This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/hNYIQ5HHhINGm0B4xE-M57SIxF0.roa File: hNYIQ5HHhINGm0B4xE-M57SIxF0.roa (raw, json) Hash identifier: FqszJttjAhJJ6gXeV7wcVvhxNzpQaBx6Ggtmu08rd0M= Subject key identifier: 84:D6:08:43:91:C7:84:83:46:9B:40:78:C4:4F:8C:E7:B4:88:C4:5D Certificate issuer: /CN=e466483396afb377e5e379d1615bde0fd4d9ed47 Certificate serial: 019C0AAF5C527A1602F7860923C888CE82D8 Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/hNYIQ5HHhINGm0B4xE-M57SIxF0.roa Signing time: Thu 29 Jan 2026 16:56:30 +0000 ROA not before: Thu 29 Jan 2026 16:56:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210974 IP address blocks: 5.44.254.0/24 maxlen: 24 176.121.14.0/24 maxlen: 24 2a12:cf40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0a:af:5c:52:7a:16:02:f7:86:09:23:c8:88:ce:82:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47 Validity Not Before: Jan 29 16:56:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84d6084391c78483469b4078c44f8ce7b488c45d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d4:d1:a0:aa:23:a3:59:81:47:38:80:b1:f1: 56:b3:36:c6:0c:50:0f:f5:5b:0f:39:cf:93:e0:72: 1a:7f:8c:b6:20:e7:67:30:f7:8d:ba:b6:ca:b7:e9: 9d:54:46:71:e1:58:19:40:39:09:39:41:6e:59:b1: 04:64:60:a2:bc:78:6c:22:93:79:8f:f9:98:43:bd: 46:01:85:c1:f1:f5:f1:c0:22:bb:12:12:3a:19:72: 32:69:86:40:69:d7:6d:4f:b1:36:ed:d9:ec:a6:83: 7d:ea:12:6d:a1:f2:e1:58:4c:93:1a:81:35:49:a9: de:a6:28:08:0f:e7:7d:23:3d:1a:ea:ef:a3:b3:d4: fd:51:69:d4:77:2a:92:f8:fa:2a:96:84:e9:5e:d8: a8:d7:fc:5c:bd:a2:6b:91:f1:bd:7d:8d:48:f5:1b: d3:3b:6b:73:9c:72:70:74:37:f5:58:31:eb:c0:46: e5:dc:17:4e:1f:71:bf:6f:af:72:5d:55:2e:65:17: a4:7d:0f:97:ee:e3:6d:ee:71:1b:4c:1a:5f:58:19: 66:7e:fb:51:84:a6:be:ff:f6:31:17:ad:1f:ab:e2: 0d:3f:aa:01:c5:74:9e:90:ee:0b:dd:2c:c9:bc:98: 91:d3:63:72:32:a4:db:5c:97:05:bf:c7:f0:d6:31: 48:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D6:08:43:91:C7:84:83:46:9B:40:78:C4:4F:8C:E7:B4:88:C4:5D X509v3 Authority Key Identifier: keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/hNYIQ5HHhINGm0B4xE-M57SIxF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.254.0/24 176.121.14.0/24 IPv6: 2a12:cf40::/32 Signature Algorithm: sha256WithRSAEncryption a0:5a:fd:ac:48:33:83:54:0e:63:25:e8:2d:ae:b2:de:4a:69: dc:45:99:60:4a:68:6b:48:ca:77:f0:59:87:fb:8b:68:f1:65: 91:85:45:fe:73:bc:e9:e4:42:29:8c:3b:9e:8f:e8:1e:7d:d2: