This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/hD5Jp6vS9axOhOQnGtkd8d1fNdk.roa File: hD5Jp6vS9axOhOQnGtkd8d1fNdk.roa (raw, json) Hash identifier: b4EBco8NgahSA81khEE6SumwN6LoQGLW/RXHQz3fVtU= Subject key identifier: 84:3E:49:A7:AB:D2:F5:AC:4E:84:E4:27:1A:D9:1D:F1:DD:5F:35:D9 Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019B7DCA83679FCD2208BBA96F81C7339FE0 Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/hD5Jp6vS9axOhOQnGtkd8d1fNdk.roa Signing time: Fri 02 Jan 2026 08:19:42 +0000 ROA not before: Fri 02 Jan 2026 08:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61157 IP address blocks: 84.246.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:83:67:9f:cd:22:08:bb:a9:6f:81:c7:33:9f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Jan 2 08:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=843e49a7abd2f5ac4e84e4271ad91df1dd5f35d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:27:bc:5a:2a:1f:ab:13:7c:17:e7:02:e1:47: ef:09:2d:0b:1c:0d:87:64:dd:31:c6:e7:2c:2f:dd: b4:8e:a0:d2:74:b0:cc:03:43:17:23:43:df:11:85: 4d:3b:2a:53:71:6a:c3:8e:78:c8:8e:46:c6:68:81: 5b:5f:15:4b:fe:27:9b:76:a0:7e:60:73:2d:7d:cf: 8b:fe:b0:f4:4d:25:33:a0:db:aa:58:19:cf:dc:f7: cb:72:a3:d1:ce:ff:a6:6c:bf:26:30:37:0e:42:e3: 30:ee:5c:0d:c0:2a:84:08:65:6e:5e:dc:42:51:1c: f3:83:d0:c0:9f:e1:52:3b:e7:a9:16:92:c4:71:1a: d8:f2:dc:cd:a0:b3:57:80:57:09:d6:f9:34:fc:b0: 98:99:fe:ed:a7:f7:1a:6c:b3:51:ac:73:04:b4:a0: a1:47:d2:31:11:ba:e8:26:c6:34:82:9e:bb:ad:a3: 4a:c9:bd:b9:8b:0c:07:a7:12:94:2e:d1:67:c3:bc: 4c:5f:6e:7b:03:e9:22:60:29:c0:f9:57:6c:eb:46: 80:e2:93:a1:8b:48:44:b0:37:3e:98:cb:59:4e:37: 6a:e1:68:27:14:ce:ce:c3:2c:e9:bd:e7:aa:3c:9f: fc:f6:0f:dc:e1:ac:79:86:2c:a9:fa:91:33:04:f0: ab:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3E:49:A7:AB:D2:F5:AC:4E:84:E4:27:1A:D9:1D:F1:DD:5F:35:D9 X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/hD5Jp6vS9axOhOQnGtkd8d1fNdk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.246.125.0/24 Signature Algorithm: sha256WithRSAEncryption 58:0a:68:dd:00:e3:c1:de:86:c0:2f:a0:c2:24:61:e6:d2:da: b0:bd:c3:25:bd:b1:c2:cf:0b:36:07:02:1e:9e:89:e2:2e:f7: 17:17:a9:8b:0e:0c:c6:11:d6:5a:ff:62:98:ff:bb:1b:d7:af: e1:11:ef:f6:2a:80:7d:27:fa:82:7e:3a:41:4f:5e:d9:b1:bb: 7d:8c:4c:03:6a:43:fe:26:0b:27:f7:65:5d:ed:2e:57:30:92: e7:97:e6:05:f1:18:8d:4e:31:9c:ec:21:88:32:ad:d7:a6:17: 34:4c:47:f2:08:a0:93:92:58:d8:9d:a9:51:71:4d:b0:27:dc: 82:e7:8e:25:8a:eb:15:66:e8:e1:a1:85:2f:c5:17:52:1d:29: 33:b1:82:41:91:20:4d:fc:62:50:65:9f:fd:3e:86:86:da:88: ea:e1:80:f0:18:cc:94:28:0b:d8:b7:e5:0c:91:e1:1e:c2:4d: f3:7a:5e:6e:43:62:12:14:b7:c0:62:85:0c:0e:90:cb:7e:84: b5:45:7f:be:98:3b:20:04:d4:98:52:1e:4a:56:af:43:d4:a0: 84:b2:2d:27:77:02:ae:14:a6:32:c7:1d:fb:90:00:21:87:4b: a8:7a:28:26:65:b2:08:81:33:40:44:64:f0:42:bc:7b:d2:00: 40:0b:5a:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yoNnn80iCLupb4HHM5/gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwMTAyMDgxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDNlNDlhN2FiZDJmNWFjNGU4NGU0MjcxYWQ5MWRmMWRkNWYzNWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwye8WiofqxN8F+cC4UfvCS0LHA2H ZN0xxucsL920jqDSdLDMA0MXI0PfEYVNOypTcWrDjnjIjkbGaIFbXxVL/iebdqB+ YHMtfc+L/rD0TSUzoNuqWBnP3PfLcqPRzv+mbL8mMDcOQuMw7lwNwCqECGVuXtxC URzzg9DAn+FSO+epFpLEcRrY8tzNoLNXgFcJ1vk0/LCYmf7tp/cabLNRrHMEtKCh R9IxEbroJsY0gp67raNKyb25iwwHpxKULtFnw7xMX257A+kiYCnA+Vds60aA4pOh i0hEsDc+mMtZTjdq4WgnFM7OwyzpveeqPJ/89g/c4ax5hiyp+pEzBPCrOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIQ+Saer0vWsToTkJxrZHfHdXzXZMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvaEQ1SnA2dlM5YXhPaE9Rbkd0a2Q4ZDFmTmRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPZ9MA0G CSqGSIb3DQEBCwUAA4IBAQBYCmjdAOPB3obAL6DCJGHm0tqwvcMlvbHCzws2BwIe noniLvcXF6mLDgzGEdZa/2KY/7sb16/hEe/2KoB9J/qCfjpBT17Zsbt9jEwDakP+ Jgsn92Vd7S5XMJLnl+YF8RiNTjGc7CGIMq3Xphc0TEfyCKCTkljYnalRcU2wJ9yC 544liusVZujhoYUvxRdSHSkzsYJBkSBN/GJQZZ/9PoaG2ojq4YDwGMyUKAvYt+UM keEewk3zel5uQ2ISFLfAYoUMDpDLfoS1RX++mDsgBNSYUh5KVq9D1KCEsi0ndwKu FKYyxx37kAAhh0uoeigmZbIIgTNARGTwQrx70gBAC1ot -----END CERTIFICATE-----Generated at Wed Jan 21 18:20:42 2026 by rpki-client