This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/5HKPTePj8fMVOPruXg3CGjpYfBI.roa File: 5HKPTePj8fMVOPruXg3CGjpYfBI.roa (raw, json) Hash identifier: wJlvHXRl4ES/+26PUI+1bZ8cgmanlQgp2ib+ElfT+Hk= Subject key identifier: E4:72:8F:4D:E3:E3:F1:F3:15:38:FA:EE:5E:0D:C2:1A:3A:58:7C:12 Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354 Certificate serial: 019B7FF1D7CA4B87B4BF57ADC559788CB346 Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/5HKPTePj8fMVOPruXg3CGjpYfBI.roa Signing time: Fri 02 Jan 2026 18:21:54 +0000 ROA not before: Fri 02 Jan 2026 18:21:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 81.92.80.0/24 maxlen: 24 81.92.81.0/24 maxlen: 24 81.92.84.0/24 maxlen: 24 81.92.85.0/24 maxlen: 24 81.92.86.0/24 maxlen: 24 81.92.87.0/24 maxlen: 24 81.92.88.0/24 maxlen: 24 81.92.89.0/24 maxlen: 24 81.92.90.0/24 maxlen: 24 81.92.91.0/24 maxlen: 24 81.92.94.0/24 maxlen: 24 81.92.95.0/24 maxlen: 24 152.89.172.0/24 maxlen: 24 152.89.174.0/24 maxlen: 24 185.65.56.0/24 maxlen: 24 185.65.58.0/24 maxlen: 24 2a01:c8::/48 maxlen: 48 2a01:c8:1::/48 maxlen: 48 2a01:c8:2::/48 maxlen: 48 2a01:c8:100::/48 maxlen: 48 2a01:c8:101::/48 maxlen: 48 2a01:c8:200::/48 maxlen: 48 2a01:c8:300::/48 maxlen: 48 2a01:c8:ff00::/48 maxlen: 48 2a09:35c0:102::/48 maxlen: 48 2a09:35c0:203::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:d7:ca:4b:87:b4:bf:57:ad:c5:59:78:8c:b3:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354 Validity Not Before: Jan 2 18:21:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4728f4de3e3f1f31538faee5e0dc21a3a587c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fa:13:a7:1f:f6:34:99:26:45:f6:1b:6d:25: d4:20:ae:1d:aa:33:8d:19:dc:52:d8:a0:3a:29:ce: 5f:96:7b:79:a1:e5:6c:b9:0b:f1:b7:c2:cd:ea:88: dc:99:b1:a9:3f:0c:35:58:c8:d2:ff:00:29:f0:14: 4e:05:bc:1a:1a:e3:a5:d3:7d:b4:47:6a:78:3f:6e: 0e:aa:13:88:40:53:30:31:0f:78:81:66:fb:1c:2b: 8d:7b:55:a9:d8:36:dd:d0:b3:69:3a:bf:2c:04:60: f0:6e:22:a9:0c:1e:f2:58:19:34:77:db:13:52:35: 20:52:48:a2:01:e3:a3:3d:6c:95:0a:b0:f8:38:fc: c0:b5:91:58:b6:28:44:05:28:7c:d1:1c:dd:ac:b8: 3f:c5:49:42:00:a5:e5:c8:0a:dc:e6:a2:a1:f7:78: a3:21:85:b9:b2:ef:95:a1:c7:b7:1f:b1:2e:5d:cb: ff:26:8c:d1:e4:c3:ea:9d:76:d5:cf:52:fb:47:c5: f5:7f:27:d1:23:6b:ed:43:e4:ff:da:b4:90:ad:bf: 9b:ca:42:94:5f:9f:ba:e4:e9:d9:db:bf:a8:1c:f2: 5b:60:f2:4b:be:05:83:58:0f:95:1c:64:61:00:ed: 8b:7f:1a:e6:5c:37:ec:7b:33:85:ac:7f:12:70:e4: 7b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:72:8F:4D:E3:E3:F1:F3:15:38:FA:EE:5E:0D:C2:1A:3A:58:7C:12 X509v3 Authority Key Identifier: keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/5HKPTePj8fMVOPruXg3CGjpYfBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.92.80.0/23 81.92.84.0-81.92.91.255 81.92.94.0/23 