This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/hWAbyKyK9HUdwJJVOcCYiigixTw.roa File: hWAbyKyK9HUdwJJVOcCYiigixTw.roa (raw, json) Hash identifier: O5+GZw1ap4xPYqP6LKxKRJNgM1qV+6v6h/lOF45px/c= Subject key identifier: 85:60:1B:C8:AC:8A:F4:75:1D:C0:92:55:39:C0:98:8A:28:22:C5:3C Certificate issuer: /CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c Certificate serial: 019B7D5C04059CCCE28D829D2EA1955C1D54 Authority key identifier: 37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/hWAbyKyK9HUdwJJVOcCYiigixTw.roa Signing time: Fri 02 Jan 2026 06:19:00 +0000 ROA not before: Fri 02 Jan 2026 06:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28876 IP address blocks: 5.100.0.0/18 maxlen: 18 5.100.0.0/19 maxlen: 19 5.100.0.0/24 maxlen: 24 5.100.32.0/19 maxlen: 19 37.61.128.0/20 maxlen: 20 176.52.192.0/21 maxlen: 21 185.53.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:04:05:9c:cc:e2:8d:82:9d:2e:a1:95:5c:1d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c Validity Not Before: Jan 2 06:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85601bc8ac8af4751dc0925539c0988a2822c53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:db:7c:0e:ee:78:e1:d1:b8:3b:e6:1b:3b:90: 41:3b:be:79:d9:2c:27:17:f3:a7:25:42:3f:33:b7: b4:c7:b2:fe:f7:b8:a1:06:8e:f5:2a:b9:6b:35:d1: d8:ce:5c:e4:2b:8b:cb:57:cb:66:93:48:6a:a3:60: af:c1:1b:e2:ec:b9:b3:6d:67:77:9d:76:a0:4c:89: ea:93:3b:9a:70:cc:f7:dc:09:b2:72:17:c7:33:d2: 2c:75:b8:27:b0:e5:91:8a:70:73:74:bb:cb:2d:d1: da:1b:94:ef:2f:fb:9c:ea:4e:c6:57:1d:61:d3:ef: 5d:f1:c1:a9:c1:9d:2e:5c:72:71:24:70:96:b1:bc: 65:e9:3b:82:92:2b:89:81:78:9a:62:ce:ca:53:3d: d7:b5:cf:a0:ef:db:cf:c1:99:af:c2:e7:9d:e0:b2: cc:21:c3:a0:7e:7b:ed:42:30:22:0b:b4:ab:6f:20: 64:f2:58:8a:8e:bf:a2:31:45:cf:33:db:73:2e:ab: e9:a5:77:59:fc:52:62:53:11:10:53:be:64:1d:88: 86:be:91:ed:bc:0c:61:4b:08:80:e7:a0:dd:88:c4: b8:9e:74:c2:f8:f1:95:fe:ee:74:d6:30:bd:82:79: 1f:46:62:b5:76:3f:86:51:61:6d:98:17:31:46:f0: 0a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:60:1B:C8:AC:8A:F4:75:1D:C0:92:55:39:C0:98:8A:28:22:C5:3C X509v3 Authority Key Identifier: keyid:37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/hWAbyKyK9HUdwJJVOcCYiigixTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.100.0.0/18 37.61.128.0/20 176.52.192.0/21 185.53.216.0/22 Signature Algorithm: sha256WithRSAEncryption b6:71:88:b0:e7:b1:f1:cb:20:49:be:00:9c:a8:a1:24:92:1a: 