This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/HF20xwiU_OmVlYn7AG5yVbrP7VQ.roa File: HF20xwiU_OmVlYn7AG5yVbrP7VQ.roa (raw, json) Hash identifier: 0b37VardXMFgSQteic5rkAQqorX7ea/QfI9Oz3cEctk= Subject key identifier: 1C:5D:B4:C7:08:94:FC:E9:95:95:89:FB:00:6E:72:55:BA:CF:ED:54 Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06 Certificate serial: 019B791034CB7E7689732CC8C78A890E6211 Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/HF20xwiU_OmVlYn7AG5yVbrP7VQ.roa Signing time: Thu 01 Jan 2026 10:17:43 +0000 ROA not before: Thu 01 Jan 2026 10:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31721 IP address blocks: 5.191.0.0/20 maxlen: 20 5.191.16.0/20 maxlen: 20 5.191.32.0/20 maxlen: 20 5.191.33.0/24 maxlen: 24 5.191.34.0/24 maxlen: 24 5.191.48.0/20 maxlen: 20 5.191.64.0/20 maxlen: 20 5.191.80.0/20 maxlen: 20 5.191.90.0/24 maxlen: 24 5.191.96.0/20 maxlen: 20 5.191.100.0/24 maxlen: 24 5.191.101.0/24 maxlen: 24 5.191.102.0/24 maxlen: 24 5.191.103.0/24 maxlen: 24 5.191.104.0/24 maxlen: 24 5.191.105.0/24 maxlen: 24 5.191.106.0/24 maxlen: 24 5.191.107.0/24 maxlen: 24 5.191.108.0/24 maxlen: 24 5.191.109.0/24 maxlen: 24 5.191.110.0/24 maxlen: 24 5.191.111.0/24 maxlen: 24 5.191.112.0/20 maxlen: 20 5.191.112.0/24 maxlen: 24 5.191.113.0/24 maxlen: 24 5.191.114.0/24 maxlen: 24 5.191.115.0/24 maxlen: 24 5.191.116.0/24 maxlen: 24 5.191.117.0/24 maxlen: 24 5.191.118.0/24 maxlen: 24 5.191.119.0/24 maxlen: 24 5.191.120.0/24 maxlen: 24 5.191.121.0/24 maxlen: 24 5.191.122.0/24 maxlen: 24 5.191.123.0/24 maxlen: 24 5.191.124.0/24 maxlen: 24 5.191.125.0/24 maxlen: 24 5.191.126.0/24 maxlen: 24 5.191.127.0/24 maxlen: 24 5.191.128.0/20 maxlen: 20 5.191.128.0/24 maxlen: 24 5.191.129.0/24 maxlen: 24 5.191.130.0/24 maxlen: 24 5.191.131.0/24 maxlen: 24 5.191.132.0/24 maxlen: 24 5.191.133.0/24 maxlen: 24 5.191.134.0/24 maxlen: 24 5.191.135.0/24 maxlen: 24 5.191.136.0/24 maxlen: 24 5.191.137.0/24 maxlen: 24 5.191.138.0/24 maxlen: 24 5.191.139.0/24 maxlen: 24 5.191.140.0/24 maxlen: 24 5.191.141.0/24 maxlen: 24 5.191.142.0/24 maxlen: 24 5.191.144.0/20 maxlen: 20 5.191.160.0/20 maxlen: 20 5.191.176.0/20 maxlen: 20 5.191.191.0/24 maxlen: 24 5.191.192.0/20 maxlen: 20 5.191.208.0/20 maxlen: 20 5.191.208.0/24 maxlen: 24 5.191.224.0/20 maxlen: 20 217.168.176.0/20 maxlen: 20 217.168.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:34:cb:7e:76:89:73:2c:c8:c7:8a:89:0e:62:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06 Validity Not Before: Jan 1 10:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c5db4c70894fce9959589fb006e7255bacfed54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:0f:f4:3c:55:ef:e5:fa:8a:16:b9:60:20: f5:77:6c:7f:3a:7c:ee:ed:29:20:e2:c4:65:a8:e0: 18:e7:d9:55:bd:3a:0f:a3:39:4b:dd:94:35:79:2f: b1:37:7c:db:c3:71:12:d4:bf:3a:02:d1:a1:17:04: e3:05:5a:92:58:ee:7d:63:7e:01:e5:67:23:6b:4a: 02:c5:d6:27:ec:11:b3:28:21:fb:85:85:bc:01:1a: 25:f9:8c:31:fa:4c:50:21:5f:d4:d7:af:28:9a:dd: 24:c8:4a:81:46:38:1d:88:66:2a:83:11:63:0e:69: a2:8c:cf:db:53:58:47:97:a5:69:14:a8:aa:00:be: 9b:49:36:d7:d3:21:af:91:5e:ca:68:28:47:43:f7: 94:e5:4b:63:69:52:de:09:25:6b:c0:40:7c:97:50: 