This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/r5AHPWaTnEpO1ghpwQfA2r8rWzA.roa File: r5AHPWaTnEpO1ghpwQfA2r8rWzA.roa (raw, json) Hash identifier: STo7dsuCAWratjtpoKq4+IB1WNL26o0UMj72KK+lxcA= Subject key identifier: AF:90:07:3D:66:93:9C:4A:4E:D6:08:69:C1:07:C0:DA:BF:2B:5B:30 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B0A8CA3EA90F6965AAA36BCF9CFFF Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/r5AHPWaTnEpO1ghpwQfA2r8rWzA.roa Signing time: Fri 02 Jan 2026 06:17:57 +0000 ROA not before: Fri 02 Jan 2026 06:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42347 IP address blocks: 217.174.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:0a:8c:a3:ea:90:f6:96:5a:aa:36:bc:f9:cf:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af90073d66939c4a4ed60869c107c0dabf2b5b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:55:f7:a9:9f:dd:06:ab:4a:17:8d:ee:49:bc: 8f:09:40:0a:f3:03:f4:88:82:53:79:dc:4b:6c:8a: ec:12:c6:d8:8a:61:e2:55:56:9a:32:a3:f3:f3:e6: 40:80:9c:54:58:77:c2:84:59:7a:f2:39:a6:cd:c8: ce:c8:8b:49:4e:02:21:91:81:23:74:4e:fe:32:60: df:58:c0:33:77:cb:6b:ba:e5:4d:dd:b7:9c:ae:d7: 03:2b:87:6d:be:a0:c3:f4:bf:08:73:b7:fb:e0:d3: 58:a7:23:b5:46:bf:9a:13:a8:cd:88:f7:e8:03:9e: ce:0a:a0:09:e4:6d:f9:0a:fd:b7:99:4b:a4:a1:17: 34:d3:1d:84:ed:7f:e8:02:53:0a:dc:a1:70:05:b7: 8e:52:66:7a:0c:74:6e:4c:64:21:d4:d3:9f:39:91: 20:a6:32:11:47:b5:cc:51:0c:3e:c7:4d:cf:bc:9c: d9:ae:77:d0:70:00:f5:a3:d6:94:0f:c0:4e:72:c4: 32:d0:1f:98:3f:d4:64:de:76:27:68:d4:dd:2e:ec: d4:f4:65:3c:41:0e:68:59:bf:dc:78:a7:7a:9d:3e: c3:88:96:98:c7:77:70:2d:b3:3f:fb:f6:f0:95:18: 46:96:bb:a0:eb:92:cd:82:73:23:17:fd:c8:79:1a: b7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:90:07:3D:66:93:9C:4A:4E:D6:08:69:C1:07:C0:DA:BF:2B:5B:30 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/r5AHPWaTnEpO1ghpwQfA2r8rWzA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.174.144.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:74:dc:84:fc:5d:3b:7e:b9:52:38:84:47:08:f0:f7:9b:d8: c8:d3:f5:91:b8:04:79:06:f5:86:3d:62:c5:f9:cc:4f:3b:a6: 06:d0:4d:52:48:57:fd:fd:91:fe:1b:bb:d2:2a:68:cb:e7:b8: 7d:6a:50:4e:85:97:64:e0:79:ed:46:41:06:d3:64:2f:2d:7c: 35:7a:8f:eb:2b:d9:49:69:b9:48:bd:66:be:88:68:d9:18:8e: 16:57:7e:a4:e0:69:a8:91:a6:17:0f:bd:46:82:17:1d:8f:08: 69:c6:d3:55:80:72:7d:37:c0:c0:82:22:8c:14:71:8d:fc:1a: ff:b4:93:6f:21:1a:e7:a0:a5:6e:1e:12:be:5b:12:36:d9:da: d2:8d:3d:f0:b5:07:be:41:05:1e:41:2c:ac:2e:23:58:b7:30: 2f:0c:15:85:b4:0e:85:62:5d:bf:60:40:a0:ca:7b:7f:13:d0: 56:75:60:fb:25:9d:6c:15:c2:eb:cb:ea:5b:66:f4:a5:da:58: 95:70:63:34:e0:e2:74:19:4b:d6:0d:08:d2:b9:c1:67:19:bc: 47:63:5f:d9:9e:8f:3a:c5:bb:84:f2:d6:ee:a0:09:c9:25:4f: 2c:ad:55:3b:81:7c:a4:4e:08:d1:f0:d3:54:3e:23:82:05:40: 4f:68:dd:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WwqMo+qQ9pZaqja8+c//MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjkwMDczZDY2OTM5YzRhNGVkNjA4NjljMTA3YzBkYWJmMmI1YjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1X3qZ/dBqtKF43uSbyPCUAK8wP0 iIJTedxLbIrsEsbYimHiVVaaMqPz8+ZAgJxUWHfChFl68jmmzcjOyItJTgIhkYEj dE7+MmDfWMAzd8truuVN3becrtcDK4dtvqDD9L8Ic7f74NNYpyO1Rr+aE6jNiPfo A57OCqAJ5G35Cv23mUukoRc00x2E7X/oAlMK3KFwBbeOUmZ6DHRuTGQh1NOfOZEg pjIRR7XMUQw+x03PvJzZrnfQcAD1o9aUD8BOcsQy0B+YP9Rk3nYnaNTdLuzU9GU8 QQ5oWb/ceKd6nT7DiJaYx3dwLbM/+/bwlRhGlrug65LNgnMjF/3IeRq3wQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK+QBz1mk5xKTtYIacEHwNq/K1swMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvcjVBSFBXYVRuRXBPMWdocHdRZkEycjhyV3pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2a6QMA0G CSqGSIb3DQEBCwUAA4IBAQCedNyE/F07frlSOIRHCPD3m9jI0/WRuAR5BvWGPWLF +cxPO6YG0E1SSFf9/ZH+G7vSKmjL57h9alBOhZdk4HntRkEG02QvLXw1eo/rK9lJ ablIvWa+iGjZGI4WV36k4GmokaYXD71GghcdjwhpxtNVgHJ9N8DAgiKMFHGN/Br/ tJNvIRrnoKVuHhK+WxI22drSjT3wtQe+QQUeQSysLiNYtzAvDBWFtA6FYl2/YECg ynt/E9BWdWD7JZ1sFcLry+pbZvSl2liVcGM04OJ0GUvWDQjSucFnGbxHY1/Zno86 xbuE8tbuoAnJJU8srVU7gXykTgjR8NNUPiOCBUBPaN3P -----END CERTIFICATE-----Generated at Fri Jan 23 18:51:28 2026 by rpki-client