This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/Dgvi9A6UscTQzOGYMK8ID4fFNG0.roa File: Dgvi9A6UscTQzOGYMK8ID4fFNG0.roa (raw, json) Hash identifier: 4hWI2h6BtzzSvfeBxBlJw/0l98yMAAcnhfVquWWrJ/8= Subject key identifier: 0E:0B:E2:F4:0E:94:B1:C4:D0:CC:E1:98:30:AF:08:0F:87:C5:34:6D Certificate issuer: /CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48 Certificate serial: 019B76EB5C88E54A27BD478FB67C753A58FF Authority key identifier: BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/Dgvi9A6UscTQzOGYMK8ID4fFNG0.roa Signing time: Thu 01 Jan 2026 00:18:14 +0000 ROA not before: Thu 01 Jan 2026 00:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209146 IP address blocks: 5.180.56.0/24 maxlen: 24 2a09:ff40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 09:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:5c:88:e5:4a:27:bd:47:8f:b6:7c:75:3a:58:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48 Validity Not Before: Jan 1 00:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e0be2f40e94b1c4d0cce19830af080f87c5346d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:da:63:f1:e7:77:4f:ed:a4:69:2d:6c:a6:76: c7:09:2a:80:29:55:f4:aa:31:8d:05:5e:52:62:50: 45:a4:2c:94:96:f3:3a:45:44:9e:47:b6:f2:02:5e: b7:9d:9e:4b:6d:3c:82:08:de:9e:2c:90:d7:6b:4e: 3e:72:73:91:45:ed:93:f3:0f:6b:49:96:04:0f:f4: 56:30:6e:a7:df:7c:fd:b2:2a:ac:84:f2:eb:ca:31: 39:f5:af:33:82:fd:6f:d3:7a:ae:87:22:85:96:77: b7:2e:00:72:b4:86:a1:7f:58:cc:27:41:31:67:47: 24:c9:73:cb:be:57:28:8d:0a:b7:8d:52:94:75:02: 0e:b0:18:f4:33:b9:b1:a6:4d:90:0d:1e:2c:da:b6: 68:fd:53:a4:8d:42:60:fe:4d:9f:e9:2c:af:95:6b: 9d:d1:f4:b0:be:f3:70:58:c6:ae:a6:25:c1:42:35: d1:f2:a3:61:b6:ad:d4:40:eb:ff:20:02:ed:3d:e5: 50:13:af:dc:e0:16:78:68:f0:b7:d2:f1:48:c2:b3: 5e:be:fd:74:31:f9:52:59:be:e5:6f:83:79:c9:52: dc:50:13:a8:a1:8c:26:4d:f7:4c:f4:e8:43:3a:15: 2b:4c:af:a2:7b:3a:df:09:66:42:4e:b0:e1:f1:11: 6d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0B:E2:F4:0E:94:B1:C4:D0:CC:E1:98:30:AF:08:0F:87:C5:34:6D X509v3 Authority Key Identifier: keyid:BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/Dgvi9A6UscTQzOGYMK8ID4fFNG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.56.0/24 IPv6: 2a09:ff40::/32 Signature Algorithm: sha256WithRSAEncryption 79:b0:5c:f6:28:da:68:53:e5:46:ea:24:44:e8:70:3a:b9:e8: ed:c1:a5:f0:74:0d:a7:e7:a0:be:d4:32:8e:77:4e:ab:17:76: