This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/5hxJVaW1ITHjqTzVJE_yCZQu6TY.roa File: 5hxJVaW1ITHjqTzVJE_yCZQu6TY.roa (raw, json) Hash identifier: 4jHQruBZmL2C+S6zlzONMLh0unhRvxQBys9HI6W8e9c= Subject key identifier: E6:1C:49:55:A5:B5:21:31:E3:A9:3C:D5:24:4F:F2:09:94:2E:E9:36 Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019B79ED23525085A2D3C3E4796FA29FA13F Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/5hxJVaW1ITHjqTzVJE_yCZQu6TY.roa Signing time: Thu 01 Jan 2026 14:19:02 +0000 ROA not before: Thu 01 Jan 2026 14:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202854 IP address blocks: 194.181.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:23:52:50:85:a2:d3:c3:e4:79:6f:a2:9f:a1:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Jan 1 14:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e61c4955a5b52131e3a93cd5244ff209942ee936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:94:c8:67:4d:aa:ee:24:2a:2e:c5:41:01:7e: 91:67:3c:8a:c0:d2:da:b9:34:b7:4d:38:7c:14:7f: 00:f4:8e:25:ad:13:0b:1f:9e:9d:56:a9:9a:67:20: c5:cf:d6:0f:6f:e9:fb:98:9a:d4:4a:a5:2a:71:5f: 0c:41:c1:e1:c0:64:f7:0f:59:59:2b:73:3f:05:37: 9b:b2:bd:6c:65:a0:08:3c:e1:84:f4:e1:11:c8:da: b7:f7:65:02:43:3a:3d:d0:02:3c:7a:72:bc:f2:37: 52:4a:1b:6a:fb:78:5c:cf:dc:fb:03:80:d1:ce:73: 1e:06:d2:b4:41:bc:0a:98:f1:a3:03:46:01:e0:c7: 01:d8:9c:ea:1a:c3:cc:15:a0:50:db:ef:b4:49:12: 14:dc:52:82:a9:13:d8:43:b0:76:63:07:b8:d1:41: c7:51:9e:05:88:81:8b:ad:87:e1:79:d7:45:47:e8: 6d:dd:c7:85:9a:3d:eb:0b:b9:44:4d:2c:1d:26:fe: 6c:47:a7:35:62:a2:18:08:8e:a8:b9:02:a5:bb:44: 47:12:49:62:ac:3b:c9:c4:43:f8:87:ad:5f:e7:0c: 50:62:53:48:ed:df:85:da:88:4f:1d:1c:5f:1b:3a: 55:fb:63:c8:c1:12:e5:09:21:f9:04:60:ba:e6:6d: c4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1C:49:55:A5:B5:21:31:E3:A9:3C:D5:24:4F:F2:09:94:2E:E9:36 X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/5hxJVaW1ITHjqTzVJE_yCZQu6TY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.181.67.0/24 Signature Algorithm: sha256WithRSAEncryption 27:81:a5:43:1f:99:6f:de:6c:5d:1c:3d:87:df:2a:23:a9:91: 42:31:e7:bd:25:13:f6:31:ea:fb:8b:7c:02:29:47:8e:04:1c: dd:d0:d3:69:59:f4:a7:c0:7c:25:37:f4:79:74:33:a5:b4:e1: 37:58:d2:a2:6e:79:22:57:31:60:34:9d:a3:3e:7c:94:d1:35: f2:3f:aa:b7:7c:b1:55:db:2e:ee:75:49:f0:bc:c0:cb:71:00: 62:dd:dd:e1:69:54:88:96:1f:28:e6:19:cc:ba:56:8d:06:8a: 92:6f:27:cb:e2:22:51:d3:9f:4f:95:df:84:ea:10:6e:9f:fb: 43:94:a2:dc:19:c8:fb:43:26:c1:fd:0b:d7:e4:71:ce:1f:e2: 74:d0:53:1c:eb:c1:08:93:fe:69:d4:19:5e:27:6a:2f:58:93: b7:6a:90:ec:77:ad:93:aa:f0:4c:2f:db:d3:bc:2b:a6:66:4c: a0:87:f2:72:c5:be:e2:22:e0:bf:4d:85:4f:23:19:46:8d:bf: c3:53:ae:8a:88:a0:cb:f9:b8:fb:3b:52:a4:0d:0f:38:64:e7: c8:a5:03:6e:96:48:bb:27:2f:bd:34:3a:57:51:b2:8f:a1:48: 33:5d:e2:46:87:94:55:cb:63:aa:5e:ab:8a:64:b9:5c:e9:3c: 6c:97:eb:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SNSUIWi08PkeW+in6E/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjYwMTAxMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjFjNDk1NWE1YjUyMTMxZTNhOTNjZDUyNDRmZjIwOTk0MmVlOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5TIZ02q7iQqLsVBAX6RZzyKwNLa uTS3TTh8FH8A9I4lrRMLH56dVqmaZyDFz9YPb+n7mJrUSqUqcV8MQcHhwGT3D1lZ K3M/BTebsr1sZaAIPOGE9OERyNq392UCQzo90AI8enK88jdSShtq+3hcz9z7A4DR znMeBtK0QbwKmPGjA0YB4McB2JzqGsPMFaBQ2++0SRIU3FKCqRPYQ7B2Ywe40UHH UZ4FiIGLrYfheddFR+ht3ceFmj3rC7lETSwdJv5sR6c1YqIYCI6ouQKlu0RHEkli rDvJxEP4h61f5wxQYlNI7d+F2ohPHRxfGzpV+2PIwRLlCSH5BGC65m3EywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOYcSVWltSEx46k81SRP8gmULuk2MB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEvNWh4SlZhVzFJVEhqcVR6VkpFX3lDWlF1NlRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrVDMA0G CSqGSIb3DQEBCwUAA4IBAQAngaVDH5lv3mxdHD2H3yojqZFCMee9JRP2Mer7i3wC KUeOBBzd0NNpWfSnwHwlN/R5dDOltOE3WNKibnkiVzFgNJ2jPnyU0TXyP6q3fLFV 2y7udUnwvMDLcQBi3d3haVSIlh8o5hnMulaNBoqSbyfL4iJR059Pld+E6hBun/tD lKLcGcj7QybB/QvX5HHOH+J00FMc68EIk/5p1BleJ2ovWJO3apDsd62TqvBML9vT vCumZkygh/Jyxb7iIuC/TYVPIxlGjb/DU66KiKDL+bj7O1KkDQ84ZOfIpQNulki7 Jy+9NDpXUbKPoUgzXeJGh5RVy2OqXquKZLlc6Txsl+uq -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:47 2026 by rpki-client