This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/utcMZoZ-bKrrR12tmJyNO0cBhnU.roa File: utcMZoZ-bKrrR12tmJyNO0cBhnU.roa (raw, json) Hash identifier: 6+DnoOfl4lL5gwEZUZds9jlaGi0yZaNkuduSpVBj2X8= Subject key identifier: BA:D7:0C:66:86:7E:6C:AA:EB:47:5D:AD:98:9C:8D:3B:47:01:86:75 Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019B7AC79A0C12E614FE487E362C52A64789 Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/utcMZoZ-bKrrR12tmJyNO0cBhnU.roa Signing time: Thu 01 Jan 2026 18:17:40 +0000 ROA not before: Thu 01 Jan 2026 18:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208593 IP address blocks: 5.202.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:9a:0c:12:e6:14:fe:48:7e:36:2c:52:a6:47:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Jan 1 18:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bad70c66867e6caaeb475dad989c8d3b47018675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:50:9f:a9:df:ec:da:b3:3c:04:a9:9c:71: ca:ef:cc:a8:b9:91:c6:1c:72:6a:bc:70:38:c9:c0: 82:a8:57:88:2f:7c:28:af:d5:88:9a:02:2a:e3:2d: 47:14:44:e3:33:00:c5:02:af:d0:e4:bb:a4:34:28: d8:1d:3a:ff:67:f8:85:e1:38:cd:96:51:1e:0f:73: 19:59:8a:bc:63:88:49:85:9b:f3:b2:35:0c:a9:b7: 5a:70:84:38:de:04:bf:22:35:ab:b3:7f:aa:4d:3b: 0f:ae:21:01:f4:7d:5b:f7:db:3f:32:55:48:ad:bc: 51:53:b7:f2:1f:08:40:c1:96:a2:32:56:b3:0d:8f: 1c:6d:34:f9:c4:d2:0d:6e:10:b2:37:80:95:4a:a5: 8e:16:bd:b6:2c:52:2d:bd:ee:28:9b:6e:e6:21:9e: bd:eb:1b:20:6b:31:72:16:de:42:a3:2f:62:0e:74: 94:e3:5f:bb:1a:3c:61:44:db:9e:5d:4f:da:59:a6: 92:89:c4:f6:6a:e6:e3:6e:f7:48:e4:35:d6:9c:df: fa:59:9f:c2:1f:9b:12:4e:33:91:95:84:bf:02:f9: 23:90:19:68:67:78:d3:b8:29:45:64:ea:ba:63:dc: ad:07:e6:b6:01:d1:cd:cc:a9:ed:8b:ad:12:63:76: 57:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D7:0C:66:86:7E:6C:AA:EB:47:5D:AD:98:9C:8D:3B:47:01:86:75 X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/utcMZoZ-bKrrR12tmJyNO0cBhnU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.202.187.0/24 Signature Algorithm: sha256WithRSAEncryption 60:ac:08:68:64:f9:42:8c:c5:4a:29:4d:48:75:7a:0d:25:d4: 7d:73:09:6a:49:a6:52:10:fa:8d:cc:ae:67:ed:aa:6f:fe:06: ff:fc:3e:f9:67:6f:37:bf:4e:95:08:45:2c:d0:43:ab:6e:37: e0:66:fd:88:fe:c2:22:0a:52:d7:af:c4:43:49:ef:aa:67:78: e5:0e:86:3a:5e:c6:5c:de:d5:90:6c:1b:c0:2d:c0:c6:64:3f: 89:38:1e:4d:7e:c0:7d:ce:30:74:f4:8c:09:5e:e2:9f:38:01: 27:06:e6:62:2d:8d:56:07:b9:a5:ce:05:a4:da:c8:22:47:9e: 4e:06:aa:4f:96:83:06:5a:8a:63:0c:ce:eb:74:87:89:a6:01: 80:86:ba:76:d1:60:d0:0d:16:68:ae:c8:6a:22:0a:bc:99:a5: 06:3c:83:88:51:12:62:1b:86:3f:75:6c:31:83:79:ab:40:db: 79:0f:58:58:3b:b0:fa:b0:81:df:07:2d:e3:13:97:74:13:7b: 6c:65:c2:df:79:04:06:84:ff:a0:f5:7a:0c:f2:2c:52:83:8e: 3e:69:09:42:aa:ed:98:d8:7f:5f:86:3f:eb:c5:a2:0c:d0:bc: 12:6b:dc:a2:c4:0c:c7:95:48:41:f5:f9:b2:d8:d5:67:a3:3c: 3d:37:65:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x5oMEuYU/kh+NixSpkeJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwMTAxMTgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWQ3MGM2Njg2N2U2Y2FhZWI0NzVkYWQ5ODljOGQzYjQ3MDE4Njc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvetQn6nf7NqzPASpnHHK78youZHG HHJqvHA4ycCCqFeIL3wor9WImgIq4y1HFETjMwDFAq/Q5LukNCjYHTr/Z/iF4TjN llEeD3MZWYq8Y4hJhZvzsjUMqbdacIQ43gS/IjWrs3+qTTsPriEB9H1b99s/MlVI rbxRU7fyHwhAwZaiMlazDY8cbTT5xNINbhCyN4CVSqWOFr22LFItve4om27mIZ69 6xsgazFyFt5Coy9iDnSU41+7GjxhRNueXU/aWaaSicT2aubjbvdI5DXWnN/6WZ/C H5sSTjORlYS/AvkjkBloZ3jTuClFZOq6Y9ytB+a2AdHNzKnti60SY3ZXmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLrXDGaGfmyq60ddrZicjTtHAYZ1MB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvdXRjTVpvWi1iS3JyUjEydG1KeU5PMGNCaG5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABcq7MA0G CSqGSIb3DQEBCwUAA4IBAQBgrAhoZPlCjMVKKU1IdXoNJdR9cwlqSaZSEPqNzK5n 7apv/gb//D75Z283v06VCEUs0EOrbjfgZv2I/sIiClLXr8RDSe+qZ3jlDoY6XsZc 3tWQbBvALcDGZD+JOB5NfsB9zjB09IwJXuKfOAEnBuZiLY1WB7mlzgWk2sgiR55O BqpPloMGWopjDM7rdIeJpgGAhrp20WDQDRZorshqIgq8maUGPIOIURJiG4Y/dWwx g3mrQNt5D1hYO7D6sIHfBy3jE5d0E3tsZcLfeQQGhP+g9XoM8ixSg44+aQlCqu2Y 2H9fhj/rxaIM0LwSa9yixAzHlUhB9fmy2NVnozw9N2W3 -----END CERTIFICATE-----Generated at Mon Jan 12 01:57:33 2026 by rpki-client