This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/A4xxaPve9Tl37Nxe_ipZ2zHzNzk.roa File: A4xxaPve9Tl37Nxe_ipZ2zHzNzk.roa (raw, json) Hash identifier: q18IfNQRgDd6SWAeQDYcxBtqV/xbknuTyluCS/qthw4= Subject key identifier: 03:8C:71:68:FB:DE:F5:39:77:EC:DC:5E:FE:2A:59:DB:31:F3:37:39 Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25 Certificate serial: 019B77C6B514C94BD64F6F4FACA40794D48E Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/A4xxaPve9Tl37Nxe_ipZ2zHzNzk.roa Signing time: Thu 01 Jan 2026 04:17:49 +0000 ROA not before: Thu 01 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 167.160.5.0/24 maxlen: 24 185.98.157.0/24 maxlen: 24 185.181.52.0/22 maxlen: 24 192.161.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b5:14:c9:4b:d6:4f:6f:4f:ac:a4:07:94:d4:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=038c7168fbdef53977ecdc5efe2a59db31f33739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:85:5b:d2:47:07:c8:ba:7e:f6:8e:3c:f0:3f: cb:09:0c:fb:de:47:42:87:91:3c:ff:77:79:72:63: aa:6c:f5:f1:b8:00:9a:06:23:72:71:cf:ce:fe:60: 57:fd:80:da:bc:e2:6a:ba:c4:ee:be:d7:f9:61:a3: 43:08:6f:0e:e4:fa:6c:3e:b6:be:28:02:e4:d2:26: 60:37:3c:85:4d:51:f7:b1:d7:6c:f0:d6:ad:2c:92: 91:13:f8:86:42:26:34:8d:2d:b3:6e:85:78:99:85: 02:a7:f1:89:f9:c7:01:4e:aa:5c:20:e1:6e:e8:5b: 7f:ed:fc:af:a0:05:1c:80:58:98:9e:3e:41:c4:bc: 23:20:a5:cd:67:7f:b7:05:5f:19:df:54:3f:8f:31: 75:22:86:ac:d2:a4:14:1b:f7:db:ea:78:50:e1:0e: ed:6b:b2:4f:05:3c:ee:52:66:bb:c4:d8:c6:b2:48: cb:bc:2f:83:93:6b:72:53:c6:14:f3:10:52:f0:60: 6d:9d:7d:79:7a:f7:63:74:11:98:0e:dc:da:01:da: 10:98:a0:c2:64:8c:28:5c:c4:a9:11:ed:12:1e:79: a4:3c:bf:6d:ee:8d:af:ad:71:2f:52:a1:a2:91:bb: d5:27:df:e0:e9:9c:ed:29:75:22:da:a9:d1:dd:32: 5a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8C:71:68:FB:DE:F5:39:77:EC:DC:5E:FE:2A:59:DB:31:F3:37:39 X509v3 Authority Key Identifier: keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/A4xxaPve9Tl37Nxe_ipZ2zHzNzk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.160.5.0/24 185.98.157.0/24 185.181.52.0/22 192.161.6.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:cd:22:d8:e0:14:d2:34:b4:3e:62:25:ce:cc:c1:1a:89:95: 56:a9:5e:89:67:5b:dd:5f:cd:6c:35:14:d8:80:0e:e5:4e:d0: 8c:b8:30:37:71:90:79:66:3d:05:5d:74:df:fa:5e:f5:b2:32: dd:f1:72:82:34:4d:fc:7c:b6:da:e7:01:e4:e9:8f:80:0d:f7: 3e:d8:fb:7d:18:6e:93:51:06:6c:63:c0:b5:0e:0c:91:a9:ca: 4f:89:c5:3c:0d:ef:15:b0:11:7a:f9:41:41:17:c8:c1:b5:45: c7:11:38:80:7e:3b:f4:5c:9b:5b:e9:8d:9a:b3:2a:8a:ee:25: 77:f9:20:55:4e:86:a1:1a:5f:59:f5:f0:b8:79:45:59:cf:d0: f8:f1:aa:89:32:38:9f:2a:9f:85:db:43:3c:17:9c:d7:58:7b: 4e:d6:46:40:27:ba:da:17:a0:91:2a:c5:0a:df:a3:5e:32:f5: 61:6d:55:f2:62:57:91:a4:1b:86:a2:ab:17:d1:98:f5:d9:35: a1:36:6c:0e:4d:f2:12:e7:11:02:de:c9:db:94:db:fd:13:b8: 64:d4:1d:1c:26:a2:29:19:a1:69:b3:ac:dc:74:64:24:eb:59: ce:8e:26:22:8f:c4:06:85:63:75:e6:46:0d:ff:ac:9a:e5:50: 08:13:23:d0 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3xrUUyUvWT29PrKQHlNSOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDQ3MTlkNzJkMjg4YTczMjE4ZDhjMWE0OTg4MjMzMzMy OTdlMjUwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzhjNzE2OGZiZGVmNTM5NzdlY2RjNWVmZTJhNTlkYjMxZjMzNzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIVb0kcHyLp+9o488D/LCQz73kdC h5E8/3d5cmOqbPXxuACaBiNycc/O/mBX/YDavOJqusTuvtf5YaNDCG8O5PpsPra+ KALk0iZgNzyFTVH3sdds8NatLJKRE/iGQiY0jS2zboV4mYUCp/GJ+ccBTqpcIOFu 6Ft/7fyvoAUcgFiYnj5BxLwjIKXNZ3+3BV8Z31Q/jzF1Ioas0qQUG/fb6nhQ4Q7t a7JPBTzuUma7xNjGskjLvC+Dk2tyU8YU8xBS8GBtnX15evdjdBGYDtzaAdoQmKDC ZIwoXMSpEe0SHnmkPL9t7o2vrXEvUqGikbvVJ9/g6ZztKXUi2qnR3TJaDQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAOMcWj73vU5d+zcXv4qWdsx8zc5MB8GA1UdIwQY MBaAFMvUcZ1y0oinMhjYwaSYgjMzKX4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUt YjQ5MmQ2ZmY0ODNmLzEvQTR4eGFQdmU5VGwzN054ZV9pcFoyekh6TnprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUtYjQ5MmQ2ZmY0ODNm LzEveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAp6AFAwQA uWKdAwQCubU0AwQBwKEGMA0GCSqGSIb3DQEBCwUAA4IBAQAfzSLY4BTSNLQ+YiXO zMEaiZVWqV6JZ1vdX81sNRTYgA7lTtCMuDA3cZB5Zj0FXXTf+l71sjLd8XKCNE38 fLba5wHk6Y+ADfc+2Pt9GG6TUQZsY8C1DgyRqcpPicU8De8VsBF6+UFBF8jBtUXH ETiAfjv0XJtb6Y2asyqK7iV3+SBVToahGl9Z9fC4eUVZz9D48aqJMjifKp+F20M8 F5zXWHtO1kZAJ7raF6CRKsUK36NeMvVhbVXyYleRpBuGoqsX0Zj12TWhNmwOTfIS 5xEC3snblNv9E7hk1B0cJqIpGaFps6zcdGQk61nOjiYij8QGhWN15kYN/6ya5VAI EyPQ -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:17 2026 by rpki-client