This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/H8wE76fNQ2hhIjxk4MuG2V875Nw.roa File: H8wE76fNQ2hhIjxk4MuG2V875Nw.roa (raw, json) Hash identifier: g7ehk1525yVD63XA8pRRR3E8IFSxP1Zjdo5zOoEU1Rs= Subject key identifier: 1F:CC:04:EF:A7:CD:43:68:61:22:3C:64:E0:CB:86:D9:5F:3B:E4:DC Certificate issuer: /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab Certificate serial: 019B76EB654959D6AA9B58F28B97FDE185EB Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/H8wE76fNQ2hhIjxk4MuG2V875Nw.roa Signing time: Thu 01 Jan 2026 00:18:16 +0000 ROA not before: Thu 01 Jan 2026 00:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 5.180.188.0/22 maxlen: 24 185.185.77.0/24 maxlen: 24 185.185.78.0/24 maxlen: 24 2a0f:a0c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:65:49:59:d6:aa:9b:58:f2:8b:97:fd:e1:85:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab Validity Not Before: Jan 1 00:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fcc04efa7cd436861223c64e0cb86d95f3be4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:89:9c:ec:2c:4d:03:69:8d:22:55:ed:ba:1d: ee:7b:04:70:bd:4b:fb:ac:b6:71:43:8d:6d:82:83: 7c:cc:90:af:81:4f:d9:8d:7b:09:67:15:d4:c7:93: 98:c5:71:a1:54:f3:b8:4a:83:6f:ba:93:cc:ee:f5: 6d:53:68:d5:c0:9e:b7:fa:6a:34:05:96:81:14:eb: b9:e2:dd:5e:60:37:6d:b4:8b:c3:c4:69:74:2f:08: 2e:e4:31:b7:3d:3b:90:68:b1:7f:2b:d0:12:06:74: 46:12:c1:3c:95:3e:25:eb:15:7d:07:aa:ed:07:72: cc:12:fe:77:4b:d5:5d:7b:f3:b1:02:26:0b:a0:bb: 73:1f:75:9a:63:40:0b:68:4a:cb:cc:e0:5f:c6:fe: 3d:99:fe:7a:e7:b1:a0:7d:90:43:a8:2b:7f:ba:c4: 44:62:19:13:e6:65:3a:b7:a8:b4:0c:87:3f:10:54: af:02:02:a7:d1:2c:28:05:c9:d4:23:6b:ee:ad:74: a4:48:90:0f:2e:1e:62:b1:a1:06:49:db:74:32:8a: 35:56:87:96:39:62:bf:37:59:82:5e:9b:ec:e3:a6: b5:5f:e0:89:9d:ee:cc:1a:ef:d0:34:ab:92:7f:c4: 20:1d:98:17:63:44:12:2c:a3:09:9a:b0:9b:58:7e: 7f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CC:04:EF:A7:CD:43:68:61:22:3C:64:E0:CB:86:D9:5F:3B:E4:DC X509v3 Authority Key Identifier: keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/H8wE76fNQ2hhIjxk4MuG2V875Nw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.188.0/22 185.185.77.0-185.185.78.255 IPv6: 2a0f:a0c0::/29 Signature Algorithm: sha256WithRSAEncryption 16:8e:10:58:08:39:61:93:3d:01:58:8f:80:46:38:20:0a:ae: 6a:5e:6d:e6:4e:6b:9e:8e:df:26:10:50:08:27:6b:64:53:3d: fa:0d:f4:e1:e8:68:8f:51:56:2a:e4:ef:97:82:15:87:e6:4a: d9:45:28:bf:81:68:e1:85:6f:ac:38:fc:e4:5a:98:04:7d:84: 31:27:1e:95:4b:b2:3d:8c:ca:de:c5:56:90:3a:07:e8:8d:97: ae:50:93:e0:83:06:9a:7f:16:66:c5:00:a1:fe:92:e8:ea:ca: 8f:e7:70:6e:69:f3:07:1c:32:af:38:33:5c:9e:2f:76:67:e4: e5:fd:0a:02:a7:58:79:60:e0:c5:40:c6:f8:58:88:78:d0:74: 7c:f5:e4:6b:9b:ac:38:df:78:fe:9a:d5:d7:a6:2e:e8:37:66: 02:ee:2b:36:b8:76:d5:0b:58:91:91:b9:ee:37:a2:f4:4d:ec: 09:31:5c:25:52:10:15:cc:8b:fc:0b:3c:29:d6:97:fd:68:cc: 2e:69:12:52:f4:98:eb:73:09:30:27:67:4a:f8:3a:4a:cf:4b: 39:63:7b:bd:a8:70:8e:99:12:3f:b2:e9:53:81:f7:f1:6c:63: 55:e1:86:c2:85:11:d2:8f:d6:e5:ef:db:60:45:16:1a:c9:0b: f9:97:b4:72 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt262VJWdaqm1jyi5f94YXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliODliOGNmNDdmN2M0ODVkNjI4ZDBhMzU5YTE2YTgxNWNk MDA0YWIwHhcNMjYwMTAxMDAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmNjMDRlZmE3Y2Q0MzY4NjEyMjNjNjRlMGNiODZkOTVmM2JlNGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2omc7CxNA2mNIlXtuh3uewRwvUv7 rLZxQ41tgoN8zJCvgU/ZjXsJZxXUx5OYxXGhVPO4SoNvupPM7vVtU2jVwJ63+mo0 BZaBFOu54t1eYDdttIvDxGl0Lwgu5DG3PTuQaLF/K9ASBnRGEsE8lT4l6xV9B6rt B3LMEv53S9Vde/OxAiYLoLtzH3WaY0ALaErLzOBfxv49mf5657GgfZBDqCt/usRE YhkT5mU6t6i0DIc/EFSvAgKn0SwoBcnUI2vurXSkSJAPLh5isaEGSdt0Moo1VoeW OWK/N1mCXpvs46a1X+CJne7MGu/QNKuSf8QgHZgXY0QSLKMJmrCbWH5/aQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFB/MBO+nzUNoYSI8ZODLhtlfO+TcMB8GA1UdIwQY MBaAFJuJuM9H98SF1ijQo1mhaoFc0ASrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTRtNHowZjN4SVhXS05DaldhRnFnVnpRQktzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NTdmYzUtODAyOS00ODI4LTg1NDct NjJlMjYwMzEzZTRjLzEvSDh3RTc2Zk5RMmhoSWp4azRNdUcyVjg3NU53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS83NTdmYzUtODAyOS00ODI4LTg1NDctNjJlMjYwMzEzZTRj LzEvbTRtNHowZjN4SVhXS05DaldhRnFnVnpRQktzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQCBbS8MAwD BAC5uU0DBAC5uU4wDQQCAAIwBwMFAyoPoMAwDQYJKoZIhvcNAQELBQADggEBABaO EFgIOWGTPQFYj4BGOCAKrmpebeZOa56O3yYQUAgna2RTPfoN9OHoaI9RVirk75eC FYfmStlFKL+BaOGFb6w4/ORamAR9hDEnHpVLsj2Myt7FVpA6B+iNl65Qk+CDBpp/ FmbFAKH+kujqyo/ncG5p8wccMq84M1yeL3Zn5OX9CgKnWHlg4MVAxvhYiHjQdHz1 5GubrDjfeP6a1demLug3ZgLuKza4dtULWJGRue43ovRN7AkxXCVSEBXMi/wLPCnW l/1ozC5pElL0mOtzCTAnZ0r4OkrPSzlje72ocI6ZEj+y6VOB9/FsY1XhhsKFEdKP 1uXv22BFFhrJC/mXtHI= -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:43 2026 by rpki-client