This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/hB5bKIzKCvcbl8ogbaBmur_bdIs.roa File: hB5bKIzKCvcbl8ogbaBmur_bdIs.roa (raw, json) Hash identifier: Uyup6v2aW5b2Hld6LVCK6C+h9+vlfo2ENPD8ezX9qzQ= Subject key identifier: 84:1E:5B:28:8C:CA:0A:F7:1B:97:CA:20:6D:A0:66:BA:BF:DB:74:8B Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf Certificate serial: 019B79111CFE7B0CAFAEFB7E736AF5B8B18D Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/hB5bKIzKCvcbl8ogbaBmur_bdIs.roa Signing time: Thu 01 Jan 2026 10:18:43 +0000 ROA not before: Thu 01 Jan 2026 10:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 5.61.113.0/24 maxlen: 24 5.61.115.0/24 maxlen: 24 5.61.117.0/24 maxlen: 24 5.61.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1c:fe:7b:0c:af:ae:fb:7e:73:6a:f5:b8:b1:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf Validity Not Before: Jan 1 10:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=841e5b288cca0af71b97ca206da066babfdb748b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cf:38:f7:d5:d0:ce:4b:af:85:0d:9b:d0:6a: 5a:38:39:f0:8f:18:89:a1:d2:2d:b9:e3:f8:73:0b: 82:58:c9:0a:15:27:4d:59:ba:ac:a6:be:4c:3b:f7: fd:82:8f:1f:5d:22:32:5a:e3:ff:09:41:54:24:52: 4b:a0:8d:fa:69:f1:ee:6d:e2:09:f9:26:0c:a8:bb: 0d:dc:f3:04:1f:78:ff:38:38:df:ee:59:d8:18:42: 87:e2:0f:ee:b4:34:80:0e:90:e7:dc:ec:4a:45:cf: 2e:2c:ec:ab:d5:81:bb:5a:19:89:40:52:31:d4:b8: 13:bd:6d:51:b7:67:f3:87:77:0a:b2:fb:7e:53:d6: 2c:45:e8:f4:03:f3:2c:63:f4:e7:92:af:33:ba:4d: 7a:54:f1:02:52:f5:47:3d:aa:a0:d1:d0:c8:ed:ce: 31:45:d4:2f:50:33:1a:df:78:7f:4f:06:f3:5d:9d: a3:ea:a9:57:3c:b7:7b:43:98:c5:7a:50:89:8b:96: ed:dc:95:d9:07:f5:5a:09:11:f5:c5:90:a4:89:5b: 1f:b3:87:c9:f5:e4:af:59:b4:50:cf:35:07:97:31: 6b:16:d4:41:f6:d7:d3:8a:f9:4e:c3:d7:8e:56:2e: 2a:de:eb:3d:56:ba:08:a0:50:fd:3f:95:d4:8e:31: 25:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1E:5B:28:8C:CA:0A:F7:1B:97:CA:20:6D:A0:66:BA:BF:DB:74:8B X509v3 Authority Key Identifier: keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/hB5bKIzKCvcbl8ogbaBmur_bdIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.113.0/24 5.61.115.0/24 5.61.117.0/24 5.61.119.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:86:42:08:8f:10:dc:7c:72:47:8a:01:1a:7d:9a:dc:0a:39: f2:1e:b8:82:d9:e6:cf:8c:b0:0f:22:95:36:1e:32:5e:0e:e7: 41:72:d6:90:e8:cc:7a:24:74:39:65:ed:94:25:ec:6d:28:96: 99:e2:82:d9:8f:0b:d7:ac:bb:97:2d:6e:94:0f:36:87:91:22: 16:9d:81:aa:21:72:ad:68:fd:2e:14:5b:0f:86:a5:db:2b:dd: 2d:92:5b:53:2a:2e:1a:75:6b:5f:f9:c2:98:97:4a:73:cf:9b: 6a:4b:44:41:0c:ee:9b:ff:1e:d7:ad:17:43:af:18:c5:2b:4d: f6:ca:74:ec:bf:ae:04:9f:54:f9:2e:79:de:5a:df:30:c5:df: 1e:c2:9c:9e:c2:6b:33:35:67:c9:85:db:02:45:a3:e7:a4:95: eb:dc:59:90:bb:46:b7:d0:20:b0:d2:c3:9b:86:05:14:dc:04: 11:c1:41:d2:ab:09:a4:09:19:4b:df:06:7b:bd:a4:a7:a6:b9: 23:96:99:93:62:d9:ea:5a:f2:c2:35:45:32:66:de:74:1e:9d: 01:03:65:3b:50:82:46:21:b8:e1:2a:ce:cf:56:63:b1:ce:1b: 4b:98:4f:1b:c1:57:e1:48:86:6c:fd:6a:1f:43:85:da:69:17: d8:1d:95:30 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5ERz+ewyvrvt+c2r1uLGNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NjRiNDUyM2E4OTcyYjllMmY0NmE0ZjRhMTYzNGU5NzAy N2FlZGYwHhcNMjYwMTAxMTAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDFlNWIyODhjY2EwYWY3MWI5N2NhMjA2ZGEwNjZiYWJmZGI3NDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps8499XQzkuvhQ2b0GpaODnwjxiJ odItueP4cwuCWMkKFSdNWbqspr5MO/f9go8fXSIyWuP/CUFUJFJLoI36afHubeIJ +SYMqLsN3PMEH3j/ODjf7lnYGEKH4g/utDSADpDn3OxKRc8uLOyr1YG7WhmJQFIx 1LgTvW1Rt2fzh3cKsvt+U9YsRej0A/MsY/Tnkq8zuk16VPECUvVHPaqg0dDI7c4x RdQvUDMa33h/TwbzXZ2j6qlXPLd7Q5jFelCJi5bt3JXZB/VaCRH1xZCkiVsfs4fJ 9eSvWbRQzzUHlzFrFtRB9tfTivlOw9eOVi4q3us9VroIoFD9P5XUjjEl8wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIQeWyiMygr3G5fKIG2gZrq/23SLMB8GA1UdIwQY MBaAFLRktFI6iXK54vRqT0oWNOlwJ67fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jN2NhZjMtZWIwOC00NTU2LWE1Yjct ZmM2ZTc3ODg0MDU0LzEvaEI1YktJektDdmNibDhvZ2JhQm11cl9iZElzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jN2NhZjMtZWIwOC00NTU2LWE1YjctZmM2ZTc3ODg0MDU0 LzEvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABT1xAwQA BT1zAwQABT11AwQABT13MA0GCSqGSIb3DQEBCwUAA4IBAQAahkIIjxDcfHJHigEa fZrcCjnyHriC2ebPjLAPIpU2HjJeDudBctaQ6Mx6JHQ5Ze2UJextKJaZ4oLZjwvX rLuXLW6UDzaHkSIWnYGqIXKtaP0uFFsPhqXbK90tkltTKi4adWtf+cKYl0pzz5tq S0RBDO6b/x7XrRdDrxjFK032ynTsv64En1T5LnneWt8wxd8ewpyewmszNWfJhdsC RaPnpJXr3FmQu0a30CCw0sObhgUU3AQRwUHSqwmkCRlL3wZ7vaSnprkjlpmTYtnq WvLCNUUyZt50Hp0BA2U7UIJGIbjhKs7PVmOxzhtLmE8bwVfhSIZs/WofQ4XaaRfY HZUw -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:47 2026 by rpki-client