This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5bjZblcH9Fdae0LOFfy43Y280ig.roa File: 5bjZblcH9Fdae0LOFfy43Y280ig.roa (raw, json) Hash identifier: HGPJvwIvG5p8IwS0PIYSxnA7Hmr9xo/XcCi4aauvWFc= Subject key identifier: E5:B8:D9:6E:57:07:F4:57:5A:7B:42:CE:15:FC:B8:DD:8D:BC:D2:28 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC6754FD199B4FAFF4D9C0F6D88200 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5bjZblcH9Fdae0LOFfy43Y280ig.roa Signing time: Thu 01 Jan 2026 14:18:14 +0000 ROA not before: Thu 01 Jan 2026 14:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197963 IP address blocks: 185.229.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 03:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:67:54:fd:19:9b:4f:af:f4:d9:c0:f6:d8:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5b8d96e5707f4575a7b42ce15fcb8dd8dbcd228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:09:55:3c:8e:41:ad:c0:b6:72:a4:15:07:67: 60:84:2a:4f:2d:f2:f9:61:bd:99:53:1c:a8:30:45: 85:94:e5:7f:5e:15:a4:52:09:58:bd:5e:b5:5f:0e: 85:2a:a8:90:d8:c3:eb:52:66:08:0a:7d:fb:58:f8: 20:30:cf:17:15:f9:2c:c7:8b:df:8a:68:d4:2b:58: 35:79:79:d3:28:9f:5a:58:71:58:cd:6b:b2:a5:24: 3a:04:15:c0:1c:c9:3c:e7:eb:4f:20:2c:7a:43:25: 99:18:cf:7b:ec:61:a1:6b:40:4d:86:6d:b8:42:6f: 2f:c7:07:26:55:09:fa:f4:b2:5b:0b:5f:a8:4f:ba: fe:5e:29:6f:57:da:28:c2:d3:c8:4a:88:e7:dc:fe: f6:04:4f:b9:f1:69:55:0b:44:3b:79:52:4a:f0:1d: e9:af:17:b7:e2:72:23:5c:fd:a7:47:d8:e5:5a:34: bc:42:c3:8b:98:25:f5:91:31:d9:46:5d:95:a7:92: c2:c6:d0:76:89:4a:3f:2d:dc:11:4c:58:35:bc:03: a3:b3:d4:ed:6b:ec:3e:05:1f:f8:9a:8b:07:89:ef: c2:01:a4:13:dd:af:b7:3d:71:ba:1b:2f:75:eb:91: b7:c9:ad:9d:8c:61:19:bc:04:7b:28:76:47:9b:7c: bd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B8:D9:6E:57:07:F4:57:5A:7B:42:CE:15:FC:B8:DD:8D:BC:D2:28 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5bjZblcH9Fdae0LOFfy43Y280ig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.223.0/24 Signature Algorithm: sha256WithRSAEncryption ba:f4:aa:ac:2a:e5:2c:47:35:23:a3:87:63:a9:65:35:ac:09: da:92:c5:63:6e:b8:c2:55:20:49:51:56:8f:3e:f2:30:00:dc: 35:31:77:26:dc:9f:a7:49:57:a8:08:61:cd:e4:21:b8:3a:7a: 2f:dc:8f:bd:01:1c:d6:2c:4a:6a:55:52:de:1b:5d:04:1f:91: 27:4a:6f:f5:f2:44:da:b3:56:65:91:af:f7:33:31:40:e0:32: 07:ec:65:cc:6b:5e:66:a1:a4:96:d3:c8:9d:b4:b2:90:0e:6b: 02:54:f6:2c:43:45:70:3f:fc:52:d5:b0:66:43:6e:a6:81:02: c8:ce:fd:7e:37:7e:1d:b0:51:af:c7:24:d6:1e:ed:69:51:e8: 29:ab:58:09:db:19:27:bf:ac:7d:dc:5d:4b:0b:0c:40:e4:8b: 5b:ac:e5:3b:a1:44:70:b3:2c:4e:6a:31:d3:77:3e:ce:7e:d4: dd:0f:72:1f:4e:96:24:df:c3:87:47:0f:9b:e6:9f:71:92:c3: 71:f6:ef:c9:3a:e5:dc:26:62:15:9b:fb:85:ff:e1:6c:39:75: 9d:34:56:3b:74:e1:92:bf:af:42:d7:71:67:90:a9:80:ce:46: 58:cf:87:2d:37:26:3f:f9:29:b4:06:a3:c3:d5:44:fe:9d:40: af:be:ff:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57GdU/RmbT6/02cD22IIAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWI4ZDk2ZTU3MDdmNDU3NWE3YjQyY2UxNWZjYjhkZDhkYmNkMjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AlVPI5BrcC2cqQVB2dghCpPLfL5 Yb2ZUxyoMEWFlOV/XhWkUglYvV61Xw6FKqiQ2MPrUmYICn37WPggMM8XFfksx4vf imjUK1g1eXnTKJ9aWHFYzWuypSQ6BBXAHMk85+tPICx6QyWZGM977GGha0BNhm24 Qm8vxwcmVQn69LJbC1+oT7r+XilvV9oowtPISojn3P72BE+58WlVC0Q7eVJK8B3p rxe34nIjXP2nR9jlWjS8QsOLmCX1kTHZRl2Vp5LCxtB2iUo/LdwRTFg1vAOjs9Tt a+w+BR/4mosHie/CAaQT3a+3PXG6Gy9165G3ya2djGEZvAR7KHZHm3y9WwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOW42W5XB/RXWntCzhX8uN2NvNIoMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvNWJqWmJsY0g5RmRhZTBMT0ZmeTQzWTI4MGlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueXfMA0G CSqGSIb3DQEBCwUAA4IBAQC69KqsKuUsRzUjo4djqWU1rAnaksVjbrjCVSBJUVaP PvIwANw1MXcm3J+nSVeoCGHN5CG4Onov3I+9ARzWLEpqVVLeG10EH5EnSm/18kTa s1Zlka/3MzFA4DIH7GXMa15moaSW08idtLKQDmsCVPYsQ0VwP/xS1bBmQ26mgQLI zv1+N34dsFGvxyTWHu1pUegpq1gJ2xknv6x93F1LCwxA5ItbrOU7oURwsyxOajHT dz7OftTdD3IfTpYk38OHRw+b5p9xksNx9u/JOuXcJmIVm/uF/+FsOXWdNFY7dOGS v69C13FnkKmAzkZYz4ctNyY/+Sm0BqPD1UT+nUCvvv9t -----END CERTIFICATE-----Generated at Sun Jan 11 12:49:59 2026 by rpki-client