This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/hgl809tjaX7Gbv4DItgm3ScJV_4.roa File: hgl809tjaX7Gbv4DItgm3ScJV_4.roa (raw, json) Hash identifier: 1spmr6hLWhe0MEAFi9Vr2mFMBf7qQUqSQroJeyohJqA= Subject key identifier: 86:09:7C:D3:DB:63:69:7E:C6:6E:FE:03:22:D8:26:DD:27:09:57:FE Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e Certificate serial: 019B7A5B3C2CA0400E8A2FDACB424D927524 Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/hgl809tjaX7Gbv4DItgm3ScJV_4.roa Signing time: Thu 01 Jan 2026 16:19:18 +0000 ROA not before: Thu 01 Jan 2026 16:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8330 IP address blocks: 5.57.88.0/21 maxlen: 21 193.203.5.0/24 maxlen: 24 2001:7f8:17::/48 maxlen: 48 2a00:eb20::/32 maxlen: 32 2a00:eb20:abcd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:3c:2c:a0:40:0e:8a:2f:da:cb:42:4d:92:75:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e Validity Not Before: Jan 1 16:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86097cd3db63697ec66efe0322d826dd270957fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ef:f6:df:db:1e:38:d7:b5:ac:f7:3f:a8:b8: 42:6c:55:ec:f5:89:41:ca:b5:bf:8b:9b:ce:c2:fb: 88:22:c3:b2:5b:9b:bb:e7:da:1e:78:9e:46:e4:5c: bf:74:90:11:bd:b8:b6:d9:06:d1:05:5c:4e:21:36: 8c:7a:9e:38:3d:f2:ec:38:c3:4a:b7:7d:82:ce:76: 94:e7:70:a8:51:68:44:86:bd:b7:4a:d0:c6:8d:55: ce:5e:b2:69:0f:d8:a6:ee:9a:22:33:18:cc:e7:66: fa:ca:02:19:8d:0d:d4:27:66:d2:7d:5c:f3:47:a4: 57:64:ac:05:fc:4a:e1:d7:a2:7d:10:a6:c3:8c:04: 62:eb:75:f2:31:21:8b:ac:7c:7e:5e:67:56:b6:e8: 5a:5f:8b:22:b8:f1:9e:56:89:10:ba:6c:e1:84:ed: 0a:28:3b:37:ca:52:d9:78:da:87:ff:5a:e7:a1:f1: 4b:f3:f4:20:74:d0:59:da:4c:e4:2c:02:17:30:eb: 76:ad:ed:37:51:f3:ac:72:2c:e3:1d:c7:1e:ca:eb: f6:51:09:aa:9b:36:9d:40:d4:47:25:4e:55:33:e0: 3f:b0:f4:2c:fd:26:b4:52:a3:61:4c:88:49:87:6d: 06:b4:94:cc:30:60:b2:10:1b:02:00:16:e1:3e:8c: f4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:09:7C:D3:DB:63:69:7E:C6:6E:FE:03:22:D8:26:DD:27:09:57:FE X509v3 Authority Key Identifier: keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/hgl809tjaX7Gbv4DItgm3ScJV_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.88.0/21 193.203.5.0/24 IPv6: 2001:7f8:17::/48 2a00:eb20::/32 Signature Algorithm: sha256WithRSAEncryption 32:88:c4:e7:14:eb:a9:3c:e8:08:f5:06:54:be:4a:16:7e:21: ab:03:5e:4b:80:fc:ef:ef:82:c7:d8:6a:61:b4:9c:0c:76:6e: d1:42:e9:a9:8a:04:ed:e4:28:d2:ea:88:2e:59:58:71:c9:3b: e1:98:86:28:7b:66:37:bc:fd:a8:a1:b5:99:79:a7:62:bd:0a: 0c:a6:1f:6d:8b:ae:d0:06:0b:84:31:29:11:00:cb:b2:38:16: eb:7c:59:33:f8:30:58:3b:4c:de:fb:5b:2c:14:f0:63:01:94: 30:ce:58:33:e0:30:f2:a8:c1:ea:fb:5b:eb:d8:49:8d:2d:3a: ef:00:55:51:ae:d6:83:47:e4:0e:14:a6:37:f9:64:50:82:d2: a6:ab:4e:0a:8d:cc:52:65:07:7d:3f:5c:43:df:54:ed:78:f7: d5:90:51:81:69:4a:ae:6d:3b:4b:28:cf:e8:94:c8:64:88:4a: 85:e3:32:98:77:e3:7d:6f:c4:33:2f:6f:e5:74:2f:06:80:e8: e3:81:9d:95:61:2c:d7:e8:55:f5:48:af:91:8e:fb:db:c7:d1: cd:ac:dc:6c:f4:94:2b:62:cc:23:70:71:f4:2e:3c:cc:4c:79: 67:48:20:93:58:65:7b:02:87:0a:7c:a1:71:6c:a8:af:f2:3e: b9:f2:6c:92 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt6WzwsoEAOii/ay0JNknUkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOGQwN2I0NWY3ZDgzMTI0YzlmOGMwZmFjMDNiZWMwMjQ2 OGIzN2UwHhcNMjYwMTAxMTYxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjA5N2NkM2RiNjM2OTdlYzY2ZWZlMDMyMmQ4MjZkZDI3MDk1N2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO/239seONe1rPc/qLhCbFXs9YlB yrW/i5vOwvuIIsOyW5u759oeeJ5G5Fy/dJARvbi22QbRBVxOITaMep44PfLsOMNK t32CznaU53CoUWhEhr23StDGjVXOXrJpD9im7poiMxjM52b6ygIZjQ3UJ2bSfVzz R6RXZKwF/Erh16J9EKbDjARi63XyMSGLrHx+XmdWtuhaX4siuPGeVokQumzhhO0K KDs3ylLZeNqH/1rnofFL8/QgdNBZ2kzkLAIXMOt2re03UfOscizjHcceyuv2UQmq mzadQNRHJU5VM+A/sPQs/Sa0UqNhTIhJh20GtJTMMGCyEBsCABbhPoz0MQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFIYJfNPbY2l+xm7+AyLYJt0nCVf+MB8GA1UdIwQY MBaAFF6NB7RffYMSTJ+MD6wDvsAkaLN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQt NmM4ZmQ4NGJiNWY1LzEvaGdsODA5dGphWDdHYnY0REl0Z20zU2NKVl80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQtNmM4ZmQ4NGJiNWY1 LzEvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQDBTlYAwQA wcsFMBYEAgACMBADBwAgAQf4ABcDBQAqAOsgMA0GCSqGSIb3DQEBCwUAA4IBAQAy iMTnFOupPOgI9QZUvkoWfiGrA15LgPzv74LH2GphtJwMdm7RQumpigTt5CjS6ogu WVhxyTvhmIYoe2Y3vP2oobWZeadivQoMph9ti67QBguEMSkRAMuyOBbrfFkz+DBY O0ze+1ssFPBjAZQwzlgz4DDyqMHq+1vr2EmNLTrvAFVRrtaDR+QOFKY3+WRQgtKm q04KjcxSZQd9P1xD31TtePfVkFGBaUqubTtLKM/olMhkiEqF4zKYd+N9b8QzL2/l dC8GgOjjgZ2VYSzX6FX1SK+Rjvvbx9HNrNxs9JQrYswjcHH0LjzMTHlnSCCTWGV7 AocKfKFxbKiv8j658myS -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:29 2026 by rpki-client