This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/wy5ljkBOMrsbd0Elh017lYGGZuc.roa File: wy5ljkBOMrsbd0Elh017lYGGZuc.roa (raw, json) Hash identifier: NT6vW+p8o6SSPvqBK4RdOyq3x/fjviFT0ptnG8DPzMY= Subject key identifier: C3:2E:65:8E:40:4E:32:BB:1B:77:41:25:87:4D:7B:95:81:86:66:E7 Certificate issuer: /CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2 Certificate serial: 019B7FF2C1422966333B8C8138D29E889A61 Authority key identifier: 3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/wy5ljkBOMrsbd0Elh017lYGGZuc.roa Signing time: Fri 02 Jan 2026 18:22:54 +0000 ROA not before: Fri 02 Jan 2026 18:22:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208944 IP address blocks: 5.180.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:c1:42:29:66:33:3b:8c:81:38:d2:9e:88:9a:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2 Validity Not Before: Jan 2 18:22:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c32e658e404e32bb1b774125874d7b95818666e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a4:a4:0e:ab:ed:ec:3e:31:06:25:da:f4:d8: 3a:34:b3:2a:0d:9e:03:8e:00:55:23:e5:d0:fa:f2: e0:1d:1d:ce:01:df:b2:55:e1:fd:76:96:00:1f:95: eb:aa:f8:c1:bb:a0:0b:81:be:83:ae:4b:55:68:de: e0:8c:9d:c3:8a:56:64:6d:93:62:c7:35:40:7d:79: 00:62:02:f3:b6:db:3e:0e:fb:d3:3f:4f:87:30:f8: c0:84:83:7e:f6:3c:18:21:0d:09:cd:79:79:0f:66: 30:52:ad:a6:9e:d9:d7:72:15:b5:3b:bd:c9:ae:f8: 02:14:38:35:75:86:2f:0b:aa:ad:0e:cb:50:f7:fb: 23:83:41:91:06:13:90:f5:9c:a8:39:f1:7c:9b:66: b1:f0:23:cd:7e:b2:1f:27:b1:f4:2a:d9:cc:3e:8d: f7:01:94:e6:16:83:29:40:85:3c:71:da:9e:af:6c: 49:b7:04:89:cd:8a:ad:f6:c0:1e:e4:aa:b3:3e:3e: 36:1b:34:fe:0e:49:63:97:83:de:cb:ac:be:ca:a8: 8d:b4:0d:a2:82:28:3b:cf:ad:27:c7:34:70:0a:62: 0b:e1:37:5e:29:d0:26:68:ae:b1:17:f9:65:ac:64: 4e:69:9f:93:ab:b6:16:53:f2:30:0e:42:f3:2f:b7: 7d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2E:65:8E:40:4E:32:BB:1B:77:41:25:87:4D:7B:95:81:86:66:E7 X509v3 Authority Key Identifier: keyid:3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/wy5ljkBOMrsbd0Elh017lYGGZuc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.38.0/23 Signature Algorithm: sha256WithRSAEncryption 52:2b:ad:ef:4a:65:a2:65:17:f0:49:04:df:56:b8:59:3e:d1: 30:ff:1e:46:ab:88:f2:2c:ed:f7:14:2b:ac:11:a3:ae:36:58: df:b4:2e:88:8c:44:8f:02:cc:aa:a2:5d:30:76:24:1c:46:31: f0:cb:aa:20:ae:00:97:ec:99:fc:4b:69:96:ed:e5:3d:be:ae: 4f:b4:30:b1:5f:24:81:de:b7:13:d7:19:bb:9e:96:82:1f:09: 7b:01:3d:18:47:cd:ea:03:c9:97:71:e6:f7:8e:b0:ae:fd:43: 29:0e:bc:0c:e9:a4:37:c5:70:1e:68:09:47:56:a8:78:2e:d2: a0:f3:76:7d:15:e9:8a:bd:fb:a2:e3:21:55:70:f1:f5:be:bd: 64:0f:f4:cf:cb:b9:45:87:5c:03:3a:96:57:fb:f1:bc:6c:ea: 00:cb:f1:d9:d1:c2:db:65:da:3c:ad:8b:cf:45:93:81:76:19: 12:9f:e7:06:23:92:b5:f8:00:38:b2:65:e5:4f:45:8d:b9:3b: f5:01:ac:ba:31:8f:48:7f:ee:4f:8c:f9:6e:ae:e2:a4:aa:99: 14:f7:42:04:b1:f6:84:9d:b0:94:f2:56:ec:1a:44:25:bf:a8: 46:71:c7:aa:1c:4e:52:a5:2c:d4:bb:56:e3:ad:68:ce:df:99: 9f:8b:28:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8sFCKWYzO4yBONKeiJphMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZGVhNGI3YWY4Y2NlNWNmZDM3NzVjYjAxZmI5N2M0Zjk1 MWE5YTIwHhcNMjYwMTAyMTgyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzJlNjU4ZTQwNGUzMmJiMWI3NzQxMjU4NzRkN2I5NTgxODY2NmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqSkDqvt7D4xBiXa9Ng6NLMqDZ4D jgBVI+XQ+vLgHR3OAd+yVeH9dpYAH5XrqvjBu6ALgb6DrktVaN7gjJ3DilZkbZNi xzVAfXkAYgLztts+DvvTP0+HMPjAhIN+9jwYIQ0JzXl5D2YwUq2mntnXchW1O73J rvgCFDg1dYYvC6qtDstQ9/sjg0GRBhOQ9ZyoOfF8m2ax8CPNfrIfJ7H0KtnMPo33 AZTmFoMpQIU8cdqer2xJtwSJzYqt9sAe5KqzPj42GzT+Dkljl4Pey6y+yqiNtA2i gig7z60nxzRwCmIL4TdeKdAmaK6xF/llrGROaZ+Tq7YWU/IwDkLzL7d9GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMMuZY5ATjK7G3dBJYdNe5WBhmbnMB8GA1UdIwQY MBaAFDrepLevjM5c/Td1ywH7l8T5UamiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3Q2a3Q2LU16bHo5TjNYTEFmdVh4UGxScWFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xMjMxMjQtZWY2Ni00OGQxLTkxZDAt ZjBkMTE5YzUyN2ZmLzEvd3k1bGprQk9NcnNiZDBFbGgwMTdsWUdHWnVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8xMjMxMjQtZWY2Ni00OGQxLTkxZDAtZjBkMTE5YzUyN2Zm LzEvT3Q2a3Q2LU16bHo5TjNYTEFmdVh4UGxScWFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBbQmMA0G CSqGSIb3DQEBCwUAA4IBAQBSK63vSmWiZRfwSQTfVrhZPtEw/x5Gq4jyLO33FCus EaOuNljftC6IjESPAsyqol0wdiQcRjHwy6ogrgCX7Jn8S2mW7eU9vq5PtDCxXySB 3rcT1xm7npaCHwl7AT0YR83qA8mXceb3jrCu/UMpDrwM6aQ3xXAeaAlHVqh4LtKg 83Z9FemKvfui4yFVcPH1vr1kD/TPy7lFh1wDOpZX+/G8bOoAy/HZ0cLbZdo8rYvP RZOBdhkSn+cGI5K1+AA4smXlT0WNuTv1Aay6MY9If+5PjPluruKkqpkU90IEsfaE nbCU8lbsGkQlv6hGcceqHE5SpSzUu1bjrWjO35mfiyit -----END CERTIFICATE-----Generated at Mon Jan 12 09:56:03 2026 by rpki-client