This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ssS-QWEom9yecjEQGPQB5SmTZYA.roa File: ssS-QWEom9yecjEQGPQB5SmTZYA.roa (raw, json) Hash identifier: CWYZhDGZlvTmXNlnKyWVUcuy+A4jZqMUNY2zHztUTXE= Subject key identifier: B2:C4:BE:41:61:28:9B:DC:9E:72:31:10:18:F4:01:E5:29:93:65:80 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC7035C94F406703168F24EEC590D8 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ssS-QWEom9yecjEQGPQB5SmTZYA.roa Signing time: Thu 01 Jan 2026 14:18:16 +0000 ROA not before: Thu 01 Jan 2026 14:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212477 IP address blocks: 5.181.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:70:35:c9:4f:40:67:03:16:8f:24:ee:c5:90:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2c4be4161289bdc9e72311018f401e529936580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:39:7d:c5:46:f5:ee:4b:04:41:8a:e2:a2:d7: ac:d0:7c:3c:b2:8b:48:bb:f5:1c:f1:4f:59:80:b8: 62:d3:cd:7e:ea:a1:4a:54:32:be:5c:d3:4b:58:71: c9:c9:2c:12:b4:7f:7a:cd:05:66:4b:d3:7a:59:e1: bb:e9:d7:c3:81:fd:48:03:e8:d5:ea:bd:5f:b5:12: 53:1c:5c:5f:7e:8d:c8:52:25:87:ee:bf:3a:96:b3: 2a:a6:34:42:4e:b6:ee:fe:35:58:3d:72:13:18:f5: 4d:18:e8:82:d0:0c:e2:a9:18:cd:a0:20:dc:b1:87: fa:06:c3:6a:70:de:0b:d1:b8:51:f5:d3:e3:3e:6d: a2:e0:aa:3c:6c:2b:0c:06:a8:69:6f:7a:17:a3:1b: 11:be:f6:ca:b0:62:98:6b:08:07:2b:27:8e:22:66: 08:42:93:44:be:81:ab:42:4a:b9:ce:3c:dd:37:dd: 10:94:6f:f9:4c:89:dd:34:93:32:71:e9:61:5e:11: e3:06:11:25:96:38:24:d7:76:f3:fe:73:56:66:cf: e7:d8:79:95:ea:9b:6f:45:66:db:84:10:a7:9c:b5: de:d7:2d:1c:f8:a7:ad:ec:af:3d:6c:fc:41:16:30: de:03:b0:9c:57:df:d5:91:21:20:bf:62:5d:76:ac: bc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C4:BE:41:61:28:9B:DC:9E:72:31:10:18:F4:01:E5:29:93:65:80 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ssS-QWEom9yecjEQGPQB5SmTZYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.180.0/24 Signature Algorithm: sha256WithRSAEncryption 84:5e:6f:6d:2a:ef:d9:80:11:ef:78:d3:55:c5:65:b1:26:bf: 42:a0:a8:16:fb:c5:1a:f5:a5:fe:f9:9c:d0:c7:45:c4:7a:ed: b2:8c:31:05:83:f7:df:d2:86:4f:5f:67:6d:dc:f9:3e:ea:e5: 1c:01:a9:d8:c1:8f:e6:7f:47:f8:12:86:3f:2e:66:3d:e4:2d: 83:c9:f1:4f:8f:08:59:fb:5d:39:88:54:25:fe:7b:6e:13:87: 47:6c:00:fc:9a:79:a0:e1:cd:96:9f:f4:ae:fe:76:a1:bf:04: a9:2f:3f:8a:b3:20:f3:bf:20:09:e8:9c:30:d2:3c:ff:9b:76: 7f:28:f7:bd:7b:c1:69:a2:25:28:01:62:82:dc:b2:d4:be:bb: 73:a6:83:a5:65:d3:0a:61:b0:5a:d0:eb:57:39:3e:d5:7d:c5: d6:d8:41:fb:2f:1b:31:c8:68:40:4b:02:db:11:f6:a5:01:41: 58:ea:3b:4d:b8:a5:01:15:db:28:ec:1d:7f:c1:09:18:ca:7c: 2d:b0:96:35:e9:8e:5f:46:df:98:12:f6:e0:63:15:45:38:75: 8b:4f:12:74:72:e6:9f:75:81:74:5d:ca:25:f7:bf:f5:f6:06: 2e:1b:1f:06:49:02:46:b5:58:f0:4f:6f:52:71:a4:13:ef:07: 87:f8:bb:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57HA1yU9AZwMWjyTuxZDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmM0YmU0MTYxMjg5YmRjOWU3MjMxMTAxOGY0MDFlNTI5OTM2NTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zl9xUb17ksEQYriotes0Hw8sotI u/Uc8U9ZgLhi081+6qFKVDK+XNNLWHHJySwStH96zQVmS9N6WeG76dfDgf1IA+jV 6r1ftRJTHFxffo3IUiWH7r86lrMqpjRCTrbu/jVYPXITGPVNGOiC0AziqRjNoCDc sYf6BsNqcN4L0bhR9dPjPm2i4Ko8bCsMBqhpb3oXoxsRvvbKsGKYawgHKyeOImYI QpNEvoGrQkq5zjzdN90QlG/5TIndNJMycelhXhHjBhElljgk13bz/nNWZs/n2HmV 6ptvRWbbhBCnnLXe1y0c+Ket7K89bPxBFjDeA7CcV9/VkSEgv2Jddqy87wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLLEvkFhKJvcnnIxEBj0AeUpk2WAMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvc3NTLVFXRW9tOXllY2pFUUdQUUI1U21UWllBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbW0MA0G CSqGSIb3DQEBCwUAA4IBAQCEXm9tKu/ZgBHveNNVxWWxJr9CoKgW+8Ua9aX++ZzQ x0XEeu2yjDEFg/ff0oZPX2dt3Pk+6uUcAanYwY/mf0f4EoY/LmY95C2DyfFPjwhZ +105iFQl/ntuE4dHbAD8mnmg4c2Wn/Su/nahvwSpLz+KsyDzvyAJ6Jww0jz/m3Z/ KPe9e8FpoiUoAWKC3LLUvrtzpoOlZdMKYbBa0OtXOT7VfcXW2EH7LxsxyGhASwLb EfalAUFY6jtNuKUBFdso7B1/wQkYynwtsJY16Y5fRt+YEvbgYxVFOHWLTxJ0cuaf dYF0Xcol97/19gYuGx8GSQJGtVjwT29ScaQT7weH+Lv4 -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:44 2026 by rpki-client