This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/h9nPAlU3s6KxTj5jBnBj5xZRCPU.roa File: h9nPAlU3s6KxTj5jBnBj5xZRCPU.roa (raw, json) Hash identifier: 1Mi5lnnLXBxwQz2RK1kt7WBVIV9EaESr88qtKCm96w8= Subject key identifier: 87:D9:CF:02:55:37:B3:A2:B1:4E:3E:63:06:70:63:E7:16:51:08:F5 Certificate issuer: /CN=5bf81435ed13789895f375dc34d04ce91aca4744 Certificate serial: 019B7D5B3769B348CCD288934E1502E48314 Authority key identifier: 5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/h9nPAlU3s6KxTj5jBnBj5xZRCPU.roa Signing time: Fri 02 Jan 2026 06:18:08 +0000 ROA not before: Fri 02 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3308 IP address blocks: 158.233.228.0/24 maxlen: 24 158.233.229.0/24 maxlen: 24 158.233.242.0/24 maxlen: 24 158.233.243.0/24 maxlen: 24 158.233.244.0/24 maxlen: 24 158.233.245.0/24 maxlen: 24 158.233.246.0/24 maxlen: 24 158.233.247.0/24 maxlen: 24 158.233.248.0/24 maxlen: 24 158.233.249.0/24 maxlen: 24 158.233.250.0/24 maxlen: 24 158.233.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:37:69:b3:48:cc:d2:88:93:4e:15:02:e4:83:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bf81435ed13789895f375dc34d04ce91aca4744 Validity Not Before: Jan 2 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87d9cf025537b3a2b14e3e63067063e7165108f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fa:a4:45:19:d0:f2:0e:50:0f:21:ab:5e:3e: f6:cc:90:f5:63:a8:c6:cc:da:f2:9e:b8:30:7e:e0: c4:3e:07:f7:6b:39:c9:07:49:93:08:1f:68:41:6a: 06:47:12:47:48:0b:d4:19:97:e3:24:31:82:31:86: 8c:3e:15:27:1b:5a:be:ec:77:dc:8e:2a:98:1c:ec: b1:56:f1:16:ac:ee:77:9e:86:a5:7f:59:e1:d3:29: 04:6e:2c:9c:cb:7c:f6:7d:4b:68:3b:67:2b:4f:e9: 7a:e1:05:d6:8b:4a:73:2a:ef:49:2b:55:03:c1:92: 5a:dc:54:55:cb:98:84:16:18:b2:c6:4e:36:d1:05: 16:6a:85:e9:36:be:af:59:49:fe:b7:f0:bc:87:a6: f2:99:4c:45:62:6a:e2:56:0a:52:28:c8:fd:89:30: aa:07:1b:09:2b:f7:66:55:64:ad:0b:2f:75:1c:4a: 7e:ce:b3:8d:c0:8d:f4:95:8b:da:28:3e:a6:3e:54: 78:81:22:75:e2:3e:c3:7b:2d:56:e5:7b:14:86:0b: 76:c3:a8:09:84:b2:62:1b:7b:b8:3a:d5:a0:c4:31: 0b:c9:9c:00:0c:e6:1b:d1:b5:9c:da:34:bf:45:80: f5:94:e2:6e:93:d1:34:a4:bf:57:d0:2a:76:95:55: a2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D9:CF:02:55:37:B3:A2:B1:4E:3E:63:06:70:63:E7:16:51:08:F5 X509v3 Authority Key Identifier: keyid:5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/h9nPAlU3s6KxTj5jBnBj5xZRCPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.233.228.0/23 158.233.242.0-158.233.251.255 Signature Algorithm: sha256WithRSAEncryption 