This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/HyTfL2K9EvoVaZy-KXOTgF1Obtg.roa File: HyTfL2K9EvoVaZy-KXOTgF1Obtg.roa (raw, json) Hash identifier: 0zA+P2Wj4q6cydJzTfe4tmDc4sztqJccFJv0Zen4ddc= Subject key identifier: 1F:24:DF:2F:62:BD:12:FA:15:69:9C:BE:29:73:93:80:5D:4E:6E:D8 Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5 Certificate serial: 019B7DCB34F08E5C05286EC77F2ED1291026 Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/HyTfL2K9EvoVaZy-KXOTgF1Obtg.roa Signing time: Fri 02 Jan 2026 08:20:27 +0000 ROA not before: Fri 02 Jan 2026 08:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197033 IP address blocks: 5.183.18.0/24 maxlen: 24 5.183.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:34:f0:8e:5c:05:28:6e:c7:7f:2e:d1:29:10:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5 Validity Not Before: Jan 2 08:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f24df2f62bd12fa15699cbe297393805d4e6ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b5:12:95:87:91:cf:4b:87:6b:44:6e:1e:24: 36:0f:89:ca:95:a4:0b:09:fc:84:aa:98:70:0e:9e: 2d:41:c6:9b:7e:58:6b:6f:04:a4:f5:3a:36:a8:0c: c4:66:e1:62:bd:d1:1b:97:0a:ce:d9:24:5e:50:a6: 8b:5c:75:9b:4e:78:e4:a2:46:fe:6c:41:03:01:c0: 4b:d7:0b:3d:ec:48:13:bc:e6:68:07:3f:ac:34:13: 8e:cc:5d:b6:a8:e2:ef:2c:af:23:63:86:b3:72:c2: 1f:c9:b6:89:2e:81:b5:fe:44:9a:bb:93:99:6f:7c: 33:85:f5:84:64:7d:d2:1c:24:f5:3d:96:7e:cf:cb: 69:d6:de:ba:87:46:97:86:31:e7:71:1c:bc:95:23: 4b:c3:e7:e4:ef:df:76:6e:07:6f:80:3a:0b:99:84: 60:16:90:0c:f3:8e:f7:81:ca:cc:62:99:d5:aa:d7: 31:40:fd:51:6d:49:26:36:86:37:88:25:67:e2:68: f5:50:0c:41:c7:21:ee:d7:d8:fb:32:8a:b3:d8:41: b6:f3:99:d3:da:fd:28:9f:aa:ec:0f:53:aa:5e:9c: cf:0e:0a:ca:55:1d:6f:f2:31:18:5b:dc:e1:15:9f: 61:df:f8:ed:c2:d6:8e:9b:15:3d:0b:9c:d7:70:2e: 28:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:24:DF:2F:62:BD:12:FA:15:69:9C:BE:29:73:93:80:5D:4E:6E:D8 X509v3 Authority Key Identifier: keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/HyTfL2K9EvoVaZy-KXOTgF1Obtg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.18.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:f2:26:1c:e6:51:a9:a1:5d:8f:73:5b:c4:e4:d6:a5:f9:c4: c0:3a:e1:1d:fa:33:eb:eb:90:dc:6b:88:15:67:49:e9:12:4b: 78:43:be:78:7c:31:d1:a9:71:72:ff:13:03:ba:b8:39:9e:5b: ba:1b:02:e9:26:27:00:2f:ce:98:30:58:ce:dd:ef:e4:6a:91: c0:0c:a7:22:27:82:9f:f0:7d:ea:d3:15:77:35:49:ed:6f:51: c5:2a:9f:13:f2:25:3a:07:d4:c7:55:76:d5:1b:d4:b4:2c:15: eb:3d:13:b1:a1:9c:1d:15:58:a2:93:81:2e:f9:58:e4:76:53: 1f:6a:e3:c1:47:de:47:fd:43:72:f1:d5:51:3d:23:82:9e:a2: b2:f1:94:ed:b0:f2:a2:fe:40:b8:40:3d:62:12:a3:79:c1:c1: 3e:aa:39:15:f8:be:8f:d0:fd:f2:61:87:2e:d1:58:a8:27:2c: 4e:24:11:5a:2c:47:82:2d:25:2b:f7:ad:9b:b2:86:94:6e:de: 39:ab:a7:c5:61:66:97:03:15:8b:3b:93:37:3c:e2:d8:44:35: cf:f8:f0:03:02:b5:31:9e:8e:35:ee:0f:3c:81:a2:8a:b7:31: a8:d0:03:c5:c6:61:d1:ba:27:a6:6b:04:f8:ec:72:62:16:08: c0:04:8e:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yzTwjlwFKG7Hfy7RKRAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMWY4NTE4OGQwODJmZDU2NDBiNWMzZmUxMjIxZjYwYzUw MWVkYjUwHhcNMjYwMTAyMDgyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjI0ZGYyZjYyYmQxMmZhMTU2OTljYmUyOTczOTM4MDVkNGU2ZWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbUSlYeRz0uHa0RuHiQ2D4nKlaQL CfyEqphwDp4tQcabflhrbwSk9To2qAzEZuFivdEblwrO2SReUKaLXHWbTnjkokb+ bEEDAcBL1ws97EgTvOZoBz+sNBOOzF22qOLvLK8jY4azcsIfybaJLoG1/kSau5OZ b3wzhfWEZH3SHCT1PZZ+z8tp1t66h0aXhjHncRy8lSNLw+fk7992bgdvgDoLmYRg FpAM8473gcrMYpnVqtcxQP1RbUkmNoY3iCVn4mj1UAxBxyHu19j7Moqz2EG285nT 2v0on6rsD1OqXpzPDgrKVR1v8jEYW9zhFZ9h3/jtwtaOmxU9C5zXcC4ohQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB8k3y9ivRL6FWmcvilzk4BdTm7YMB8GA1UdIwQY MBaAFDEfhRiNCC/VZAtcP+EiH2DFAe21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVItRkdJMElMOVZrQzF3XzRTSWZZTVVCN2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84ZmMzOTUtYjY3NC00MTM3LWJjNzUt OWJiZDFlZWJlMzNlLzEvSHlUZkwySzlFdm9WYVp5LUtYT1RnRjFPYnRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84ZmMzOTUtYjY3NC00MTM3LWJjNzUtOWJiZDFlZWJlMzNl LzEvTVItRkdJMElMOVZrQzF3XzRTSWZZTVVCN2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBbcSMA0G CSqGSIb3DQEBCwUAA4IBAQA/8iYc5lGpoV2Pc1vE5Nal+cTAOuEd+jPr65Dca4gV Z0npEkt4Q754fDHRqXFy/xMDurg5nlu6GwLpJicAL86YMFjO3e/kapHADKciJ4Kf 8H3q0xV3NUntb1HFKp8T8iU6B9THVXbVG9S0LBXrPROxoZwdFViik4Eu+VjkdlMf auPBR95H/UNy8dVRPSOCnqKy8ZTtsPKi/kC4QD1iEqN5wcE+qjkV+L6P0P3yYYcu 0VioJyxOJBFaLEeCLSUr962bsoaUbt45q6fFYWaXAxWLO5M3POLYRDXP+PADArUx no417g88gaKKtzGo0APFxmHRuiemawT47HJiFgjABI6H -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:36 2026 by rpki-client