23:6e:92:7f:41:5d:32:bf:ff:ea:bd:e4:c0:ce:31:15:ed:59: c6:4d:26:4d:8d:47:fe:96:6b:c2:85:6c:60:41:2a:57:6b:16: 5f:7a:91:16:92:5a:b8:2e:90:84:68:42:21:9c:ac:cf:33:43: 59:bd:6c:3d:e9:a7:d4:f1:cd:e2:2d:53:d6:94:96:9f:32:f6: 3b:7f:9c:4c:65:eb:a4:7a:a0:85:7c:a8:2a:18:0a:83:26:fe: 87:c9:a7:52:96:d9:e9:b1:51:3d:75:0e:ea:17:26:13:52:87: 79:48:dd:db:26:ea:ee:73:7b:12:36:51:e0:d1:0e:7f:b9:e4: 63:50:d6:4b:82:5e:2d:99:40:8d:b6:81:5f:17:83:01:e5:77: ba:5f:09:d5:8c:2e:f9:e9:24:46:23:03:65:e4:50:11:f2:10: 28:a6:e8:89:48:d7:1f:a9:ee:91:52:ba:30:29:a9:bd:27:ef: 45:8d:c5:d4:3c:59:12:75:92:29:41:58:4c:f0:17:5a:68:59: c2:e6:20:8a:1a:f6:37:c9:0b:92:45:38:a1:7c:40:7c:c4:65: 2c:7d:da:a2:1f:35:ae:44:e2:15:e9:a2:ab:6d:f2:05:c9:86: d7:89:9c:87 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9XAQFnMzijYKdLqGVXB1UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YTRkMmU0MmYyMzYyYzJlNmVmNTJiODJmMTlmN2U1NjM3 NTdlMGMwHhcNMjYwMTAyMDYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTYwMWJjOGFjOGFmNDc1MWRjMDkyNTUzOWMwOTg4YTI4MjJjNTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodt8Du544dG4O+YbO5BBO7552Swn F/OnJUI/M7e0x7L+97ihBo71KrlrNdHYzlzkK4vLV8tmk0hqo2CvwRvi7LmzbWd3 nXagTInqkzuacMz33AmychfHM9IsdbgnsOWRinBzdLvLLdHaG5TvL/uc6k7GVx1h 0+9d8cGpwZ0uXHJxJHCWsbxl6TuCkiuJgXiaYs7KUz3Xtc+g79vPwZmvwued4LLM IcOgfnvtQjAiC7SrbyBk8liKjr+iMUXPM9tzLqvppXdZ/FJiUxEQU75kHYiGvpHt vAxhSwiA56DdiMS4nnTC+PGV/u501jC9gnkfRmK1dj+GUWFtmBcxRvAKowIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIVgG8isivR1HcCSVTnAmIooIsU8MB8GA1UdIwQY MBaAFDek0uQvI2LC5u9SuC8Z9+VjdX4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjZUUzVDOGpZc0xtNzFLNEx4bjM1V04xZmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yNWZiNTQtZDQ2Ny00ZTkwLWE0MWYt OTFjMGQ4ZTc1NDlkLzEvaFdBYnlLeUs5SFVkd0pKVk9jQ1lpaWdpeFR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8yNWZiNTQtZDQ2Ny00ZTkwLWE0MWYtOTFjMGQ4ZTc1NDlk LzEvTjZUUzVDOGpZc0xtNzFLNEx4bjM1V04xZmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQGBWQAAwQE JT2AAwQDsDTAAwQCuTXYMA0GCSqGSIb3DQEBCwUAA4IBAQC2cYiw57HxyyBJvgCc qKEkkhojbpJ/QV0yv//qveTAzjEV7VnGTSZNjUf+lmvChWxgQSpXaxZfepEWklq4 LpCEaEIhnKzPM0NZvWw96afU8c3iLVPWlJafMvY7f5xMZeukeqCFfKgqGAqDJv6H yadSltnpsVE9dQ7qFyYTUod5SN3bJuruc3sSNlHg0Q5/ueRjUNZLgl4tmUCNtoFf F4MB5Xe6XwnVjC756SRGIwNl5FAR8hAopuiJSNcfqe6RUrowKam9J+9FjcXUPFkS dZIpQVhM8BdaaFnC5iCKGvY3yQuSRTihfEB8xGUsfdqiHzWuROIV6aKrbfIFyYbX iZyH -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:20 2026 by rpki-client