This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/HJhtdY1Bt2Jp3s58MQ36_lpZ1Ic.roa File: HJhtdY1Bt2Jp3s58MQ36_lpZ1Ic.roa (raw, json) Hash identifier: xE6Rta/RlEqCyqyZ73kCSJSfv6cY2CK6DyW/tdGVAEo= Subject key identifier: 1C:98:6D:75:8D:41:B7:62:69:DE:CE:7C:31:0D:FA:FE:5A:59:D4:87 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB672A8B96763F45E6282C773C3912 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/HJhtdY1Bt2Jp3s58MQ36_lpZ1Ic.roa Signing time: Fri 02 Jan 2026 08:20:40 +0000 ROA not before: Fri 02 Jan 2026 08:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49392 IP address blocks: 5.42.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:67:2a:8b:96:76:3f:45:e6:28:2c:77:3c:39:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c986d758d41b76269dece7c310dfafe5a59d487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6c:42:27:f6:37:a0:7a:5d:d7:84:1b:db:a7: b1:0a:54:b8:40:93:e2:4d:5d:16:94:a1:d9:e0:bc: d4:93:16:3c:4b:ff:40:35:a9:1f:e1:28:6a:8f:e2: 1a:5b:c7:3f:35:30:b1:64:00:13:a2:a9:c7:a5:63: 4e:37:90:4b:dd:a1:a8:7d:e3:7f:15:ab:53:f4:b9: ad:f3:85:0a:5d:54:b3:9f:c5:03:af:39:a4:05:d9: 28:e8:65:91:93:0b:c8:96:25:86:c7:05:9e:d9:cb: aa:01:19:ab:64:06:75:61:d6:f3:04:e5:d8:31:be: 81:db:21:05:d7:1e:8e:eb:b8:51:d2:27:a0:96:1e: 7b:f6:59:10:7c:5d:61:95:a3:de:bd:82:6a:4b:0a: 93:db:81:a1:db:e8:c5:95:12:33:43:6c:94:4e:07: 5d:66:9f:b2:ac:94:d7:4c:61:33:73:a3:9e:b4:9f: bf:ed:0b:6a:16:00:f1:22:2a:59:a5:4c:c2:99:de: b4:e6:5b:da:ef:8f:f0:2e:f1:7d:2c:d1:39:11:df: a1:dc:7d:86:2c:ab:ef:61:5f:89:40:70:49:1e:cf: 7c:51:2a:60:8b:35:56:b2:5d:14:e0:86:0a:ca:1d: 78:c9:ee:eb:00:ec:b9:f3:16:b8:d3:5e:56:d6:12: ab:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:98:6D:75:8D:41:B7:62:69:DE:CE:7C:31:0D:FA:FE:5A:59:D4:87 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/HJhtdY1Bt2Jp3s58MQ36_lpZ1Ic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.212.0/24 Signature Algorithm: sha256WithRSAEncryption 11:90:44:ae:df:e9:d5:3c:d0:79:d7:a3:3f:31:70:a6:d9:dc: ee:b5:58:27:db:d4:8f:65:1e:70:fb:91:49:72:e2:e4:82:35: ac:d3:f2:9c:a8:56:ca:6f:76:f5:73:e6:77:db:2f:c2:de:c7: 95:3c:c6:2b:44:2f:cc:89:9b:c1:0e:aa:12:14:3d:3c:09:13: c2:39:8e:de:1f:11:c9:1e:5a:c9:01:31:65:98:fa:24:24:ae: 2a:24:cd:ba:c7:d3:f5:80:e5:2e:90:d9:e0:26:93:fa:f5:96: 6a:8a:a4:8a:00:4a:37:02:ef:bc:69:4d:d5:de:06:66:0a:97: 0f:1d:0b:85:52:af:97:72:bd:72:ab:da:1d:8c:6f:b0:19:df: 3a:70:9e:8c:ec:a1:e3:7c:25:3a:7e:2b:70:b3:ee:fe:1a:c2: 63:77:bb:60:66:57:75:83:b2:25:cc:36:21:9a:dd:9e:bd:6c: 82:9b:1d:09:02:70:d4:63:ee:83:a4:9c:9f:94:70:4d:65:cd: 4a:e7:89:4f:38:60:e9:1c:68:ec:29:c7:50:a6:1a:31:eb:a9: 62:3c:c5:19:fe:94:b3:9a:7d:2b:a4:9e:6e:f8:82:4d:74:1e: 98:25:19:a1:1a:dc:85:dd:2c:90:17:bd:0d:02:9d:73:78:f4: 7a:b5:42:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2cqi5Z2P0XmKCx3PDkSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzk4NmQ3NThkNDFiNzYyNjlkZWNlN2MzMTBkZmFmZTVhNTlkNDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGxCJ/Y3oHpd14Qb26exClS4QJPi TV0WlKHZ4LzUkxY8S/9ANakf4Shqj+IaW8c/NTCxZAAToqnHpWNON5BL3aGofeN/ FatT9Lmt84UKXVSzn8UDrzmkBdko6GWRkwvIliWGxwWe2cuqARmrZAZ1YdbzBOXY Mb6B2yEF1x6O67hR0ieglh579lkQfF1hlaPevYJqSwqT24Gh2+jFlRIzQ2yUTgdd Zp+yrJTXTGEzc6OetJ+/7QtqFgDxIipZpUzCmd605lva74/wLvF9LNE5Ed+h3H2G LKvvYV+JQHBJHs98USpgizVWsl0U4IYKyh14ye7rAOy58xa4015W1hKr+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFByYbXWNQbdiad7OfDEN+v5aWdSHMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvSEpodGRZMUJ0MkpwM3M1OE1RMzZfbHBaMUljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSrUMA0G CSqGSIb3DQEBCwUAA4IBAQARkESu3+nVPNB516M/MXCm2dzutVgn29SPZR5w+5FJ cuLkgjWs0/KcqFbKb3b1c+Z32y/C3seVPMYrRC/MiZvBDqoSFD08CRPCOY7eHxHJ HlrJATFlmPokJK4qJM26x9P1gOUukNngJpP69ZZqiqSKAEo3Au+8aU3V3gZmCpcP HQuFUq+Xcr1yq9odjG+wGd86cJ6M7KHjfCU6fitws+7+GsJjd7tgZld1g7IlzDYh mt2evWyCmx0JAnDUY+6DpJyflHBNZc1K54lPOGDpHGjsKcdQphox66liPMUZ/pSz mn0rpJ5u+IJNdB6YJRmhGtyF3SyQF70NAp1zePR6tUIe -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:23 2026 by rpki-client