fd:5b:e7:fd:ed:20:45:85:c2:80:b8:f6:ad:b9:bc:5b:6a:77: a1:2a:a2:85:f1:78:22:ad:7d:9c:b4:ad:18:ee:e6:ac:ca:c9: a3:f7:3d:95:2f:3c:5f:11:4e:ad:da:f1:5b:a5:1c:7d:97:ab: c4:e1:12:15:5c:69:02:3e:ea:f7:0c:58:49:5b:6b:54:0b:4d: 94:f0:75:3e:3e:09:06:6b:8c:bf:67:53:61:4e:f6:71:3d:41: 2e:33:91:fe:73:3d:e5:86:ef:f1:70:10:4e:80:1e:24:d8:6b: d1:a8:7b:c0:08:bf:8d:f8:73:09:03:62:7e:5f:f9:b2:ce:e7: 51:0f:33:6b:b8:33:cd:3e:c8:08:51:4a:d9:8e:1b:0f:95:67: 09:10:76:e3:35:02:4a:5d:b2:95:0c:a4:b8:76:1c:fb:da:42: fd:6f:8c:13:78:21:e4:55:06:69:40:49:b1:96:02:3e:1c:17: 31:b5:43:c9:ba:1c:b9:9d:02:39:66:66:af:f3:a8:7b:25:19: e9:e2:f3:94 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZwKr1xSehYC94YJI8iIzoLYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NjY0ODMzOTZhZmIzNzdlNWUzNzlkMTYxNWJkZTBmZDRk OWVkNDcwHhcNMjYwMTI5MTY1NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGQ2MDg0MzkxYzc4NDgzNDY5YjQwNzhjNDRmOGNlN2I0ODhjNDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtTRoKojo1mBRziAsfFWszbGDFAP 9VsPOc+T4HIaf4y2IOdnMPeNurbKt+mdVEZx4VgZQDkJOUFuWbEEZGCivHhsIpN5 j/mYQ71GAYXB8fXxwCK7EhI6GXIyaYZAaddtT7E27dnspoN96hJtofLhWEyTGoE1 SanepigID+d9Iz0a6u+js9T9UWnUdyqS+PoqloTpXtio1/xcvaJrkfG9fY1I9RvT O2tznHJwdDf1WDHrwEbl3BdOH3G/b69yXVUuZRekfQ+X7uNt7nEbTBpfWBlmfvtR hKa+//YxF60fq+INP6oBxXSekO4L3SzJvJiR02NyMqTbXJcFv8fw1jFIZQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFITWCEORx4SDRptAeMRPjOe0iMRdMB8GA1UdIwQY MBaAFORmSDOWr7N35eN50WFb3g/U2e1HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUdaSU01YXZzM2ZsNDNuUllWdmVEOVRaN1VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xOGI1YmItOGU0MS00ZTg4LWJkYmUt MzQxYzYzNjE0MjgwLzEvaE5ZSVE1SEhoSU5HbTBCNHhFLU01N1NJeEYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8xOGI1YmItOGU0MS00ZTg4LWJkYmUtMzQxYzYzNjE0Mjgw LzEvNUdaSU01YXZzM2ZsNDNuUllWdmVEOVRaN1VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQABSz+AwQA sHkOMA0EAgACMAcDBQAqEs9AMA0GCSqGSIb3DQEBCwUAA4IBAQCgWv2sSDODVA5j JegtrrLeSmncRZlgSmhrSMp38FmH+4to8WWRhUX+c7zp5EIpjDuej+gefdL9W+f9 7SBFhcKAuPatubxbanehKqKF8XgirX2ctK0Y7uasysmj9z2VLzxfEU6t2vFbpRx9 l6vE4RIVXGkCPur3DFhJW2tUC02U8HU+PgkGa4y/Z1NhTvZxPUEuM5H+cz3lhu/x cBBOgB4k2GvRqHvACL+N+HMJA2J+X/myzudRDzNruDPNPsgIUUrZjhsPlWcJEHbj NQJKXbKVDKS4dhz72kL9b4wTeCHkVQZpQEmxlgI+HBcxtUPJuhy5nQI5Zmav86h7 JRnp4vOU -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:47 2026 by rpki-client