This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/8hvOqdm8XRO6sXWDZkcaHc49vsM.roa File: 8hvOqdm8XRO6sXWDZkcaHc49vsM.roa (raw, json) Hash identifier: rWJpUZIpb36Ggr6bjwKyRkuAjSB5QQdFYyzRQ+KUdsA= Subject key identifier: F2:1B:CE:A9:D9:BC:5D:13:BA:B1:75:83:66:47:1A:1D:CE:3D:BE:C3 Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b Certificate serial: 019B79EC1ECF33642E00D79D2893A1F4F284 Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/8hvOqdm8XRO6sXWDZkcaHc49vsM.roa Signing time: Thu 01 Jan 2026 14:17:56 +0000 ROA not before: Thu 01 Jan 2026 14:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206334 IP address blocks: 5.62.52.0/24 maxlen: 24 5.62.53.0/24 maxlen: 24 5.62.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:1e:cf:33:64:2e:00:d7:9d:28:93:a1:f4:f2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b Validity Not Before: Jan 1 14:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f21bcea9d9bc5d13bab1758366471a1dce3dbec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:57:2c:ff:ca:22:cc:65:5f:b2:d4:cf:9a:01: 8f:51:18:c4:28:06:b9:ed:64:3c:23:8e:5e:27:86: 8c:50:54:1c:f0:50:f8:da:67:f3:4c:c2:8d:4e:74: 30:5b:b8:5c:75:38:52:6b:93:60:91:0e:fe:47:75: 4f:b6:d9:04:03:84:35:0a:7e:5b:1c:cf:45:1e:6c: db:e7:c3:db:91:86:59:4d:a4:56:0d:4b:a4:39:c5: 0f:f7:76:b2:5c:e5:e6:0c:4b:1f:52:00:27:4b:0b: a4:42:a3:6b:a4:16:79:b9:62:af:29:73:8a:a0:68: 14:b6:64:5f:c3:05:8d:1a:2c:5e:c5:a1:24:3c:4d: 38:e2:2e:d8:32:a7:82:6b:30:79:7b:ad:a4:52:af: 33:19:11:67:cf:d7:b8:77:bf:83:27:69:0c:0b:4a: 6c:fa:a3:41:44:22:e8:b8:a4:43:e4:0e:5e:19:71: ab:a3:f0:cd:90:b5:12:8e:ed:d5:ba:bb:9b:54:71: 47:f6:36:37:15:c5:13:c2:43:28:22:8b:28:50:75: e5:60:cc:1c:d2:95:cc:78:a0:2a:4f:dc:2f:86:4a: 01:3f:97:8d:ed:4a:56:de:39:61:b7:3f:00:d6:b0: db:3c:e5:48:c0:c7:e7:37:a0:7b:90:34:c3:21:6c: 19:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1B:CE:A9:D9:BC:5D:13:BA:B1:75:83:66:47:1A:1D:CE:3D:BE:C3 X509v3 Authority Key Identifier: keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/8hvOqdm8XRO6sXWDZkcaHc49vsM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.62.52.0-5.62.54.255 Signature Algorithm: sha256WithRSAEncryption 05:5e:6a:02:58:1b:e7:50:e2:e9:66:c9:cc:1f:f7:6d:6c:9b: da:99:e2:d6:5b:9b:04:0d:f7:b5:b7:dc:0f:2a:2a:6f:c0:5a: 82:cb:88:38:f5:7a:28:4b:44:3e:4c:17:3a:e9:ff:0f:c0:0a: e3:3a:c5:97:80:ba:15:8f:7b:6b:c2:e4:46:d2:a7:70:71:e7: 64:ad:77:9a:cc:e9:82:fd:03:7e:ef:78:85:68:65:e9:c4:53: 23:4a:52:bf:c9:0b:9c:5c:db:2c:f9:c2:3a:4b:2d:c1:41:a8: 15:97:af:6a:59:1d:c9:c3:d5:49:bc:03:e5:06:eb:6f:02:5f: cb:d8:7f:dd:83:61:d4:8f:cd:41:52:14:2d:23:b4:23:81:6b: 8a:3a:0a:54:d9:23:a4:43:67:63:26:94:c4:7a:ee:90:73:74: a4:2c:a9:bc:fb:4b:eb:9b:cb:90:71:68:79:83:3e:bd:4b:e1: cd:86:88:eb:06:c6:a3:cd:e9:41:01:81:f3:fe:5f:ce:c7:e2: 82:69:95:88:7f:de:f6:d7:7c:e3:fb:99:50:61:45:8e:3f:36: c2:a1:a8:d5:7f:f2:74:66:fe:af:7d:80:55:96:8a:fe:a7:04: 47:58:51:d6:ff:f6:99:e2:65:0d:8f:20:de:12:31:3c:8c:50: 91:42:ad:1e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt57B7PM2QuANedKJOh9PKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDczMzZmYTkxNTcyMWNlM2JmZWUyMTdmNGU5OTE2NGRi OTUzMmIwHhcNMjYwMTAxMTQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjFiY2VhOWQ5YmM1ZDEzYmFiMTc1ODM2NjQ3MWExZGNlM2RiZWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVcs/8oizGVfstTPmgGPURjEKAa5 7WQ8I45eJ4aMUFQc8FD42mfzTMKNTnQwW7hcdThSa5NgkQ7+R3VPttkEA4Q1Cn5b HM9FHmzb58PbkYZZTaRWDUukOcUP93ayXOXmDEsfUgAnSwukQqNrpBZ5uWKvKXOK oGgUtmRfwwWNGixexaEkPE044i7YMqeCazB5e62kUq8zGRFnz9e4d7+DJ2kMC0ps +qNBRCLouKRD5A5eGXGro/DNkLUSju3VurubVHFH9jY3FcUTwkMoIosoUHXlYMwc 0pXMeKAqT9wvhkoBP5eN7UpW3jlhtz8A1rDbPOVIwMfnN6B7kDTDIWwZxQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFPIbzqnZvF0TurF1g2ZHGh3OPb7DMB8GA1UdIwQY MBaAFF3XM2+pFXIc47/uIX9OmRZNuVMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNzQ0YmQtZjZkOS00Zjc0LThjMDEt OGM0YmM0NTkyN2EzLzEvOGh2T3FkbThYUk82c1hXRFprY2FIYzQ5dnNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lNzQ0YmQtZjZkOS00Zjc0LThjMDEtOGM0YmM0NTkyN2Ez LzEvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAIFPjQD BAAFPjYwDQYJKoZIhvcNAQELBQADggEBAAVeagJYG+dQ4ulmycwf921sm9qZ4tZb mwQN97W33A8qKm/AWoLLiDj1eihLRD5MFzrp/w/ACuM6xZeAuhWPe2vC5EbSp3Bx 52Std5rM6YL9A37veIVoZenEUyNKUr/JC5xc2yz5wjpLLcFBqBWXr2pZHcnD1Um8 A+UG628CX8vYf92DYdSPzUFSFC0jtCOBa4o6ClTZI6RDZ2MmlMR67pBzdKQsqbz7 S+uby5BxaHmDPr1L4c2GiOsGxqPN6UEBgfP+X87H4oJplYh/3vbXfOP7mVBhRY4/ NsKhqNV/8nRm/q99gFWWiv6nBEdYUdb/9pniZQ2PIN4SMTyMUJFCrR4= -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:35 2026 by rpki-client