This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/H2XsSdeASBcRUzVnHDYGOUkbxV4.roa File: H2XsSdeASBcRUzVnHDYGOUkbxV4.roa (raw, json) Hash identifier: KKtnGOw5DWmBkVFO2yXEjzjzmImlfIzpRO74uLFVB+U= Subject key identifier: 1F:65:EC:49:D7:80:48:17:11:53:35:67:1C:36:06:39:49:1B:C5:5E Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B2635C6989C388A83CBDC06B10976 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/H2XsSdeASBcRUzVnHDYGOUkbxV4.roa Signing time: Fri 02 Jan 2026 06:18:04 +0000 ROA not before: Fri 02 Jan 2026 06:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210992 IP address blocks: 5.104.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:26:35:c6:98:9c:38:8a:83:cb:dc:06:b1:09:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f65ec49d7804817115335671c360639491bc55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f7:a1:e9:95:69:a7:2c:c4:cf:48:3f:94:12: 44:94:04:df:02:76:73:e3:9f:76:bb:0b:72:0f:16: 01:eb:25:eb:03:b5:e0:78:de:45:1e:77:58:ed:e0: 09:1d:42:bf:4a:e9:a3:99:41:a9:80:cf:b4:97:25: aa:51:95:74:11:69:00:8e:3f:a5:a5:d3:80:da:cb: 66:ce:39:f8:86:50:e1:af:8d:a6:eb:5c:54:58:a2: a1:61:27:9d:e1:2e:5c:70:f5:9a:f0:79:1f:51:2f: 15:15:47:22:6e:b7:0d:09:6a:43:fd:6d:6b:f0:83: 1e:95:f2:d3:d5:4e:62:00:33:ff:a1:7a:e8:cf:2a: 12:5f:69:ea:a3:09:3a:85:12:78:4c:b2:5c:22:4e: 90:f9:5f:41:a1:52:30:d5:e4:a8:c5:d9:bc:9b:ea: e6:c8:21:79:a9:4f:d0:bf:78:3f:87:bd:d0:ff:28: 98:15:22:f0:47:14:d5:2d:30:5d:99:c1:f2:40:07: c2:c2:64:fc:31:80:58:d4:cf:11:14:c1:8f:9c:1a: 30:e8:53:53:ce:eb:02:d8:a5:72:7f:99:49:9c:12: ec:2b:8e:bc:ba:df:60:20:32:f1:c7:5f:4d:50:03: 13:fc:64:aa:af:07:ec:83:ed:40:10:6d:4b:80:b1: 3a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:65:EC:49:D7:80:48:17:11:53:35:67:1C:36:06:39:49:1B:C5:5E X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/H2XsSdeASBcRUzVnHDYGOUkbxV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.182.0/24 Signature Algorithm: sha256WithRSAEncryption 84:26:56:f4:35:95:85:01:0a:85:01:6c:38:a8:fa:7b:4a:73: 0e:17:04:7b:97:74:64:92:0b:e8:bb:48:7c:e2:97:24:9c:24: 5a:30:66:ae:1e:1b:f7:19:50:07:b3:d4:26:da:8f:d5:60:8c: 52:a8:3f:6d:66:3f:07:55:07:77:9f:36:70:32:7a:17:a1:f7: cf:37:9a:09:e1:a8:1e:97:40:db:b9:6b:c8:cd:7b:27:20:b1: e8:b8:8c:ea:97:24:b1:a9:04:35:be:d7:3c:30:27:9a:28:cd: 50:69:a2:ae:7d:f4:1b:7e:2e:5d:55:75:53:04:29:69:43:fc: 15:6b:d2:b7:d7:55:a2:2e:8c:5d:ee:63:5f:da:21:2e:dc:30: 8b:2f:91:b8:61:b9:34:91:f1:9f:ed:60:af:af:3b:3e:94:2a: 11:dc:16:f3:d8:d4:11:40:57:92:06:70:ab:23:23:60:4c:f5: 0c:e4:21:3d:3c:da:f7:2b:8c:65:30:fa:4a:c5:94:3a:ec:00: 3b:6b:96:85:5e:75:8c:8f:bd:fc:a5:e5:1e:1d:26:a0:12:4c: cf:32:7e:7a:d4:67:5a:69:07:39:42:5f:ca:70:b1:93:a4:b1: d9:a3:be:8b:d0:14:47:0e:a7:a6:ad:56:9e:60:94:e8:0c:d2: d7:2a:26:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WyY1xpicOIqDy9wGsQl2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjY1ZWM0OWQ3ODA0ODE3MTE1MzM1NjcxYzM2MDYzOTQ5MWJjNTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/eh6ZVppyzEz0g/lBJElATfAnZz 4592uwtyDxYB6yXrA7XgeN5FHndY7eAJHUK/SumjmUGpgM+0lyWqUZV0EWkAjj+l pdOA2stmzjn4hlDhr42m61xUWKKhYSed4S5ccPWa8HkfUS8VFUcibrcNCWpD/W1r 8IMelfLT1U5iADP/oXrozyoSX2nqowk6hRJ4TLJcIk6Q+V9BoVIw1eSoxdm8m+rm yCF5qU/Qv3g/h73Q/yiYFSLwRxTVLTBdmcHyQAfCwmT8MYBY1M8RFMGPnBow6FNT zusC2KVyf5lJnBLsK468ut9gIDLxx19NUAMT/GSqrwfsg+1AEG1LgLE6dQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB9l7EnXgEgXEVM1Zxw2BjlJG8VeMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvSDJYc1NkZUFTQmNSVXpWbkhEWUdPVWtieFY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWi2MA0G CSqGSIb3DQEBCwUAA4IBAQCEJlb0NZWFAQqFAWw4qPp7SnMOFwR7l3Rkkgvou0h8 4pcknCRaMGauHhv3GVAHs9Qm2o/VYIxSqD9tZj8HVQd3nzZwMnoXoffPN5oJ4age l0DbuWvIzXsnILHouIzqlySxqQQ1vtc8MCeaKM1QaaKuffQbfi5dVXVTBClpQ/wV a9K311WiLoxd7mNf2iEu3DCLL5G4Ybk0kfGf7WCvrzs+lCoR3Bbz2NQRQFeSBnCr IyNgTPUM5CE9PNr3K4xlMPpKxZQ67AA7a5aFXnWMj738peUeHSagEkzPMn561Gda aQc5Ql/KcLGTpLHZo76L0BRHDqemrVaeYJToDNLXKiYW -----END CERTIFICATE-----Generated at Fri Jan 23 18:47:51 2026 by rpki-client