This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/5Hk9v8vwqFZwgv90_mBCAmlMuuM.roa File: 5Hk9v8vwqFZwgv90_mBCAmlMuuM.roa (raw, json) Hash identifier: NQu2pFqMrFP9QqXLaVI4TDxhucoHe3KI9PQTNgRjuVY= Subject key identifier: E4:79:3D:BF:CB:F0:A8:56:70:82:FF:74:FE:60:42:02:69:4C:BA:E3 Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73 Certificate serial: 019B79102908C2E433BAE1A8397692CDA2EE Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/5Hk9v8vwqFZwgv90_mBCAmlMuuM.roa Signing time: Thu 01 Jan 2026 10:17:40 +0000 ROA not before: Thu 01 Jan 2026 10:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 31.223.192.0/21 maxlen: 24 31.223.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:29:08:c2:e4:33:ba:e1:a8:39:76:92:cd:a2:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=172537601a31697404922d957e74450f5a9cbe73 Validity Not Before: Jan 1 10:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4793dbfcbf0a8567082ff74fe604202694cbae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:99:ca:1c:e5:1c:7c:44:e0:3d:a6:d5:34:cb: cd:f0:3a:76:2f:8a:d5:02:ac:7a:3f:b5:c1:34:b7: 79:4c:fe:3d:bd:46:53:a4:ec:01:28:b0:52:51:bb: d6:a1:ce:02:52:f8:46:6b:3c:91:76:72:28:14:f3: 5f:36:cf:ec:12:b3:d8:de:d9:70:e0:bd:e5:56:40: 1a:a8:54:4a:2d:e5:1d:b7:61:f1:c1:33:e8:fa:08: df:5a:55:26:5d:ea:68:d1:dc:03:7c:e4:05:ff:06: ed:42:eb:4c:4e:91:b0:ec:b0:eb:a7:67:31:1c:ad: 67:f1:94:20:3b:a4:d2:13:8d:79:3f:e8:1b:d9:e5: 6e:52:f2:3d:4c:d5:03:68:19:e1:91:67:cf:81:7b: 89:d1:f8:b5:83:4e:2d:28:fd:5d:dd:73:50:98:0f: 06:1a:39:37:88:f1:69:e4:eb:43:e4:45:84:25:48: ae:78:a5:49:1e:f4:81:5e:5e:77:e2:48:bd:7f:0d: 6c:23:77:6d:01:b9:1f:3b:92:cd:c7:4f:72:f9:e8: 42:23:3a:d7:44:4a:aa:ce:4d:49:a0:75:e2:ff:50: 38:be:3a:1a:38:71:87:ac:97:2e:d2:7b:85:fc:59: 65:c5:74:90:23:e1:37:05:59:99:08:8f:e1:53:d0: 9e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:79:3D:BF:CB:F0:A8:56:70:82:FF:74:FE:60:42:02:69:4C:BA:E3 X509v3 Authority Key Identifier: keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/5Hk9v8vwqFZwgv90_mBCAmlMuuM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.223.192.0/20 Signature Algorithm: sha256WithRSAEncryption 05:6c:19:44:4e:06:cb:db:5b:31:f0:54:f6:dc:5f:53:ee:e1: 65:0b:b4:04:1e:09:7e:a7:4b:98:26:d9:a7:a2:dd:27:c0:cb: c5:b2:b7:05:a3:5c:87:0c:dd:49:16:6e:2e:96:fb:53:1e:0a: 8d:64:8f:47:bc:80:86:7c:ce:e4:10:11:3e:f3:cc:47:a9:1a: 90:8b:18:42:ce:b4:65:99:b6:f6:db:94:9d:32:92:e6:ba:28: 43:77:34:b1:70:a0:30:aa:7d:31:cd:c7:2e:6c:ea:d0:4f:f5: d3:d2:71:db:cb:74:f7:23:60:53:e6:4f:09:8a:95:d1:e1:c8: 19:c1:f6:46:46:e9:e5:e8:c7:e5:0f:48:01:a4:2f:84:5f:09: 64:c1:60:f2:15:36:7d:90:75:05:4c:ae:82:72:d9:2c:6b:d2: 29:80:3e:06:4e:88:c4:69:ba:04:ce:cc:0a:a2:9b:d0:5d:7b: 93:95:0c:16:7e:d3:e2:99:17:cc:3c:ce:59:64:f2:a9:f3:ae: ac:68:2e:55:a9:cb:23:6a:33:37:98:83:ed:9c:da:ac:98:68: 0f:18:da:1d:7d:5b:8d:e4:d5:fd:10:95:db:97:09:7b:bf:3e: 20:04:0f:46:e3:69:5b:7c:b8:fe:dd:cb:21:06:da:53:07:ff: 2e:41:47:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ECkIwuQzuuGoOXaSzaLuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MjUzNzYwMWEzMTY5NzQwNDkyMmQ5NTdlNzQ0NTBmNWE5 Y2JlNzMwHhcNMjYwMTAxMTAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDc5M2RiZmNiZjBhODU2NzA4MmZmNzRmZTYwNDIwMjY5NGNiYWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5nKHOUcfETgPabVNMvN8Dp2L4rV Aqx6P7XBNLd5TP49vUZTpOwBKLBSUbvWoc4CUvhGazyRdnIoFPNfNs/sErPY3tlw 4L3lVkAaqFRKLeUdt2HxwTPo+gjfWlUmXepo0dwDfOQF/wbtQutMTpGw7LDrp2cx HK1n8ZQgO6TSE415P+gb2eVuUvI9TNUDaBnhkWfPgXuJ0fi1g04tKP1d3XNQmA8G Gjk3iPFp5OtD5EWEJUiueKVJHvSBXl534ki9fw1sI3dtAbkfO5LNx09y+ehCIzrX REqqzk1JoHXi/1A4vjoaOHGHrJcu0nuF/FllxXSQI+E3BVmZCI/hU9CeZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOR5Pb/L8KhWcIL/dP5gQgJpTLrjMB8GA1UdIwQY MBaAFBclN2AaMWl0BJItlX50RQ9anL5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yMTljYWUtMjY0ZC00NmE3LTllNjQt ZTYwNGI2MWJlMGVhLzEvNUhrOXY4dndxRlp3Z3Y5MF9tQkNBbWxNdXVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8yMTljYWUtMjY0ZC00NmE3LTllNjQtZTYwNGI2MWJlMGVh LzEvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEH9/AMA0G CSqGSIb3DQEBCwUAA4IBAQAFbBlETgbL21sx8FT23F9T7uFlC7QEHgl+p0uYJtmn ot0nwMvFsrcFo1yHDN1JFm4ulvtTHgqNZI9HvICGfM7kEBE+88xHqRqQixhCzrRl mbb225SdMpLmuihDdzSxcKAwqn0xzccubOrQT/XT0nHby3T3I2BT5k8JipXR4cgZ wfZGRunl6MflD0gBpC+EXwlkwWDyFTZ9kHUFTK6Cctksa9IpgD4GTojEaboEzswK opvQXXuTlQwWftPimRfMPM5ZZPKp866saC5VqcsjajM3mIPtnNqsmGgPGNodfVuN 5NX9EJXblwl7vz4gBA9G42lbfLj+3cshBtpTB/8uQUcr -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:51 2026 by rpki-client