This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/RcHUb_7vBCGqZc4v6_mqpbqVtgg.roa File: RcHUb_7vBCGqZc4v6_mqpbqVtgg.roa (raw, json) Hash identifier: 3AVyDWtRAwLaTj0fPOPIeQe2qLZtznTvofJILaYyw80= Subject key identifier: 45:C1:D4:6F:FE:EF:04:21:AA:65:CE:2F:EB:F9:AA:A5:BA:95:B6:08 Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Certificate serial: 019B7FF280972AD583374933FDED6FE2C25A Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/RcHUb_7vBCGqZc4v6_mqpbqVtgg.roa Signing time: Fri 02 Jan 2026 18:22:37 +0000 ROA not before: Fri 02 Jan 2026 18:22:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 5.129.192.0/18 maxlen: 24 5.129.240.0/24 maxlen: 24 5.129.241.0/24 maxlen: 24 5.129.242.0/24 maxlen: 24 5.129.243.0/24 maxlen: 24 5.129.244.0/24 maxlen: 24 5.129.245.0/24 maxlen: 24 5.129.246.0/24 maxlen: 24 5.129.247.0/24 maxlen: 24 5.129.249.0/24 maxlen: 24 5.129.250.0/24 maxlen: 24 5.129.251.0/24 maxlen: 24 5.129.252.0/24 maxlen: 24 5.129.253.0/24 maxlen: 24 5.129.254.0/24 maxlen: 24 5.129.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:80:97:2a:d5:83:37:49:33:fd:ed:6f:e2:c2:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Validity Not Before: Jan 2 18:22:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45c1d46ffeef0421aa65ce2febf9aaa5ba95b608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a9:82:4f:3b:e9:c4:45:6d:77:3f:4e:bb:22: 1f:b8:ef:93:a0:20:34:61:7b:f8:05:4e:f2:f1:97: cc:c8:33:3d:03:2e:58:63:b2:44:52:3a:9d:e1:5e: f5:77:a9:cf:09:85:e7:4d:e6:31:04:76:9c:f4:99: d6:2a:0f:c3:27:36:3f:fa:cf:fa:13:34:c7:49:d2: ef:49:80:2d:74:64:c6:1b:86:f3:7e:a6:64:dd:9a: 4b:87:13:00:d8:a5:4d:d0:dc:79:2d:dc:c6:55:a2: 4f:c4:e6:05:7d:da:5b:0f:66:a6:55:bd:c2:20:5c: 43:6c:65:84:e7:a2:de:bf:45:93:d7:6f:83:86:72: da:dc:e9:60:a6:9c:80:cc:e8:c7:9d:af:75:1d:d1: 58:af:24:cc:2b:72:00:ce:3c:41:93:a8:c3:a9:46: 57:47:52:19:23:96:c1:f3:2f:b6:7d:f3:b0:f5:17: d9:27:c1:fb:61:4d:27:50:56:7b:25:fa:62:61:90: bc:32:66:76:55:a7:fa:f6:29:a9:67:77:46:eb:5a: 22:8f:29:1f:c8:fc:9d:f0:b8:43:2e:bf:e6:81:18: 33:56:cf:a9:db:73:53:ea:66:0c:bb:48:af:46:03: 46:68:48:e2:c3:96:bd:08:fa:e0:73:c1:94:8d:8c: 6f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C1:D4:6F:FE:EF:04:21:AA:65:CE:2F:EB:F9:AA:A5:BA:95:B6:08 X509v3 Authority Key Identifier: keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/RcHUb_7vBCGqZc4v6_mqpbqVtgg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.129.192.0/18 Signature Algorithm: sha256WithRSAEncryption 4b:fe:d5:a0:3a:46:3a:54:b6:c1:af:2b:a9:e2:4d:b5:b7:45: 32:12:eb:ba:0e:96:9e:67:6b:d4:3e:8c:5a:d6:ca:1a:96:40: ac:ab:7f:5f:87:4d:35:c4:79:d1:f7:7c:32:f1:fa:c8:51:f8: 65:d8:99:82:09:e2:4a:8c:7e:cd:87:86:26:ff:5c:38:12:14: d7:b7:08:9f:57:c5:4c:1c:dd:4d:52:96:28:85:1d:fe:c0:ec: 47:aa:6d:32:66:4b:0a:6a:3f:13:d3:fa:fe:a5:78:fd:87:d1: ba:95:c8:0b:8d:b3:d1:18:9d:6b:5a:04:f3:8f:06:6a:cb:29: 85:6a:dc:03:97:ea:21:91:a6:ed:28:43:47:6f:96:3d:29:89: 8d:01:21:78:90:74:1f:5d:85:37:c2:d0:3f:17:b1:7e:eb:0e: a4:86:78:af:f1:71:31:45:31:64:9d:db:be:e0:42:3f:99:4e: f4:c9:05:61:a9:fa:f1:74:d7:c0:8d:e0:c4:d4:f5:76:51:3c: 57:33:7f:2d:95:e8:93:6f:ee:8c:8d:95:1d:b5:05:bb:42:0a: fa:e0:2b:7b:a9:ac:92:23:75:67:69:a0:d3:63:76:3f:cb:ea: fb:c4:c2:67:8e:f1:d3:74:e4:df:be:2e:29:70:3e:dc:8d:e8: 43:29:b6:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8oCXKtWDN0kz/e1v4sJaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2 ZmI1OTMwHhcNMjYwMTAyMTgyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWMxZDQ2ZmZlZWYwNDIxYWE2NWNlMmZlYmY5YWFhNWJhOTViNjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKmCTzvpxEVtdz9OuyIfuO+ToCA0 YXv4BU7y8ZfMyDM9Ay5YY7JEUjqd4V71d6nPCYXnTeYxBHac9JnWKg/DJzY/+s/6 EzTHSdLvSYAtdGTGG4bzfqZk3ZpLhxMA2KVN0Nx5LdzGVaJPxOYFfdpbD2amVb3C IFxDbGWE56Lev0WT12+DhnLa3OlgppyAzOjHna91HdFYryTMK3IAzjxBk6jDqUZX R1IZI5bB8y+2ffOw9RfZJ8H7YU0nUFZ7JfpiYZC8MmZ2Vaf69impZ3dG61oijykf yPyd8LhDLr/mgRgzVs+p23NT6mYMu0ivRgNGaEjiw5a9CPrgc8GUjYxvfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEXB1G/+7wQhqmXOL+v5qqW6lbYIMB8GA1UdIwQY MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt MjE3MGM1YzFkM2VkLzEvUmNIVWJfN3ZCQ0dxWmM0djZfbXFwYnFWdGdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGBYHAMA0G CSqGSIb3DQEBCwUAA4IBAQBL/tWgOkY6VLbBryup4k21t0UyEuu6DpaeZ2vUPoxa 1soalkCsq39fh001xHnR93wy8frIUfhl2JmCCeJKjH7Nh4Ym/1w4EhTXtwifV8VM HN1NUpYohR3+wOxHqm0yZksKaj8T0/r+pXj9h9G6lcgLjbPRGJ1rWgTzjwZqyymF atwDl+ohkabtKENHb5Y9KYmNASF4kHQfXYU3wtA/F7F+6w6khniv8XExRTFkndu+ 4EI/mU70yQVhqfrxdNfAjeDE1PV2UTxXM38tleiTb+6MjZUdtQW7Qgr64Ct7qayS I3VnaaDTY3Y/y+r7xMJnjvHTdOTfvi4pcD7cjehDKbbB -----END CERTIFICATE-----Generated at Wed Jan 21 11:15:11 2026 by rpki-client