This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/dXqJHsXxR-aG7OFxfLVmTOQ0LlE.roa File: dXqJHsXxR-aG7OFxfLVmTOQ0LlE.roa (raw, json) Hash identifier: y6lcuFolmZ4jWJsuhnKkZ1m94mf4BMO+drqZeVWCJUI= Subject key identifier: 75:7A:89:1E:C5:F1:47:E6:86:EC:E1:71:7C:B5:66:4C:E4:34:2E:51 Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991 Certificate serial: 019B7D5B927C920369B2E836A2CCC4313F0B Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/dXqJHsXxR-aG7OFxfLVmTOQ0LlE.roa Signing time: Fri 02 Jan 2026 06:18:31 +0000 ROA not before: Fri 02 Jan 2026 06:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206610 IP address blocks: 5.180.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:92:7c:92:03:69:b2:e8:36:a2:cc:c4:31:3f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991 Validity Not Before: Jan 2 06:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=757a891ec5f147e686ece1717cb5664ce4342e51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b8:7c:93:fc:14:09:c0:78:3f:12:21:8f:4b: 85:e5:c9:f6:ec:35:ae:a5:96:74:b5:28:b7:3f:e0: f1:a7:29:e5:59:24:d5:84:bb:97:3d:21:a6:cf:5f: 0a:3c:95:9c:4f:d5:6c:e3:f1:c6:23:d7:14:4e:50: b6:61:ad:e3:a3:a4:4b:b4:98:c9:ea:8f:17:6e:62: e0:f3:d4:64:52:4a:87:79:78:13:ba:72:68:56:d3: 55:21:0b:01:45:dc:99:ec:8e:25:b0:2f:95:44:e2: 86:f5:3c:2e:ae:de:8e:87:67:88:71:e6:36:22:af: 00:9d:93:c9:e8:31:72:4d:7c:47:14:fd:d5:0b:10: f7:f5:1d:69:fe:de:75:00:43:4b:f0:7a:3d:c9:07: 88:5a:de:ee:5e:ca:8c:39:53:49:6d:c7:d2:33:7d: 5b:b2:b6:1d:5e:45:cc:14:9f:ae:68:34:59:00:0c: d1:82:ce:9b:47:2f:7a:63:16:43:c0:30:20:3d:25: d8:89:21:47:01:7f:b2:c7:3d:fa:67:ea:af:74:09: e3:49:06:80:0f:4d:65:54:ab:9c:15:b1:ab:9d:e6: f6:d4:40:ce:3b:42:b9:a9:e2:d1:ff:7a:ae:f2:57: 59:90:c1:32:18:f6:91:1b:9e:1c:92:eb:67:c6:59: 26:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7A:89:1E:C5:F1:47:E6:86:EC:E1:71:7C:B5:66:4C:E4:34:2E:51 X509v3 Authority Key Identifier: keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/dXqJHsXxR-aG7OFxfLVmTOQ0LlE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.164.0/22 Signature Algorithm: sha256WithRSAEncryption 28:07:93:55:58:f4:49:b6:b4:d4:da:d2:84:91:f3:ab:5f:48: 6c:3d:be:70:fd:05:2a:ef:4c:f5:53:9c:40:f0:62:e2:79:81: 15:8d:b3:4c:12:45:19:06:83:d3:14:5e:4b:02:28:41:0a:b1: c4:cd:b9:b5:26:74:b4:f2:89:27:0b:ea:19:a9:0e:4c:3b:b8: 59:34:6f:c0:e1:87:3f:5b:44:6d:36:84:a4:06:d5:ba:bd:59: 5e:a6:d7:5d:e1:e5:8d:0e:44:5d:68:d5:8a:74:0e:f3:d5:50: f3:56:91:de:0b:9c:98:70:25:d6:e3:d1:68:8d:e3:da:58:38: 21:34:f6:c4:2c:e3:89:71:db:1f:66:76:2f:de:0a:54:f2:35: 0f:6d:ba:56:e8:aa:f4:74:d0:1f:39:0e:f7:ae:6b:5a:9b:d0: 93:6c:9e:e6:29:eb:59:9f:1b:86:97:56:8f:74:70:b8:55:45: d0:1b:52:75:a4:40:89:28:a3:2b:bf:aa:75:6b:12:75:2e:fd: 7b:af:a6:bc:3c:ee:a2:be:90:5f:84:03:40:a6:bc:85:39:7c: fe:b3:38:02:34:79:ed:0a:cd:e1:d1:30:4d:59:6b:a8:f0:39: ca:12:41:47:2a:f0:18:84:65:25:b3:0d:cc:47:77:bf:82:0f: c4:f6:ad:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W5J8kgNpsug2oszEMT8LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYTkwZTdkYWYxNWMxN2MxYjlhYmM1NzIxNTdiYzdkOTE3 YjM5OTEwHhcNMjYwMTAyMDYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTdhODkxZWM1ZjE0N2U2ODZlY2UxNzE3Y2I1NjY0Y2U0MzQyZTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLh8k/wUCcB4PxIhj0uF5cn27DWu pZZ0tSi3P+DxpynlWSTVhLuXPSGmz18KPJWcT9Vs4/HGI9cUTlC2Ya3jo6RLtJjJ 6o8XbmLg89RkUkqHeXgTunJoVtNVIQsBRdyZ7I4lsC+VROKG9Twurt6Oh2eIceY2 Iq8AnZPJ6DFyTXxHFP3VCxD39R1p/t51AENL8Ho9yQeIWt7uXsqMOVNJbcfSM31b srYdXkXMFJ+uaDRZAAzRgs6bRy96YxZDwDAgPSXYiSFHAX+yxz36Z+qvdAnjSQaA D01lVKucFbGrneb21EDOO0K5qeLR/3qu8ldZkMEyGPaRG54ckutnxlkmXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHV6iR7F8UfmhuzhcXy1ZkzkNC5RMB8GA1UdIwQY MBaAFJypDn2vFcF8G5q8VyFXvH2RezmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbktrT2ZhOFZ3WHdibXJ4WElWZThmWkY3T1pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNWYzNzUtMTQwZi00NmU5LTk2N2Ut NmU0NTlhNThlMWQ2LzEvZFhxSkhzWHhSLWFHN09GeGZMVm1UT1EwTGxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8yNWYzNzUtMTQwZi00NmU5LTk2N2UtNmU0NTlhNThlMWQ2 LzEvbktrT2ZhOFZ3WHdibXJ4WElWZThmWkY3T1pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbSkMA0G CSqGSIb3DQEBCwUAA4IBAQAoB5NVWPRJtrTU2tKEkfOrX0hsPb5w/QUq70z1U5xA 8GLieYEVjbNMEkUZBoPTFF5LAihBCrHEzbm1JnS08oknC+oZqQ5MO7hZNG/A4Yc/ W0RtNoSkBtW6vVleptdd4eWNDkRdaNWKdA7z1VDzVpHeC5yYcCXW49FojePaWDgh NPbELOOJcdsfZnYv3gpU8jUPbbpW6Kr0dNAfOQ73rmtam9CTbJ7mKetZnxuGl1aP dHC4VUXQG1J1pECJKKMrv6p1axJ1Lv17r6a8PO6ivpBfhANApryFOXz+szgCNHnt Cs3h0TBNWWuo8DnKEkFHKvAYhGUlsw3MR3e/gg/E9q07 -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:38 2026 by rpki-client