This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/H5m8M-4zQyNkYJc-cNRRL3tUXmQ.roa File: H5m8M-4zQyNkYJc-cNRRL3tUXmQ.roa (raw, json) Hash identifier: ilJ18CrU4Kb07zVh4U8HqZ3eAwSyJCEzKDwT4+JWTN4= Subject key identifier: 1F:99:BC:33:EE:33:43:23:64:60:97:3E:70:D4:51:2F:7B:54:5E:64 Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019B7FF194D5031955D59D723FB30061B13D Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/H5m8M-4zQyNkYJc-cNRRL3tUXmQ.roa Signing time: Fri 02 Jan 2026 18:21:37 +0000 ROA not before: Fri 02 Jan 2026 18:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61335 IP address blocks: 46.38.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:94:d5:03:19:55:d5:9d:72:3f:b3:00:61:b1:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 2 18:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f99bc33ee3343236460973e70d4512f7b545e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:eb:09:d1:6f:25:ca:f4:52:ad:a2:1e:1c:8a: 14:f6:cb:b7:d9:ea:69:ef:be:58:d9:4c:65:ae:68: 89:29:12:35:ef:e6:93:98:4e:5d:2c:e0:48:d8:6f: c1:d6:3d:6b:57:76:cb:87:65:b8:81:a2:1f:a9:7e: be:a1:54:95:80:d2:d6:dc:2b:af:4b:dc:a5:2e:97: 3d:95:f6:d4:45:40:97:99:29:2b:6f:73:cd:77:cf: 11:ee:9a:01:c4:7f:8f:d7:f1:bb:99:2a:56:47:78: 1e:b8:fa:17:27:75:b3:d4:88:61:ef:84:9f:48:6d: 13:5f:c9:13:c2:e4:62:ed:c8:59:c0:6a:a6:19:cd: a1:ae:9f:f5:29:40:b1:20:db:be:29:c2:b6:5e:09: 3d:7c:f1:72:5e:31:0d:c8:a1:72:de:92:32:73:76: 42:b2:1e:65:4c:6a:ec:e2:5e:7a:07:4a:67:f6:fc: ec:63:b1:3c:1a:d9:a6:83:60:45:f2:48:a7:8f:c0: d8:28:fb:59:4f:a9:d1:45:89:8d:db:7d:aa:b9:5b: 6a:33:90:34:68:2c:3e:7c:03:7f:cc:db:b9:c9:b7: 0a:59:19:34:05:3e:40:ad:3a:85:83:95:a0:04:8a: 16:fd:06:54:4e:9b:6c:0d:da:73:ce:1b:ee:d2:55: a8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:99:BC:33:EE:33:43:23:64:60:97:3E:70:D4:51:2F:7B:54:5E:64 X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/H5m8M-4zQyNkYJc-cNRRL3tUXmQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.38.153.0/24 Signature Algorithm: sha256WithRSAEncryption b9:32:d3:d2:63:c7:12:9e:0f:09:83:2a:c0:f9:5d:c4:97:28: ac:e1:24:a4:b0:ba:51:c5:8c:62:3e:d3:9f:f9:20:4b:ac:11: f9:97:dc:22:71:e7:42:cb:76:9c:40:43:48:af:20:a0:c6:0d: a0:27:09:ac:90:fd:57:ff:fb:cf:0a:35:88:cf:2b:0f:8a:46: e4:e4:2c:11:88:ea:9c:90:85:03:55:d8:97:a3:f2:75:41:3b: 7d:32:d0:39:6d:4b:bb:32:38:e8:30:83:3a:07:d4:26:37:ae: 6a:51:45:38:21:2b:6e:e3:fe:64:d1:c4:6f:95:c3:6c:da:73: 29:a7:a5:40:52:97:8c:50:ca:4a:a2:53:3c:cd:2a:78:04:da: 6a:be:06:ad:9f:e5:17:18:94:36:99:e4:e1:ff:da:52:6d:10: 0e:b5:75:ef:9d:12:ec:e2:57:5a:0d:03:78:85:6d:0a:17:6f: 9e:44:a9:6d:50:ec:8b:dc:28:f1:c9:f2:e6:62:45:3f:14:86: 16:89:dd:6f:74:5e:a0:00:6a:f7:13:78:7e:32:3c:9e:88:74: 2e:90:93:02:9a:22:ee:87:5c:9c:56:e4:ae:39:b2:74:b6:96: bc:07:b1:82:4c:d4:bc:a1:eb:2c:9b:bd:ce:b1:d0:2e:9a:d1: ce:bb:f1:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8ZTVAxlV1Z1yP7MAYbE9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTAyMTgyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjk5YmMzM2VlMzM0MzIzNjQ2MDk3M2U3MGQ0NTEyZjdiNTQ1ZTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzesJ0W8lyvRSraIeHIoU9su32epp 775Y2UxlrmiJKRI17+aTmE5dLOBI2G/B1j1rV3bLh2W4gaIfqX6+oVSVgNLW3Cuv S9ylLpc9lfbURUCXmSkrb3PNd88R7poBxH+P1/G7mSpWR3geuPoXJ3Wz1Ihh74Sf SG0TX8kTwuRi7chZwGqmGc2hrp/1KUCxINu+KcK2Xgk9fPFyXjENyKFy3pIyc3ZC sh5lTGrs4l56B0pn9vzsY7E8Gtmmg2BF8kinj8DYKPtZT6nRRYmN232quVtqM5A0 aCw+fAN/zNu5ybcKWRk0BT5ArTqFg5WgBIoW/QZUTptsDdpzzhvu0lWoKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB+ZvDPuM0MjZGCXPnDUUS97VF5kMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvSDVtOE0tNHpReU5rWUpjLWNOUlJMM3RVWG1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiaZMA0G CSqGSIb3DQEBCwUAA4IBAQC5MtPSY8cSng8JgyrA+V3Elyis4SSksLpRxYxiPtOf +SBLrBH5l9wicedCy3acQENIryCgxg2gJwmskP1X//vPCjWIzysPikbk5CwRiOqc kIUDVdiXo/J1QTt9MtA5bUu7MjjoMIM6B9QmN65qUUU4IStu4/5k0cRvlcNs2nMp p6VAUpeMUMpKolM8zSp4BNpqvgatn+UXGJQ2meTh/9pSbRAOtXXvnRLs4ldaDQN4 hW0KF2+eRKltUOyL3CjxyfLmYkU/FIYWid1vdF6gAGr3E3h+MjyeiHQukJMCmiLu h1ycVuSuObJ0tpa8B7GCTNS8oessm73OsdAumtHOu/Et -----END CERTIFICATE-----Generated at Wed Jan 21 04:03:55 2026 by rpki-client