This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/hdC4Kn8NS6Sap65oEbc6C4-8rkI.roa File: hdC4Kn8NS6Sap65oEbc6C4-8rkI.roa (raw, json) Hash identifier: shJCpeavm5lRb/pX8j4NjPSwHatzb8Ath7/zQC9o4/4= Subject key identifier: 85:D0:B8:2A:7F:0D:4B:A4:9A:A7:AE:68:11:B7:3A:0B:8F:BC:AE:42 Certificate issuer: /CN=44a88637498b188fc0bceae0bbf0681761a49d4b Certificate serial: 019B7B3650F2B2DE59486CC0223E48EEFFE9 Authority key identifier: 44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/hdC4Kn8NS6Sap65oEbc6C4-8rkI.roa Signing time: Thu 01 Jan 2026 20:18:35 +0000 ROA not before: Thu 01 Jan 2026 20:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41877 IP address blocks: 5.133.160.0/24 maxlen: 24 5.133.161.0/24 maxlen: 24 80.92.176.0/20 maxlen: 20 80.92.177.0/24 maxlen: 24 80.92.183.0/24 maxlen: 24 80.92.184.0/24 maxlen: 24 80.92.186.0/24 maxlen: 24 80.92.187.0/24 maxlen: 24 80.92.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:50:f2:b2:de:59:48:6c:c0:22:3e:48:ee:ff:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44a88637498b188fc0bceae0bbf0681761a49d4b Validity Not Before: Jan 1 20:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85d0b82a7f0d4ba49aa7ae6811b73a0b8fbcae42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b8:04:fa:59:76:dc:92:84:bc:6a:6e:46:cb: 4b:52:84:28:d4:84:99:93:cb:00:b8:b4:e9:62:5f: d1:47:2e:f4:04:49:6a:41:0e:2f:e7:b2:82:b6:36: 32:c0:b5:3f:88:8e:c1:fa:75:a8:55:48:0d:7f:2d: 65:64:77:b7:be:2a:7d:0b:5e:63:2e:9e:cd:66:94: cb:c2:82:a9:67:d1:e0:39:65:78:ab:ea:52:51:db: 9a:72:27:d4:1f:a9:37:16:4a:0a:74:81:64:9a:71: 47:ef:66:f7:f8:1a:c4:d7:f1:23:bd:90:60:06:54: 23:2d:91:66:a6:0b:26:8e:15:4b:a8:78:b4:7b:ad: ea:45:c3:17:07:0c:2c:49:63:4e:d3:99:ed:46:d3: 51:30:0b:95:41:e4:28:99:e3:29:12:2c:cc:dd:fa: c4:94:5c:40:23:00:51:d6:2a:a9:4a:7e:8b:7c:0f: 55:d6:e7:7f:00:00:ba:2d:cf:fd:dd:cf:68:48:5d: 6e:03:b0:55:ae:89:ca:1f:a9:61:ac:20:29:71:b6: b2:ae:ee:bf:e3:78:cd:18:fb:10:d2:77:a1:4f:6e: 12:81:d5:21:0d:e0:52:4d:2f:e1:13:ae:68:21:fa: 84:f2:80:de:a0:3e:a2:a8:5c:41:37:39:8a:45:ca: d3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D0:B8:2A:7F:0D:4B:A4:9A:A7:AE:68:11:B7:3A:0B:8F:BC:AE:42 X509v3 Authority Key Identifier: keyid:44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/hdC4Kn8NS6Sap65oEbc6C4-8rkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.160.0/23 80.92.176.0/20 Signature Algorithm: sha256WithRSAEncryption 11:be:e2:16:68:5f:9c:76:50:63:ad:69:c2:22:f7:38:09:e7: