This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/5H1OpW-AycH1O-bkgqM8Yvh65T0.roa File: 5H1OpW-AycH1O-bkgqM8Yvh65T0.roa (raw, json) Hash identifier: d9gll8e31C0axgcql2tfiqAMsE0s3zsOdBZT3TwLDh4= Subject key identifier: E4:7D:4E:A5:6F:80:C9:C1:F5:3B:E6:E4:82:A3:3C:62:F8:7A:E5:3D Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019B7CEE3CCAF1DC57D7BB9B683AD867B783 Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/5H1OpW-AycH1O-bkgqM8Yvh65T0.roa Signing time: Fri 02 Jan 2026 04:19:06 +0000 ROA not before: Fri 02 Jan 2026 04:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138997 IP address blocks: 149.126.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3c:ca:f1:dc:57:d7:bb:9b:68:3a:d8:67:b7:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jan 2 04:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e47d4ea56f80c9c1f53be6e482a33c62f87ae53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3c:ec:49:76:6b:a5:b2:09:56:e8:b0:63:15: 42:d5:98:cf:53:68:8e:92:22:3d:ed:a3:3f:97:69: 0f:17:ca:26:2a:36:ba:1b:60:8c:fb:31:54:d7:cc: 4b:2a:97:c8:56:17:3f:74:02:3e:88:46:41:83:04: 71:40:d7:ba:c4:a1:45:5e:63:8b:ee:d6:8b:19:ba: 48:79:73:2a:46:aa:78:df:16:fe:51:55:83:4b:3d: eb:61:e9:5b:2f:99:75:36:77:60:31:80:5e:b9:f2: a5:10:67:11:5a:39:2a:8e:64:ba:dd:2e:d4:2c:b0: 09:19:5c:bf:8e:28:75:4a:87:fe:dc:40:c7:1c:81: 62:6a:41:9e:8d:65:bc:7a:60:18:d2:80:d7:ec:d8: 8d:90:6f:c3:44:d3:ec:34:d1:a0:fc:fc:ae:86:60: 7d:6f:2b:89:3a:33:2d:d7:1e:4b:fb:aa:81:9e:82: 86:ef:e3:31:7a:e7:7b:07:6a:78:55:7c:8c:d7:f5: ce:fa:6a:d2:40:4f:6b:df:68:1d:52:ac:04:db:1e: f6:3b:84:eb:e9:1e:f8:f9:54:c4:9f:04:3d:94:fc: 22:c5:59:1c:6f:3d:a8:f2:c1:39:38:67:09:2a:4a: 81:4d:1f:3f:21:80:f6:05:8b:29:a2:76:9a:73:8e: d2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:7D:4E:A5:6F:80:C9:C1:F5:3B:E6:E4:82:A3:3C:62:F8:7A:E5:3D X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/5H1OpW-AycH1O-bkgqM8Yvh65T0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.126.92.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:e5:0f:29:52:9e:a5:1a:17:79:6e:e7:56:55:a9:52:0d:90: c4:59:6d:c2:d2:36:4b:95:11:1b:ea:3e:32:78:fc:22:88:3a: c1:2d:ff:91:35:a4:59:43:d3:0d:a5:be:c0:39:26:f2:bb:24: 36:b1:b0:96:99:b8:8b:7e:f6:e3:d6:9b:97:8d:fb:48:22:68: 62:15:71:96:2b:f5:fd:23:a0:09:84:d7:ac:da:d6:c6:b6:e5: b4:52:7d:d5:a1:ce:eb:6f:22:46:1a:9a:cf:07:2d:0f:e4:d4: 24:be:e1:52:82:d5:61:0d:b2:19:7c:bb:71:3c:f3:e6:2e:ce: e7:b4:66:9e:47:49:c9:86:1f:74:da:13:c4:73:91:f0:b9:85: 32:35:7a:f1:9b:93:d3:e2:2d:e6:93:3d:02:e2:76:9e:0c:67: 1b:ea:5a:10:95:43:f3:d3:9f:91:f5:c9:08:d3:bb:28:52:99: 66:02:40:bc:2b:ee:64:c4:b8:7a:18:e1:7a:bd:61:3c:28:21: 71:61:97:5a:ed:42:88:b2:31:63:4e:94:2d:88:6d:9e:4b:f4: 06:27:a5:88:bd:6a:cb:b1:32:92:c7:d3:10:c2:2a:2d:de:a2: a7:0a:0c:70:46:d7:b8:c6:3f:55:65:c8:26:98:59:73:24:ef: 4b:b5:d9:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87jzK8dxX17ubaDrYZ7eDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjYwMTAyMDQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDdkNGVhNTZmODBjOWMxZjUzYmU2ZTQ4MmEzM2M2MmY4N2FlNTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjzsSXZrpbIJVuiwYxVC1ZjPU2iO kiI97aM/l2kPF8omKja6G2CM+zFU18xLKpfIVhc/dAI+iEZBgwRxQNe6xKFFXmOL 7taLGbpIeXMqRqp43xb+UVWDSz3rYelbL5l1NndgMYBeufKlEGcRWjkqjmS63S7U LLAJGVy/jih1Sof+3EDHHIFiakGejWW8emAY0oDX7NiNkG/DRNPsNNGg/PyuhmB9 byuJOjMt1x5L+6qBnoKG7+Mxeud7B2p4VXyM1/XO+mrSQE9r32gdUqwE2x72O4Tr 6R74+VTEnwQ9lPwixVkcbz2o8sE5OGcJKkqBTR8/IYD2BYsponaac47S5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOR9TqVvgMnB9Tvm5IKjPGL4euU9MB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvNUgxT3BXLUF5Y0gxTy1ia2dxTThZdmg2NVQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClX5cMA0G CSqGSIb3DQEBCwUAA4IBAQAK5Q8pUp6lGhd5budWValSDZDEWW3C0jZLlREb6j4y ePwiiDrBLf+RNaRZQ9MNpb7AOSbyuyQ2sbCWmbiLfvbj1puXjftIImhiFXGWK/X9 I6AJhNes2tbGtuW0Un3Voc7rbyJGGprPBy0P5NQkvuFSgtVhDbIZfLtxPPPmLs7n tGaeR0nJhh902hPEc5HwuYUyNXrxm5PT4i3mkz0C4naeDGcb6loQlUPz05+R9ckI 07soUplmAkC8K+5kxLh6GOF6vWE8KCFxYZda7UKIsjFjTpQtiG2eS/QGJ6WIvWrL sTKSx9MQwiot3qKnCgxwRte4xj9VZcgmmFlzJO9Ltdke -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:36 2026 by rpki-client