This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/5hnYO6ztPLa-s4fykT38ED82F1s.roa File: 5hnYO6ztPLa-s4fykT38ED82F1s.roa (raw, json) Hash identifier: oNF1AM5Hv8TzwevSKCEUvWBxoNLM1msTiU4uiTHoB08= Subject key identifier: E6:19:D8:3B:AC:ED:3C:B6:BE:B3:87:F2:91:3D:FC:10:3F:36:17:5B Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd Certificate serial: 019B7EA71E5D9D4900352AB8D41E4503C4D9 Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/5hnYO6ztPLa-s4fykT38ED82F1s.roa Signing time: Fri 02 Jan 2026 12:20:40 +0000 ROA not before: Fri 02 Jan 2026 12:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7155 IP address blocks: 194.213.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1e:5d:9d:49:00:35:2a:b8:d4:1e:45:03:c4:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd Validity Not Before: Jan 2 12:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e619d83baced3cb6beb387f2913dfc103f36175b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4d:94:78:f6:ce:65:3e:38:b5:4d:c0:41:2a: c8:26:00:13:69:ce:25:da:6d:d6:73:9e:3f:b0:ff: 52:38:d8:c8:d0:32:b3:5c:84:95:51:42:51:0d:45: ee:eb:f1:bc:39:de:22:50:63:b9:a5:6d:44:21:4c: 58:50:2b:95:5e:57:77:63:e2:93:b1:e8:c4:85:5a: 33:a6:f9:61:01:d0:19:3c:44:56:a3:b2:6e:15:84: 76:09:07:80:f1:a0:eb:a6:b4:5a:9b:99:6f:b1:9d: 73:d9:a3:ed:cb:8f:e1:d3:be:d0:5a:84:54:40:65: 6e:01:af:00:23:f7:c8:91:76:74:e2:86:ae:43:9f: 4c:07:32:f7:30:04:74:9f:96:a8:1f:8e:68:c9:ca: 8f:38:f1:ac:df:e7:db:ed:63:02:d1:27:3f:ac:ae: a8:43:70:c4:ee:34:5e:06:3e:7b:e8:c9:e3:43:c6: ad:eb:3f:39:e4:ce:b2:47:b4:e9:3f:b2:a4:18:73: b6:5c:84:82:dd:1e:ef:dd:a4:fa:08:a9:fe:64:ab: 13:00:f9:b6:c7:43:08:00:7a:d9:92:da:fb:10:cc: 71:07:12:29:53:4f:1e:1b:6e:bf:87:8f:e9:b3:e6: ff:bf:2c:20:2f:ac:a1:ad:66:f6:ee:fc:bc:28:aa: f5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:19:D8:3B:AC:ED:3C:B6:BE:B3:87:F2:91:3D:FC:10:3F:36:17:5B X509v3 Authority Key Identifier: keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/5hnYO6ztPLa-s4fykT38ED82F1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.213.14.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:f0:53:74:5f:63:c1:bc:91:6d:ae:0a:de:d4:3e:2d:03:e5: 5a:e1:e0:c9:e1:5a:a3:37:ff:46:cc:28:8c:b4:53:b5:6d:17: 2d:f0:8b:60:6e:28:a2:e0:f4:dd:f9:c6:7e:f9:2d:95:f8:e1: e5:d0:15:31:57:b6:16:8e:7e:44:2e:f2:b5:81:2a:77:24:31: ef:27:32:a0:b0:e7:31:70:ca:46:f9:f5:1d:be:f8:04:20:de: 0e:82:9c:10:bf:9a:c0:76:6a:10:e4:22:fc:09:ac:30:37:e1: b4:b3:e1:63:59:c9:95:16:3c:08:f9:15:2b:12:40:98:7d:93: 8e:5b:03:c3:2c:49:08:16:16:4e:4d:97:ca:2b:6e:91:10:02: 52:de:05:bf:ce:37:4b:4d:3b:3d:e5:d9:2f:3f:d0:f2:28:d4: ca:67:f8:df:a4:98:d7:3c:62:de:6c:be:90:4c:26:3a:fe:62: 84:6e:37:95:68:a0:d4:0e:9c:3f:43:6b:79:8d:0b:19:3b:8a: 31:b1:1a:bb:64:df:f4:63:88:95:8c:29:32:f9:19:62:3b:53: e1:0f:ec:fc:e1:36:41:84:8c:72:1d:50:ff:e4:e2:ac:2f:06: 15:c0:05:ce:ba:f7:31:b6:90:d6:c4:ad:40:03:b1:2b:a5:29: 18:20:52:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+px5dnUkANSq41B5FA8TZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlODhlY2YwYTE0YWQxODU3MzU5ZDJjZTViZDA0MmI5Zjk2 YzdjZGQwHhcNMjYwMTAyMTIyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjE5ZDgzYmFjZWQzY2I2YmViMzg3ZjI5MTNkZmMxMDNmMzYxNzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv02UePbOZT44tU3AQSrIJgATac4l 2m3Wc54/sP9SONjI0DKzXISVUUJRDUXu6/G8Od4iUGO5pW1EIUxYUCuVXld3Y+KT sejEhVozpvlhAdAZPERWo7JuFYR2CQeA8aDrprRam5lvsZ1z2aPty4/h077QWoRU QGVuAa8AI/fIkXZ04oauQ59MBzL3MAR0n5aoH45oycqPOPGs3+fb7WMC0Sc/rK6o Q3DE7jReBj576MnjQ8at6z855M6yR7TpP7KkGHO2XISC3R7v3aT6CKn+ZKsTAPm2 x0MIAHrZktr7EMxxBxIpU08eG26/h4/ps+b/vywgL6yhrWb27vy8KKr1gwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOYZ2Dus7Ty2vrOH8pE9/BA/NhdbMB8GA1UdIwQY MBaAFF6I7PChStGFc1nSzlvQQrn5bHzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yMTFiMmUtNGUzYy00NDgyLWEyNzkt OWYwZjMzNTMyZWEzLzEvNWhuWU82enRQTGEtczRmeWtUMzhFRDgyRjFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yMTFiMmUtNGUzYy00NDgyLWEyNzktOWYwZjMzNTMyZWEz LzEvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtUOMA0G CSqGSIb3DQEBCwUAA4IBAQBa8FN0X2PBvJFtrgre1D4tA+Va4eDJ4VqjN/9GzCiM tFO1bRct8Itgbiii4PTd+cZ++S2V+OHl0BUxV7YWjn5ELvK1gSp3JDHvJzKgsOcx cMpG+fUdvvgEIN4OgpwQv5rAdmoQ5CL8CawwN+G0s+FjWcmVFjwI+RUrEkCYfZOO WwPDLEkIFhZOTZfKK26REAJS3gW/zjdLTTs95dkvP9DyKNTKZ/jfpJjXPGLebL6Q TCY6/mKEbjeVaKDUDpw/Q2t5jQsZO4oxsRq7ZN/0Y4iVjCky+RliO1PhD+z84TZB hIxyHVD/5OKsLwYVwAXOuvcxtpDWxK1AA7ErpSkYIFJo -----END CERTIFICATE-----Generated at Tue Jan 27 02:49:58 2026 by rpki-client