This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/thh1OM4lsFyzTf1SS98D2NKoCSE.roa File: thh1OM4lsFyzTf1SS98D2NKoCSE.roa (raw, json) Hash identifier: oxxghEjHibaYZKGUuvnL5JvUvMs1tKy3he9xg0XR7pU= Subject key identifier: B6:18:75:38:CE:25:B0:5C:B3:4D:FD:52:4B:DF:03:D8:D2:A8:09:21 Certificate issuer: /CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150 Certificate serial: 019B79ED1183B57019F7AD81F4B96E5B598D Authority key identifier: E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/thh1OM4lsFyzTf1SS98D2NKoCSE.roa Signing time: Thu 01 Jan 2026 14:18:58 +0000 ROA not before: Thu 01 Jan 2026 14:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58141 IP address blocks: 5.34.232.0/21 maxlen: 21 5.34.232.0/24 maxlen: 24 5.34.233.0/24 maxlen: 24 5.34.234.0/24 maxlen: 24 5.34.235.0/24 maxlen: 24 5.34.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:11:83:b5:70:19:f7:ad:81:f4:b9:6e:5b:59:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150 Validity Not Before: Jan 1 14:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6187538ce25b05cb34dfd524bdf03d8d2a80921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:58:f5:50:4a:5c:99:e0:a6:06:c0:e5:1d:b4: 22:16:af:6a:90:be:73:f2:b1:4d:c5:35:8a:7d:73: 62:03:49:21:14:6c:f7:3c:43:b7:53:4a:48:04:5f: fd:57:38:47:80:bc:29:94:9b:7e:16:e5:85:83:24: 70:f2:df:70:e5:8a:e3:04:28:48:fa:f8:0a:ce:f2: 64:8c:4c:a8:80:9b:b7:a5:00:26:43:9a:05:76:de: be:15:fc:bd:81:d5:08:98:38:6f:81:61:28:30:2e: 98:d7:b2:ff:1f:9d:dd:94:2e:34:8a:4c:bc:d6:d5: ab:ac:60:41:29:ae:3c:b6:29:ef:6b:40:57:1f:45: ef:13:70:63:1b:cb:b6:59:b9:7f:27:3c:d1:f5:92: af:7d:51:31:3e:95:04:c6:38:d1:91:4b:42:67:1a: 81:8c:ac:4f:96:38:17:a9:8b:50:22:66:2c:9b:39: bf:4f:0a:1d:0d:a4:1a:d6:c7:53:22:84:a2:8d:16: 73:e9:44:95:b3:b4:28:3b:ce:29:5a:fe:19:6b:f8: 27:8f:e0:a9:51:cb:50:88:ac:d9:89:28:6c:a5:1a: f8:67:21:7e:5c:ce:04:24:fc:a6:98:a6:cf:f1:f6: db:81:5a:41:cd:ba:c8:be:d3:70:ff:e1:81:7a:a9: 57:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:18:75:38:CE:25:B0:5C:B3:4D:FD:52:4B:DF:03:D8:D2:A8:09:21 X509v3 Authority Key Identifier: keyid:E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/thh1OM4lsFyzTf1SS98D2NKoCSE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.232.0/21 Signature Algorithm: sha256WithRSAEncryption 26:4f:5f:a0:b7:43:c4:6f:5c:f4:b3:5f:f1:a1:85:26:6d:be: 12:6e:ef:de:66:53:a6:54:38:29:45:9b:06:46:df:48:69:93: ca:6e:a7:83:f4:03:23:9e:c6:96:60:49:de:a4:c5:6d:b0:38: 69:b3:93:5a:2e:7a:86:44:a0:3f:6f:ac:dc:d4:d6:b3:6a:1f: 40:ef:39:c2:ca:94:3c:ee:c4:82:a8:f2:c0:48:53:11:15:5d: 04:86:9b:14:5a:98:75:ba:4b:c6:f9:82:a7:bb:4a:a4:d2:21: 42:51:0b:e0:9c:de:de:eb:71:b5:26:08:fb:43:2f:95:2a:1f: cd:36:3f:de:a9:8f:ea:d5:ce:fc:67:ca:e4:fd:ff:7d:13:f5: f0:09:33:50:70:ea:b7:c5:86:65:e9:6a:9c:a1:0a:09:b3:85: 8c:13:8d:cb:77:ee:02:7d:c9:24:88:97:f0:16:2d:3f:28:90: 47:9b:2c:d4:56:df:1e:ae:9b:8d:fd:a5:e6:a6:5a:04:e7:d4: 74:04:44:8b:59:cf:27:26:6f:a2:7a:f9:16:43:f7:42:71:ec: 55:71:12:e0:05:08:0c:94:a6:cc:2d:6c:88:11:9c:0b:fc:87: fe:fe:5b:80:3b:df:3a:0e:9e:53:64:36:ab:6b:3a:12:63:ea: 14:6e:48:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57RGDtXAZ962B9LluW1mNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YTllZTc0ZjJkOTg0Yzg4YWIzYjk5YWU3MWQwYjdjN2Jh ZjgxNTAwHhcNMjYwMTAxMTQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjE4NzUzOGNlMjViMDVjYjM0ZGZkNTI0YmRmMDNkOGQyYTgwOTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1j1UEpcmeCmBsDlHbQiFq9qkL5z 8rFNxTWKfXNiA0khFGz3PEO3U0pIBF/9VzhHgLwplJt+FuWFgyRw8t9w5YrjBChI +vgKzvJkjEyogJu3pQAmQ5oFdt6+Ffy9gdUImDhvgWEoMC6Y17L/H53dlC40iky8 1tWrrGBBKa48tinva0BXH0XvE3BjG8u2Wbl/JzzR9ZKvfVExPpUExjjRkUtCZxqB jKxPljgXqYtQImYsmzm/TwodDaQa1sdTIoSijRZz6USVs7QoO84pWv4Za/gnj+Cp UctQiKzZiShspRr4ZyF+XM4EJPymmKbP8fbbgVpBzbrIvtNw/+GBeqlX9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLYYdTjOJbBcs039UkvfA9jSqAkhMB8GA1UdIwQY MBaAFOSp7nTy2YTIirO5mucdC3x7r4FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUtudWRQTFpoTWlLczdtYTV4MExmSHV2Z1ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lYWRjOTUtZGFhZi00Nzc2LTliZTgt ZDJjMGJlNDQ4NTYxLzEvdGhoMU9NNGxzRnl6VGYxU1M5OEQyTktvQ1NFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9lYWRjOTUtZGFhZi00Nzc2LTliZTgtZDJjMGJlNDQ4NTYx LzEvNUtudWRQTFpoTWlLczdtYTV4MExmSHV2Z1ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDBSLoMA0G CSqGSIb3DQEBCwUAA4IBAQAmT1+gt0PEb1z0s1/xoYUmbb4Sbu/eZlOmVDgpRZsG Rt9IaZPKbqeD9AMjnsaWYEnepMVtsDhps5NaLnqGRKA/b6zc1Nazah9A7znCypQ8 7sSCqPLASFMRFV0EhpsUWph1ukvG+YKnu0qk0iFCUQvgnN7e63G1Jgj7Qy+VKh/N Nj/eqY/q1c78Z8rk/f99E/XwCTNQcOq3xYZl6WqcoQoJs4WME43Ld+4CfckkiJfw Fi0/KJBHmyzUVt8erpuN/aXmploE59R0BESLWc8nJm+ievkWQ/dCcexVcRLgBQgM lKbMLWyIEZwL/If+/luAO986Dp5TZDarazoSY+oUbkgC -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:25 2026 by rpki-client