This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/kHScl5Ibz629FSHvZmCUNM5bVMc.roa File: kHScl5Ibz629FSHvZmCUNM5bVMc.roa (raw, json) Hash identifier: 7czMzsVRqlDw8LwOhs7NR54XvbzvMnmeYfTf1rgt4PU= Subject key identifier: 90:74:9C:97:92:1B:CF:AD:BD:15:21:EF:66:60:94:34:CE:5B:54:C7 Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c Certificate serial: 019B7A5AE0F0F20133A20EFFEC4CD69A5FAB Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/kHScl5Ibz629FSHvZmCUNM5bVMc.roa Signing time: Thu 01 Jan 2026 16:18:54 +0000 ROA not before: Thu 01 Jan 2026 16:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29484 IP address blocks: 192.35.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e0:f0:f2:01:33:a2:0e:ff:ec:4c:d6:9a:5f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c Validity Not Before: Jan 1 16:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90749c97921bcfadbd1521ef66609434ce5b54c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ca:b7:4c:31:96:7e:f3:7c:aa:67:0a:fc:e0: 59:91:6e:71:28:da:91:ce:45:07:37:79:40:5f:de: 1b:43:87:9e:b4:02:1c:6e:e8:73:7c:d4:60:f6:fd: c2:6d:c5:73:fc:e5:6e:37:82:fe:75:b9:36:5d:1f: 49:e7:0d:55:17:da:87:30:18:62:97:9f:a7:2d:7d: da:a7:93:96:cd:be:7b:dc:02:c2:64:14:23:c8:88: 6a:71:04:aa:d1:5c:9d:30:2a:a7:4e:0c:12:ee:9c: e6:9f:1c:d7:83:35:53:c6:a2:14:4d:3b:e5:8b:5f: 8b:5d:8e:5f:c5:62:b8:a3:17:40:3b:d7:68:e5:60: bf:74:20:79:d6:cb:2c:62:19:7c:79:91:3a:b9:18: 48:d7:e5:1c:e5:0e:1c:05:1d:4d:00:2d:a3:ee:7f: 64:0f:5e:c9:fc:bf:68:03:e0:1c:b0:82:bd:26:8e: 24:2e:bd:9b:4d:51:0e:7c:07:b0:d5:50:04:bf:3c: f7:79:f3:ea:48:b2:2d:40:00:09:82:8b:4e:54:ec: 73:f4:93:b3:27:bd:4f:3b:bf:50:6d:f8:5b:88:fc: 89:fe:50:82:b3:7a:cf:38:d8:63:6a:b3:86:df:68: 08:76:3c:f9:a6:56:8d:1b:54:f7:08:fc:49:cf:2c: 1a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:74:9C:97:92:1B:CF:AD:BD:15:21:EF:66:60:94:34:CE:5B:54:C7 X509v3 Authority Key Identifier: keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/kHScl5Ibz629FSHvZmCUNM5bVMc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.35.72.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:61:74:b8:97:34:d6:77:1b:e8:e0:f1:3d:6c:c3:bf:d8:60: 15:46:11:b1:c6:e0:06:9d:51:a2:31:eb:cf:22:5a:77:34:c0: 47:37:76:96:12:0a:8e:af:d8:7e:58:57:11:5e:01:6a:32:e6: fe:b1:a1:9f:e5:f9:48:f9:b6:5c:59:0c:79:7d:e6:d9:e1:b2: d7:73:43:1a:2e:42:89:20:72:e0:8e:af:ce:54:34:58:c3:38: 7c:6d:7b:ce:f9:8a:62:c0:66:64:42:3a:f0:09:b9:63:41:cf: 95:2e:29:20:33:0d:3b:00:e1:ad:be:f9:e6:85:53:f7:a1:c4: 1e:57:ac:fa:18:fc:11:b2:fb:4e:ba:ae:57:0f:79:b6:9e:17: f3:df:71:52:58:9e:0f:51:f8:9c:2f:9e:48:31:87:e4:47:18: f9:e5:c4:12:23:b6:25:c3:f2:48:6f:cc:aa:22:f9:00:88:4d: 99:f1:73:96:79:c5:70:f6:d3:c1:2c:18:35:6e:97:3a:13:33: 6e:a8:40:48:c7:1c:ad:71:19:69:8a:e3:e6:6e:7e:8a:33:85: 74:f5:61:78:ab:95:f8:20:b0:f5:56:5f:d7:50:1b:94:7e:f5: 83:11:5f:14:03:02:f8:e9:f1:aa:3c:67:3a:c9:7b:0b:71:bf: dc:de:f8:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WuDw8gEzog7/7EzWml+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1M2FkOWI0MzJiYjgzZDE0MWM0ODBkZWU3OGJjMzVmZjQ3 Y2I3MmMwHhcNMjYwMTAxMTYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDc0OWM5NzkyMWJjZmFkYmQxNTIxZWY2NjYwOTQzNGNlNWI1NGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8q3TDGWfvN8qmcK/OBZkW5xKNqR zkUHN3lAX94bQ4eetAIcbuhzfNRg9v3CbcVz/OVuN4L+dbk2XR9J5w1VF9qHMBhi l5+nLX3ap5OWzb573ALCZBQjyIhqcQSq0VydMCqnTgwS7pzmnxzXgzVTxqIUTTvl i1+LXY5fxWK4oxdAO9do5WC/dCB51sssYhl8eZE6uRhI1+Uc5Q4cBR1NAC2j7n9k D17J/L9oA+AcsIK9Jo4kLr2bTVEOfAew1VAEvzz3efPqSLItQAAJgotOVOxz9JOz J71PO79QbfhbiPyJ/lCCs3rPONhjarOG32gIdjz5plaNG1T3CPxJzywaMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJB0nJeSG8+tvRUh72ZglDTOW1THMB8GA1UdIwQY MBaAFOU62bQyu4PRQcSA3ueLw1/0fLcsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUt MDliYjUyODc1MzFiLzEva0hTY2w1SWJ6NjI5RlNIdlptQ1VOTTViVk1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUtMDliYjUyODc1MzFi LzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCNIMA0G CSqGSIb3DQEBCwUAA4IBAQBrYXS4lzTWdxvo4PE9bMO/2GAVRhGxxuAGnVGiMevP Ilp3NMBHN3aWEgqOr9h+WFcRXgFqMub+saGf5flI+bZcWQx5febZ4bLXc0MaLkKJ IHLgjq/OVDRYwzh8bXvO+YpiwGZkQjrwCbljQc+VLikgMw07AOGtvvnmhVP3ocQe V6z6GPwRsvtOuq5XD3m2nhfz33FSWJ4PUficL55IMYfkRxj55cQSI7Ylw/JIb8yq IvkAiE2Z8XOWecVw9tPBLBg1bpc6EzNuqEBIxxytcRlpiuPmbn6KM4V09WF4q5X4 ILD1Vl/XUBuUfvWDEV8UAwL46fGqPGc6yXsLcb/c3vj+ -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:39 2026 by rpki-client