This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/5hx2PgGlsoHU52DnoY5z8nDA6Uc.roa File: 5hx2PgGlsoHU52DnoY5z8nDA6Uc.roa (raw, json) Hash identifier: V6FRtdQair4Jd18FQhevQfbc1XrlHcZDfofcJOEH238= Subject key identifier: E6:1C:76:3E:01:A5:B2:81:D4:E7:60:E7:A1:8E:73:F2:70:C0:E9:47 Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Certificate serial: 019B7F812D966C5B86CFE11BC25A56BE27FA Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/5hx2PgGlsoHU52DnoY5z8nDA6Uc.roa Signing time: Fri 02 Jan 2026 16:18:50 +0000 ROA not before: Fri 02 Jan 2026 16:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40934 IP address blocks: 82.98.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:2d:96:6c:5b:86:cf:e1:1b:c2:5a:56:be:27:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Validity Not Before: Jan 2 16:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e61c763e01a5b281d4e760e7a18e73f270c0e947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:22:69:e2:f4:03:b1:53:ac:92:07:59:24:f2: 9f:7c:95:bb:bd:f5:bf:27:a0:e4:d0:06:34:a8:6d: 03:03:c2:65:90:b1:7d:76:cf:38:9d:de:97:f9:ea: c8:0a:5d:0c:e9:6e:89:e3:d9:fc:1c:2c:f2:69:fa: b9:ce:d4:28:d1:b9:90:3d:cd:14:5e:ee:6b:48:a9: dc:b4:a6:2f:b3:e8:f7:5a:0c:31:f5:ce:50:63:1b: 27:0a:01:70:e3:7a:ee:92:ee:4b:cc:d2:e8:cd:5d: a2:e6:86:4e:12:27:0f:54:61:26:ce:68:43:97:44: e2:b1:6d:9b:fc:4e:2e:27:88:39:2a:8f:3e:8a:56: 9f:9f:74:ec:7f:79:ef:c9:ec:6f:38:79:1c:bf:1a: 52:19:f6:49:82:74:8f:09:87:9a:ca:6d:2a:cf:a5: 90:4d:d5:60:d2:b3:3b:c8:00:2a:e4:64:de:26:7a: 67:b3:5a:28:8d:ee:4d:37:47:6e:7b:00:5e:9a:4a: 17:00:e3:ce:fc:dc:75:7a:93:8d:e3:8c:02:00:e6: 8c:4f:0b:80:af:51:36:2f:3e:ba:5e:e7:63:2d:73: 39:97:06:30:62:95:6e:55:3b:57:42:47:a7:7a:0b: d3:c3:28:82:88:0a:6b:15:e4:4b:fd:26:d0:cc:a2: 37:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1C:76:3E:01:A5:B2:81:D4:E7:60:E7:A1:8E:73:F2:70:C0:E9:47 X509v3 Authority Key Identifier: keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/5hx2PgGlsoHU52DnoY5z8nDA6Uc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.98.199.0/24 Signature Algorithm: sha256WithRSAEncryption 40:d3:8d:a7:66:6d:ed:be:e7:df:c9:1d:82:dd:6a:82:2a:85: 94:30:6b:db:83:c8:18:f2:fe:c1:d5:50:e4:bf:b6:fe:10:57: 9b:bd:b4:ea:13:8f:fd:b9:41:cb:42:d4:65:2a:7d:d6:bf:29: 7a:23:23:e3:85:cb:ff:bc:9d:7a:11:4f:5f:3e:87:5d:b9:59: 70:05:a6:0d:7d:1b:a8:e1:56:09:91:61:91:e4:12:cb:91:e7: ef:ff:41:82:f2:eb:ea:00:6b:11:ee:12:01:63:3a:d6:ab:a1: 0c:fa:6d:f3:ae:01:cf:cb:b6:2a:ce:85:c0:58:77:a0:be:3a: ae:15:93:1b:a5:2d:9d:7e:f8:07:50:d6:77:ca:cd:9e:87:64: 7e:9a:6b:8b:12:0c:f6:4d:2a:de:4f:db:fb:29:d5:b9:c9:89: 6c:f3:70:af:bd:48:30:3e:32:ac:cd:d8:08:15:a2:29:a6:83: 1e:5f:3f:fc:3e:83:b2:7a:23:42:3e:c9:87:fe:04:b9:04:a0: fe:e0:4a:7c:4d:2a:9d:11:38:ed:a3:40:4e:ca:69:cc:ba:32: 89:ff:93:02:68:4c:cb:89:00:dc:76:a2:0a:9f:b3:a5:5e:e0: 14:67:64:bb:63:ef:86:0e:c3:51:a3:9b:7a:76:95:d2:e7:70: 98:ce:a0:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gS2WbFuGz+EbwlpWvif6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl YmUyNTcwHhcNMjYwMTAyMTYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjFjNzYzZTAxYTViMjgxZDRlNzYwZTdhMThlNzNmMjcwYzBlOTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSJp4vQDsVOskgdZJPKffJW7vfW/ J6Dk0AY0qG0DA8JlkLF9ds84nd6X+erICl0M6W6J49n8HCzyafq5ztQo0bmQPc0U Xu5rSKnctKYvs+j3Wgwx9c5QYxsnCgFw43ruku5LzNLozV2i5oZOEicPVGEmzmhD l0TisW2b/E4uJ4g5Ko8+ilafn3Tsf3nvyexvOHkcvxpSGfZJgnSPCYeaym0qz6WQ TdVg0rM7yAAq5GTeJnpns1ooje5NN0duewBemkoXAOPO/Nx1epON44wCAOaMTwuA r1E2Lz66XudjLXM5lwYwYpVuVTtXQkenegvTwyiCiAprFeRL/SbQzKI3QwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOYcdj4BpbKB1Odg56GOc/JwwOlHMB8GA1UdIwQY MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt ZGI0ZjM1MmU5YWQzLzEvNWh4MlBnR2xzb0hVNTJEbm9ZNXo4bkRBNlVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUmLHMA0G CSqGSIb3DQEBCwUAA4IBAQBA042nZm3tvuffyR2C3WqCKoWUMGvbg8gY8v7B1VDk v7b+EFebvbTqE4/9uUHLQtRlKn3Wvyl6IyPjhcv/vJ16EU9fPodduVlwBaYNfRuo 4VYJkWGR5BLLkefv/0GC8uvqAGsR7hIBYzrWq6EM+m3zrgHPy7YqzoXAWHegvjqu FZMbpS2dfvgHUNZ3ys2eh2R+mmuLEgz2TSreT9v7KdW5yYls83CvvUgwPjKszdgI FaIppoMeXz/8PoOyeiNCPsmH/gS5BKD+4Ep8TSqdETjto0BOymnMujKJ/5MCaEzL iQDcdqIKn7OlXuAUZ2S7Y++GDsNRo5t6dpXS53CYzqD2 -----END CERTIFICATE-----Generated at Wed Jan 21 03:49:01 2026 by rpki-client