This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/1-Hf4eX58KKzo4_KM5C2ubhMHnBs.roa File: 1-Hf4eX58KKzo4_KM5C2ubhMHnBs.roa (raw, json) Hash identifier: r3eyqyAhQZRU9zc7r7JWl8ugJKSkIQyLBoTEE1Y/lCw= Subject key identifier: F8:77:F8:79:7E:7C:28:AC:E8:E3:F2:8C:E4:2D:AE:6E:13:07:9C:1B Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Certificate serial: 019B8E54C5A2EFE5439CDEEF51412090FB9C Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/1-Hf4eX58KKzo4_KM5C2ubhMHnBs.roa Signing time: Mon 05 Jan 2026 13:24:38 +0000 ROA not before: Mon 05 Jan 2026 13:24:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197343 IP address blocks: 5.56.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:54:c5:a2:ef:e5:43:9c:de:ef:51:41:20:90:fb:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Validity Not Before: Jan 5 13:24:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f877f8797e7c28ace8e3f28ce42dae6e13079c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:73:f4:c2:18:84:7f:3c:12:1d:5e:89:5a:c9: 3b:d9:3b:ba:0c:c4:69:90:df:0f:10:54:29:c9:fe: e8:76:f9:ef:b7:7f:f2:a6:ed:36:5e:3c:b6:66:d3: 2b:9c:b3:c3:5f:47:20:75:ce:c4:b3:dd:32:5d:82: 24:ca:6e:6c:06:70:05:83:b0:67:c8:18:4d:65:f8: c0:08:42:be:ce:9f:c2:c0:8f:cd:b1:29:f0:69:c3: 7f:02:f1:8e:0c:37:f9:55:8f:b1:5b:28:35:b2:b2: 0b:29:17:b7:1c:2e:05:81:91:1a:8c:5b:37:1a:80: 43:77:e7:53:69:bb:99:42:d1:9e:a6:bf:a5:18:c0: cb:6c:f3:8e:a7:59:93:c7:b8:7c:c9:5e:0b:62:e2: c0:a6:23:25:a7:29:4f:46:43:dc:64:f9:62:be:c7: 8f:44:51:1a:d4:db:fb:1c:05:60:a4:6a:74:03:52: 33:7a:fb:18:30:04:a7:83:7d:7a:f6:63:47:80:e1: dc:5d:43:8b:6d:1a:f9:99:61:ad:84:d3:57:35:5e: 1c:f3:87:2f:5c:ec:d6:e4:cc:db:12:b4:38:ce:d2: 8d:07:df:cd:92:47:bc:b4:5e:d2:f0:b9:4b:07:2e: 21:3c:4f:85:85:3a:c3:60:f0:1b:85:1e:99:84:e7: b6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:77:F8:79:7E:7C:28:AC:E8:E3:F2:8C:E4:2D:AE:6E:13:07:9C:1B X509v3 Authority Key Identifier: keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/1-Hf4eX58KKzo4_KM5C2ubhMHnBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.128.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:78:a3:71:f6:1f:53:2a:9b:99:6d:0d:06:22:2e:e9:28:05: f3:1e:2f:81:ea:60:ab:22:7b:ae:40:8c:a1:7f:fb:a4:e3:f2: 6a:e2:21:a7:54:53:f2:23:ad:1f:ea:ab:00:45:c1:02:7d:b8: 12:ff:e7:96:1e:6d:84:82:d2:7c:6c:12:74:b9:cb:ec:bd:be: 2e:93:0c:5d:98:7b:0a:f4:9a:d3:67:a1:df:0c:f7:92:0a:99: 90:6d:93:d1:21:79:47:00:d4:e3:59:1b:9b:d1:c0:7f:11:51: 0d:fd:09:75:8b:f8:a8:15:d9:24:80:7f:8e:19:21:17:aa:13: 76:8c:49:9e:38:50:65:48:e3:34:63:ab:d8:33:0a:49:2e:88: 7c:e8:84:71:03:d3:6d:90:8b:36:65:50:b3:64:d5:3b:2f:4b: 7c:85:11:d5:79:ac:a5:3f:bf:cd:cc:50:b3:8f:69:41:4e:c0: d7:cc:ae:6f:8c:51:93:fb:a8:31:9e:6a:ee:5b:81:92:82:4e: ee:b0:8d:7b:a5:fa:b1:0d:31:b9:86:ad:55:1c:80:43:38:0a: 00:25:a4:48:4e:41:ea:d1:49:b7:20:13:45:60:5f:62:f4:7b: 89:f7:fc:69:58:89:47:c7:86:36:a0:f3:fd:32:ba:8c:0d:04: ce:2f:b0:15 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZuOVMWi7+VDnN7vUUEgkPucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0 ZDY0NjQwHhcNMjYwMTA1MTMyNDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODc3Zjg3OTdlN2MyOGFjZThlM2YyOGNlNDJkYWU2ZTEzMDc5YzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XP0whiEfzwSHV6JWsk72Tu6DMRp kN8PEFQpyf7odvnvt3/ypu02Xjy2ZtMrnLPDX0cgdc7Es90yXYIkym5sBnAFg7Bn yBhNZfjACEK+zp/CwI/NsSnwacN/AvGODDf5VY+xWyg1srILKRe3HC4FgZEajFs3 GoBDd+dTabuZQtGepr+lGMDLbPOOp1mTx7h8yV4LYuLApiMlpylPRkPcZPlivseP RFEa1Nv7HAVgpGp0A1IzevsYMASng3169mNHgOHcXUOLbRr5mWGthNNXNV4c84cv XOzW5MzbErQ4ztKNB9/Nkke8tF7S8LlLBy4hPE+FhTrDYPAbhR6ZhOe2twIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPh3+Hl+fCis6OPyjOQtrm4TB5wbMB8GA1UdIwQY MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt OTg5MTY2ODgxOTY5LzEvMS1IZjRlWDU4S0t6bzRfS001QzJ1YmhNSG5Ccy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTIvODQ0ZWViLWNkZjEtNDdmMS1iY2ZhLTk4OTE2Njg4MTk2 OS8xLzhUVXpPWjlWNjFMbXNpQU1mSzVDY3JkTlpHUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgU4gDAN BgkqhkiG9w0BAQsFAAOCAQEAinijcfYfUyqbmW0NBiIu6SgF8x4vgepgqyJ7rkCM oX/7pOPyauIhp1RT8iOtH+qrAEXBAn24Ev/nlh5thILSfGwSdLnL7L2+LpMMXZh7 CvSa02eh3wz3kgqZkG2T0SF5RwDU41kbm9HAfxFRDf0JdYv4qBXZJIB/jhkhF6oT doxJnjhQZUjjNGOr2DMKSS6IfOiEcQPTbZCLNmVQs2TVOy9LfIUR1XmspT+/zcxQ s49pQU7A18yub4xRk/uoMZ5q7luBkoJO7rCNe6X6sQ0xuYatVRyAQzgKACWkSE5B 6tFJtyATRWBfYvR7iff8aViJR8eGNqDz/TK6jA0Ezi+wFQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:22 2026 by rpki-client