This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Hm5D_L_-X8N6Ngn0-sFiNZd3VnY.roa File: Hm5D_L_-X8N6Ngn0-sFiNZd3VnY.roa (raw, json) Hash identifier: h/3w7HTeHzCXjM18AkUy2ZC4OLV5zp/8BEXLvTQ7pKs= Subject key identifier: 1E:6E:43:FC:BF:FE:5F:C3:7A:36:09:F4:FA:C1:62:35:97:77:56:76 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019B77C71F4CB85F34DE039E35D108A011F6 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Hm5D_L_-X8N6Ngn0-sFiNZd3VnY.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216169 IP address blocks: 85.133.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1f:4c:b8:5f:34:de:03:9e:35:d1:08:a0:11:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e6e43fcbffe5fc37a3609f4fac1623597775676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3f:72:bd:5f:50:d1:ad:6f:ad:0a:71:50:86: 90:36:90:5b:f0:df:e5:61:51:49:50:75:49:c4:97: 5b:eb:09:13:0d:b2:5b:ac:8c:1f:78:ba:39:8d:ad: 1f:f0:d0:b6:29:99:6a:91:7b:b1:5f:24:9c:0c:d8: d7:6e:4f:10:08:ee:ae:dd:8e:36:72:3f:04:39:5f: 94:05:83:e7:fa:6f:c5:19:1c:63:5d:69:b5:f4:de: 17:09:c3:cb:29:83:52:3c:7c:0f:c1:77:4a:e1:84: 74:80:b8:c7:fd:ea:16:03:02:7f:20:43:d4:7c:5c: ab:16:dc:e9:54:89:bb:ec:f4:98:6e:67:6f:61:3c: b8:dd:92:e7:b6:bc:b0:8c:22:3c:b4:9c:15:d6:71: 0d:7f:29:d9:43:a7:73:10:98:63:6b:07:ae:38:a7: 0d:4c:af:18:89:65:24:ce:cb:5a:67:4f:7c:e1:97: a8:89:4f:6d:90:0e:47:cf:83:53:e6:0e:0e:5d:c4: b1:fc:37:6d:b3:b1:44:1a:8b:08:5c:1b:46:21:2c: 0a:6d:ee:09:26:c1:9a:0d:eb:e3:2c:71:ca:4e:f9: 24:cc:f9:be:3d:93:fb:f8:78:b9:06:3e:60:ee:02: 8a:82:27:05:88:c3:06:f4:80:db:92:d5:77:84:fd: 89:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6E:43:FC:BF:FE:5F:C3:7A:36:09:F4:FA:C1:62:35:97:77:56:76 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Hm5D_L_-X8N6Ngn0-sFiNZd3VnY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.197.0/24 Signature Algorithm: sha256WithRSAEncryption 40:78:50:65:f5:a2:8b:bc:eb:21:0f:29:81:85:70:d7:0b:df: c8:67:53:52:56:94:a9:29:0a:b8:cf:ae:02:3b:ad:44:d0:22: 66:d6:e8:45:c5:fa:45:c3:ec:31:b8:49:2b:d3:a0:c1:e3:e6: 54:08:c8:7a:f3:26:8d:e9:c1:61:cd:07:e2:e1:44:15:0a:b1: aa:ae:a4:9f:7e:fa:7a:d8:52:c7:7f:c6:5b:0e:96:38:c9:6a: ce:94:6e:55:a1:a6:23:c5:de:59:b0:90:53:4f:4b:9b:3e:dc: e2:c9:20:71:7a:d0:d0:cc:09:c2:91:f0:a2:5c:91:9e:0f:82: 54:d5:12:77:a9:5a:94:bb:a3:c1:7b:a3:c0:9e:63:47:8e:1a: cd:b2:fd:97:e6:bd:da:5e:c7:2c:33:6f:1d:53:0c:bf:cb:93: bd:93:83:d3:10:b8:3a:b0:98:e0:83:b6:23:05:2a:4c:cc:3f: a0:2b:de:48:e7:a4:84:59:86:cc:d3:4b:b4:e0:0c:de:39:11: c2:96:29:98:48:6b:11:e5:e5:5d:47:36:e0:bf:cf:d3:81:e2: a8:4c:c9:55:41:41:54:b8:b7:94:ef:82:02:bd:ac:46:3b:1e: f9:82:33:9d:f8:97:e9:f4:21:e7:4d:3b:a9:08:23:18:75:97: 87:2d:3e:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xx9MuF803gOeNdEIoBH2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTZlNDNmY2JmZmU1ZmMzN2EzNjA5ZjRmYWMxNjIzNTk3Nzc1Njc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz9yvV9Q0a1vrQpxUIaQNpBb8N/l YVFJUHVJxJdb6wkTDbJbrIwfeLo5ja0f8NC2KZlqkXuxXyScDNjXbk8QCO6u3Y42 cj8EOV+UBYPn+m/FGRxjXWm19N4XCcPLKYNSPHwPwXdK4YR0gLjH/eoWAwJ/IEPU fFyrFtzpVIm77PSYbmdvYTy43ZLntrywjCI8tJwV1nENfynZQ6dzEJhjaweuOKcN TK8YiWUkzstaZ0984ZeoiU9tkA5Hz4NT5g4OXcSx/Ddts7FEGosIXBtGISwKbe4J JsGaDevjLHHKTvkkzPm+PZP7+Hi5Bj5g7gKKgicFiMMG9IDbktV3hP2JFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB5uQ/y//l/DejYJ9PrBYjWXd1Z2MB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvSG01RF9MXy1YOE42TmduMC1zRmlOWmQzVm5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYXFMA0G CSqGSIb3DQEBCwUAA4IBAQBAeFBl9aKLvOshDymBhXDXC9/IZ1NSVpSpKQq4z64C O61E0CJm1uhFxfpFw+wxuEkr06DB4+ZUCMh68yaN6cFhzQfi4UQVCrGqrqSffvp6 2FLHf8ZbDpY4yWrOlG5VoaYjxd5ZsJBTT0ubPtziySBxetDQzAnCkfCiXJGeD4JU 1RJ3qVqUu6PBe6PAnmNHjhrNsv2X5r3aXscsM28dUwy/y5O9k4PTELg6sJjgg7Yj BSpMzD+gK95I56SEWYbM00u04AzeORHClimYSGsR5eVdRzbgv8/TgeKoTMlVQUFU uLeU74ICvaxGOx75gjOd+Jfp9CHnTTupCCMYdZeHLT4R -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:29 2026 by rpki-client