70:29:97:4f:73:e6:20:f7:c8:1e: dd:bf:2d:6b:69:bd:77:89:2a:be:19:12:ec:97:5f: 29:ef:5b:43:15:51:e0:97:be:a2:36:28:6f:e4:71: 76:88:72:89:34:9f:0f:fd:93:fb:08:67:e4:b5:d0: a2:d4:6b:47:5b:f7:5d:81:e6:62:6a:cc:f6:6f:7a: 67:ef:ec:8a:85:20:6b:94:58:f4:e1:13:70:28:8e: aa:94:2f:53:e1:c2:d3:36:bb:70:81:8d:44:21:cc: 63:b7:47:30:89:32:5c:66:8c:5e:25:f5:55:52:98: 58:44:7c:3b:3c:99:66:0a:57:ec:d8:20:b0:ff:77: da:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D2:CE:22:F6:E3:36:36:50:C6:EC:6F:92:2F:E5:60:92:6D:F0:CA X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/gNLOIvbjNjZQxuxvki_lYJJt8Mo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.210.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:5b:d2:42:d7:43:b2:34:78:92:5d:54:8e:d6:e6:2e:85:41: 89:dc:b9:1a:eb:2e:92:e6:c7:78:12:04:6f:fb:50:5f:ee:a6: de:0f:7c:30:f0:a9:a6:ce:ac:e2:a4:b3:d4:d2:5d:ad:35:23: 80:99:5e:56:23:b0:fa:37:d3:56:3c:14:24:21:c0:b4:d8:0c: e2:1d:5d:ad:80:2e:63:97:7d:4c:c9:68:f9:7d:7b:17:42:15: dc:58:58:4a:d8:f2:f5:4c:83:8d:18:64:15:0e:a7:9e:0b:89: 4b:d7:cf:31:04:55:03:2b:be:3b:c8:cd:2e:db:19:01:84:44: a4:d8:d0:b2:61:66:e4:88:98:0c:91:4a:26:bf:1f:9e:e3:b4: 3e:7f:d0:80:57:ad:53:fe:44:79:bb:e8:66:60:2c:76:1c:f9: 4e:b9:ae:f9:5e:00:d8:99:f1:82:a4:8d:51:fa:a9:7a:c6:32: 76:21:e9:6a:ee:50:6c:ca:53:44:72:ae:07:7d:11:03:4f:6a: 5d:04:0b:d9:86:db:d1:51:13:4c:7e:bb:a1:be:09:bb:51:e0: 9c:41:57:7e:75:a8:29:8b:c4:f4:d0:11:f7:67:60:1e:31:57: e7:02:5a:fb:d8:f2:58:03:aa:e2:4c:8d:15:56:6f:d1:b2:cc: b9:bb:56:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3NaxsQb0YsaVzg89vYdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGQyY2UyMmY2ZTMzNjM2NTBjNmVjNmY5MjJmZTU2MDkyNmRmMGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWtqw3CbKi21egVtvqdC2gjnTuj+ Ommi62Q1gf0z/eY0KCVopztAHWf7N0b96Mnw0JfxQeG/DiTar33brEM/jm0H89Tt wdbBbqoMglCe7Xt7QdWozQfemTB/sRf8WQNvDt6Nk+dncbtZscaFVZTb6oWaA03F xNc7c6pB1nApl09z5iD3yB7dvy1rab13iSq+GRLsl18p71tDFVHgl76iNihv5HF2 iHKJNJ8P/ZP7CGfktdCi1GtHW/ddgeZiasz2b3pn7+yKhSBrlFj04RNwKI6qlC9T 4cLTNrtwgY1EIcxjt0cwiTJcZoxeJfVVUphYRHw7PJlmClfs2CCw/3fahwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIDSziL24zY2UMbsb5Iv5WCSbfDKMB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvZ05MT0l2YmpOalpReHV4dmtpX2xZSkp0OE1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABaDSMA0G CSqGSIb3DQEBCwUAA4IBAQBKW9JC10OyNHiSXVSO1uYuhUGJ3Lka6y6S5sd4EgRv +1Bf7qbeD3ww8KmmzqzipLPU0l2tNSOAmV5WI7D6N9NWPBQkIcC02AziHV2tgC5j l31MyWj5fXsXQhXcWFhK2PL1TIONGGQVDqeeC4lL188xBFUDK747yM0u2xkBhESk 2NCyYWbkiJgMkUomvx+e47Q+f9CAV61T/kR5u+hmYCx2HPlOua75XgDYmfGCpI1R +ql6xjJ2Ielq7lBsylNEcq4HfREDT2pdBAvZhtvRURNMfruhvgm7UeCcQVd+dagp i8T00BH3Z2AeMVfnAlr72PJYA6riTI0VVm/Rssy5u1bg -----END CERTIFICATE-----Generated at Mon Jan 26 17:46:26 2026 by rpki-client