b6:ea:c2:26:ba:14:42:26:48:d9:04:ab:84:38:25:8d:b9:60: d5:7a:b8:cb:07:02:84:9f:1e:f7:e7:d4:31:37:64:55:17:f5: 8e:38:7a:03:da:9c:8b:85:a1:9d:75:f4:fe:8b:b7:d5:eb:ca: 5e:69:17:91:87:d3:b9:27:68:12:ab:e3:93:39:98:d2:26:25: 30:7a:ac:e9:5f:64:27:3c:2d:1a:d4:77:a2:9a:dd:3f:57:aa: 45:9d:fc:67:2d:83:ce:1e:76:a0:b3:2f:5d:cd:b7:7d:ca:e5: 63:f3:3f:8a:70:fe:51:36:3c:e3:4a:08:12:c0:42:8a:e0:f0: 8e:c9:b7:19:c7:3b:c0:ef:ce:ae:c9:9d:c2:4f:d3:68:ed:00: 37:70:d0:e0:04:73:59:09:ce:5d:99:02:bb:2a:94:cd:4c:b5: 7c:54:64:1c:39:87:2f:a9:c2:b8:56:d5:26:ba:91:2b:0b:53: e6:36:65:02:cf:ad:fe:ad:a9:bf:0f:ae:28:5c:a9:81:09:de: 54:5f:5f:ba:32:21:22:30:69:0e:2f:7c:b1:64:48:27:a1:d7: 0b:57:87:cd:00:f8:96:f9:2e:3e:8a:bb:19:20:d7:e3:5e:d7: a4:c0:9a:b8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NlDyst5ZSGzAIj5I7v/pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YTg4NjM3NDk4YjE4OGZjMGJjZWFlMGJiZjA2ODE3NjFh NDlkNGIwHhcNMjYwMTAxMjAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWQwYjgyYTdmMGQ0YmE0OWFhN2FlNjgxMWI3M2EwYjhmYmNhZTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrgE+ll23JKEvGpuRstLUoQo1ISZ k8sAuLTpYl/RRy70BElqQQ4v57KCtjYywLU/iI7B+nWoVUgNfy1lZHe3vip9C15j Lp7NZpTLwoKpZ9HgOWV4q+pSUduacifUH6k3FkoKdIFkmnFH72b3+BrE1/EjvZBg BlQjLZFmpgsmjhVLqHi0e63qRcMXBwwsSWNO05ntRtNRMAuVQeQomeMpEizM3frE lFxAIwBR1iqpSn6LfA9V1ud/AAC6Lc/93c9oSF1uA7BVronKH6lhrCApcbayru6/ 43jNGPsQ0nehT24SgdUhDeBSTS/hE65oIfqE8oDeoD6iqFxBNzmKRcrTGQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIXQuCp/DUukmqeuaBG3OguPvK5CMB8GA1UdIwQY MBaAFESohjdJixiPwLzq4LvwaBdhpJ1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUktpR04wbUxHSV9Bdk9yZ3VfQm9GMkdrblVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS81YmU4MGItMzM4Mi00NDQ4LWExY2Mt ZGNhMDQyNzBiOWQ1LzEvaGRDNEtuOE5TNlNhcDY1b0ViYzZDNC04cmtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS81YmU4MGItMzM4Mi00NDQ4LWExY2MtZGNhMDQyNzBiOWQ1 LzEvUktpR04wbUxHSV9Bdk9yZ3VfQm9GMkdrblVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBBYWgAwQE UFywMA0GCSqGSIb3DQEBCwUAA4IBAQARvuIWaF+cdlBjrWnCIvc4Cee26sImuhRC JkjZBKuEOCWNuWDVerjLBwKEnx7359QxN2RVF/WOOHoD2pyLhaGddfT+i7fV68pe aReRh9O5J2gSq+OTOZjSJiUweqzpX2QnPC0a1Heimt0/V6pFnfxnLYPOHnagsy9d zbd9yuVj8z+KcP5RNjzjSggSwEKK4PCOybcZxzvA786uyZ3CT9No7QA3cNDgBHNZ Cc5dmQK7KpTNTLV8VGQcOYcvqcK4VtUmupErC1PmNmUCz63+ram/D64oXKmBCd5U X1+6MiEiMGkOL3yxZEgnodcLV4fNAPiW+S4+irsZINfjXtekwJq4 -----END CERTIFICATE-----Generated at Wed Jan 21 08:18:42 2026 by rpki-client