This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/wHo6ZTM3-jzipse2lB9xc8s3uRA.roa File: wHo6ZTM3-jzipse2lB9xc8s3uRA.roa (raw, json) Hash identifier: 4oFkl4sS+vN5C2DeyY08mCPgjzjmSD8SNhBeGnmU75Y= Subject key identifier: C0:7A:3A:65:33:37:FA:3C:E2:A6:C7:B6:94:1F:71:73:CB:37:B9:10 Certificate issuer: /CN=38227a96fa64ad95240f0aee0bd374646c6bbee2 Certificate serial: 019B7C7F1137A1681FF92646A25E26379745 Authority key identifier: 38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/wHo6ZTM3-jzipse2lB9xc8s3uRA.roa Signing time: Fri 02 Jan 2026 02:17:40 +0000 ROA not before: Fri 02 Jan 2026 02:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8680 IP address blocks: 5.253.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:11:37:a1:68:1f:f9:26:46:a2:5e:26:37:97:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38227a96fa64ad95240f0aee0bd374646c6bbee2 Validity Not Before: Jan 2 02:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c07a3a653337fa3ce2a6c7b6941f7173cb37b910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5d:18:05:db:23:ce:fb:e6:1a:6e:de:47:1b: ff:84:0f:6e:ef:c2:bc:4c:90:22:04:d7:1f:0e:e3: b8:52:d2:6d:ba:83:49:cd:97:b8:d1:91:b2:f9:63: 43:fa:e4:66:79:fd:8f:bc:a6:60:d3:6b:a1:c8:05: 29:1e:b8:e8:04:43:22:88:b1:cb:b4:e7:9b:9c:9b: 82:88:60:be:15:2a:66:16:3f:62:d2:b0:55:52:7d: 7b:cd:63:90:eb:37:05:e3:f5:63:45:c7:cf:e9:5f: fc:84:26:67:78:9f:3b:a8:7e:a6:46:67:1e:86:f7: 78:a2:4f:8c:f0:2e:87:c7:a5:9b:f0:0c:73:8c:27: b1:86:98:62:e6:bf:1c:85:da:fc:75:28:f2:d7:e8: 91:f3:60:86:4b:2d:4e:32:f8:c0:be:fa:b2:8f:e2: 6a:12:07:f4:0b:1a:e9:a1:51:0f:7f:28:2e:8b:5d: dc:0d:66:cf:10:07:52:9c:d8:5b:53:c1:63:53:f7: da:53:3f:42:9c:ab:42:f3:78:cb:18:1e:e9:99:2d: 55:d8:75:44:cc:2b:5f:3d:3d:fb:5d:89:fc:ae:d9: 9e:97:25:c2:92:9d:5c:ee:b8:d6:26:5c:65:2e:67: 1a:a9:6d:b6:0c:eb:97:ec:fc:6c:e8:6b:d9:59:c8: e0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7A:3A:65:33:37:FA:3C:E2:A6:C7:B6:94:1F:71:73:CB:37:B9:10 X509v3 Authority Key Identifier: keyid:38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/wHo6ZTM3-jzipse2lB9xc8s3uRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.76.0/24 Signature Algorithm: sha256WithRSAEncryption b1:05:a0:6b:a1:f2:c8:07:68:7e:c5:5d:96:80:82:f3:6d:81: 69:76:4d:98:a3:d7:90:ea:b9:8f:25:4f:dc:a0:06:c6:8f:91: c0:34:ef:04:de:2c:79:3c:96:91:35:ca:c2:0d:bc:c9:b4:89: 87:c6:37:42:69:08:2c:d8:63:f1:e5:52:cd:dc:1a:c9:82:c5: a6:3b:95:7c:ac:3b:c6:f8:cc:13:68:51:0e:46:97:5d:b2:d7: a4:4d:7a:13:ac:36:f1:a1:b7:48:a9:2f:c0:9e:a5:9a:6d:eb: e5:c2:e5:a1:d9:74:78:d9:88:dd:f7:25:39:11:ba:45:55:3b: 30:0e:27:4b:9b:0f:08:d6:c8:02:82:0d:6c:38:81:32:a9:5f: 4b:20:0a:be:53:f1:91:01:1e:f9:7e:a8:ec:69:72:05:17:af: 86:f6:40:02:08:12:48:0e:9b:0c:98:21:e6:ac:5b:ea:58:54: 3c:61:bb:db:db:8b:27:f9:27:b5:ef:91:4b:e2:da:e3:ce:a8: 97:67:f6:5b:b2:d9:4a:c7:85:2d:d9:81:f8:a6:3b:a5:05:b2: 90:ef:0f:d3:85:04:72:c7:e9:f9:cc:05:07:30:c7:23:5e:eb: 91:01:13:92:9d:39:4d:82:7a:cd:09:ae:31:7a:fc:19:6c:d6: 58:96:92:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fxE3oWgf+SZGol4mN5dFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjI3YTk2ZmE2NGFkOTUyNDBmMGFlZTBiZDM3NDY0NmM2 YmJlZTIwHhcNMjYwMTAyMDIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDdhM2E2NTMzMzdmYTNjZTJhNmM3YjY5NDFmNzE3M2NiMzdiOTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq10YBdsjzvvmGm7eRxv/hA9u78K8 TJAiBNcfDuO4UtJtuoNJzZe40ZGy+WND+uRmef2PvKZg02uhyAUpHrjoBEMiiLHL tOebnJuCiGC+FSpmFj9i0rBVUn17zWOQ6zcF4/VjRcfP6V/8hCZneJ87qH6mRmce hvd4ok+M8C6Hx6Wb8AxzjCexhphi5r8chdr8dSjy1+iR82CGSy1OMvjAvvqyj+Jq Egf0CxrpoVEPfygui13cDWbPEAdSnNhbU8FjU/faUz9CnKtC83jLGB7pmS1V2HVE zCtfPT37XYn8rtmelyXCkp1c7rjWJlxlLmcaqW22DOuX7Pxs6GvZWcjg+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMB6OmUzN/o84qbHtpQfcXPLN7kQMB8GA1UdIwQY MBaAFDgiepb6ZK2VJA8K7gvTdGRsa77iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NKNmx2cGtyWlVrRHdydUM5TjBaR3hydnVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xY2Y5YWMtMTBkNC00YTVlLWE3MDYt ZDFjOWJhMDhmNTU5LzEvd0hvNlpUTTMtanppcHNlMmxCOXhjOHMzdVJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xY2Y5YWMtMTBkNC00YTVlLWE3MDYtZDFjOWJhMDhmNTU5 LzEvT0NKNmx2cGtyWlVrRHdydUM5TjBaR3hydnVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABf1MMA0G CSqGSIb3DQEBCwUAA4IBAQCxBaBrofLIB2h+xV2WgILzbYFpdk2Yo9eQ6rmPJU/c oAbGj5HANO8E3ix5PJaRNcrCDbzJtImHxjdCaQgs2GPx5VLN3BrJgsWmO5V8rDvG +MwTaFEORpddstekTXoTrDbxobdIqS/AnqWabevlwuWh2XR42Yjd9yU5EbpFVTsw DidLmw8I1sgCgg1sOIEyqV9LIAq+U/GRAR75fqjsaXIFF6+G9kACCBJIDpsMmCHm rFvqWFQ8Ybvb24sn+Se175FL4trjzqiXZ/ZbstlKx4Ut2YH4pjulBbKQ7w/ThQRy x+n5zAUHMMcjXuuRAROSnTlNgnrNCa4xevwZbNZYlpIn -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:46 2026 by rpki-client