This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/hWkmko9vUlZH-VtlGHJ4hUuAaoY.roa File: hWkmko9vUlZH-VtlGHJ4hUuAaoY.roa (raw, json) Hash identifier: WFu8HTGZdnXJYLpBmsk/WG3sNIIitKWRuo38WyAjDOU= Subject key identifier: 85:69:26:92:8F:6F:52:56:47:F9:5B:65:18:72:78:85:4B:80:6A:86 Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443 Certificate serial: 019B797DFA0A6DC4D0DAF31B31E3E4B4595A Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/hWkmko9vUlZH-VtlGHJ4hUuAaoY.roa Signing time: Thu 01 Jan 2026 12:17:37 +0000 ROA not before: Thu 01 Jan 2026 12:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48289 IP address blocks: 5.22.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:fa:0a:6d:c4:d0:da:f3:1b:31:e3:e4:b4:59:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443 Validity Not Before: Jan 1 12:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=856926928f6f525647f95b65187278854b806a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:c3:1b:2b:f0:b0:dd:1f:8d:f6:04:53:a8: e3:71:7c:f1:7a:37:b5:bd:ce:4e:df:64:41:29:c4: b0:0b:c0:40:93:69:1e:5b:6f:32:f2:91:34:8d:39: 6d:e2:d5:b3:51:c1:30:7d:00:cd:9d:c4:5b:1b:f6: 01:cb:ff:4b:9f:6d:f0:0b:b3:d2:f3:31:3d:7a:be: e1:69:88:2a:65:26:fe:e8:1c:f0:76:25:2e:e0:10: 9c:25:3c:0f:5c:76:73:71:4e:7a:d5:97:cb:7b:82: 3f:5e:af:89:8a:39:67:c9:0d:98:d0:6d:4f:eb:97: e1:bb:db:b2:e8:63:32:43:73:36:a5:24:8a:95:e2: d4:bc:f4:64:fa:c4:1e:10:f0:8c:0e:f6:bb:b4:30: a5:b4:b4:2e:83:0c:cc:f9:7f:11:8e:69:10:a0:f6: d9:da:41:40:fd:00:1c:86:1a:d4:e5:35:34:88:3f: df:d9:db:61:a6:ec:88:b9:10:86:15:e2:8a:f5:d9: 99:2b:e6:21:c9:26:15:ff:21:2a:b5:00:a6:2c:6f: aa:c6:7b:75:53:8a:3f:43:b4:d9:e5:56:cf:38:5a: 7c:02:6e:93:76:a4:3e:92:c0:3e:92:99:34:f0:77: 20:84:0f:34:0f:94:f2:04:16:33:99:c4:e4:21:ec: c4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:69:26:92:8F:6F:52:56:47:F9:5B:65:18:72:78:85:4B:80:6A:86 X509v3 Authority Key Identifier: keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/hWkmko9vUlZH-VtlGHJ4hUuAaoY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.22.192.0/21 Signature Algorithm: sha256WithRSAEncryption 2d:2c:f4:7a:8f:2d:d2:36:4c:4b:3d:09:01:c1:59:24:96:20: 71:35:a5:87:40:ce:5c:64:96:13:61:39:b7:84:33:e3:5a:29: 44:a5:f7:79:64:3d:da:7a:1e:7d:e6:a6:8e:47:1a:2a:37:dd: 5f:af:a5:ac:63:15:96:53:8e:1d:c6:e4:22:ff:83:e9:e0:15: 00:68:07:69:8b:30:a3:32:ec:2f:40:de:6c:7f:f4:63:c4:3b: 92:6c:7d:0d:7a:85:ab:e8:ee:81:26:91:3a:15:fb:0b:6a:21: d4:17:f2:36:34:90:47:45:d6:4b:77:2e:93:75:5d:73:e4:bb: 12:14:c9:2e:5c:d1:25:5a:4f:0b:e0:1a:ba:a5:9b:dc:6f:43: 8b:3c:79:8d:b2:b1:4a:bd:39:f1:37:29:75:98:fc:19:9d:d5: 0d:2a:63:d6:3b:3e:bc:71:ed:b0:64:7d:7b:31:58:dd:f1:b3: e2:b9:b4:6c:ec:c5:46:9c:64:50:7f:78:88:12:57:fc:2e:1c: 48:62:fd:81:df:71:06:f1:83:71:bd:c3:c8:45:d8:da:65:2c: 19:4b:28:86:21:1d:f5:96:60:0b:97:22:ab:29:94:e1:06:55: c2:1c:d9:93:01:63:d8:db:d5:c7:ef:39:68:40:a3:44:ee:bb: 10:25:c0:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ffoKbcTQ2vMbMePktFlaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTE1OWVmMjJmODJiOTM2NzMxNjY0ZWU2N2MzYjZlYTk2 ZWY0NDMwHhcNMjYwMTAxMTIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTY5MjY5MjhmNmY1MjU2NDdmOTViNjUxODcyNzg4NTRiODA2YTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxzDGyvwsN0fjfYEU6jjcXzxeje1 vc5O32RBKcSwC8BAk2keW28y8pE0jTlt4tWzUcEwfQDNncRbG/YBy/9Ln23wC7PS 8zE9er7haYgqZSb+6BzwdiUu4BCcJTwPXHZzcU561ZfLe4I/Xq+JijlnyQ2Y0G1P 65fhu9uy6GMyQ3M2pSSKleLUvPRk+sQeEPCMDva7tDCltLQugwzM+X8RjmkQoPbZ 2kFA/QAchhrU5TU0iD/f2dthpuyIuRCGFeKK9dmZK+YhySYV/yEqtQCmLG+qxnt1 U4o/Q7TZ5VbPOFp8Am6TdqQ+ksA+kpk08HcghA80D5TyBBYzmcTkIezEsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIVpJpKPb1JWR/lbZRhyeIVLgGqGMB8GA1UdIwQY MBaAFCeRWe8i+CuTZzFmTuZ8O26pbvRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS81YzE1YmUtYWVmMi00YzMxLWJmYjQt MzFiYWY2ZWVkZThhLzEvaFdrbWtvOXZVbFpILVZ0bEdISjRoVXVBYW9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS81YzE1YmUtYWVmMi00YzMxLWJmYjQtMzFiYWY2ZWVkZThh LzEvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDBRbAMA0G CSqGSIb3DQEBCwUAA4IBAQAtLPR6jy3SNkxLPQkBwVkkliBxNaWHQM5cZJYTYTm3 hDPjWilEpfd5ZD3aeh595qaORxoqN91fr6WsYxWWU44dxuQi/4Pp4BUAaAdpizCj MuwvQN5sf/RjxDuSbH0NeoWr6O6BJpE6FfsLaiHUF/I2NJBHRdZLdy6TdV1z5LsS FMkuXNElWk8L4Bq6pZvcb0OLPHmNsrFKvTnxNyl1mPwZndUNKmPWOz68ce2wZH17 MVjd8bPiubRs7MVGnGRQf3iIElf8LhxIYv2B33EG8YNxvcPIRdjaZSwZSyiGIR31 lmALlyKrKZThBlXCHNmTAWPY29XH7zloQKNE7rsQJcAQ -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:13 2026 by rpki-client