c9:2c:c0:78:c5:f2:0f:3c:d8:4d:37:a9:0f:0c:a5:f4:a2:a4: 6e:a8:ac:17:5a:88:e9:62:c6:8b:ff:f5:26:5f:70:f6:a3:9e: 5c:02:d5:61:ca:51:4f:d9:1e:92:5a:34:f6:5e:8f:a9:56:b8: ef:30:22:90:d6:c2:75:84:11:87:70:a5:8a:8a:3b:a1:b6:1f: b4:10:1f:70:d4:99:8f:2c:fb:0c:bd:eb:a3:71:7c:88:d7:ad: 1f:c9:83:01:1a:5c:5a:07:66:ce:66:a7:f9:bb:8e:38:43:86: e4:86:bd:b9:b6:af:5f:6d:1d:ed:89:43:5b:97:c6:dd:0d:56: c2:cb:11:af:08:e4:81:c2:09:b8:d9:c1:b8:4c:ab:81:44:a9: 1a:75:0e:06:4b:32:60:6b:f8:07:bd:86:be:6f:eb:24:9c:aa: c6:81:66:7b:1f:ac:7f:b7:36:14:3a:ab:5a:5b:63:d3:4a:b8: a1:83:26:ee:a3:5d:d2:1d:75:85:7b:c5:f2:55:63:7e:26:ef: 2b:06:bb:86:30:8a:a2:bc:2c:67:43:cd:32:58:7d:11:31:5b: 06:48:52:9e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt261yI5UonvUePtnx1Olj/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWJhMmE1NmEwYzMwZmRhZjU5MzRhZjg3NjVjMWZmZDEz NTdhNDgwHhcNMjYwMTAxMDAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTBiZTJmNDBlOTRiMWM0ZDBjY2UxOTgzMGFmMDgwZjg3YzUzNDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tpj8ed3T+2kaS1spnbHCSqAKVX0 qjGNBV5SYlBFpCyUlvM6RUSeR7byAl63nZ5LbTyCCN6eLJDXa04+cnORRe2T8w9r SZYED/RWMG6n33z9siqshPLryjE59a8zgv1v03quhyKFlne3LgBytIahf1jMJ0Ex Z0ckyXPLvlcojQq3jVKUdQIOsBj0M7mxpk2QDR4s2rZo/VOkjUJg/k2f6SyvlWud 0fSwvvNwWMaupiXBQjXR8qNhtq3UQOv/IALtPeVQE6/c4BZ4aPC30vFIwrNevv10 MflSWb7lb4N5yVLcUBOooYwmTfdM9OhDOhUrTK+iezrfCWZCTrDh8RFtbwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFA4L4vQOlLHE0MzhmDCvCA+HxTRtMB8GA1UdIwQY MBaAFLqroqVqDDD9r1k0r4dlwf/RNXpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXF1aXBXb01NUDJ2V1RTdmgyWEJfOUUxZWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xOTU0YTYtZGEyMy00OTUyLTljMDkt MDI0ODY4ZmZkMzE1LzEvRGd2aTlBNlVzY1RRek9HWU1LOElENGZGTkcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8xOTU0YTYtZGEyMy00OTUyLTljMDktMDI0ODY4ZmZkMzE1 LzEvdXF1aXBXb01NUDJ2V1RTdmgyWEJfOUUxZWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQABbQ4MA0E AgACMAcDBQAqCf9AMA0GCSqGSIb3DQEBCwUAA4IBAQB5sFz2KNpoU+VG6iRE6HA6 uejtwaXwdA2n56C+1DKOd06rF3bJLMB4xfIPPNhNN6kPDKX0oqRuqKwXWojpYsaL //UmX3D2o55cAtVhylFP2R6SWjT2Xo+pVrjvMCKQ1sJ1hBGHcKWKijuhth+0EB9w 1JmPLPsMveujcXyI160fyYMBGlxaB2bOZqf5u444Q4bkhr25tq9fbR3tiUNbl8bd DVbCyxGvCOSBwgm42cG4TKuBRKkadQ4GSzJga/gHvYa+b+sknKrGgWZ7H6x/tzYU OqtaW2PTSrihgybuo13SHXWFe8XyVWN+Ju8rBruGMIqivCxnQ80yWH0RMVsGSFKe -----END CERTIFICATE-----Generated at Wed Jan 7 14:14:31 2026 by rpki-client