This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/ih5Tik-miT3yn0gYGk7C4bCXJEo.roa File: ih5Tik-miT3yn0gYGk7C4bCXJEo.roa (raw, json) Hash identifier: 7XCAdlzsVKGd3oObkJcWEkL8UHGW4ZKL9LLtudw/LCM= Subject key identifier: 8A:1E:53:8A:4F:A6:89:3D:F2:9F:48:18:1A:4E:C2:E1:B0:97:24:4A Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Certificate serial: 019BE530F8DFE6076E914143EA07F8959B88 Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/ih5Tik-miT3yn0gYGk7C4bCXJEo.roa Signing time: Thu 22 Jan 2026 10:12:30 +0000 ROA not before: Thu 22 Jan 2026 10:12:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 158.173.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 08:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:30:f8:df:e6:07:6e:91:41:43:ea:07:f8:95:9b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Validity Not Before: Jan 22 10:12:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a1e538a4fa6893df29f48181a4ec2e1b097244a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:db:b7:f9:55:b8:71:c7:c1:68:35:da:4a:33: 52:f8:f1:52:7b:5c:47:b3:4d:0b:71:4f:9b:74:5e: 9b:8a:5e:de:39:9a:64:b0:b8:04:08:7e:aa:d5:dd: 03:73:f5:b1:12:be:58:45:cc:05:4e:02:bf:b9:66: 2e:17:51:ef:c0:61:8a:b2:ba:59:eb:8e:0a:0c:92: b4:a8:1d:6b:86:83:4f:fe:00:5d:b2:e5:88:77:53: 32:db:e8:fd:70:6d:d0:5b:d5:50:58:75:2c:9e:b8: 5d:85:54:d0:6a:0b:d4:f4:ac:cd:d3:3a:7f:71:ea: 49:1b:60:93:fe:b7:4f:0e:b7:a4:38:af:99:a2:67: 47:fa:72:e8:5a:fe:24:34:81:5e:d2:5b:aa:75:b6: 17:16:60:ed:86:ef:bc:da:09:3e:d5:98:92:58:84: 7d:df:20:26:1f:0e:d3:e7:ce:0d:4d:a3:ec:f2:c6: 9a:33:56:12:8f:95:28:eb:2d:9c:74:81:f7:9a:d4: dc:71:f6:8a:ab:f3:b0:21:2e:aa:e4:66:3f:f1:e2: c0:db:ef:e3:71:90:ce:de:89:3b:46:4c:99:c7:e7: 52:48:56:bb:8c:ec:2b:e3:82:fc:38:e7:63:10:fd: e1:8e:60:28:18:d0:16:76:9e:69:52:0c:0b:41:7d: 4b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1E:53:8A:4F:A6:89:3D:F2:9F:48:18:1A:4E:C2:E1:B0:97:24:4A X509v3 Authority Key Identifier: keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/ih5Tik-miT3yn0gYGk7C4bCXJEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.54.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:5d:e5:99:7e:55:99:b7:73:96:9c:31:e4:4a:f0:0c:6f:22: 09:90:d1:81:ef:84:88:0d:5f:ac:10:0e:c1:dc:a1:10:f3:c8: 5a:94:16:06:e8:6b:ef:72:f8:57:8d:e3:a8:a1:af:56:4f:32: 80:98:4a:4d:c6:e5:0c:94:47:6d:01:bc:74:7d:3b:13:31:20: 02:96:d8:f8:d6:07:0b:bd:3a:94:82:fb:3e:1e:20:b2:2d:c0: 16:b6:87:f0:ca:a9:c8:aa:35:50:52:f1:da:5e:d4:1d:c8:58: 33:4d:4a:77:63:37:e5:c0:dd:33:49:bf:40:0f:49:7e:3f:da: ce:8c:d6:dd:cf:e5:02:d1:5f:11:4d:53:c0:95:7b:58:bc:48: 4b:63:a3:57:69:98:ac:1b:c1:6b:0a:5f:27:01:d1:2c:f2:d4: 14:92:f8:b5:21:c2:04:04:ba:ea:70:b1:72:b5:a3:97:37:19: eb:fb:d7:4b:a5:09:8d:ce:32:52:61:c3:14:2c:16:fd:ef:09: 8a:92:ce:87:ec:c3:11:5b:be:35:47:ec:e8:60:78:5b:ea:c0: 3b:82:23:3c:9f:b4:1b:1e:7b:1b:59:7c:25:2d:e7:47:43:74: a4:fd:03:6e:fc:d5:0a:e8:55:5a:f3:33:2e:9a:8a:7e:27:bf: d2:e4:9e:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvlMPjf5gdukUFD6gf4lZuIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh NDA4MjMwHhcNMjYwMTIyMTAxMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTFlNTM4YTRmYTY4OTNkZjI5ZjQ4MTgxYTRlYzJlMWIwOTcyNDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39u3+VW4ccfBaDXaSjNS+PFSe1xH s00LcU+bdF6bil7eOZpksLgECH6q1d0Dc/WxEr5YRcwFTgK/uWYuF1HvwGGKsrpZ 644KDJK0qB1rhoNP/gBdsuWId1My2+j9cG3QW9VQWHUsnrhdhVTQagvU9KzN0zp/ cepJG2CT/rdPDrekOK+ZomdH+nLoWv4kNIFe0luqdbYXFmDthu+82gk+1ZiSWIR9 3yAmHw7T584NTaPs8saaM1YSj5Uo6y2cdIH3mtTccfaKq/OwIS6q5GY/8eLA2+/j cZDO3ok7RkyZx+dSSFa7jOwr44L8OOdjEP3hjmAoGNAWdp5pUgwLQX1LFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIoeU4pPpok98p9IGBpOwuGwlyRKMB8GA1UdIwQY MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt ZDJjZDI2YjY5ZGYxLzEvaWg1VGlrLW1pVDN5bjBnWUdrN0M0YkNYSkVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnq02MA0G CSqGSIb3DQEBCwUAA4IBAQAdXeWZflWZt3OWnDHkSvAMbyIJkNGB74SIDV+sEA7B 3KEQ88halBYG6GvvcvhXjeOooa9WTzKAmEpNxuUMlEdtAbx0fTsTMSACltj41gcL vTqUgvs+HiCyLcAWtofwyqnIqjVQUvHaXtQdyFgzTUp3YzflwN0zSb9AD0l+P9rO jNbdz+UC0V8RTVPAlXtYvEhLY6NXaZisG8FrCl8nAdEs8tQUkvi1IcIEBLrqcLFy taOXNxnr+9dLpQmNzjJSYcMULBb97wmKks6H7MMRW741R+zoYHhb6sA7giM8n7Qb HnsbWXwlLedHQ3Sk/QNu/NUK6FVa8zMumop+J7/S5J5p -----END CERTIFICATE-----Generated at Fri Jan 23 13:58:23 2026 by rpki-client