This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/C79YUpU2iklV_OJjs4h8ac-OjrQ.roa File: C79YUpU2iklV_OJjs4h8ac-OjrQ.roa (raw, json) Hash identifier: //CGGQm4W2A3kMycLE3Ro2hRaxk4J3N4m94O7KPhors= Subject key identifier: 0B:BF:58:52:95:36:8A:49:55:FC:E2:63:B3:88:7C:69:CF:8E:8E:B4 Certificate issuer: /CN=20a0c5400e023f93f518e43004c33bc79d2f6b21 Certificate serial: 019B7834AE17E07D31C6F3AA47EDC80BB56C Authority key identifier: 20:A0:C5:40:0E:02:3F:93:F5:18:E4:30:04:C3:3B:C7:9D:2F:6B:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/C79YUpU2iklV_OJjs4h8ac-OjrQ.roa Signing time: Thu 01 Jan 2026 06:17:56 +0000 ROA not before: Thu 01 Jan 2026 06:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35202 IP address blocks: 5.180.116.0/22 maxlen: 24 2a0a:6400::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ae:17:e0:7d:31:c6:f3:aa:47:ed:c8:0b:b5:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20a0c5400e023f93f518e43004c33bc79d2f6b21 Validity Not Before: Jan 1 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bbf585295368a4955fce263b3887c69cf8e8eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c2:42:73:56:3d:7c:20:4c:79:17:3b:ec:6e: c9:e5:d5:9a:15:ba:c3:e6:26:97:d2:a6:96:e3:31: 1e:c2:64:64:17:b1:1f:de:26:55:10:77:80:e8:ef: 60:a3:17:61:f3:e1:68:79:6d:ac:be:4d:7b:3f:42: fb:93:23:fe:e8:c5:56:8f:f6:eb:07:05:f4:e9:95: 06:5a:64:0d:26:30:73:d7:38:f5:6d:7c:f8:9b:92: 03:1a:3c:5d:d4:37:4f:0d:c0:31:9c:dc:d2:53:c1: cb:a1:1b:e8:be:78:2f:4d:49:82:f0:74:c2:03:99: f7:7f:6f:3c:8f:f8:90:ee:27:00:de:47:4a:f2:89: 6f:a1:43:55:7b:72:67:b5:f2:21:8d:b2:73:21:4d: ea:53:f9:7a:0a:a8:60:bf:eb:a4:73:74:75:ca:95: 83:ca:f3:0c:9e:4e:da:38:45:72:fe:31:d9:ed:62: 62:de:86:80:bc:2f:44:de:55:6e:c3:06:80:1b:4d: c1:eb:3c:3a:f2:d2:ce:df:09:2f:c9:f7:d7:b3:ae: ac:8c:55:8f:ae:20:df:17:57:f9:4d:9e:c3:56:6f: 23:04:e2:70:96:23:9f:df:0e:ba:a4:72:ce:e2:a1: cc:70:cb:48:ac:b5:77:bb:cb:00:d8:3a:16:53:cf: 53:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BF:58:52:95:36:8A:49:55:FC:E2:63:B3:88:7C:69:CF:8E:8E:B4 X509v3 Authority Key Identifier: keyid:20:A0:C5:40:0E:02:3F:93:F5:18:E4:30:04:C3:3B:C7:9D:2F:6B:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/C79YUpU2iklV_OJjs4h8ac-OjrQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.116.0/22 IPv6: 2a0a:6400::/29 Signature Algorithm: sha256WithRSAEncryption d8:bb:80:19:d9:46:4a:4c:d3:f2:60:9c:00:fb:84:40:8f:27: 36:d6:04:d7:4a:66:bb:4b:19:c0:e6:23:d6:1d:f2:c7:af:2a: 