This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/h5VWwLm5sJPb8Mq6egOvSDm1ZbE.roa File: h5VWwLm5sJPb8Mq6egOvSDm1ZbE.roa (raw, json) Hash identifier: lIFIr7IW4fJHhWCQmREyv0ZLQpwRC/atkqoeOTTCLNA= Subject key identifier: 87:95:56:C0:B9:B9:B0:93:DB:F0:CA:BA:7A:03:AF:48:39:B5:65:B1 Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19 Certificate serial: 019B7C136265DCA9465F3EF2ADE1BB6F1346 Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/h5VWwLm5sJPb8Mq6egOvSDm1ZbE.roa Signing time: Fri 02 Jan 2026 00:20:03 +0000 ROA not before: Fri 02 Jan 2026 00:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31545 IP address blocks: 193.16.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:62:65:dc:a9:46:5f:3e:f2:ad:e1:bb:6f:13:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19 Validity Not Before: Jan 2 00:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=879556c0b9b9b093dbf0caba7a03af4839b565b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:47:2c:c9:88:24:d5:38:e1:af:51:6c:4f: 2d:ed:80:7d:05:ba:36:e9:a0:8f:fa:fa:2e:38:be: 3c:de:fc:a1:d7:2a:fc:ba:5e:be:a0:33:84:8a:84: 39:5b:a9:b4:76:1b:8b:43:8a:28:b3:95:9e:df:79: d4:ce:12:df:56:47:a8:3b:1e:b6:8a:7b:d5:5b:aa: 22:55:d1:0c:b9:d0:a4:d7:3d:f0:9c:e4:e5:73:11: 3f:fb:b3:d6:53:38:99:0d:2f:8a:a6:bd:ef:f2:f4: 63:d6:49:be:4e:a7:e3:6f:4c:2c:26:4a:8d:8e:93: 12:78:05:e3:b4:ff:48:8c:e8:5b:06:20:90:cd:5f: 45:3c:40:92:be:44:ff:3b:1b:d8:e0:36:ad:0e:6b: 93:25:66:66:11:93:40:d4:8a:9a:41:d1:c7:7d:64: d4:00:b5:fd:0f:9f:f7:79:ce:c0:97:5a:1e:9a:f8: 6d:32:ad:af:18:31:4b:08:3d:f8:e9:82:66:bb:a8: a4:32:93:2d:9d:5b:9f:76:d0:19:c2:a3:7f:34:04: 6c:9e:3d:0e:db:52:38:11:1b:50:c6:23:43:0c:c9: dd:aa:9f:79:43:27:e0:f3:40:67:4b:1b:90:bc:dc: de:c3:75:44:21:2d:fb:45:ef:35:2b:bd:94:b1:05: 1b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:95:56:C0:B9:B9:B0:93:DB:F0:CA:BA:7A:03:AF:48:39:B5:65:B1 X509v3 Authority Key Identifier: keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/h5VWwLm5sJPb8Mq6egOvSDm1ZbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.16.109.0/24 Signature Algorithm: sha256WithRSAEncryption 04:20:c7:87:c9:e5:d6:5f:6a:b7:0d:f3:c3:56:ce:52:76:00: 3c:5d:9d:2e:f6:ab:f5:79:05:8d:f5:96:9f:c0:da:ba:b0:14: 49:67:d1:7a:25:7d:78:d9:49:51:b2:5d:19:59:3e:5c:88:3b: c6:e3:20:f2:81:20:da:83:43:f3:d2:3a:bf:94:18:0a:a4:e8: 24:75:bb:ee:45:e2:85:14:c2:38:52:7d:52:14:21:73:2f:24: 6c:aa:31:61:97:ba:67:50:16:0c:9a:de:a0:37:54:4b:ff:68: 99:07:20:53:13:95:fd:04:21:cb:75:ea:03:a5:05:ec:a3:19: bc:b7:2a:db:47:4b:b5:d9:3c:e8:ec:d1:e1:9b:40:8e:85:7e: cd:1a:d2:6d:47:ce:3d:3b:c8:ff:38:1f:f7:e1:ad:bd:3a:df: 73:7e:75:3e:2a:59:f1:ba:92:a7:ed:9b:3c:cb:90:b2:ff:60: d5:15:e9:d8:3b:04:ae:80:79:5c:6e:34:12:25:6c:5f:92:50: 13:e5:73:4d:98:9c:dc:e8:14:b0:05:71:af:0b:f4:04:8b:c8: f6:07:95:8b:e4:db:f3:2f:f1:dc:c4:83:64:60:94:6a:70:0b: f5:44:e0:a8:5f:91:32:65:b4:76:d3:a1:0b:0b:f0:3b:92:81: 48:fb:6a:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E2Jl3KlGXz7yreG7bxNGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMWMxZTA2MjQwMzliZDFmMWE5NDZjYjUxM2M5MzM4NmZh YjZiMTkwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Nzk1NTZjMGI5YjliMDkzZGJmMGNhYmE3YTAzYWY0ODM5YjU2NWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzpHLMmIJNU44a9RbE8t7YB9Bbo2 6aCP+vouOL483vyh1yr8ul6+oDOEioQ5W6m0dhuLQ4oos5We33nUzhLfVkeoOx62 invVW6oiVdEMudCk1z3wnOTlcxE/+7PWUziZDS+Kpr3v8vRj1km+Tqfjb0wsJkqN jpMSeAXjtP9IjOhbBiCQzV9FPECSvkT/OxvY4DatDmuTJWZmEZNA1IqaQdHHfWTU ALX9D5/3ec7Al1oemvhtMq2vGDFLCD346YJmu6ikMpMtnVufdtAZwqN/NARsnj0O 21I4ERtQxiNDDMndqp95Qyfg80BnSxuQvNzew3VEIS37Re81K72UsQUbRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIeVVsC5ubCT2/DKunoDr0g5tWWxMB8GA1UdIwQY MBaAFFscHgYkA5vR8alGy1E8kzhvq2sZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xODQwM2QtNzc5Mi00ZjlkLTkzNjgt YmZiNmNmMGYwODM1LzEvaDVWV3dMbTVzSlBiOE1xNmVnT3ZTRG0xWmJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xODQwM2QtNzc5Mi00ZjlkLTkzNjgtYmZiNmNmMGYwODM1 LzEvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRBtMA0G CSqGSIb3DQEBCwUAA4IBAQAEIMeHyeXWX2q3DfPDVs5SdgA8XZ0u9qv1eQWN9Zaf wNq6sBRJZ9F6JX142UlRsl0ZWT5ciDvG4yDygSDag0Pz0jq/lBgKpOgkdbvuReKF FMI4Un1SFCFzLyRsqjFhl7pnUBYMmt6gN1RL/2iZByBTE5X9BCHLdeoDpQXsoxm8 tyrbR0u12Tzo7NHhm0COhX7NGtJtR849O8j/OB/34a29Ot9zfnU+KlnxupKn7Zs8 y5Cy/2DVFenYOwSugHlcbjQSJWxfklAT5XNNmJzc6BSwBXGvC/QEi8j2B5WL5Nvz L/HcxINkYJRqcAv1ROCoX5EyZbR206ELC/A7koFI+2r8 -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:06 2026 by rpki-client