This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/5HEcYsdzu9L22_TLT5sanVvYLp0.roa File: 5HEcYsdzu9L22_TLT5sanVvYLp0.roa (raw, json) Hash identifier: dTQSwuTPiy5DGWkByMPPdOz401xLD1RpcVBzZX612eQ= Subject key identifier: E4:71:1C:62:C7:73:BB:D2:F6:DB:F4:CB:4F:9B:1A:9D:5B:D8:2E:9D Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Certificate serial: 019B7B364B99DC7D010D526518DE5F251548 Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/5HEcYsdzu9L22_TLT5sanVvYLp0.roa Signing time: Thu 01 Jan 2026 20:18:34 +0000 ROA not before: Thu 01 Jan 2026 20:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199740 IP address blocks: 212.52.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4b:99:dc:7d:01:0d:52:65:18:de:5f:25:15:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Validity Not Before: Jan 1 20:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4711c62c773bbd2f6dbf4cb4f9b1a9d5bd82e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b0:11:bd:0e:40:c7:a1:23:b5:d9:ee:bd:a9: f3:94:7c:51:9a:00:f3:05:61:93:a7:ac:3b:f5:6a: 1e:73:e9:53:0c:be:89:27:6c:96:56:ba:2b:d2:d0: 35:2b:04:13:17:53:bd:42:fc:1b:3a:05:e1:48:23: c9:2a:33:1e:c6:35:49:5e:4b:35:04:e5:01:b4:c5: 4b:96:9e:78:5a:79:97:3b:72:a6:51:f1:66:5f:4c: 69:3c:40:7f:0b:81:05:e6:54:1c:ee:ce:0d:11:4e: 8d:fd:9f:7b:07:88:72:50:8d:9b:08:4d:0d:36:7f: 74:88:96:2d:ad:8e:bc:b8:cc:04:ef:be:7f:ce:38: 87:e7:7f:05:9b:75:ac:0f:27:ca:f8:5e:83:d2:1d: 3a:0e:f5:a3:fc:f6:da:c1:82:8b:fe:b3:7c:9d:03: 59:25:3f:83:c4:f5:f7:09:83:9c:1b:a8:2d:ba:aa: 6b:ca:99:10:db:39:42:5b:35:4f:00:39:65:00:b0: a0:d3:06:05:81:ea:b3:7f:30:30:dd:2c:97:45:d1: 11:02:60:dc:13:65:b8:65:42:f4:f0:f8:d4:85:ae: 80:c6:78:04:1a:70:bb:b3:6b:91:f8:f0:75:94:1d: 11:b2:f9:91:7d:6f:60:f2:a5:f3:7f:b1:28:a3:e9: c0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:71:1C:62:C7:73:BB:D2:F6:DB:F4:CB:4F:9B:1A:9D:5B:D8:2E:9D X509v3 Authority Key Identifier: keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/5HEcYsdzu9L22_TLT5sanVvYLp0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.52.12.0/24 Signature Algorithm: sha256WithRSAEncryption 46:bc:ef:4f:e6:6b:62:63:23:7b:7d:42:42:33:bf:13:c0:7a: 8b:6c:c6:56:59:a8:3b:56:32:e3:8a:3b:5c:58:d7:da:50:d5: 57:af:f6:85:a1:19:a5:46:fc:a2:f6:8c:f2:62:6b:51:cc:d4: 24:22:dc:eb:d6:0c:fa:57:a6:e1:56:10:30:46:ee:b0:8d:d7: a1:4e:5d:38:f0:72:fb:15:13:46:40:f6:5c:78:13:86:0f:5e: 57:23:36:5b:5a:c5:fe:c1:ac:8b:13:29:0d:5c:bb:73:61:44: 92:d7:c9:d5:8f:38:91:90:b0:57:4f:59:eb:59:73:8b:d2:fd: ad:2f:21:4b:d3:b2:7d:3a:47:68:bf:f9:e3:b8:6f:93:90:ac: 24:1c:fd:1d:aa:c9:f1:ec:b9:c1:f2:45:eb:49:7b:b2:ed:41: e5:c7:7f:e1:c7:3e:04:b3:62:05:e8:4d:aa:e8:e1:b4:ac:07: 2d:4c:11:4a:ad:58:d0:8a:42:1b:cc:9c:14:90:97:9d:57:b3: 35:e7:4b:80:44:f5:5e:f8:eb:e5:05:2b:97:3a:3f:a2:be:97: 83:5d:58:ed:bb:c4:4a:fb:38:db:58:7d:49:da:db:71:8e:8e: 1c:94:5a:79:fc:8b:ea:b5:ef:ce:81:18:c4:00:de:d3:b8:76: a0:3d:d9:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NkuZ3H0BDVJlGN5fJRVIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2 MmU1NmUwHhcNMjYwMTAxMjAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDcxMWM2MmM3NzNiYmQyZjZkYmY0Y2I0ZjliMWE5ZDViZDgyZTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bARvQ5Ax6EjtdnuvanzlHxRmgDz BWGTp6w79Woec+lTDL6JJ2yWVror0tA1KwQTF1O9QvwbOgXhSCPJKjMexjVJXks1 BOUBtMVLlp54WnmXO3KmUfFmX0xpPEB/C4EF5lQc7s4NEU6N/Z97B4hyUI2bCE0N Nn90iJYtrY68uMwE775/zjiH538Fm3WsDyfK+F6D0h06DvWj/PbawYKL/rN8nQNZ JT+DxPX3CYOcG6gtuqprypkQ2zlCWzVPADllALCg0wYFgeqzfzAw3SyXRdERAmDc E2W4ZUL08PjUha6AxngEGnC7s2uR+PB1lB0RsvmRfW9g8qXzf7Eoo+nA9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFORxHGLHc7vS9tv0y0+bGp1b2C6dMB8GA1UdIwQY MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt YjBiMzVhMzRlMzg4LzEvNUhFY1lzZHp1OUwyMl9UTFQ1c2FuVnZZTHAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4 LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1DQMMA0G CSqGSIb3DQEBCwUAA4IBAQBGvO9P5mtiYyN7fUJCM78TwHqLbMZWWag7VjLjijtc WNfaUNVXr/aFoRmlRvyi9ozyYmtRzNQkItzr1gz6V6bhVhAwRu6wjdehTl048HL7 FRNGQPZceBOGD15XIzZbWsX+wayLEykNXLtzYUSS18nVjziRkLBXT1nrWXOL0v2t LyFL07J9Okdov/njuG+TkKwkHP0dqsnx7LnB8kXrSXuy7UHlx3/hxz4Es2IF6E2q 6OG0rActTBFKrVjQikIbzJwUkJedV7M150uARPVe+OvlBSuXOj+ivpeDXVjtu8RK +zjbWH1J2ttxjo4clFp5/Ivqte/OgRjEAN7TuHagPdn4 -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:09 2026 by rpki-client