This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa File: ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa (raw, json) Hash identifier: 83ywIsnDuxVaovsUOnYYrLb1JxlJot8bxmB1jRR+by8= Subject key identifier: 10:D1:F9:45:CE:DF:43:25:A3:07:66:DB:76:CA:C7:C7:8B:95:8D:87 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019B7E38926245DE66F924F7EC3846E5FD0E Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa Signing time: Fri 02 Jan 2026 10:19:55 +0000 ROA not before: Fri 02 Jan 2026 10:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29491 IP address blocks: 62.3.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:92:62:45:de:66:f9:24:f7:ec:38:46:e5:fd:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Jan 2 10:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10d1f945cedf4325a30766db76cac7c78b958d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d3:32:ea:9c:f8:fc:58:df:fd:d9:be:4c:0b: c4:45:e1:27:fc:f2:70:7d:c6:1b:a6:f9:a4:38:44: e9:34:97:33:05:38:25:56:59:bd:d8:74:d0:1a:6f: e6:d4:48:86:7c:3d:f3:ce:5d:12:25:65:63:d1:bc: ad:16:bc:16:29:db:d8:a0:ec:9b:39:f9:82:ae:50: a9:c3:03:6a:44:20:43:ff:76:de:dd:6f:d5:65:0f: 8e:77:9b:df:96:56:d8:1b:75:11:f7:ed:b0:21:df: a0:a2:3d:8c:cf:d8:42:14:da:d3:ec:fc:15:3b:ed: 1b:ec:1f:79:26:d5:f3:3e:51:0a:73:4f:2a:f6:ef: 61:39:41:63:25:0e:c9:4c:df:d2:56:0f:d6:a4:9e: 24:63:bf:0d:5e:f7:be:d9:21:37:3c:13:98:d8:ae: f7:2f:13:3d:32:4c:f9:c7:80:c8:11:a0:20:aa:a2: 3b:08:18:cb:3a:86:4f:cb:e9:44:99:c9:85:f0:71: fc:0a:51:d8:54:93:96:dc:d3:e7:2d:e3:85:f4:24: 85:a9:d3:6e:f6:69:69:c3:37:0d:a7:d1:3f:bd:f0: 98:b4:bb:d9:c0:b9:87:b4:53:bf:8f:0f:36:ee:c3: 67:05:ad:e6:8f:e3:a4:2d:04:ac:da:4f:a5:ee:86: 43:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D1:F9:45:CE:DF:43:25:A3:07:66:DB:76:CA:C7:C7:8B:95:8D:87 X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.26.0/24 Signature Algorithm: sha256WithRSAEncryption 68:94:b2:bd:6f:67:1a:2c:82:c1:84:f3:d2:a9:b5:e7:32:42: 60:3f:f0:01:c1:fb:34:41:80:3a:b8:b9:28:86:78:6d:13:46: 04:ae:74:13:be:db:dd:82:cf:9a:ef:d6:73:c9:f0:5b:44:3c: ab:ab:8b:ac:a2:0e:e6:59:1f:14:1d:03:b7:50:82:ea:15:2f: 46:bf:36:6d:f5:31:51:50:8b:d8:9b:06:c6:c9:2d:e3:9e:bc: eb:42:7e:b0:cd:e1:31:d7:ae:da:c6:09:5b:49:ce:34:f0:46: 58:f7:c2:ab:92:57:62:46:2a:22:8a:44:29:a5:6d:89:0e:3c: 0c:b7:f1:f4:1c:26:38:01:20:ef:33:db:23:a3:81:e4:bb:f7: ff:4f:54:ed:13:f3:dc:b9:69:93:00:1b:8c:3b:63:db:a6:14: 36:ad:7f:61:d5:8c:cd:65:65:dd:f6:79:18:de:7d:17:a5:f3: 5a:36:d9:33:8d:be:30:06:02:a2:f4:33:8c:39:c9:f6:91:8c: e3:53:dd:6d:cd:f1:46:1e:52:47:e4:b4:3d:e4:e3:31:47:e5: 3c:37:28:74:95:9d:38:06:2f:5f:38:81:54:c7:69:cc:45:67: 88:d6:0f:64:0c:e9:32:00:7f:e6:bf:e1:c0:1b:0c:70:d0:bb: 39:ea:36:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJJiRd5m+ST37DhG5f0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYwMTAyMTAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGQxZjk0NWNlZGY0MzI1YTMwNzY2ZGI3NmNhYzdjNzhiOTU4ZDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdMy6pz4/Fjf/dm+TAvEReEn/PJw fcYbpvmkOETpNJczBTglVlm92HTQGm/m1EiGfD3zzl0SJWVj0bytFrwWKdvYoOyb OfmCrlCpwwNqRCBD/3be3W/VZQ+Od5vfllbYG3UR9+2wId+goj2Mz9hCFNrT7PwV O+0b7B95JtXzPlEKc08q9u9hOUFjJQ7JTN/SVg/WpJ4kY78NXve+2SE3PBOY2K73 LxM9Mkz5x4DIEaAgqqI7CBjLOoZPy+lEmcmF8HH8ClHYVJOW3NPnLeOF9CSFqdNu 9mlpwzcNp9E/vfCYtLvZwLmHtFO/jw827sNnBa3mj+OkLQSs2k+l7oZD1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBDR+UXO30Mlowdm23bKx8eLlY2HMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvRU5INVJjN2ZReVdqQjJiYmRzckh4NHVWalljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMaMA0G CSqGSIb3DQEBCwUAA4IBAQBolLK9b2caLILBhPPSqbXnMkJgP/ABwfs0QYA6uLko hnhtE0YErnQTvtvdgs+a79ZzyfBbRDyrq4usog7mWR8UHQO3UILqFS9GvzZt9TFR UIvYmwbGyS3jnrzrQn6wzeEx167axglbSc408EZY98KrkldiRioiikQppW2JDjwM t/H0HCY4ASDvM9sjo4Hku/f/T1TtE/PcuWmTABuMO2PbphQ2rX9h1YzNZWXd9nkY 3n0XpfNaNtkzjb4wBgKi9DOMOcn2kYzjU91tzfFGHlJH5LQ95OMxR+U8Nyh0lZ04 Bi9fOIFUx2nMRWeI1g9kDOkyAH/mv+HAGwxw0Ls56jbD -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:40 2026 by rpki-client