This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/4dtT2zpOkX0M7815CYFyhrrEj7w.roa File: 4dtT2zpOkX0M7815CYFyhrrEj7w.roa (raw, json) Hash identifier: pUvuTTzJiPGDI0tk56sxaLiwIp0+DLwoX1SaGdq6b1Q= Subject key identifier: E1:DB:53:DB:3A:4E:91:7D:0C:EF:CD:79:09:81:72:86:BA:C4:8F:BC Certificate issuer: /CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465 Certificate serial: 019B7FF1A2A5CAC9B3A1111D6E9592902322 Authority key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/4dtT2zpOkX0M7815CYFyhrrEj7w.roa Signing time: Fri 02 Jan 2026 18:21:40 +0000 ROA not before: Fri 02 Jan 2026 18:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31400 IP address blocks: 5.132.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:a2:a5:ca:c9:b3:a1:11:1d:6e:95:92:90:23:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465 Validity Not Before: Jan 2 18:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1db53db3a4e917d0cefcd7909817286bac48fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e2:07:28:77:ab:e2:df:3f:73:af:a1:2a:b6: 6c:9d:81:ce:f0:94:7d:4d:1b:8d:9f:c6:1c:d1:84: fd:0c:64:df:63:53:fb:eb:bc:0c:89:13:d8:4f:61: 50:42:2c:d7:3b:76:70:8d:b3:f3:a6:a5:db:86:30: a9:a2:1c:69:b3:ef:5d:c4:21:bc:82:2c:98:7e:bb: 85:81:b7:0c:80:08:75:7f:ee:1b:e1:6d:0b:ed:ce: 53:32:87:18:1d:4c:df:9f:e3:8c:a5:7c:6d:f9:6f: 6c:04:d0:93:32:12:9a:54:c4:fc:52:13:08:57:ab: 3c:cb:ef:2f:a8:1a:d2:03:53:3f:15:e7:e2:0d:37: ab:d3:e9:68:5c:96:8e:96:e7:c0:05:06:45:d3:a1: d8:48:c0:cb:08:a6:b7:c5:17:9e:ed:1a:57:1d:61: f4:65:d3:93:f6:0c:cb:7f:91:44:55:9a:14:4d:99: 3f:62:76:a7:7e:b0:44:38:db:ef:ef:0c:4b:86:17: c4:59:83:9a:a6:ae:1c:e1:c4:45:c0:26:cd:ab:d2: 61:0b:17:9b:b9:23:29:e7:14:b7:b3:4c:00:b9:33: 2e:f7:5a:64:f3:34:45:ae:89:3f:87:8c:30:1c:12: ce:e5:1c:09:3f:91:5c:78:36:f7:93:94:99:3c:a3: 4d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DB:53:DB:3A:4E:91:7D:0C:EF:CD:79:09:81:72:86:BA:C4:8F:BC X509v3 Authority Key Identifier: keyid:1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/4dtT2zpOkX0M7815CYFyhrrEj7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.132.158.0/24 Signature Algorithm: sha256WithRSAEncryption 57:43:16:a5:72:a6:43:af:6d:e1:7b:c4:3e:45:d2:7f:ed:d0: 15:8f:91:c5:11:84:56:f7:01:f9:7d:d5:24:5f:3f:fb:40:e0: 44:9f:7a:b2:f0:6e:55:53:55:fc:f3:6b:82:9e:17:aa:ee:d4: 3d:c7:43:1b:13:20:c2:d9:23:b7:8b:27:bd:f1:85:ed:05:12: 62:86:70:54:72:89:10:f8:0f:d7:f1:34:a8:61:7b:8c:21:98: 18:cd:76:d4:49:e5:7d:a4:de:83:f1:9c:67:76:75:5e:91:67: 18:19:b1:9f:47:0a:66:b5:ab:22:6f:c1:cb:6c:c4:04:8e:89: b1:2e:f0:50:d7:69:b8:c3:93:66:49:26:c2:d1:70:ba:70:05: c0:1c:c9:5a:13:83:b1:13:dd:bf:31:56:21:2c:a3:55:87:f7: 7d:17:f4:ee:c0:b1:ce:f4:ca:e8:da:e9:e3:df:f7:16:cf:37: 23:48:89:48:52:7d:25:81:51:76:28:81:c9:dc:6d:01:55:29: 09:05:ab:3e:61:28:40:cd:8e:ce:d3:6e:73:21:03:db:77:2e: 40:df:3e:5e:76:05:14:2b:64:f9:2a:5a:9c:65:f9:f3:d7:aa: c8:27:df:fb:17:72:16:57:b7:cd:3d:51:b8:6c:95:be:ee:30: 4b:73:6d:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8aKlysmzoREdbpWSkCMiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNGEyMDIwYjgyZDAyOTRlOTBhMmQ2YjJjMGYyOGQxMTcz YjY0NjUwHhcNMjYwMTAyMTgyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWRiNTNkYjNhNGU5MTdkMGNlZmNkNzkwOTgxNzI4NmJhYzQ4ZmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuIHKHer4t8/c6+hKrZsnYHO8JR9 TRuNn8Yc0YT9DGTfY1P767wMiRPYT2FQQizXO3ZwjbPzpqXbhjCpohxps+9dxCG8 giyYfruFgbcMgAh1f+4b4W0L7c5TMocYHUzfn+OMpXxt+W9sBNCTMhKaVMT8UhMI V6s8y+8vqBrSA1M/FefiDTer0+loXJaOlufABQZF06HYSMDLCKa3xRee7RpXHWH0 ZdOT9gzLf5FEVZoUTZk/YnanfrBEONvv7wxLhhfEWYOapq4c4cRFwCbNq9JhCxeb uSMp5xS3s0wAuTMu91pk8zRFrok/h4wwHBLO5RwJP5FceDb3k5SZPKNNzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOHbU9s6TpF9DO/NeQmBcoa6xI+8MB8GA1UdIwQY MBaAFB5KICC4LQKU6QotaywPKNEXO2RlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGtvZ0lMZ3RBcFRwQ2kxckxBOG8wUmM3WkdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80YzQ4YmItMzY2Yy00MWY1LTliMmQt NTMwNDQwYzRmYTI5LzEvNGR0VDJ6cE9rWDBNNzgxNUNZRnlocnJFajd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy80YzQ4YmItMzY2Yy00MWY1LTliMmQtNTMwNDQwYzRmYTI5 LzEvSGtvZ0lMZ3RBcFRwQ2kxckxBOG8wUmM3WkdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABYSeMA0G CSqGSIb3DQEBCwUAA4IBAQBXQxalcqZDr23he8Q+RdJ/7dAVj5HFEYRW9wH5fdUk Xz/7QOBEn3qy8G5VU1X882uCnheq7tQ9x0MbEyDC2SO3iye98YXtBRJihnBUcokQ +A/X8TSoYXuMIZgYzXbUSeV9pN6D8ZxndnVekWcYGbGfRwpmtasib8HLbMQEjomx LvBQ12m4w5NmSSbC0XC6cAXAHMlaE4OxE92/MVYhLKNVh/d9F/TuwLHO9Mro2unj 3/cWzzcjSIlIUn0lgVF2KIHJ3G0BVSkJBas+YShAzY7O025zIQPbdy5A3z5edgUU K2T5KlqcZfnz16rIJ9/7F3IWV7fNPVG4bJW+7jBLc23N -----END CERTIFICATE-----Generated at Sun Jan 25 15:15:07 2026 by rpki-client