This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/Haj6URZpFS-mdAGIc4wmMOS4lM0.roa File: Haj6URZpFS-mdAGIc4wmMOS4lM0.roa (raw, json) Hash identifier: EtXPHXKoqXDb9Vz60AGE1NwlxpAVrwFBgi6KRxclp1c= Subject key identifier: 1D:A8:FA:51:16:69:15:2F:A6:74:01:88:73:8C:26:30:E4:B8:94:CD Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019B76EB9618205F7B9EE8C985F103EEFF2B Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/Haj6URZpFS-mdAGIc4wmMOS4lM0.roa Signing time: Thu 01 Jan 2026 00:18:29 +0000 ROA not before: Thu 01 Jan 2026 00:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201551 IP address blocks: 5.149.155.0/24 maxlen: 24 5.149.156.0/23 maxlen: 23 5.149.156.0/24 maxlen: 24 5.149.157.0/24 maxlen: 24 2a02:1710:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:96:18:20:5f:7b:9e:e8:c9:85:f1:03:ee:ff:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Jan 1 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1da8fa511669152fa6740188738c2630e4b894cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3d:1b:e6:a9:b8:b4:03:56:38:e7:dc:84:93: 44:8f:ae:22:0d:7c:b6:62:b9:9a:4f:4e:90:96:2f: 66:3c:62:ed:50:b2:68:59:d3:2c:21:ad:91:4a:f0: 9d:9e:ae:9c:86:17:f1:b8:6d:7d:fe:6c:9e:e6:2d: a0:96:29:7b:cb:0d:e4:fd:21:84:6d:fc:6a:e7:65: 64:14:37:26:ef:10:4b:00:51:b9:87:54:13:4b:eb: 6f:86:b4:17:2e:a9:85:4d:90:ea:20:2b:70:c8:ea: ac:ac:e0:81:8e:11:03:a9:12:61:3d:47:1a:53:f5: 85:7b:6b:ee:73:2f:3c:ee:85:7a:d5:b3:3b:1f:9a: 4b:49:16:bd:e1:56:a1:46:b8:99:62:97:32:3c:b9: 6d:1e:07:fa:a7:fa:cd:11:4d:56:78:02:26:8a:4b: 3f:24:18:2c:5e:01:8b:63:a6:0a:36:79:b4:9a:a0: f7:46:11:3e:21:19:57:3c:05:2c:8d:49:48:aa:7d: dc:57:70:75:ec:5c:f0:a5:9a:5f:30:2e:85:35:81: 31:65:24:14:05:bd:80:f0:77:63:8f:b8:1c:cd:a9: 2d:37:7c:6d:0c:28:97:a8:3d:54:e3:67:11:90:6c: b4:d9:4f:fe:30:bc:b7:42:9c:77:c0:c0:5d:ca:b4: 07:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A8:FA:51:16:69:15:2F:A6:74:01:88:73:8C:26:30:E4:B8:94:CD X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/Haj6URZpFS-mdAGIc4wmMOS4lM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.155.0-5.149.157.255 IPv6: 2a02:1710:6::/48 Signature Algorithm: sha256WithRSAEncryption 66:b6:58:e3:e2:a4:b5:fd:99:6c:67:40:39:9c:8b:72:ae:e9: 93:f3:9b:05:89:1d:ea:48:d9:fa:b6:64:81:df:8e:a1:ff:6a: 7e:09:cc:bb:c8:b6:c5:a1:be:ae:12:7f:47:b5:f4:76:83:91: 8e:a6:ec:cc:0b:64:d6:b2:b7:d9:3e:e2:ea:c5:ad:e2:04:0e: 94:83:70:a2:6c:61:0c:cb:33:d4:60:f1:13:d5:40:c3:30:a8: 2b:94:af:05:ba:28:4a:ac:62:9f:d3:5c:5b:95:6f:9f:1e:d2: 52:3c:a0:b0:57:56:d9:ff:67:ac:5d:e4:cb:39:ed:18:7c:99: 0f:3a:4d:e3:d7:4d:4f:4d:eb:a5:91:fc:f7:8b:65:85:cc:f9: 73:71:9b:7e:ed:56:cc:ec:3d:be:a3:30:89:35:b0:a1:1e:b0: a8:1f:9b:05:23:a2:e0:dc:3b:7e:10:2a:4e:6b:0c:f3:6c:f7: da:9e:02:dc:25:41:e3:6b:b6:9c:c6:1b:d1:48:4b:8b:af:60: be:78:7b:31:73:bb:36:81:b5:ac:75:ed:90:07:17:31:a1:b9: 4f:b7:61:7a:f2:06:ab:d1:7c:24:00:f3:31:1c:bb:b3:68:d9: b2:64:f9:57:8e:57:1c:fa:15:31:a6:a9:0d:07:4e:e9:39:5a: 04:3f:1b:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt265YYIF97nujJhfED7v8rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjYwMTAxMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGE4ZmE1MTE2NjkxNTJmYTY3NDAxODg3MzhjMjYzMGU0Yjg5NGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz0b5qm4tANWOOfchJNEj64iDXy2 YrmaT06Qli9mPGLtULJoWdMsIa2RSvCdnq6chhfxuG19/mye5i2glil7yw3k/SGE bfxq52VkFDcm7xBLAFG5h1QTS+tvhrQXLqmFTZDqICtwyOqsrOCBjhEDqRJhPUca U/WFe2vucy887oV61bM7H5pLSRa94VahRriZYpcyPLltHgf6p/rNEU1WeAImiks/ JBgsXgGLY6YKNnm0mqD3RhE+IRlXPAUsjUlIqn3cV3B17FzwpZpfMC6FNYExZSQU Bb2A8Hdjj7gczaktN3xtDCiXqD1U42cRkGy02U/+MLy3Qpx3wMBdyrQHTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2o+lEWaRUvpnQBiHOMJjDkuJTNMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvSGFqNlVSWnBGUy1tZEFHSWM0d21NT1M0bE0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAAFlZsD BAEFlZwwDwQCAAIwCQMHACoCFxAABjANBgkqhkiG9w0BAQsFAAOCAQEAZrZY4+Kk tf2ZbGdAOZyLcq7pk/ObBYkd6kjZ+rZkgd+Oof9qfgnMu8i2xaG+rhJ/R7X0doOR jqbszAtk1rK32T7i6sWt4gQOlINwomxhDMsz1GDxE9VAwzCoK5SvBbooSqxin9Nc W5Vvnx7SUjygsFdW2f9nrF3kyzntGHyZDzpN49dNT03rpZH894tlhcz5c3Gbfu1W zOw9vqMwiTWwoR6wqB+bBSOi4Nw7fhAqTmsM82z32p4C3CVB42u2nMYb0UhLi69g vnh7MXO7NoG1rHXtkAcXMaG5T7dhevIGq9F8JADzMRy7s2jZsmT5V45XHPoVMaap DQdO6TlaBD8bpQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:26 2026 by rpki-client