This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/sHyk4Zbd4q-kq5gqxleHWlZkoec.roa File: sHyk4Zbd4q-kq5gqxleHWlZkoec.roa (raw, json) Hash identifier: LV0jDM2uAR9TT9u8lKr1daABhzoMzR1KjVeBgb1Eg4w= Subject key identifier: B0:7C:A4:E1:96:DD:E2:AF:A4:AB:98:2A:C6:57:87:5A:56:64:A1:E7 Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695 Certificate serial: 019B7C11AA1AE7A924CDAC9A8A45308FB6A8 Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/sHyk4Zbd4q-kq5gqxleHWlZkoec.roa Signing time: Fri 02 Jan 2026 00:18:10 +0000 ROA not before: Fri 02 Jan 2026 00:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36040 IP address blocks: 51.148.80.32/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 11:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:aa:1a:e7:a9:24:cd:ac:9a:8a:45:30:8f:b6:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695 Validity Not Before: Jan 2 00:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b07ca4e196dde2afa4ab982ac657875a5664a1e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e9:6c:80:43:bf:af:11:6d:93:bb:f7:93:55: 6a:30:77:97:2b:ee:6a:ab:ec:76:d9:cf:b7:ff:c2: 35:96:fe:3d:4d:ac:90:72:f5:a2:2e:6f:ce:80:f3: 1e:4a:e6:c4:47:a6:72:f0:67:a9:56:28:20:85:b1: 9c:f3:26:60:dd:52:f6:a8:21:72:9a:3c:18:c5:72: 0e:b9:6e:35:d8:be:56:e6:56:5d:48:68:66:62:bc: aa:0e:40:4d:9e:7a:fa:a9:e4:cc:3e:27:da:77:e2: 3f:d3:6d:24:d1:ac:8e:13:3d:61:b3:ec:fd:c2:a7: ed:85:54:41:44:a7:c3:ab:8b:70:28:81:22:0f:86: 31:76:ac:fa:ec:bb:49:03:1f:01:57:d3:50:8f:42: 83:2a:30:ec:b0:44:3b:0d:80:8c:ec:67:1b:de:08: e6:57:62:55:1f:ff:ca:6f:47:85:bd:e5:f1:0a:a2: fe:0b:a1:27:b9:cb:7e:27:2d:70:f2:23:96:9d:98: a9:2d:f2:46:c7:d8:45:a4:cc:3e:e5:2b:75:28:1e: 6e:e3:e1:4a:ff:69:53:be:73:b2:99:73:7a:8a:41: 87:54:66:cb:f1:96:74:a7:7b:ff:cf:36:3b:e4:20: cf:aa:81:63:f8:15:56:b6:d3:0b:76:40:c6:c1:e0: 5a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7C:A4:E1:96:DD:E2:AF:A4:AB:98:2A:C6:57:87:5A:56:64:A1:E7 X509v3 Authority Key Identifier: keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/sHyk4Zbd4q-kq5gqxleHWlZkoec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.148.80.32/27 Signature Algorithm: sha256WithRSAEncryption 34:c6:60:bd:0a:66:5d:a4:8e:8a:53:72:a5:ee:58:f8:0a:ae: 04:06:ec:7c:1a:44:8f:16:17:1e:33:d9:c6:29:0c:dd:42:75: 6a:a2:34:53:52:d1:10:7d:a2:5c:58:84:79:9f:3e:96:35:3e: 1f:8f:30:8e:54:55:37:de:4c:8a:33:e0:be:9b:42:88:bc:04: aa:2d:08:7e:68:cb:0f:91:97:dd:04:da:60:82:e2:3e:e0:37: 1b:ce:ce:43:7c:97:ac:f8:56:d8:8f:47:a7:2e:03:f3:f1:aa: 96:02:95:fb:9d:a5:2c:65:03:26:b4:a1:f3:5f:a0:ba:5c:ae: c9:3a:04:72:76:0a:b8:81:22:4d:ce:a5:94:2f:8a:18:99:f5: e6:0a:b1:bf:13:af:3e:ad:0e:fe:88:e0:f0:0a:0d:21:7d:40: 9a:15:38:90:4f:fc:84:9c:a6:28:89:28:86:b7:23:cf:8b:1e: d1:71:d3:20:ac:f5:eb:55:be:76:69:1a:68:a6:50:cd:1f:bc: 31:65:88:7e:9f:eb:e4:b3:de:21:cb:0c:d5:1b:e6:9c:9d:34: 18:9d:b0:50:09:33:87:92:12:61:21:d5:6c:53:ea:90:34:13: 26:c7:ce:6e:19:48:0b:d4:44:39:b5:ba:96:53:bb:fd:7f:9d: 2a:b4:1a:dd -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8Eaoa56kkzayaikUwj7aoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjQ1MDFiNzU1MDAyZDkxNDNlOGZhNjczNjgxNWU5ZjBm OTM2OTUwHhcNMjYwMTAyMDAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDdjYTRlMTk2ZGRlMmFmYTRhYjk4MmFjNjU3ODc1YTU2NjRhMWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+lsgEO/rxFtk7v3k1VqMHeXK+5q q+x22c+3/8I1lv49TayQcvWiLm/OgPMeSubER6Zy8GepVigghbGc8yZg3VL2qCFy mjwYxXIOuW412L5W5lZdSGhmYryqDkBNnnr6qeTMPifad+I/020k0ayOEz1hs+z9 wqfthVRBRKfDq4twKIEiD4Yxdqz67LtJAx8BV9NQj0KDKjDssEQ7DYCM7Gcb3gjm V2JVH//Kb0eFveXxCqL+C6Enuct+Jy1w8iOWnZipLfJGx9hFpMw+5St1KB5u4+FK /2lTvnOymXN6ikGHVGbL8ZZ0p3v/zzY75CDPqoFj+BVWttMLdkDGweBaiwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLB8pOGW3eKvpKuYKsZXh1pWZKHnMB8GA1UdIwQY MBaAFFz0UBt1UALZFD6PpnNoFenw+TaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUt NjBjZjlhYjFiMTNlLzEvc0h5azRaYmQ0cS1rcTVncXhsZUhXbFprb2VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUtNjBjZjlhYjFiMTNl LzEvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFM5RQIDAN BgkqhkiG9w0BAQsFAAOCAQEANMZgvQpmXaSOilNype5Y+AquBAbsfBpEjxYXHjPZ xikM3UJ1aqI0U1LREH2iXFiEeZ8+ljU+H48wjlRVN95MijPgvptCiLwEqi0IfmjL D5GX3QTaYILiPuA3G87OQ3yXrPhW2I9Hpy4D8/GqlgKV+52lLGUDJrSh81+gulyu yToEcnYKuIEiTc6llC+KGJn15gqxvxOvPq0O/ojg8AoNIX1AmhU4kE/8hJymKIko hrcjz4se0XHTIKz161W+dmkaaKZQzR+8MWWIfp/r5LPeIcsM1RvmnJ00GJ2wUAkz h5ISYSHVbFPqkDQTJsfObhlIC9REObW6llO7/X+dKrQa3Q== -----END CERTIFICATE-----Generated at Tue Jan 20 14:14:18 2026 by rpki-client