60:aa:be:b4:21:80:da:85:47:77:a2:dd:14:02:cb:28:a3:89: a7:5e:f8:48:c5:93:2e:55:22:a9:ad:3d:d5:ee:58:97:d0:9a: da:23:f3:76:98:3f:32:6c:ac:78:a9:6f:66:ff:18:61:2d:2f: 14:c8:ba:e6:88:ee:e6:19:27:7b:ae:61:ee:77:3b:91:5a:99: 1e:8a:15:5e:08:df:3b:b0:74:d3:72:ec:25:57:66:71:e7:e6: ff:a1:ff:37:07:1a:7d:06:ee:0d:bc:74:4a:de:b8:ca:32:22: 22:55:d5:71:46:ab:ea:50:fc:fd:f0:86:b3:c5:43:ce:45:0b: 07:79:07:d9:4a:da:fe:ff:1c:ae:76:11:56:50:7c:17:cb:6a: 2c:fb:39:84:c3:56:23:32:6e:bd:8f:51:1f:1b:10:c4:90:cc: 8a:4f:7b:81:b8:8a:6e:3a:8d:11:4e:91:58:61:6b:cb:a6:4a: 17:f0:ce:a1:19:26:44:c2:ce:30:68:a6:12:a6:0f:2f:64:6c: 3a:13:52:9a:d6:72:c3:ec:63:f9:ac:0f:2a:66:fe:0e:8b:9c: 66:bf:73:3b:5f:85:52:b3:43:93:ff:ff:ed:b5:28:44:15:0c: c4:eb:b7:31:59:47:4e:65:34:16:2e:be:7a:1b:4a:16:76:73: 35:98:cd:97 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9Wzdps0jM0oiTThUC5IMUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZjgxNDM1ZWQxMzc4OTg5NWYzNzVkYzM0ZDA0Y2U5MWFj YTQ3NDQwHhcNMjYwMTAyMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2Q5Y2YwMjU1MzdiM2EyYjE0ZTNlNjMwNjcwNjNlNzE2NTEwOGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PqkRRnQ8g5QDyGrXj72zJD1Y6jG zNrynrgwfuDEPgf3aznJB0mTCB9oQWoGRxJHSAvUGZfjJDGCMYaMPhUnG1q+7Hfc jiqYHOyxVvEWrO53noalf1nh0ykEbiycy3z2fUtoO2crT+l64QXWi0pzKu9JK1UD wZJa3FRVy5iEFhiyxk420QUWaoXpNr6vWUn+t/C8h6bymUxFYmriVgpSKMj9iTCq BxsJK/dmVWStCy91HEp+zrONwI30lYvaKD6mPlR4gSJ14j7Dey1W5XsUhgt2w6gJ hLJiG3u4OtWgxDELyZwADOYb0bWc2jS/RYD1lOJuk9E0pL9X0Cp2lVWirwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFIfZzwJVN7OisU4+YwZwY+cWUQj1MB8GA1UdIwQY MBaAFFv4FDXtE3iYlfN13DTQTOkaykdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV19nVU5lMFRlSmlWODNYY05OQk02UnJLUjBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zZDRiYzUtYzM2My00MTVmLWIzZGEt NDhlNGNjNmIzM2EzLzEvaDluUEFsVTNzNkt4VGo1akJuQmo1eFpSQ1BVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8zZDRiYzUtYzM2My00MTVmLWIzZGEtNDhlNGNjNmIzM2Ez LzEvV19nVU5lMFRlSmlWODNYY05OQk02UnJLUjBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBnunkMAwD BAGe6fIDBAKe6fgwDQYJKoZIhvcNAQELBQADggEBAGCqvrQhgNqFR3ei3RQCyyij iade+EjFky5VIqmtPdXuWJfQmtoj83aYPzJsrHipb2b/GGEtLxTIuuaI7uYZJ3uu Ye53O5FamR6KFV4I3zuwdNNy7CVXZnHn5v+h/zcHGn0G7g28dEreuMoyIiJV1XFG q+pQ/P3whrPFQ85FCwd5B9lK2v7/HK52EVZQfBfLaiz7OYTDViMybr2PUR8bEMSQ zIpPe4G4im46jRFOkVhha8umShfwzqEZJkTCzjBophKmDy9kbDoTUprWcsPsY/ms Dypm/g6LnGa/cztfhVKzQ5P//+21KEQVDMTrtzFZR05lNBYuvnobShZ2czWYzZc= -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:37 2026 by rpki-client