This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/1-PDXyT_y142EvdheyrofhckOZ2k.roa File: 1-PDXyT_y142EvdheyrofhckOZ2k.roa (raw, json) Hash identifier: ccyD9+XgZRIR1q4asFuzxFYtHTldk/YoJIZESSeloWE= Subject key identifier: F8:F0:D7:C9:3F:F2:D7:8D:84:BD:D8:5E:CA:BA:1F:85:C9:0E:67:69 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B0908C708AAFC3D1343AFE2784FE5 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/1-PDXyT_y142EvdheyrofhckOZ2k.roa Signing time: Fri 02 Jan 2026 06:17:56 +0000 ROA not before: Fri 02 Jan 2026 06:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34524 IP address blocks: 5.104.176.0/24 maxlen: 24 5.104.177.0/24 maxlen: 24 5.104.178.0/24 maxlen: 24 5.104.179.0/24 maxlen: 24 5.104.180.0/24 maxlen: 24 5.104.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:09:08:c7:08:aa:fc:3d:13:43:af:e2:78:4f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8f0d7c93ff2d78d84bdd85ecaba1f85c90e6769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9e:6c:e1:9d:76:e6:49:76:7c:09:4f:0d:70: 38:91:df:92:c5:21:9e:da:c1:04:4b:40:73:c4:3f: 65:f4:3c:0e:e3:37:0f:5a:a9:f8:7f:e2:ef:a8:16: db:e0:2a:b7:fb:be:e1:af:8b:82:ae:0b:aa:bf:89: 59:57:83:55:c3:b8:f7:7c:9e:8b:1a:9b:f1:ab:99: 5a:50:61:90:b4:2b:c1:a8:23:93:cc:5e:0a:a8:b2: 4b:e1:af:60:a5:ec:d7:39:35:2e:ba:7f:52:bd:98: bb:d1:bf:68:76:8e:88:58:b6:47:8f:9d:c0:e1:85: 4e:5d:df:62:01:6e:c1:ff:cb:dd:9b:78:3a:0c:e9: cc:ad:0f:55:8e:0d:ff:f0:80:ab:18:ae:92:c5:27: 9e:50:cd:c7:eb:9a:c0:16:a2:32:c4:f4:ec:4b:98: 09:a7:09:da:24:98:6d:ab:74:c6:54:e2:42:f9:8e: 24:61:6c:f7:98:c2:05:10:19:ba:6b:59:98:50:e1: 7d:03:37:63:7b:e7:b4:f2:59:b3:b6:9e:78:9e:b3: 16:4a:d8:50:b5:79:5f:28:fd:be:0b:b2:9a:d9:8e: e5:25:a7:56:ef:41:36:79:00:a2:71:09:0c:47:53: bb:53:c2:2c:80:82:08:fa:e2:8c:e7:14:df:61:37: 5e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F0:D7:C9:3F:F2:D7:8D:84:BD:D8:5E:CA:BA:1F:85:C9:0E:67:69 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/1-PDXyT_y142EvdheyrofhckOZ2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.176.0-5.104.181.255 Signature Algorithm: sha256WithRSAEncryption 08:a4:e3:66:6d:93:75:ba:86:79:13:6b:ad:ea:a3:a5:c2:65: fc:38:37:64:38:ac:78:5d:c4:b1:8e:90:51:f6:c0:eb:9d:83: fb:c2:a0:b6:6b:30:45:2e:f5:6c:3a:22:bf:c7:aa:c1:c0:d8: d3:ad:38:c1:43:f2:a6:87:a7:5b:09:94:f4:ae:cf:bc:66:97: d5:82:fa:55:83:0a:9f:dd:79:38:7a:f7:1e:e6:68:5c:8c:25: d2:07:44:a0:93:e6:a0:21:a6:53:36:a2:03:b6:d9:37:d0:73: de:dc:6c:2d:0c:5d:9f:f9:12:d0:28:71:27:06:90:5e:64:ca: e2:f3:60:35:92:90:5a:78:c5:d5:08:35:3b:e3:77:27:c7:39: 67:05:83:f8:27:7b:d7:b6:7d:56:07:d4:c4:9a:8b:f0:cf:09: 21:94:d3:87:0b:2d:11:ca:29:a9:43:25:55:33:44:69:b3:1e: 85:7b:49:71:26:ca:9d:de:91:41:75:39:98:bb:69:3a:41:c2: 22:44:bf:74:eb:bc:ed:e6:a9:74:99:6a:40:e9:da:a2:03:fc: 3f:71:f8:c5:54:9e:fd:6f:35:fa:38:47:14:25:72:df:06:10: de:9e:8c:53:74:a4:2f:8c:1c:c2:ea:98:a3:62:f3:ab:4c:d3: 86:38:eb:f3 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt9WwkIxwiq/D0TQ6/ieE/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGYwZDdjOTNmZjJkNzhkODRiZGQ4NWVjYWJhMWY4NWM5MGU2NzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp5s4Z125kl2fAlPDXA4kd+SxSGe 2sEES0BzxD9l9DwO4zcPWqn4f+LvqBbb4Cq3+77hr4uCrguqv4lZV4NVw7j3fJ6L Gpvxq5laUGGQtCvBqCOTzF4KqLJL4a9gpezXOTUuun9SvZi70b9odo6IWLZHj53A 4YVOXd9iAW7B/8vdm3g6DOnMrQ9Vjg3/8ICrGK6SxSeeUM3H65rAFqIyxPTsS5gJ pwnaJJhtq3TGVOJC+Y4kYWz3mMIFEBm6a1mYUOF9Azdje+e08lmztp54nrMWSthQ tXlfKP2+C7Ka2Y7lJadW70E2eQCicQkMR1O7U8IsgIII+uKM5xTfYTdelwIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFPjw18k/8teNhL3YXsq6H4XJDmdpMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvMS1QRFh5VF95MTQyRXZkaGV5cm9maGNrT1oyay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDMvY2NkZDhiLTc3MjAtNGRlMC04YzQzLWRhY2I1ZjM1NmVh My8xL3cxNnNaT3BJQXVhQ1JvYjN3TklCOHNoY3Nxby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQEBWiw AwQBBWi0MA0GCSqGSIb3DQEBCwUAA4IBAQAIpONmbZN1uoZ5E2ut6qOlwmX8ODdk OKx4XcSxjpBR9sDrnYP7wqC2azBFLvVsOiK/x6rBwNjTrTjBQ/Kmh6dbCZT0rs+8 ZpfVgvpVgwqf3Xk4evce5mhcjCXSB0Sgk+agIaZTNqIDttk30HPe3GwtDF2f+RLQ KHEnBpBeZMri82A1kpBaeMXVCDU743cnxzlnBYP4J3vXtn1WB9TEmovwzwkhlNOH Cy0RyimpQyVVM0Rpsx6Fe0lxJsqd3pFBdTmYu2k6QcIiRL9067zt5ql0mWpA6dqi A/w/cfjFVJ79bzX6OEcUJXLfBhDenoxTdKQvjBzC6pijYvOrTNOGOOvz -----END CERTIFICATE-----Generated at Fri Jan 23 18:49:15 2026 by rpki-client