152.89.172.0/24 152.89.174.0/24 185.65.56.0/24 185.65.58.0/24 IPv6: 2a01:c8::-2a01:c8:2:ffff:ffff:ffff:ffff:ffff 2a01:c8:100::/47 2a01:c8:200::/48 2a01:c8:300::/48 2a01:c8:ff00::/48 2a09:35c0:102::/48 2a09:35c0:203::/48 Signature Algorithm: sha256WithRSAEncryption 0f:b2:40:0c:b0:d7:69:d8:10:eb:b0:87:ed:1f:7d:a3:a9:92: 7b:61:1c:11:a1:c0:1f:4e:33:77:42:d2:53:5f:ae:a8:eb:c1: 6e:65:f6:47:e5:4a:f0:7c:37:8c:3d:8e:2c:04:1f:51:12:1e: 49:7b:06:34:85:04:c8:3e:f1:78:31:f9:a8:fe:6c:d9:6a:ee: 20:54:49:55:7c:4b:50:28:7b:cb:f2:80:cf:d5:1c:46:45:37: 14:a7:70:83:27:db:54:ec:ec:7e:85:8a:be:52:14:76:28:76: 05:f2:e1:4f:7f:bb:65:46:00:46:d8:10:69:82:c8:b3:dc:3a: 2e:43:a1:98:c6:ab:b9:e6:f0:95:c2:cf:27:81:c3:64:50:0a: 64:1d:20:a6:d9:5f:81:e8:b3:35:e8:b1:8c:3e:fb:ae:2e:cb: 9a:a0:54:f9:96:ae:9f:47:52:60:85:df:4b:14:ce:a8:b5:2b: d1:36:1b:0c:a8:33:5f:75:72:d5:14:be:7c:fb:7e:19:ac:3c: b3:4e:7c:ee:f5:5f:0e:6d:79:73:eb:e1:c3:97:a4:ad:7d:7f: f0:c4:a6:5f:fe:89:4d:4b:98:98:8f:4d:65:b7:dd:44:af:e1: b5:ed:6f:43:e6:e1:a3:15:24:b2:5b:b5:ce:7a:6c:e7:fa:33: bb:80:0a:f0 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgISAZt/8dfKS4e0v1etxVl4jLNGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMDUxYjBlMmNlOWE0YzllNjEyMWU5ODNkMTY1ZmVhYjg3 ZWMzNTQwHhcNMjYwMTAyMTgyMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDcyOGY0ZGUzZTNmMWYzMTUzOGZhZWU1ZTBkYzIxYTNhNTg3YzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvoTpx/2NJkmRfYbbSXUIK4dqjON GdxS2KA6Kc5flnt5oeVsuQvxt8LN6ojcmbGpPww1WMjS/wAp8BROBbwaGuOl0320 R2p4P24OqhOIQFMwMQ94gWb7HCuNe1Wp2Dbd0LNpOr8sBGDwbiKpDB7yWBk0d9sT UjUgUkiiAeOjPWyVCrD4OPzAtZFYtihEBSh80RzdrLg/xUlCAKXlyArc5qKh93ij IYW5su+Voce3H7EuXcv/JozR5MPqnXbVz1L7R8X1fyfRI2vtQ+T/2rSQrb+bykKU X5+65OnZ27+oHPJbYPJLvgWDWA+VHGRhAO2LfxrmXDfsezOFrH8ScOR7JwIDAQAB o4ICiDCCAoQwHQYDVR0OBBYEFORyj03j4/HzFTj67l4Nwho6WHwSMB8GA1UdIwQY MBaAFHEFGw4s6aTJ5hIemD0WX+q4fsNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAt NzM2YWI4MzQ5NGFjLzEvNUhLUFRlUGo4Zk1WT1BydVhnM0NHanBZZkJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAtNzM2YWI4MzQ5NGFj LzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijA4BAIAATAyAwQBUVxQ MAwDBAJRXFQDBAJRXFgDBAFRXF4DBACYWawDBACYWa4DBAC5QTgDBAC5QTowTgQC AAIwSDAQAwUDKgEAyAMHACoBAMgAAgMHASoBAMgBAAMHACoBAMgCAAMHACoBAMgD AAMHACoBAMj/AAMHACoJNcABAgMHACoJNcACAzANBgkqhkiG9w0BAQsFAAOCAQEA D7JADLDXadgQ67CH7R99o6mSe2EcEaHAH04zd0LSU1+uqOvBbmX2R+VK8Hw3jD2O LAQfURIeSXsGNIUEyD7xeDH5qP5s2WruIFRJVXxLUCh7y/KAz9UcRkU3FKdwgyfb VOzsfoWKvlIUdih2BfLhT3+7ZUYARtgQaYLIs9w6LkOhmMaruebwlcLPJ4HDZFAK ZB0gptlfgeizNeixjD77ri7LmqBU+Zaun0dSYIXfSxTOqLUr0TYbDKgzX3Vy1RS+ fPt+Gaw8s0587vVfDm15c+vhw5ekrX1/8MSmX/6JTUuYmI9NZbfdRK/hte1vQ+bh oxUkslu1znps5/ozu4AK8A== -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:51 2026 by rpki-client