This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/p6q8es-Iqyn2i48xEoUKjUI4d2M.roa File: p6q8es-Iqyn2i48xEoUKjUI4d2M.roa (raw, json) Hash identifier: m5/VmABNTamwPueU2592p62mT3TfbEBJmNKOlgAWGE4= Subject key identifier: A7:AA:BC:7A:CF:88:AB:29:F6:8B:8F:31:12:85:0A:8D:42:38:77:63 Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3 Certificate serial: 019B7C1237578F91D748B377C7015548F77A Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/p6q8es-Iqyn2i48xEoUKjUI4d2M.roa Signing time: Fri 02 Jan 2026 00:18:47 +0000 ROA not before: Fri 02 Jan 2026 00:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212201 IP address blocks: 5.182.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:37:57:8f:91:d7:48:b3:77:c7:01:55:48:f7:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3 Validity Not Before: Jan 2 00:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7aabc7acf88ab29f68b8f3112850a8d42387763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:25:a6:73:c8:79:ea:27:c8:b1:dc:22:91:cb: c0:a1:fc:10:a7:82:43:58:b6:9d:f9:7f:85:67:12: f4:da:0f:67:bb:18:77:80:5f:de:c3:25:22:8a:32: e5:5c:99:05:6d:9c:a0:56:2a:30:18:fe:89:13:e8: 32:fe:56:1b:57:91:5f:b0:79:2d:c6:58:40:f7:c6: 06:52:02:8f:0f:7e:20:30:15:87:98:0e:d1:26:02: 0b:1e:e3:a0:34:60:2e:a7:49:3a:6a:f6:95:04:c7: 2c:a9:b0:12:4e:02:1d:0d:a1:03:e1:01:59:5c:7c: 8f:87:a2:8e:4f:c0:68:9e:70:23:4c:82:0e:86:92: 47:d6:ee:1b:58:e8:a2:28:7e:86:c4:3f:f7:74:dd: 9d:87:7f:70:27:61:96:9f:a1:b3:04:f6:28:07:06: b2:5b:9c:7d:af:2b:33:e0:73:24:e7:64:ec:99:00: 61:36:83:90:74:a6:40:cb:a6:5d:0c:30:4a:29:d1: 34:f8:1c:01:6c:87:82:f9:34:b4:b9:d4:42:1b:5b: 1c:06:5f:cc:2d:d5:16:11:63:db:4c:89:fc:f5:e8: 4f:65:7c:9b:80:01:9f:7d:1c:68:06:bd:1c:a2:e9: 4c:d9:c8:39:3d:0c:81:fd:d2:13:c9:35:ca:6e:f0: 32:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AA:BC:7A:CF:88:AB:29:F6:8B:8F:31:12:85:0A:8D:42:38:77:63 X509v3 Authority Key Identifier: keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/p6q8es-Iqyn2i48xEoUKjUI4d2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.251.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:0c:00:d2:9a:f2:63:2c:7a:d2:16:66:6d:8d:6a:82:1b:c9: 3c:5f:75:6e:78:94:b8:d7:ae:d9:fa:15:d0:2d:09:3a:d5:eb: 15:0c:71:86:5f:5d:c4:ac:25:fc:6f:a9:53:04:7c:83:d7:92: 66:10:00:1d:4d:17:2c:ff:e7:e3:a3:27:fb:6b:0f:e4:0f:11: 54:3a:02:11:e9:90:22:b4:3d:9e:c3:b9:0c:5b:1d:69:d7:07: c2:8e:b0:e5:0c:6b:c6:17:eb:fd:57:fe:fc:49:95:cf:cf:d8: e9:01:b8:52:6b:bb:c1:61:5e:a4:50:6d:52:bb:e6:de:d5:8e: bf:f5:e6:72:56:70:07:1f:b5:d2:08:60:14:da:95:c5:83:84: ad:70:16:92:c4:40:63:28:34:db:d0:8c:21:35:f6:60:ce:60: 0c:a3:2c:c8:06:69:56:a4:13:57:b3:34:b3:1b:f7:71:18:06: c2:78:b7:02:76:3d:37:9a:2a:48:c4:6b:44:56:96:d6:71:15: 2c:fb:8a:5b:3e:1f:09:ed:a3:d7:b1:ef:0c:41:04:3d:88:58: 82:c8:df:22:80:c2:26:b9:55:bc:d3:fb:9d:c7:97:e3:ac:16: 31:5a:64:02:01:32:44:ec:08:43:6c:32:68:14:24:88:b6:b1: 47:72:53:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EjdXj5HXSLN3xwFVSPd6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMmY1YTZjMGI5NTY0N2YwNzAzNTBlNjUyNGUxMjIwZmJh NDdmYTMwHhcNMjYwMTAyMDAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2FhYmM3YWNmODhhYjI5ZjY4YjhmMzExMjg1MGE4ZDQyMzg3NzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+yWmc8h56ifIsdwikcvAofwQp4JD WLad+X+FZxL02g9nuxh3gF/ewyUiijLlXJkFbZygViowGP6JE+gy/lYbV5FfsHkt xlhA98YGUgKPD34gMBWHmA7RJgILHuOgNGAup0k6avaVBMcsqbASTgIdDaED4QFZ XHyPh6KOT8BonnAjTIIOhpJH1u4bWOiiKH6GxD/3dN2dh39wJ2GWn6GzBPYoBway W5x9rysz4HMk52TsmQBhNoOQdKZAy6ZdDDBKKdE0+BwBbIeC+TS0udRCG1scBl/M LdUWEWPbTIn89ehPZXybgAGffRxoBr0coulM2cg5PQyB/dITyTXKbvAyYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKeqvHrPiKsp9ouPMRKFCo1COHdjMB8GA1UdIwQY MBaAFIIvWmwLlWR/BwNQ5lJOEiD7pH+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZGYyNjItMmUwYi00ZmI3LWIwZDMt NWQwZTA5YTAyMDRmLzEvcDZxOGVzLUlxeW4yaTQ4eEVvVUtqVUk0ZDJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81ZGYyNjItMmUwYi00ZmI3LWIwZDMtNWQwZTA5YTAyMDRm LzEvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbb7MA0G CSqGSIb3DQEBCwUAA4IBAQAeDADSmvJjLHrSFmZtjWqCG8k8X3VueJS4167Z+hXQ LQk61esVDHGGX13ErCX8b6lTBHyD15JmEAAdTRcs/+fjoyf7aw/kDxFUOgIR6ZAi tD2ew7kMWx1p1wfCjrDlDGvGF+v9V/78SZXPz9jpAbhSa7vBYV6kUG1Su+be1Y6/ 9eZyVnAHH7XSCGAU2pXFg4StcBaSxEBjKDTb0IwhNfZgzmAMoyzIBmlWpBNXszSz G/dxGAbCeLcCdj03mipIxGtEVpbWcRUs+4pbPh8J7aPXse8MQQQ9iFiCyN8igMIm uVW80/udx5fjrBYxWmQCATJE7AhDbDJoFCSItrFHclMg -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:30 2026 by rpki-client