This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/5HgfHalD9LWYJGG7XKJSoxARVl0.roa File: 5HgfHalD9LWYJGG7XKJSoxARVl0.roa (raw, json) Hash identifier: swKgBTrDTDtZaOuFjLNTyyxaRwCSohp8AB3ouBvQWOI= Subject key identifier: E4:78:1F:1D:A9:43:F4:B5:98:24:61:BB:5C:A2:52:A3:10:11:56:5D Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93 Certificate serial: 019B7BA4D87FD4F81D31D831DB2F036055CB Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/5HgfHalD9LWYJGG7XKJSoxARVl0.roa Signing time: Thu 01 Jan 2026 22:19:19 +0000 ROA not before: Thu 01 Jan 2026 22:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 194.99.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d8:7f:d4:f8:1d:31:d8:31:db:2f:03:60:55:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93 Validity Not Before: Jan 1 22:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4781f1da943f4b5982461bb5ca252a31011565d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:9c:62:3e:7a:ca:3c:07:d7:98:19:a1:e0: d5:4f:b1:95:4c:5a:ed:f0:f2:b3:1a:b5:ee:05:3e: d6:cb:81:da:b7:1c:44:bd:dd:bf:fb:5e:75:f0:96: b3:6f:b2:97:d5:cd:dd:b5:74:b5:37:c0:20:ea:c5: 2b:6c:c0:87:bb:d8:78:e7:a1:26:d6:b9:10:3f:69: 13:90:b1:ba:19:9f:37:88:f3:d2:df:41:f4:36:a7: e4:ad:dd:01:d6:3d:f1:4d:47:90:3a:98:b6:99:ea: bc:28:81:1a:87:a0:7e:15:2a:10:7c:f3:c3:f8:18: aa:b4:0c:7d:6a:78:7c:0a:e6:8b:c0:f7:83:41:02: 3f:aa:0b:c9:6a:8a:87:82:57:1f:03:75:9f:8c:01: f5:48:59:a1:9b:54:4c:22:91:d1:c5:ac:ae:58:25: 87:6c:c1:d8:4f:90:85:8c:80:07:fa:88:a8:7c:68: 24:4b:b3:bd:0e:e3:4d:aa:0f:6f:b9:a9:0c:d6:bb: 45:ed:62:4b:36:ec:c1:6f:47:c3:6f:80:90:da:cf: 9b:d7:0b:55:79:ba:04:f9:f4:62:d8:52:cf:50:21: 2d:8a:2e:7e:d9:cb:ca:6a:e6:3e:5e:39:dc:87:8d: 27:32:ce:fb:da:dc:48:c2:43:85:b4:92:13:4c:aa: 80:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:78:1F:1D:A9:43:F4:B5:98:24:61:BB:5C:A2:52:A3:10:11:56:5D X509v3 Authority Key Identifier: keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/5HgfHalD9LWYJGG7XKJSoxARVl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.99.12.0/24 Signature Algorithm: sha256WithRSAEncryption 03:c5:81:8d:0f:10:54:10:2b:c3:a4:26:bb:03:37:95:a3:39: 1d:e5:c8:17:a9:f1:15:d1:fa:bd:4f:75:88:9c:1d:32:d7:b4: 92:e1:d4:da:56:a4:32:3b:9e:33:f6:31:de:68:d7:91:4a:3b: fa:1e:2f:bf:ee:cf:fc:c0:fe:b5:2b:e0:a9:81:29:c0:3e:6f: fd:b3:c2:f9:d9:d3:89:2e:1b:2e:6b:c8:fe:0b:77:ca:7c:a5: d8:58:a0:81:e8:72:c7:7e:87:24:da:09:27:03:5d:87:a8:4d: de:d7:9e:95:a6:ae:3f:ef:18:fc:95:d3:e5:92:da:b6:1d:3b: 27:94:0d:0e:92:4d:cc:0f:01:4a:1e:27:29:b5:3e:e0:93:f8: c9:b8:0a:8b:f3:ba:d0:8b:1e:11:d9:0b:7f:b7:86:26:5e:31: da:0c:6b:71:71:3a:98:a3:a5:b1:a6:07:4a:69:96:62:6e:fd: 9f:74:b4:4c:ba:00:88:09:71:1e:a7:b3:45:ec:3a:4e:04:f6: 0f:c6:c3:fb:a2:70:fe:4e:04:92:31:78:87:f5:02:65:41:d9: b1:65:0c:cd:7c:5b:62:0d:d5:5a:d7:d7:b1:48:8e:71:86:8c: 10:db:31:20:e6:a7:5a:96:17:03:b5:87:c8:41:41:e6:7a:1c: 57:0b:b9:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pNh/1PgdMdgx2y8DYFXLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZmEyZmMwNmUxYWE5MTM1YzI2MzFiNzNiZWNjNTk1N2Iw MjNhOTMwHhcNMjYwMTAxMjIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDc4MWYxZGE5NDNmNGI1OTgyNDYxYmI1Y2EyNTJhMzEwMTE1NjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN6cYj56yjwH15gZoeDVT7GVTFrt 8PKzGrXuBT7Wy4HatxxEvd2/+1518Jazb7KX1c3dtXS1N8Ag6sUrbMCHu9h456Em 1rkQP2kTkLG6GZ83iPPS30H0Nqfkrd0B1j3xTUeQOpi2meq8KIEah6B+FSoQfPPD +BiqtAx9anh8CuaLwPeDQQI/qgvJaoqHglcfA3WfjAH1SFmhm1RMIpHRxayuWCWH bMHYT5CFjIAH+oiofGgkS7O9DuNNqg9vuakM1rtF7WJLNuzBb0fDb4CQ2s+b1wtV eboE+fRi2FLPUCEtii5+2cvKauY+Xjnch40nMs772txIwkOFtJITTKqAVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOR4Hx2pQ/S1mCRhu1yiUqMQEVZdMB8GA1UdIwQY MBaAFDr6L8BuGqkTXCYxtzvsxZV7AjqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84OTkyMTgtMmExOS00ZDBmLTlmMWUt ZWYzOGU4Y2UzM2QxLzEvNUhnZkhhbEQ5TFdZSkdHN1hLSlNveEFSVmwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84OTkyMTgtMmExOS00ZDBmLTlmMWUtZWYzOGU4Y2UzM2Qx LzEvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmMMMA0G CSqGSIb3DQEBCwUAA4IBAQADxYGNDxBUECvDpCa7AzeVozkd5cgXqfEV0fq9T3WI nB0y17SS4dTaVqQyO54z9jHeaNeRSjv6Hi+/7s/8wP61K+CpgSnAPm/9s8L52dOJ Lhsua8j+C3fKfKXYWKCB6HLHfock2gknA12HqE3e156Vpq4/7xj8ldPlktq2HTsn lA0Okk3MDwFKHicptT7gk/jJuAqL87rQix4R2Qt/t4YmXjHaDGtxcTqYo6WxpgdK aZZibv2fdLRMugCICXEep7NF7DpOBPYPxsP7onD+TgSSMXiH9QJlQdmxZQzNfFti DdVa19exSI5xhowQ2zEg5qdalhcDtYfIQUHmehxXC7li -----END CERTIFICATE-----Generated at Wed Jan 21 14:30:36 2026 by rpki-client