This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/HvJf-bfTg2tiYUvSB0Kj9WjrWi0.roa File: HvJf-bfTg2tiYUvSB0Kj9WjrWi0.roa (raw, json) Hash identifier: Zj79TOXiKACE8B8W/OUq9I83R0d9i1y3XLh2/Gqubpw= Subject key identifier: 1E:F2:5F:F9:B7:D3:83:6B:62:61:4B:D2:07:42:A3:F5:68:EB:5A:2D Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 019BCB56730B8905E0AB172EA4EC1F916FF7 Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/HvJf-bfTg2tiYUvSB0Kj9WjrWi0.roa Signing time: Sat 17 Jan 2026 09:43:18 +0000 ROA not before: Sat 17 Jan 2026 09:43:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 5.182.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cb:56:73:0b:89:05:e0:ab:17:2e:a4:ec:1f:91:6f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: Jan 17 09:43:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ef25ff9b7d3836b62614bd20742a3f568eb5a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:84:fa:32:73:4e:a6:c4:39:30:bb:ed:50:5a: 6a:22:b0:b8:3c:a0:c0:01:81:c1:49:34:5e:e9:6d: 32:06:52:60:7e:59:00:74:70:0d:2a:f1:f4:f1:c5: 32:7c:de:45:0f:fc:45:a7:29:7a:75:03:26:1c:7e: 3b:11:e2:cf:57:9c:0d:34:8a:10:25:15:0f:3e:05: 9a:64:7e:77:67:7d:20:95:c2:c6:c8:c7:d9:1a:ef: 1e:69:9f:56:d8:79:11:b9:30:b1:17:5b:4c:ab:9f: 34:e5:d4:6e:2b:45:8b:75:5c:6d:20:c2:88:68:f1: 2a:85:0e:75:1b:2c:01:75:d6:55:e1:47:9e:6b:dc: bf:97:89:35:76:f2:70:2e:96:ea:68:c6:e3:34:7e: c9:5d:39:4e:50:9b:da:7f:e7:c1:c3:22:ed:93:2a: 63:f0:18:1e:b8:95:3d:4f:13:dd:7a:4d:7e:22:33: 5c:d0:45:11:29:17:b2:bf:f7:76:36:23:8d:bf:d8: 6f:72:bf:8b:21:c9:8b:27:0a:27:8f:56:25:e9:1d: bb:16:1b:a8:43:77:b1:09:84:9b:80:4f:21:7a:12: 9a:fc:1d:f0:fb:ef:fe:37:ec:77:a7:9a:aa:2b:71: 70:6c:9b:6d:8a:a3:98:84:ba:c7:40:60:ff:0f:90: 51:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F2:5F:F9:B7:D3:83:6B:62:61:4B:D2:07:42:A3:F5:68:EB:5A:2D X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/HvJf-bfTg2tiYUvSB0Kj9WjrWi0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.244.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:60:e7:7e:cd:a2:f8:63:a1:0f:cb:81:38:34:72:bb:84:53: c7:16:c6:9d:e9:b2:d6:e7:02:b7:ae:89:82:55:1f:be:58:8d: 1a:b9:64:cf:3f:c0:3a:7f:4f:46:83:e0:95:0f:72:4a:5c:31: d9:67:df:64:46:8c:e1:f7:23:08:82:7b:01:ed:8c:5a:84:bf: 51:f6:06:78:a7:3b:89:11:ac:67:12:e9:11:ff:af:58:ca:b4: 5c:df:81:97:62:34:28:ae:12:c6:19:a8:94:1b:df:0b:89:0d: ec:47:96:1d:e5:6c:7f:3b:77:f4:9a:d7:8e:db:52:92:c4:2c: 25:47:73:fa:54:b2:7c:6c:78:ee:a9:54:b0:ea:6b:e0:fb:3a: 8b:b8:2f:62:16:c2:33:15:b7:10:5b:7d:32:09:b7:5a:06:bd: a6:5f:1e:18:f3:55:de:59:ee:ad:fb:63:90:05:e7:0c:5e:fd: 2c:04:ff:d5:b9:46:59:80:e0:74:ac:da:d5:50:96:6a:e0:1e: e5:65:0e:c4:db:40:fc:5c:07:c8:ea:77:b1:2c:18:a3:db:d8: 76:ca:cc:af:c4:ec:da:ac:f6:9f:c1:2f:4f:27:f3:d0:1a:9b: d3:0f:76:b7:a1:5c:2b:f7:ee:d5:0a:ec:6a:0e:0f:de:31:66: 2f:65:d1:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvLVnMLiQXgqxcupOwfkW/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjYwMTE3MDk0MzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWYyNWZmOWI3ZDM4MzZiNjI2MTRiZDIwNzQyYTNmNTY4ZWI1YTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIT6MnNOpsQ5MLvtUFpqIrC4PKDA AYHBSTRe6W0yBlJgflkAdHANKvH08cUyfN5FD/xFpyl6dQMmHH47EeLPV5wNNIoQ JRUPPgWaZH53Z30glcLGyMfZGu8eaZ9W2HkRuTCxF1tMq5805dRuK0WLdVxtIMKI aPEqhQ51GywBddZV4Ueea9y/l4k1dvJwLpbqaMbjNH7JXTlOUJvaf+fBwyLtkypj 8BgeuJU9TxPdek1+IjNc0EURKReyv/d2NiONv9hvcr+LIcmLJwonj1Yl6R27Fhuo Q3exCYSbgE8hehKa/B3w++/+N+x3p5qqK3FwbJttiqOYhLrHQGD/D5BRiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB7yX/m304NrYmFL0gdCo/Vo61otMB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvSHZKZi1iZlRnMnRpWVV2U0IwS2o5V2pyV2kwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbb0MA0G CSqGSIb3DQEBCwUAA4IBAQA7YOd+zaL4Y6EPy4E4NHK7hFPHFsad6bLW5wK3romC VR++WI0auWTPP8A6f09Gg+CVD3JKXDHZZ99kRozh9yMIgnsB7YxahL9R9gZ4pzuJ EaxnEukR/69YyrRc34GXYjQorhLGGaiUG98LiQ3sR5Yd5Wx/O3f0mteO21KSxCwl R3P6VLJ8bHjuqVSw6mvg+zqLuC9iFsIzFbcQW30yCbdaBr2mXx4Y81XeWe6t+2OQ BecMXv0sBP/VuUZZgOB0rNrVUJZq4B7lZQ7E20D8XAfI6nexLBij29h2ysyvxOza rPafwS9PJ/PQGpvTD3a3oVwr9+7VCuxqDg/eMWYvZdEL -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:38 2026 by rpki-client