This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/5D5H4157fnq095Zx28ueaKeKXYM.roa File: 5D5H4157fnq095Zx28ueaKeKXYM.roa (raw, json) Hash identifier: HGS6JRy2csmBENBtc74ury4ycHEpdmnQ0F2/7fuFltg= Subject key identifier: E4:3E:47:E3:5E:7B:7E:7A:B4:F7:96:71:DB:CB:9E:68:A7:8A:5D:83 Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228 Certificate serial: 019B7CEDC015E9F44946315DBD5ECBD54E87 Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/5D5H4157fnq095Zx28ueaKeKXYM.roa Signing time: Fri 02 Jan 2026 04:18:34 +0000 ROA not before: Fri 02 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203050 IP address blocks: 45.10.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c0:15:e9:f4:49:46:31:5d:bd:5e:cb:d5:4e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228 Validity Not Before: Jan 2 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e43e47e35e7b7e7ab4f79671dbcb9e68a78a5d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:66:51:df:09:9a:dd:d2:14:a9:50:61:92:ae: 9a:8b:60:26:c4:c4:03:17:12:47:b2:c6:ba:67:da: 2c:4b:fe:75:02:ef:7e:c7:be:df:fe:66:d1:58:37: 70:b9:eb:25:30:ad:bf:06:f2:67:ec:c9:4a:9f:cf: 2f:98:f7:08:b0:d2:54:b4:30:27:82:32:7d:c7:22: 85:42:24:54:d3:e9:08:d0:dc:cd:9e:2b:cc:60:a8: be:15:ee:d2:1f:81:6e:62:a2:31:c4:40:b2:1e:16: 43:37:7a:3a:aa:8d:87:0c:bb:0e:86:45:0e:9d:17: a0:5e:7f:14:67:a9:62:8e:23:12:06:af:00:fd:8a: f3:af:ea:61:0f:69:b0:a7:e7:be:db:90:0d:98:70: e7:60:8b:d5:89:b4:f2:b4:6b:7c:86:af:5c:11:8d: fc:94:7b:4c:d2:9e:0d:51:2c:5c:5a:7f:03:30:4a: a9:71:8f:da:24:d0:f4:77:c6:86:5d:d2:67:57:6e: 1b:28:e7:b8:15:09:34:3e:f9:8e:a3:d3:2c:4f:39: 09:c6:29:fc:4b:a8:bb:55:c3:bd:86:94:c4:1a:06: 4d:52:bd:6e:0b:a7:b5:ce:ae:eb:b6:da:45:8a:96: e0:e4:0e:45:c7:aa:d9:be:19:b4:46:51:7e:27:fe: a3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3E:47:E3:5E:7B:7E:7A:B4:F7:96:71:DB:CB:9E:68:A7:8A:5D:83 X509v3 Authority Key Identifier: keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/5D5H4157fnq095Zx28ueaKeKXYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.37.0/24 Signature Algorithm: sha256WithRSAEncryption 25:b1:56:38:15:07:6b:f0:f5:b7:f3:db:0b:28:b1:82:dc:27: b2:46:09:bb:0d:43:06:5b:0a:7f:ab:7f:07:e8:69:aa:d7:75: df:da:69:33:18:91:40:bf:f0:a4:bc:7b:a3:7f:20:50:1c:d3: f7:4e:ad:a1:cf:78:89:17:ae:52:28:08:d6:17:60:64:0c:00: 30:f0:68:4b:0d:43:8c:93:af:b5:7e:1d:99:8b:cb:86:07:3a: fc:f9:40:7a:f6:97:22:47:ab:1c:6e:8e:14:6a:39:45:7f:1c: 92:ea:14:2b:88:6a:d1:58:b2:11:79:9c:6c:c3:16:8a:e8:20: b0:32:cb:20:78:b7:7f:1f:07:7c:a8:0f:39:2d:47:b3:d0:f0: da:59:94:64:db:ce:c7:a3:f3:b0:c1:92:a9:22:7c:dc:21:67: 55:b1:0d:80:59:d6:75:a2:5c:39:57:73:ed:00:aa:70:58:b9: 14:16:e0:e8:b9:9b:c7:11:e2:ae:b5:66:6b:8d:27:d5:c5:e0: a9:b6:56:ad:18:f0:06:ea:91:ce:46:d6:26:2b:45:74:d2:88: c4:28:eb:70:fb:3b:6c:fd:08:55:16:69:b7:1d:43:21:11:40: f6:b6:11:5c:ee:c2:49:e8:ca:ce:97:ce:cc:73:0f:60:0c:3a: 5f:1e:97:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87cAV6fRJRjFdvV7L1U6HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOWVlYzc3MGRmYTY2MmI0ZWE2NGEwMjJlZWIzOGU4M2Rh YWUyMjgwHhcNMjYwMTAyMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDNlNDdlMzVlN2I3ZTdhYjRmNzk2NzFkYmNiOWU2OGE3OGE1ZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2ZR3wma3dIUqVBhkq6ai2AmxMQD FxJHssa6Z9osS/51Au9+x77f/mbRWDdwueslMK2/BvJn7MlKn88vmPcIsNJUtDAn gjJ9xyKFQiRU0+kI0NzNnivMYKi+Fe7SH4FuYqIxxECyHhZDN3o6qo2HDLsOhkUO nRegXn8UZ6lijiMSBq8A/Yrzr+phD2mwp+e+25ANmHDnYIvVibTytGt8hq9cEY38 lHtM0p4NUSxcWn8DMEqpcY/aJND0d8aGXdJnV24bKOe4FQk0PvmOo9MsTzkJxin8 S6i7VcO9hpTEGgZNUr1uC6e1zq7rttpFipbg5A5Fx6rZvhm0RlF+J/6j5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOQ+R+Nee356tPeWcdvLnminil2DMB8GA1UdIwQY MBaAFEOe7HcN+mYrTqZKAi7rOOg9quIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82Yjg0MzQtZjQ1NC00MWM3LTkyYjkt MzUyZjdjYTAxMWFlLzEvNUQ1SDQxNTdmbnEwOTVaeDI4dWVhS2VLWFlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi82Yjg0MzQtZjQ1NC00MWM3LTkyYjktMzUyZjdjYTAxMWFl LzEvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQolMA0G CSqGSIb3DQEBCwUAA4IBAQAlsVY4FQdr8PW389sLKLGC3CeyRgm7DUMGWwp/q38H 6Gmq13Xf2mkzGJFAv/CkvHujfyBQHNP3Tq2hz3iJF65SKAjWF2BkDAAw8GhLDUOM k6+1fh2Zi8uGBzr8+UB69pciR6scbo4UajlFfxyS6hQriGrRWLIReZxswxaK6CCw MssgeLd/Hwd8qA85LUez0PDaWZRk287Ho/OwwZKpInzcIWdVsQ2AWdZ1olw5V3Pt AKpwWLkUFuDouZvHEeKutWZrjSfVxeCptlatGPAG6pHORtYmK0V00ojEKOtw+zts /QhVFmm3HUMhEUD2thFc7sJJ6MrOl87Mcw9gDDpfHpfr -----END CERTIFICATE-----Generated at Mon Jan 26 20:27:00 2026 by rpki-client