This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/hJI-Spsz0GINZUeNyhTaYAzwubQ.roa File: hJI-Spsz0GINZUeNyhTaYAzwubQ.roa (raw, json) Hash identifier: XJy8oyX2ahcRPXnMDc+74R24O9EqPSlBTqPW+tBwiIQ= Subject key identifier: 84:92:3E:4A:9B:33:D0:62:0D:65:47:8D:CA:14:DA:60:0C:F0:B9:B4 Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Certificate serial: 019B7910879A150E3946C453F8B7A564CB23 Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/hJI-Spsz0GINZUeNyhTaYAzwubQ.roa Signing time: Thu 01 Jan 2026 10:18:05 +0000 ROA not before: Thu 01 Jan 2026 10:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209915 IP address blocks: 212.119.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:87:9a:15:0e:39:46:c4:53:f8:b7:a5:64:cb:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Validity Not Before: Jan 1 10:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84923e4a9b33d0620d65478dca14da600cf0b9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:67:15:fc:55:5d:99:89:e2:be:1c:eb:e2:d0: c2:a4:67:3b:d7:de:b4:89:5d:96:38:0b:ee:47:90: 38:a7:13:a6:39:0e:58:f9:5f:91:d8:0a:92:e2:a2: 20:92:8e:fc:0d:4a:d7:21:95:03:af:ea:29:c9:92: 73:69:73:45:28:3d:ca:71:28:f3:9a:c4:32:7b:05: 62:f3:21:0d:dc:62:84:38:8b:f9:e0:25:a5:3e:a2: ac:01:16:ca:30:6c:05:6c:5b:0f:a1:ff:99:1e:a9: eb:11:60:59:a4:47:3e:cf:a1:62:ff:be:50:59:c7: a1:fb:99:c8:2e:2d:b8:47:67:7d:0e:17:ad:80:da: 3b:9e:10:1d:ee:f9:f9:c6:27:2e:ab:4d:fc:07:c5: c7:ac:e6:ab:b9:fb:84:9f:d6:e3:5e:d6:14:4b:e0: 21:02:ae:8c:9a:9c:92:b7:2e:40:a2:23:94:21:2a: f9:aa:2d:92:a8:be:dc:fb:6d:50:b6:8e:eb:d0:36: dd:4b:8d:6a:97:a5:f6:77:b4:38:d6:c4:9e:82:a3: 4d:85:46:33:75:d9:c9:dd:2f:1e:4a:36:ee:1b:b3: e0:da:2b:ca:57:a5:62:67:f7:39:39:cc:0c:4e:0e: c4:23:06:f0:29:55:1b:0d:99:6a:f2:15:2f:ce:55: 24:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:92:3E:4A:9B:33:D0:62:0D:65:47:8D:CA:14:DA:60:0C:F0:B9:B4 X509v3 Authority Key Identifier: keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/hJI-Spsz0GINZUeNyhTaYAzwubQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.119.5.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:97:42:61:77:b7:25:35:86:43:3b:0e:96:9e:de:55:60:da: 26:13:9a:ff:5b:28:09:2f:6e:2d:df:6e:16:aa:a3:c9:09:1a: 12:7b:95:81:29:e5:5b:f3:f7:ce:0a:0b:29:b2:40:57:36:e2: 43:ef:0c:87:3b:0a:10:61:50:91:91:d7:f8:b0:e2:5c:6f:b3: 13:1f:56:f5:c8:4a:d3:fe:72:cf:b1:ed:c7:34:34:6c:00:2b: fc:49:c4:4b:d9:a7:88:0a:0c:95:11:63:aa:fb:c4:7a:ac:8e: 7d:3b:87:50:f6:73:39:cb:61:38:42:df:a7:3f:08:be:d5:0d: 15:91:b5:b1:10:93:d3:3c:1f:45:fa:0e:94:aa:0f:e6:bf:96: 2f:87:85:37:3e:c9:ec:08:a7:80:6d:62:a4:26:51:44:a5:10: 22:de:00:2c:4e:31:5c:f5:d3:55:d4:32:bc:bd:3c:10:01:8b: 07:f3:aa:80:a1:64:34:1c:ed:2a:e9:33:d1:f2:bf:95:e8:8e: 13:b5:61:a2:86:4d:98:51:7e:4b:ca:f4:24:7e:ee:08:56:99: 89:e6:37:3e:50:81:54:12:b6:35:85:1a:98:ef:37:bd:bc:2b: 06:03:d6:0e:69:44:2a:e7:49:b6:e5:d8:42:6b:f6:63:ac:20: 01:a4:12:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EIeaFQ45RsRT+LelZMsjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4 ZDIyZmQwHhcNMjYwMTAxMTAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDkyM2U0YTliMzNkMDYyMGQ2NTQ3OGRjYTE0ZGE2MDBjZjBiOWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GcV/FVdmYnivhzr4tDCpGc71960 iV2WOAvuR5A4pxOmOQ5Y+V+R2AqS4qIgko78DUrXIZUDr+opyZJzaXNFKD3KcSjz msQyewVi8yEN3GKEOIv54CWlPqKsARbKMGwFbFsPof+ZHqnrEWBZpEc+z6Fi/75Q Wceh+5nILi24R2d9DhetgNo7nhAd7vn5xicuq038B8XHrOarufuEn9bjXtYUS+Ah Aq6MmpySty5AoiOUISr5qi2SqL7c+21Qto7r0DbdS41ql6X2d7Q41sSegqNNhUYz ddnJ3S8eSjbuG7Pg2ivKV6ViZ/c5OcwMTg7EIwbwKVUbDZlq8hUvzlUkvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFISSPkqbM9BiDWVHjcoU2mAM8Lm0MB8GA1UdIwQY MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt NzgwYTI1Y2QwZGQ5LzEvaEpJLVNwc3owR0lOWlVlTnloVGFZQXp3dWJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5 LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HcFMA0G CSqGSIb3DQEBCwUAA4IBAQB7l0Jhd7clNYZDOw6Wnt5VYNomE5r/WygJL24t324W qqPJCRoSe5WBKeVb8/fOCgspskBXNuJD7wyHOwoQYVCRkdf4sOJcb7MTH1b1yErT /nLPse3HNDRsACv8ScRL2aeICgyVEWOq+8R6rI59O4dQ9nM5y2E4Qt+nPwi+1Q0V kbWxEJPTPB9F+g6Uqg/mv5Yvh4U3PsnsCKeAbWKkJlFEpRAi3gAsTjFc9dNV1DK8 vTwQAYsH86qAoWQ0HO0q6TPR8r+V6I4TtWGihk2YUX5LyvQkfu4IVpmJ5jc+UIFU ErY1hRqY7ze9vCsGA9YOaUQq50m25dhCa/ZjrCABpBIJ -----END CERTIFICATE-----Generated at Mon Jan 12 12:27:08 2026 by rpki-client