0f:c0:f4:a5:5a:30:e1:a9:79:91:e8:8b:89:e3:8c:4f:09:9d: 13:45:f4:20:cf:34:ac:2a:fc:58:84:7a:81:5c:fa:47:a8:fc: a1:e8:fa:94:c2:17:48:f9:b2:19:09:2e:5e:36:2e:27:a4:de: 8b:ec:7c:2f:87:00:fa:39:38:ff:64:ba:c1:a7:83:f1:50:3c: f3:44:9b:b3:d8:f3:83:7d:57:5c:50:1e:25:d4:fb:ec:54:f7: ed:f3:67:f7:07:18:e9:87:1e:2f:d5:28:dc:7f:06:56:6c:49: ed:d4:ed:8c:8b:74:49:c1:90:ae:34:e9:bb:c8:5d:43:3b:53: 9b:ea:af:38:3b:3b:e9:e3:83:01:01:07:4e:93:21:fa:6f:00: 4b:8e:7b:df:29:76:b1:8d:07:d6:cc:8c:48:76:56:56:38:2d: 19:2c:33:0d:ad:84:1b:1f:7f:0f:b7:20:04:af:ad:9e:4d:3c: 50:6c:a3:5b:67:01:17:be:fd:e0:0c:0b:56:a9:bc:50:0c:7b: 4b:b8:98:f5:a7:59:d0:06:1f:a2:78:f9:98:87:f6:05:23:5f: 7f:44:0d:01 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NK4X4H0xxvOqR+3IC7VsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYTBjNTQwMGUwMjNmOTNmNTE4ZTQzMDA0YzMzYmM3OWQy ZjZiMjEwHhcNMjYwMTAxMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmJmNTg1Mjk1MzY4YTQ5NTVmY2UyNjNiMzg4N2M2OWNmOGU4ZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysJCc1Y9fCBMeRc77G7J5dWaFbrD 5iaX0qaW4zEewmRkF7Ef3iZVEHeA6O9goxdh8+FoeW2svk17P0L7kyP+6MVWj/br BwX06ZUGWmQNJjBz1zj1bXz4m5IDGjxd1DdPDcAxnNzSU8HLoRvovngvTUmC8HTC A5n3f288j/iQ7icA3kdK8olvoUNVe3JntfIhjbJzIU3qU/l6Cqhgv+ukc3R1ypWD yvMMnk7aOEVy/jHZ7WJi3oaAvC9E3lVuwwaAG03B6zw68tLO3wkvyffXs66sjFWP riDfF1f5TZ7DVm8jBOJwliOf3w66pHLO4qHMcMtIrLV3u8sA2DoWU89TyQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAu/WFKVNopJVfziY7OIfGnPjo60MB8GA1UdIwQY MBaAFCCgxUAOAj+T9RjkMATDO8edL2shMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUtERlFBNENQNVAxR09Rd0JNTTd4NTB2YXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kZmViMTAtOTUyNC00MWE1LWJiZDMt MDc2OWFhNjI3MWU2LzEvQzc5WVVwVTJpa2xWX09KanM0aDhhYy1PanJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9kZmViMTAtOTUyNC00MWE1LWJiZDMtMDc2OWFhNjI3MWU2 LzEvSUtERlFBNENQNVAxR09Rd0JNTTd4NTB2YXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCBbR0MA0E AgACMAcDBQMqCmQAMA0GCSqGSIb3DQEBCwUAA4IBAQDYu4AZ2UZKTNPyYJwA+4RA jyc21gTXSma7SxnA5iPWHfLHryoPwPSlWjDhqXmR6IuJ44xPCZ0TRfQgzzSsKvxY hHqBXPpHqPyh6PqUwhdI+bIZCS5eNi4npN6L7HwvhwD6OTj/ZLrBp4PxUDzzRJuz 2PODfVdcUB4l1PvsVPft82f3Bxjphx4v1SjcfwZWbEnt1O2Mi3RJwZCuNOm7yF1D O1Ob6q84Ozvp44MBAQdOkyH6bwBLjnvfKXaxjQfWzIxIdlZWOC0ZLDMNrYQbH38P tyAEr62eTTxQbKNbZwEXvv3gDAtWqbxQDHtLuJj1p1nQBh+iePmYh/YFI19/RA0B -----END CERTIFICATE-----Generated at Tue Feb 10 02:30:40 2026 by rpki-client