This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jh6DvRTpMPFZ9N3oOQ7d_TGPwPE.roa File: jh6DvRTpMPFZ9N3oOQ7d_TGPwPE.roa (raw, json) Hash identifier: AtIjRzXI8DeXftZ40dksGIEGqqVC5KRj4ArFCJibU4c= Subject key identifier: 8E:1E:83:BD:14:E9:30:F1:59:F4:DD:E8:39:0E:DD:FD:31:8F:C0:F1 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAB2E085424EF9BC043974BA110AE0 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jh6DvRTpMPFZ9N3oOQ7d_TGPwPE.roa Signing time: Thu 01 Jan 2026 00:17:31 +0000 ROA not before: Thu 01 Jan 2026 00:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13213 IP address blocks: 5.253.45.0/24 maxlen: 24 45.8.194.0/24 maxlen: 24 45.9.6.0/24 maxlen: 24 45.66.152.0/24 maxlen: 24 45.66.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b2:e0:85:42:4e:f9:bc:04:39:74:ba:11:0a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e1e83bd14e930f159f4dde8390eddfd318fc0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:03:eb:24:98:db:bc:0c:98:4b:4b:fb:cd:4d: a0:dd:38:fd:e0:c6:14:df:8a:06:39:fe:c5:18:46: 19:b2:a6:ea:1a:95:9d:6b:6f:76:8e:68:07:b4:9c: f9:76:cb:bb:d6:87:8b:53:b4:71:aa:0b:b9:24:6b: e2:6a:d2:9b:46:90:17:ba:d5:59:7b:e0:29:b0:8a: c9:33:00:49:57:be:49:63:ad:3e:27:71:73:39:ab: 92:f5:8a:f0:f0:59:2b:1a:a4:d0:76:25:3c:53:70: 34:98:51:a8:12:29:b5:b3:30:8e:33:83:a9:ec:5a: ec:dd:3d:fb:a0:cf:32:6b:bd:80:17:f4:e7:cc:92: 7c:51:2c:43:5e:57:4a:ab:e7:93:0a:9d:bb:eb:cd: dc:d4:66:b3:e5:d0:41:b9:a6:52:31:30:20:d2:c3: 4c:e3:ec:b9:3b:e1:6d:ec:34:b7:38:cd:85:0b:0d: a5:3e:51:25:05:31:cb:ce:a3:91:46:ee:92:00:78: 4f:c6:98:23:4b:3a:1f:ad:28:f2:23:78:4d:50:a5: 48:0d:db:6c:86:15:d4:1c:c1:60:47:a3:3d:3c:f1: 05:f1:73:3f:4e:ea:75:7e:b2:63:47:91:8d:ef:2e: fb:c0:66:1e:32:40:02:24:04:e2:93:48:38:24:96: 95:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1E:83:BD:14:E9:30:F1:59:F4:DD:E8:39:0E:DD:FD:31:8F:C0:F1 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jh6DvRTpMPFZ9N3oOQ7d_TGPwPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.45.0/24 45.8.194.0/24 45.9.6.0/24 45.66.152.0/24 45.66.154.0/24 Signature Algorithm: sha256WithRSAEncryption be:0a:6e:9d:38:e6:cb:6a:cc:b4:f5:88:05:73:53:11:6a:b0: 46:19:25:d9:49:5c:94:d5:7d:12:1f:80:8b:88:7d:ee:bf:ce: 26:38:bc:b6:92:12:f7:19:42:30:58:ef:7c:3d:ef:a5:7a:dd: 3c:62:05:cf:a2:c6:cb:f6:96:ab:36:c9:27:b1:e1:9a:55:79: b4:1a:c2:32:13:e9:82:ca:45:58:3e:54:6f:67:01:d7:36:c6: a2:94:77:43:dc:8e:ca:14:1b:37:01:03:fb:25:eb:74:db:91: 59:c0:b2:08:14:c3:5e:11:df:f2:c1:c6:67:5f:ef:f7:83:e4: b4:05:69:a9:d6:77:17:31:f7:47:da:17:da:c4:c2:ff:75:5c: 84:ec:b7:76:44:57:e7:30:77:96:f4:fd:64:f7:44:10:24:38: 31:86:8c:66:8a:2e:ce:16:ae:57:d9:b3:ac:61:fa:2f:8a:9d: 3e:a2:bf:5a:b6:ce:6c:9b:80:df:13:7a:c2:f0:ec:46:23:38: af:ba:68:d0:dd:81:43:c5:1b:ee:74:f0:3f:dc:47:7f:cc:c2: 3a:91:e2:af:98:9d:85:17:2f:0d:cf:98:94:a4:56:0c:e0:2e: de:13:46:4e:e3:95:3d:5c:9e:1f:fe:ba:3f:44:e9:4a:d1:31: 4e:c7:33:07 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt26rLghUJO+bwEOXS6EQrgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTFlODNiZDE0ZTkzMGYxNTlmNGRkZTgzOTBlZGRmZDMxOGZjMGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQPrJJjbvAyYS0v7zU2g3Tj94MYU 34oGOf7FGEYZsqbqGpWda292jmgHtJz5dsu71oeLU7Rxqgu5JGviatKbRpAXutVZ e+ApsIrJMwBJV75JY60+J3FzOauS9Yrw8FkrGqTQdiU8U3A0mFGoEim1szCOM4Op 7Frs3T37oM8ya72AF/TnzJJ8USxDXldKq+eTCp27683c1Gaz5dBBuaZSMTAg0sNM 4+y5O+Ft7DS3OM2FCw2lPlElBTHLzqORRu6SAHhPxpgjSzofrSjyI3hNUKVIDdts hhXUHMFgR6M9PPEF8XM/Tup1frJjR5GN7y77wGYeMkACJATik0g4JJaVFQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFI4eg70U6TDxWfTd6DkO3f0xj8DxMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvamg2RHZSVHBNUEZaOU4zb09RN2RfVEdQd1BFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABf0tAwQA LQjCAwQALQkGAwQALUKYAwQALUKaMA0GCSqGSIb3DQEBCwUAA4IBAQC+Cm6dOObL asy09YgFc1MRarBGGSXZSVyU1X0SH4CLiH3uv84mOLy2khL3GUIwWO98Pe+let08 YgXPosbL9parNsknseGaVXm0GsIyE+mCykVYPlRvZwHXNsailHdD3I7KFBs3AQP7 Jet025FZwLIIFMNeEd/ywcZnX+/3g+S0BWmp1ncXMfdH2hfaxML/dVyE7Ld2RFfn MHeW9P1k90QQJDgxhoxmii7OFq5X2bOsYfovip0+or9ats5sm4DfE3rC8OxGIziv umjQ3YFDxRvudPA/3Ed/zMI6keKvmJ2FFy8Nz5iUpFYM4C7eE0ZO45U9XJ4f/ro/ ROlK0TFOxzMH -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:49 2026 by rpki-client