02:3d:fc:2c:2e:8a:0d:59:1b:2f:4e:9e:1f:3b:e4: 97:be:6e:c4:cb:b7:75:00:c0:be:23:9b:7a:20:95: 02:d4:b7:89:c8:50:07:e0:54:f8:10:be:81:44:e4: e6:43:d8:a0:c0:8e:c3:02:d9:4d:00:03:6d:c4:ff: 08:c0:84:15:1b:c4:e5:be:e3:79:21:f9:6b:10:88: a5:b5:68:60:e2:c5:6e:0f:50:2b:17:61:84:d5:1a: 0f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5D:B4:C7:08:94:FC:E9:95:95:89:FB:00:6E:72:55:BA:CF:ED:54 X509v3 Authority Key Identifier: keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/HF20xwiU_OmVlYn7AG5yVbrP7VQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.191.0.0-5.191.239.255 217.168.176.0/20 Signature Algorithm: sha256WithRSAEncryption 6e:5e:99:c5:1b:ca:fe:27:b0:b2:71:77:7b:cf:39:01:59:4c: de:79:68:c7:af:0a:38:83:5a:08:96:85:88:a0:1a:ef:bf:87: 8d:c8:38:3c:0c:2d:4d:aa:7b:df:af:b9:d2:e6:58:4b:e9:c9: 1c:b9:ec:e2:b5:64:8f:15:50:b0:4a:16:d6:c6:09:64:57:48: eb:4a:51:cb:59:42:a1:ef:3a:01:32:7e:3d:14:85:bb:f6:8c: 4a:ed:ad:97:49:31:4a:4b:4b:91:69:66:4a:d4:be:2a:68:4b: 53:ae:5a:90:11:46:23:e5:67:e5:97:b7:21:2b:62:56:70:45: e5:97:0e:55:85:d5:1d:ca:1b:8d:ce:d3:c7:26:9e:42:7c:2f: 03:d7:74:ef:7a:fd:f1:8a:d3:a0:f1:fb:7b:56:64:57:fe:47: bb:25:16:0d:de:5a:50:83:b2:fb:d8:da:c5:ec:79:88:d4:59: ff:d9:e6:9b:55:a0:94:dc:c4:9f:5c:3b:81:63:ef:c5:c1:38: bc:bc:81:b6:ea:68:ea:8c:97:97:ee:8f:d2:4e:66:1e:47:7d: 91:18:d6:37:ab:4b:1b:84:00:3e:8b:81:70:4b:9a:29:f2:b4: 31:dd:f0:01:9f:be:e6:53:ba:e8:cf:e4:c8:17:09:9c:4f:52: eb:70:e6:b4 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt5EDTLfnaJcyzIx4qJDmIRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMjhlYzljY2Q2ZDg2MWY1ZjFhZmRhZDAwNDZmMzNjOTEw M2JhMDYwHhcNMjYwMTAxMTAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzVkYjRjNzA4OTRmY2U5OTU5NTg5ZmIwMDZlNzI1NWJhY2ZlZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpgP9DxV7+X6iha5YCD1d2x/Onzu 7Skg4sRlqOAY59lVvToPozlL3ZQ1eS+xN3zbw3ES1L86AtGhFwTjBVqSWO59Y34B 5Wcja0oCxdYn7BGzKCH7hYW8ARol+Ywx+kxQIV/U168omt0kyEqBRjgdiGYqgxFj DmmijM/bU1hHl6VpFKiqAL6bSTbX0yGvkV7KaChHQ/eU5UtjaVLeCSVrwEB8l1AC PfwsLooNWRsvTp4fO+SXvm7Ey7d1AMC+I5t6IJUC1LeJyFAH4FT4EL6BROTmQ9ig wI7DAtlNAANtxP8IwIQVG8TlvuN5IflrEIiltWhg4sVuD1ArF2GE1RoPbwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFBxdtMcIlPzplZWJ+wBuclW6z+1UMB8GA1UdIwQY MBaAFHAo7JzNbYYfXxr9rQBG8zyRA7oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0Nqc25NMXRoaDlmR3YydEFFYnpQSkVEdWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zYzMxNTQtNzgwMy00ZWM2LWJmNzAt Y2NkZDA2NTYzYTVmLzEvSEYyMHh3aVVfT21WbFluN0FHNXlWYnJQN1ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8zYzMxNTQtNzgwMy00ZWM2LWJmNzAtY2NkZDA2NTYzYTVm LzEvY0Nqc25NMXRoaDlmR3YydEFFYnpQSkVEdWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATMAsDAwAFvwME BAW/4AMEBNmosDANBgkqhkiG9w0BAQsFAAOCAQEAbl6ZxRvK/iewsnF3e885AVlM 3nlox68KOINaCJaFiKAa77+Hjcg4PAwtTap736+50uZYS+nJHLns4rVkjxVQsEoW 1sYJZFdI60pRy1lCoe86ATJ+PRSFu/aMSu2tl0kxSktLkWlmStS+KmhLU65akBFG I+Vn5Ze3IStiVnBF5ZcOVYXVHcobjc7TxyaeQnwvA9d073r98YrToPH7e1ZkV/5H uyUWDd5aUIOy+9jaxex5iNRZ/9nmm1WglNzEn1w7gWPvxcE4vLyBtupo6oyXl+6P 0k5mHkd9kRjWN6tLG4QAPouBcEuaKfK0Md3wAZ++5lO66M/kyBcJnE9S63DmtA== -----END CERTIFICATE-----Generated at Wed Jan 21 14:42:31 2026 by rpki-client