This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/5hqR6TwjggmAFiKjxJSIlKNMYDI.roa File: 5hqR6TwjggmAFiKjxJSIlKNMYDI.roa (raw, json) Hash identifier: r+e966RTdO7p2d5+d0S3hMKq0ETqNq7kvpctUG7dtvc= Subject key identifier: E6:1A:91:E9:3C:23:82:09:80:16:22:A3:C4:94:88:94:A3:4C:60:32 Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B797F4311FDB37C8353A841EEB9CDF200 Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/5hqR6TwjggmAFiKjxJSIlKNMYDI.roa Signing time: Thu 01 Jan 2026 12:19:01 +0000 ROA not before: Thu 01 Jan 2026 12:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48292 IP address blocks: 213.238.160.0/24 maxlen: 24 213.238.161.0/24 maxlen: 24 213.238.162.0/24 maxlen: 24 213.238.163.0/24 maxlen: 24 213.238.164.0/24 maxlen: 24 213.238.165.0/24 maxlen: 24 213.238.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:43:11:fd:b3:7c:83:53:a8:41:ee:b9:cd:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e61a91e93c238209801622a3c4948894a34c6032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:93:f2:8b:e3:05:3b:42:8a:27:a7:4d:f9:ca: 60:60:69:7f:1d:c6:8b:78:cb:2d:36:35:36:25:7d: e6:d5:28:e0:ba:ff:2c:77:e2:96:d5:6d:1c:ae:86: e3:d1:c2:55:7b:eb:f7:fc:79:dd:f1:4d:2e:c8:82: 56:fa:31:16:99:2b:61:55:81:8b:16:a5:2a:ce:46: 83:0a:54:a8:a2:40:ac:48:c6:9c:0a:12:86:6a:30: 47:94:18:3c:de:88:ae:03:07:9d:fc:6d:b5:43:d4: b0:55:4d:b3:94:d3:e7:2b:85:65:c5:4d:fa:c9:20: 17:82:08:ac:ff:fb:fe:0e:de:e9:13:99:69:b7:17: ac:62:14:b5:70:14:7b:c1:93:9c:b4:96:6b:12:88: 8b:4b:59:cf:2a:1f:21:88:89:8d:53:ef:7f:dc:92: 6f:0c:c4:cf:92:5d:2f:28:10:33:38:50:a8:2e:87: 5d:0a:ea:2d:c0:99:02:29:27:94:4b:a2:f7:c8:82: f8:ea:a0:0d:17:26:f5:3f:d6:44:99:05:bb:ce:26: e4:01:23:fa:9b:c0:95:da:e7:8b:dd:2c:22:d4:43: 05:c9:f8:80:f3:7e:6e:40:89:a5:ad:c4:85:20:41: 82:78:10:10:0e:d8:ce:a5:7e:51:3c:8d:31:1c:e2: 75:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1A:91:E9:3C:23:82:09:80:16:22:A3:C4:94:88:94:A3:4C:60:32 X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/5hqR6TwjggmAFiKjxJSIlKNMYDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.160.0-213.238.165.255 213.238.177.0/24 Signature Algorithm: sha256WithRSAEncryption b4:8c:20:76:6d:d2:0d:19:2d:fd:7c:7f:6d:17:f9:f4:15:e5: 27:6d:10:5f:d4:d2:6d:0d:4f:88:82:11:ff:32:40:e7:15:02: 2f:8b:83:ac:99:12:90:4a:d2:e6:b6:cf:08:57:80:0b:c5:39: 71:c4:de:78:86:68:4b:16:b8:b1:37:21:5c:9a:ed:8c:87:5f: 82:a1:fc:ca:ba:20:c8:a1:11:97:4b:4e:58:90:81:b8:6d:76: 90:7e:ac:ce:1e:30:f3:d6:ee:95:5b:71:2d:7a:be:6c:36:63: f3:e5:d9:c9:8f:b4:b5:b9:0b:12:72:21:f4:d6:89:8c:de:90: 4d:89:81:bd:4a:1a:87:b8:ad:41:23:5e:24:38:62:fd:1f:94: d1:c0:96:7c:03:94:42:6d:5d:1d:e5:c7:0d:d7:a5:a6:ac:f3: c8:d4:78:78:2c:ca:bc:a0:22:64:26:9d:49:ff:50:f5:e5:ce: 8f:b3:42:0d:55:b8:49:c5:31:70:99:ed:ab:53:83:69:8b:03: a5:40:c7:e3:95:4a:31:76:a5:2c:b3:28:2b:49:8b:96:af:95: c8:ff:02:c3:42:73:13:5c:72:14:1a:46:49:8e:8a:af:70:fe: 21:27:4d:02:18:e0:5b:6b:26:5e:79:79:61:c1:34:2f:ff:cb: a9:cb:97:6a -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5f0MR/bN8g1OoQe65zfIAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjFhOTFlOTNjMjM4MjA5ODAxNjIyYTNjNDk0ODg5NGEzNGM2MDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5Pyi+MFO0KKJ6dN+cpgYGl/HcaL eMstNjU2JX3m1Sjguv8sd+KW1W0crobj0cJVe+v3/Hnd8U0uyIJW+jEWmSthVYGL FqUqzkaDClSookCsSMacChKGajBHlBg83oiuAwed/G21Q9SwVU2zlNPnK4VlxU36 ySAXggis//v+Dt7pE5lptxesYhS1cBR7wZOctJZrEoiLS1nPKh8hiImNU+9/3JJv DMTPkl0vKBAzOFCoLoddCuotwJkCKSeUS6L3yIL46qANFyb1P9ZEmQW7zibkASP6 m8CV2ueL3Swi1EMFyfiA835uQImlrcSFIEGCeBAQDtjOpX5RPI0xHOJ1ywIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFOYakek8I4IJgBYio8SUiJSjTGAyMB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvNWhxUjZUd2pnZ21BRmlLanhKU0lsS05NWURJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAXV7qAD BAHV7qQDBADV7rEwDQYJKoZIhvcNAQELBQADggEBALSMIHZt0g0ZLf18f20X+fQV 5SdtEF/U0m0NT4iCEf8yQOcVAi+Lg6yZEpBK0ua2zwhXgAvFOXHE3niGaEsWuLE3 IVya7YyHX4Kh/Mq6IMihEZdLTliQgbhtdpB+rM4eMPPW7pVbcS16vmw2Y/Pl2cmP tLW5CxJyIfTWiYzekE2Jgb1KGoe4rUEjXiQ4Yv0flNHAlnwDlEJtXR3lxw3Xpaas 88jUeHgsyrygImQmnUn/UPXlzo+zQg1VuEnFMXCZ7atTg2mLA6VAx+OVSjF2pSyz KCtJi5avlcj/AsNCcxNcchQaRkmOiq9w/iEnTQIY4FtrJl55eWHBNC//y6nLl2o= -----END CERTIFICATE-----Generated at Wed Jan 21 15:54:56 2026 by rpki-client