This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/rHfKeO-9l9W24wGxoHPVca3O4oc.roa File: rHfKeO-9l9W24wGxoHPVca3O4oc.roa (raw, json) Hash identifier: DOnDxDR60+CHvKP7QQ/+3OYee8LrWlLSO/yOlx6md0E= Subject key identifier: AC:77:CA:78:EF:BD:97:D5:B6:E3:01:B1:A0:73:D5:71:AD:CE:E2:87 Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443 Certificate serial: 019B797DF9D07EBC6E5050A9B85D77B73B67 Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/rHfKeO-9l9W24wGxoHPVca3O4oc.roa Signing time: Thu 01 Jan 2026 12:17:37 +0000 ROA not before: Thu 01 Jan 2026 12:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43754 IP address blocks: 5.22.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f9:d0:7e:bc:6e:50:50:a9:b8:5d:77:b7:3b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443 Validity Not Before: Jan 1 12:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac77ca78efbd97d5b6e301b1a073d571adcee287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:09:2d:ba:04:bc:0d:91:88:55:62:df:2a:e5: 51:8a:68:76:c7:00:83:e9:45:b5:23:14:a9:f2:c8: ec:1f:54:0b:07:de:8a:de:b4:24:00:b9:ce:56:ec: 14:e0:4e:94:f6:85:1b:30:46:cc:e7:eb:6f:35:c7: 8c:13:ab:ae:f5:42:13:32:0f:93:ac:ea:b9:06:57: c3:eb:b3:f1:ad:a4:7f:cd:0a:99:41:15:ff:01:8f: 6c:8b:3c:bb:c1:81:15:33:8e:8e:1c:b5:20:5c:2d: 8d:89:61:b4:bd:98:1d:01:7f:e0:16:55:aa:17:02: d7:3e:35:8b:23:a4:12:ba:34:f2:56:c3:82:89:f8: 69:df:9f:a8:0d:bc:4f:d0:b7:0a:85:9c:f4:b9:e0: a2:95:4e:e5:a7:be:9a:1d:db:54:b2:8b:e3:21:8f: 1f:52:d6:28:72:e9:3d:cb:46:1a:79:66:9b:29:9e: a9:9c:69:aa:31:2f:2a:77:84:69:ae:71:85:19:fd: eb:70:2b:36:b8:0f:39:a2:51:ce:45:c1:6c:79:d6: 5e:d9:66:05:72:25:f0:68:2f:28:c0:ca:c3:39:e6: 02:d8:ed:3e:96:33:35:90:4e:7d:6f:8b:e0:05:d1: fc:42:01:da:60:a2:bf:eb:97:f5:ee:81:9c:0e:7f: aa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:77:CA:78:EF:BD:97:D5:B6:E3:01:B1:A0:73:D5:71:AD:CE:E2:87 X509v3 Authority Key Identifier: keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/rHfKeO-9l9W24wGxoHPVca3O4oc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.22.192.0/21 Signature Algorithm: sha256WithRSAEncryption 6c:12:44:90:54:68:29:d3:15:54:0b:49:f0:03:8d:14:ac:3b: 30:60:ce:3c:02:6d:7e:5b:5c:74:bb:50:e3:70:80:c5:14:7e: 4e:11:ce:3b:86:48:21:89:63:bc:cd:47:9a:2b:3c:d8:6d:05: 24:d2:04:1b:0a:a3:c4:9a:dc:df:d9:98:e2:c4:52:ff:a4:ff: df:1d:79:af:a6:71:8f:1f:a9:b8:84:3a:ed:14:b8:b8:af:bc: 88:16:9f:78:ff:19:b0:0f:08:6b:40:2c:ef:09:1e:dd:40:54: 1c:41:a3:1f:92:31:f2:84:81:19:4a:0a:1e:7e:22:f3:c9:c9: 61:49:e3:02:5e:2a:3e:ff:57:90:7c:cb:d2:68:67:87:97:d7: 00:d4:62:5a:cb:f7:29:56:5a:df:1f:b2:24:fd:27:2a:a0:eb: 79:60:d4:0d:84:89:f0:04:ea:ea:65:b7:9c:0e:c0:09:9e:86: 7f:ed:3e:29:ac:b4:0b:f4:23:2c:31:4d:a4:57:24:5e:33:26: d7:fe:0c:42:cb:2f:14:8a:a0:b6:bf:d7:cb:e4:21:2e:21:c9: 14:be:c6:0f:28:43:01:56:e6:1f:39:f4:d1:7e:98:aa:1b:a2: e2:42:bb:34:55:8c:d0:83:21:d0:6f:fc:fd:ce:1a:cd:fb:d7: 6c:04:65:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ffnQfrxuUFCpuF13tztnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTE1OWVmMjJmODJiOTM2NzMxNjY0ZWU2N2MzYjZlYTk2 ZWY0NDMwHhcNMjYwMTAxMTIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzc3Y2E3OGVmYmQ5N2Q1YjZlMzAxYjFhMDczZDU3MWFkY2VlMjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QktugS8DZGIVWLfKuVRimh2xwCD 6UW1IxSp8sjsH1QLB96K3rQkALnOVuwU4E6U9oUbMEbM5+tvNceME6uu9UITMg+T rOq5BlfD67PxraR/zQqZQRX/AY9sizy7wYEVM46OHLUgXC2NiWG0vZgdAX/gFlWq FwLXPjWLI6QSujTyVsOCifhp35+oDbxP0LcKhZz0ueCilU7lp76aHdtUsovjIY8f UtYocuk9y0YaeWabKZ6pnGmqMS8qd4RprnGFGf3rcCs2uA85olHORcFsedZe2WYF ciXwaC8owMrDOeYC2O0+ljM1kE59b4vgBdH8QgHaYKK/65f17oGcDn+qOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKx3ynjvvZfVtuMBsaBz1XGtzuKHMB8GA1UdIwQY MBaAFCeRWe8i+CuTZzFmTuZ8O26pbvRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS81YzE1YmUtYWVmMi00YzMxLWJmYjQt MzFiYWY2ZWVkZThhLzEvckhmS2VPLTlsOVcyNHdHeG9IUFZjYTNPNG9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS81YzE1YmUtYWVmMi00YzMxLWJmYjQtMzFiYWY2ZWVkZThh LzEvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDBRbAMA0G CSqGSIb3DQEBCwUAA4IBAQBsEkSQVGgp0xVUC0nwA40UrDswYM48Am1+W1x0u1Dj cIDFFH5OEc47hkghiWO8zUeaKzzYbQUk0gQbCqPEmtzf2ZjixFL/pP/fHXmvpnGP H6m4hDrtFLi4r7yIFp94/xmwDwhrQCzvCR7dQFQcQaMfkjHyhIEZSgoefiLzyclh SeMCXio+/1eQfMvSaGeHl9cA1GJay/cpVlrfH7Ik/ScqoOt5YNQNhInwBOrqZbec DsAJnoZ/7T4prLQL9CMsMU2kVyReMybX/gxCyy8UiqC2v9fL5CEuIckUvsYPKEMB VuYfOfTRfpiqG6LiQrs0VYzQgyHQb/z9zhrN+9dsBGWG -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:36 2026 by rpki-client