This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/h7P1hi1H8kgvCS26AzWoEhRuvBc.roa File: h7P1hi1H8kgvCS26AzWoEhRuvBc.roa (raw, json) Hash identifier: +Y3Jtu/O6L/9HEEAHKKgP9+0Q8OPAX4fn/RBovj8X/M= Subject key identifier: 87:B3:F5:86:2D:47:F2:48:2F:09:2D:BA:03:35:A8:12:14:6E:BC:17 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA423216C60EE861A7737C93A6114A5 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/h7P1hi1H8kgvCS26AzWoEhRuvBc.roa Signing time: Thu 01 Jan 2026 22:18:33 +0000 ROA not before: Thu 01 Jan 2026 22:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216475 IP address blocks: 5.252.118.0/24 maxlen: 24 213.108.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:23:21:6c:60:ee:86:1a:77:37:c9:3a:61:14:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87b3f5862d47f2482f092dba0335a812146ebc17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:b1:da:4f:ed:ba:1c:af:a2:09:fa:4d:3c: 05:42:57:ce:fe:d8:bf:9e:83:3d:b1:75:25:cb:fa: 87:30:e3:c1:a6:ca:29:45:96:d2:9b:8d:61:0f:a2: c2:19:08:6b:f5:c5:8b:93:97:d2:d6:fb:9b:89:c2: 07:5f:6f:8a:82:85:d5:36:e9:74:21:35:b9:5f:3d: 36:05:0e:e1:68:8d:ec:93:30:c8:6f:a3:fc:ac:6d: f7:be:e3:e7:3e:4e:42:98:9d:09:27:a6:f8:ee:4f: 62:b1:79:d7:a5:93:c3:2b:75:eb:a0:37:eb:46:31: f4:1e:6c:ef:e3:5c:33:57:5c:6f:e3:2d:dc:45:75: 74:49:43:55:90:42:1c:d1:a8:9d:be:6f:c0:a0:f0: d0:99:34:bd:36:c0:ad:a5:d4:6a:9b:5d:98:dc:f7: b2:1a:0a:af:5d:81:94:4e:8c:e2:8a:df:92:56:06: 90:2f:de:71:db:c2:dd:e7:b2:ba:3c:dc:93:58:91: 4a:8e:dc:d3:51:d2:ae:7f:22:f6:58:c9:41:92:ee: 21:51:69:e0:35:1e:ff:9f:42:25:c7:9c:ab:86:49: a6:34:7c:6d:fb:db:50:96:ec:be:20:66:60:ac:e0: c0:08:a8:a6:be:3b:a9:72:7a:66:e1:2c:df:8e:1a: ca:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B3:F5:86:2D:47:F2:48:2F:09:2D:BA:03:35:A8:12:14:6E:BC:17 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/h7P1hi1H8kgvCS26AzWoEhRuvBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.118.0/24 213.108.198.0/24 Signature Algorithm: sha256WithRSAEncryption 34:3b:70:eb:b2:59:ee:7f:e9:bd:58:49:13:5c:22:90:18:ba: f5:8a:f7:08:93:8f:ab:78:18:e4:36:bb:f7:02:e9:77:fa:19: 0a:6c:57:06:81:53:35:a8:f5:44:03:e7:4a:2e:dc:c6:21:29: c1:cc:c0:53:d8:26:9b:af:95:54:93:5b:44:b2:c2:24:42:db: 3b:fd:db:e8:57:74:26:dc:21:68:4c:85:a4:e6:17:1a:b3:a8: eb:f0:96:25:c7:a6:b0:58:4b:2b:b3:b8:2a:6d:2d:ae:d3:c1: 6b:dd:a3:59:95:11:ae:e8:03:62:ff:ae:2a:34:44:5a:54:58: 32:b2:6e:4e:a0:59:c3:58:55:1c:e8:0a:a8:9a:a8:05:5a:cc: fa:c7:83:f3:24:e9:ea:f8:e2:fe:62:f3:7d:c8:8b:b7:75:28: 54:06:5f:08:8b:97:8b:f5:ea:cc:3a:b1:76:d9:67:72:b1:e9: e7:6d:c1:c8:16:f2:55:ca:ec:71:a6:87:71:4f:be:ac:7a:87: 60:83:c7:54:aa:83:41:83:1e:c8:59:4c:bf:67:ca:92:81:df: cc:ee:ac:fe:0e:14:c2:eb:c5:51:ac:8b:9e:a3:1f:3a:af:10: fd:d0:bb:2e:85:fb:09:d4:3c:61:24:b6:0e:75:07:3e:e7:e4: 7b:e0:0e:8e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pCMhbGDuhhp3N8k6YRSlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2IzZjU4NjJkNDdmMjQ4MmYwOTJkYmEwMzM1YTgxMjE0NmViYzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkmx2k/tuhyvogn6TTwFQlfO/ti/ noM9sXUly/qHMOPBpsopRZbSm41hD6LCGQhr9cWLk5fS1vubicIHX2+KgoXVNul0 ITW5Xz02BQ7haI3skzDIb6P8rG33vuPnPk5CmJ0JJ6b47k9isXnXpZPDK3XroDfr RjH0Hmzv41wzV1xv4y3cRXV0SUNVkEIc0aidvm/AoPDQmTS9NsCtpdRqm12Y3Pey GgqvXYGUToziit+SVgaQL95x28Ld57K6PNyTWJFKjtzTUdKufyL2WMlBku4hUWng NR7/n0Ilx5yrhkmmNHxt+9tQluy+IGZgrODACKimvjupcnpm4SzfjhrKewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIez9YYtR/JILwktugM1qBIUbrwXMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvaDdQMWhpMUg4a2d2Q1MyNkF6V29FaFJ1dkJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABfx2AwQA 1WzGMA0GCSqGSIb3DQEBCwUAA4IBAQA0O3Drslnuf+m9WEkTXCKQGLr1ivcIk4+r eBjkNrv3Aul3+hkKbFcGgVM1qPVEA+dKLtzGISnBzMBT2Cabr5VUk1tEssIkQts7 /dvoV3Qm3CFoTIWk5hcas6jr8JYlx6awWEsrs7gqbS2u08Fr3aNZlRGu6ANi/64q NERaVFgysm5OoFnDWFUc6AqomqgFWsz6x4PzJOnq+OL+YvN9yIu3dShUBl8Ii5eL 9erMOrF22WdysennbcHIFvJVyuxxpodxT76seodgg8dUqoNBgx7IWUy/Z8qSgd/M 7qz+DhTC68VRrIueox86rxD90LsuhfsJ1DxhJLYOdQc+5+R74A6O -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:19 2026 by rpki-client