This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1618x8-IPfKD5Y7pYvpY9S7Yh48.roa File: 1618x8-IPfKD5Y7pYvpY9S7Yh48.roa (raw, json) Hash identifier: 5bjdUUDXl324QyDjJozPC2jtafZK+saLbXCcpVUVTt4= Subject key identifier: D7:AD:7C:C7:CF:88:3D:F2:83:E5:8E:E9:62:FA:58:F5:2E:D8:87:8F Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C6977692670A3E45E47F98772F9CE7 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1618x8-IPfKD5Y7pYvpY9S7Yh48.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206124 IP address blocks: 5.154.102.0/24 maxlen: 24 5.154.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:97:76:92:67:0a:3e:45:e4:7f:98:77:2f:9c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7ad7cc7cf883df283e58ee962fa58f52ed8878f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:59:b4:8d:fa:58:00:4b:95:e2:66:62:fd:c7: e7:1c:db:f8:7e:3f:7c:c2:df:d2:b2:51:e0:d2:1e: b1:2a:3a:58:f6:1f:ef:06:59:ba:91:17:bb:26:f9: 83:4a:7c:65:7a:0a:57:fd:e8:33:cb:6e:0d:bc:ba: 59:0b:86:67:19:b5:99:ba:16:81:88:de:ed:39:77: 2c:02:fa:cb:06:8a:5d:84:3b:0e:f8:91:6e:9c:d6: d6:c7:8d:03:dd:75:d5:18:a1:57:d6:c6:fd:14:08: a7:cf:6e:6c:82:59:2e:d7:96:87:77:e6:ad:7c:a0: 17:a1:da:31:13:8a:51:91:28:b6:c8:e1:64:72:4b: b4:98:29:cf:9a:5f:79:cb:f7:ce:be:da:09:8f:c8: 48:a8:5d:42:3a:c8:34:d0:52:4f:d1:b1:8a:c0:76: 04:81:87:a4:87:8f:17:5e:88:9b:c8:a3:ee:86:98: 23:06:34:47:00:ed:e2:a0:61:85:37:5c:73:90:6f: 4a:01:f8:13:4d:07:03:de:d4:90:7e:0b:79:1f:7a: ce:25:eb:a6:2e:95:c4:73:65:b8:20:88:7f:dd:c4: 9a:b7:d5:48:00:23:3f:91:2c:d2:bf:ff:00:ad:ab: aa:1f:29:94:31:2b:b3:0a:fb:65:a2:9c:6c:53:51: 24:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AD:7C:C7:CF:88:3D:F2:83:E5:8E:E9:62:FA:58:F5:2E:D8:87:8F X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1618x8-IPfKD5Y7pYvpY9S7Yh48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.102.0/23 Signature Algorithm: sha256WithRSAEncryption 04:e2:4e:f7:b2:04:95:8b:cd:28:8c:cf:82:69:07:14:27:6e: 4c:5a:50:db:47:ea:4f:a0:0b:ec:68:fc:e0:7e:e1:c4:ec:a0: dd:e6:a7:b2:dc:53:87:0f:e4:bb:3f:2e:34:17:92:7e:1d:cd: ef:f0:e0:1e:ad:0d:82:96:45:13:c0:1c:ce:8c:bb:e4:6d:4e: 93:a6:87:ca:f1:a8:58:d1:8d:75:12:44:35:fa:5e:d7:9d:b8: f2:0a:4b:d3:d3:3a:7b:af:d7:42:07:89:d5:48:4e:ed:4d:be: 69:d4:12:8a:d0:cf:2b:18:f2:ea:0c:39:a4:f2:3b:1d:a9:87: 4b:c7:4f:9b:bf:f8:2a:73:6f:d5:a7:71:5b:44:09:7f:c5:ab: ae:3b:01:05:97:70:c7:2b:60:fe:48:ff:fa:bd:9b:b2:d7:9e: d4:af:30:e2:16:ed:65:ce:6c:6d:7e:2f:ab:12:c9:7e:cb:dc: 2c:82:d4:50:b7:be:f1:7f:0a:ff:10:5c:08:a9:9d:1a:d3:ce: 03:50:f3:5b:12:c7:67:16:49:f1:c0:4c:cd:83:e5:d2:93:58: d4:b0:48:a0:74:d2:18:45:ba:dc:4e:04:ef:be:46:6e:5d:4c: fd:62:1c:5a:f2:6e:0e:2d:fc:0b:a1:bc:a6:82:8a:13:e6:bd: af:85:57:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpd2kmcKPkXkf5h3L5znMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2FkN2NjN2NmODgzZGYyODNlNThlZTk2MmZhNThmNTJlZDg4NzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Vm0jfpYAEuV4mZi/cfnHNv4fj98 wt/SslHg0h6xKjpY9h/vBlm6kRe7JvmDSnxlegpX/egzy24NvLpZC4ZnGbWZuhaB iN7tOXcsAvrLBopdhDsO+JFunNbWx40D3XXVGKFX1sb9FAinz25sglku15aHd+at fKAXodoxE4pRkSi2yOFkcku0mCnPml95y/fOvtoJj8hIqF1COsg00FJP0bGKwHYE gYekh48XXoibyKPuhpgjBjRHAO3ioGGFN1xzkG9KAfgTTQcD3tSQfgt5H3rOJeum LpXEc2W4IIh/3cSat9VIACM/kSzSv/8ArauqHymUMSuzCvtlopxsU1Ek3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNetfMfPiD3yg+WO6WL6WPUu2IePMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvMTYxOHg4LUlQZktENVk3cFl2cFk5UzdZaDQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBZpmMA0G CSqGSIb3DQEBCwUAA4IBAQAE4k73sgSVi80ojM+CaQcUJ25MWlDbR+pPoAvsaPzg fuHE7KDd5qey3FOHD+S7Py40F5J+Hc3v8OAerQ2ClkUTwBzOjLvkbU6TpofK8ahY 0Y11EkQ1+l7XnbjyCkvT0zp7r9dCB4nVSE7tTb5p1BKK0M8rGPLqDDmk8jsdqYdL x0+bv/gqc2/Vp3FbRAl/xauuOwEFl3DHK2D+SP/6vZuy157UrzDiFu1lzmxtfi+r Esl+y9wsgtRQt77xfwr/EFwIqZ0a084DUPNbEsdnFknxwEzNg+XSk1jUsEigdNIY RbrcTgTvvkZuXUz9Yhxa8m4OLfwLobymgooT5r2vhVf7 -----END CERTIFICATE-----Generated at Sun Jan 25 08:51:47 2026 by rpki-client