This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/Z5lU04kxmRQjP5y9d8CXPEtSKUk.roa File: Z5lU04kxmRQjP5y9d8CXPEtSKUk.roa (raw, json) Hash identifier: J3r9yVR3CZVWf8GJhGyyvWxNOu9sWxX92RskBJqe4m8= Subject key identifier: 67:99:54:D3:89:31:99:14:23:3F:9C:BD:77:C0:97:3C:4B:52:29:49 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019B77C701D73615D50A515DCA5501221570 Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/Z5lU04kxmRQjP5y9d8CXPEtSKUk.roa Signing time: Thu 01 Jan 2026 04:18:09 +0000 ROA not before: Thu 01 Jan 2026 04:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212609 IP address blocks: 171.33.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:01:d7:36:15:d5:0a:51:5d:ca:55:01:22:15:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Jan 1 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=679954d389319914233f9cbd77c0973c4b522949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:60:4e:4d:b0:32:96:05:40:8a:da:92:df:9e: 2f:48:04:c4:f2:3d:a5:88:53:10:a5:4a:f4:0e:9e: 8e:e5:78:95:da:9f:ff:3e:70:e6:4a:95:bd:8b:93: 91:1a:23:d6:0d:d0:8e:7a:b2:23:1d:71:d1:d9:c0: 34:fe:3e:f2:70:f8:05:d2:0c:67:1e:a2:40:2d:4f: 07:e7:ea:c0:e4:0f:04:b9:92:56:6f:98:2a:fe:a8: 82:f8:a8:8b:31:31:07:ba:c8:17:cf:ef:59:af:ba: 9e:bb:51:80:a4:0f:d8:36:97:8c:28:75:dd:a2:2f: 43:8b:87:6b:cc:3c:c1:3b:a2:ea:52:58:d5:20:39: 39:25:4b:d9:9c:e8:5d:3a:ec:c1:ce:5f:cc:92:8c: 61:9b:53:83:1d:de:90:d0:dc:cb:d6:99:50:5c:85: 9b:e0:6b:46:e5:04:42:18:1d:d6:4f:07:30:07:fe: fe:b9:33:1c:2a:01:60:24:6b:67:80:a0:f3:46:df: 44:64:d6:95:5f:a8:a0:49:2a:90:a9:36:56:61:6c: 9f:93:e6:cf:dc:82:4e:84:bd:4d:8c:cb:3b:46:0d: 7c:b5:b7:2a:ea:ba:95:8a:ca:85:9d:08:1e:d3:47: 36:61:95:d5:61:0a:31:e1:b0:f9:55:3b:d0:a0:2a: 96:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:99:54:D3:89:31:99:14:23:3F:9C:BD:77:C0:97:3C:4B:52:29:49 X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/Z5lU04kxmRQjP5y9d8CXPEtSKUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.33.240.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:81:78:3d:ba:f9:d9:7f:3d:27:3c:8f:43:d0:24:38:97:9b: 7b:de:03:18:28:73:13:7c:43:45:5e:7f:ee:47:d5:ce:53:8c: 3f:f4:29:9c:62:40:0b:0a:da:67:33:a9:e6:f8:94:08:c1:26: 66:fa:f8:a5:3c:36:54:55:b6:60:8b:c0:e8:59:37:08:88:03: 3d:95:aa:1f:11:e2:5a:de:a9:34:dd:60:dd:54:e1:9e:4f:2a: ea:34:2b:00:36:0b:67:37:47:03:57:94:87:61:6c:f6:51:bc: bf:f5:51:b2:75:9c:5f:44:ec:71:26:47:00:e6:d2:4d:49:75: b0:c6:e7:f1:61:02:eb:eb:48:18:d0:41:8e:f5:a0:9e:7a:32: f8:21:9b:bf:69:64:f0:f1:71:2b:90:4a:1c:a7:52:5c:42:61: 67:29:72:68:52:f3:4e:f8:de:f1:ec:f9:98:d4:0a:5c:1e:ea: b9:d0:e6:f2:35:d5:95:14:a4:89:9a:5a:38:ad:ff:bb:9c:af: e1:6b:8a:02:cc:75:89:ef:e0:3b:b5:0c:90:f7:cf:f4:1a:78: d0:79:71:87:84:ff:55:32:7a:74:e3:46:cc:08:fd:5b:d4:9a: 89:32:7d:0d:a7:4b:29:71:9d:5a:c8:40:fa:ea:8e:fb:d6:33: bc:e9:0b:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xwHXNhXVClFdylUBIhVwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjYwMTAxMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Nzk5NTRkMzg5MzE5OTE0MjMzZjljYmQ3N2MwOTczYzRiNTIyOTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGBOTbAylgVAitqS354vSATE8j2l iFMQpUr0Dp6O5XiV2p//PnDmSpW9i5ORGiPWDdCOerIjHXHR2cA0/j7ycPgF0gxn HqJALU8H5+rA5A8EuZJWb5gq/qiC+KiLMTEHusgXz+9Zr7qeu1GApA/YNpeMKHXd oi9Di4drzDzBO6LqUljVIDk5JUvZnOhdOuzBzl/Mkoxhm1ODHd6Q0NzL1plQXIWb 4GtG5QRCGB3WTwcwB/7+uTMcKgFgJGtngKDzRt9EZNaVX6igSSqQqTZWYWyfk+bP 3IJOhL1NjMs7Rg18tbcq6rqVisqFnQge00c2YZXVYQox4bD5VTvQoCqWtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGeZVNOJMZkUIz+cvXfAlzxLUilJMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvWjVsVTA0a3htUlFqUDV5OWQ4Q1hQRXRTS1VrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqyHwMA0G CSqGSIb3DQEBCwUAA4IBAQCfgXg9uvnZfz0nPI9D0CQ4l5t73gMYKHMTfENFXn/u R9XOU4w/9CmcYkALCtpnM6nm+JQIwSZm+vilPDZUVbZgi8DoWTcIiAM9laofEeJa 3qk03WDdVOGeTyrqNCsANgtnN0cDV5SHYWz2Uby/9VGydZxfROxxJkcA5tJNSXWw xufxYQLr60gY0EGO9aCeejL4IZu/aWTw8XErkEocp1JcQmFnKXJoUvNO+N7x7PmY 1ApcHuq50ObyNdWVFKSJmlo4rf+7nK/ha4oCzHWJ7+A7tQyQ98/0GnjQeXGHhP9V Mnp040bMCP1b1JqJMn0Np0spcZ1ayED66o771jO86Quj -----END CERTIFICATE-----Generated at Mon Jan 19 18:40:43 2026 by rpki-client