This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/4HE55QqTfljWCn4cZ1ai8cvlh4Q.roa File: 4HE55QqTfljWCn4cZ1ai8cvlh4Q.roa (raw, json) Hash identifier: Urls4Wea48yb11KMoVdUctKI04Yz3x+qj0Xh8gfQ8ic= Subject key identifier: E0:71:39:E5:0A:93:7E:58:D6:0A:7E:1C:67:56:A2:F1:CB:E5:87:84 Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8 Certificate serial: 019B797DDAF62A2769B1A875596A277A8916 Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/4HE55QqTfljWCn4cZ1ai8cvlh4Q.roa Signing time: Thu 01 Jan 2026 12:17:29 +0000 ROA not before: Thu 01 Jan 2026 12:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58192 IP address blocks: 5.63.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:da:f6:2a:27:69:b1:a8:75:59:6a:27:7a:89:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8 Validity Not Before: Jan 1 12:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e07139e50a937e58d60a7e1c6756a2f1cbe58784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:79:b7:d6:8f:30:9e:ba:73:f3:3b:89:04:18: a6:99:35:0a:a3:6c:00:9d:87:a8:08:04:b0:ab:fe: b7:90:2b:2e:53:df:00:5c:4d:ba:71:8f:5a:5e:5a: 4d:f0:78:5a:75:df:a4:3d:ea:a5:10:ea:7e:36:58: 4b:80:f5:fb:b7:24:bb:e5:d9:2c:6e:07:b2:b5:9c: e5:88:c1:79:cd:f4:a5:d1:37:9c:39:8b:d4:5a:34: 32:18:57:66:ac:3c:99:d0:0c:54:3b:b1:9e:d2:99: 2b:34:10:d1:43:35:be:01:92:d4:5d:7c:ef:c1:d7: 9c:1e:28:dd:5e:a2:e8:a2:4d:42:50:81:fe:66:cf: 04:8f:5f:a5:dc:2f:21:cf:23:9c:76:29:a9:56:26: d4:46:82:1d:19:df:04:24:c4:a9:28:a4:a8:1f:4f: 11:47:47:a2:5f:64:c7:7e:ee:28:71:39:fc:e9:89: 71:3a:2a:ba:f3:67:68:a2:c6:e2:b0:dc:1e:91:78: a1:e0:f3:3e:04:05:38:61:e2:76:9b:43:cf:6f:39: f4:bf:6a:ff:39:3c:9d:55:8d:e2:64:d0:40:70:0b: 89:27:fd:99:e3:fb:e5:9e:9a:83:a8:64:0a:55:4c: 72:48:b3:da:af:02:d8:c9:0f:44:45:a7:d7:9c:ed: 9f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:71:39:E5:0A:93:7E:58:D6:0A:7E:1C:67:56:A2:F1:CB:E5:87:84 X509v3 Authority Key Identifier: keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/4HE55QqTfljWCn4cZ1ai8cvlh4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.23.0/24 Signature Algorithm: sha256WithRSAEncryption 98:26:68:8e:1d:1a:eb:e4:78:3e:86:70:c1:ad:cf:db:52:66: e8:90:7c:97:48:c7:3b:1f:88:1a:a7:70:91:d8:03:c8:56:57: ed:02:e1:b2:a9:d7:7c:b3:83:c2:c4:dd:93:ec:b8:9e:ab:53: ab:4e:00:d4:14:4b:75:1d:f7:39:5d:54:9e:78:b3:24:e1:12: 84:c4:65:9c:ff:4d:ca:86:1f:52:5b:9e:39:07:eb:fc:3f:f1: b7:51:f5:01:92:1b:c6:07:6f:48:68:e3:df:75:99:a4:f6:eb: a6:c9:bc:f8:9d:c4:0b:7b:70:96:78:db:d3:d0:cf:66:46:9c: ce:93:97:e5:98:fb:1d:b9:64:0a:ba:96:cd:87:93:ed:77:02: 58:14:d7:bc:a8:6b:60:63:75:e7:d2:ec:66:c8:7d:5d:25:ba: 50:20:17:58:92:25:8c:05:d3:c3:b6:4a:ee:a0:c4:81:ed:2c: 5b:8b:cc:11:8d:03:98:0a:15:01:5e:91:29:f9:b7:bc:a2:cb: 8d:14:62:97:9b:e5:75:36:d3:d7:21:bd:2d:5f:39:16:3f:27: 65:62:2f:66:b1:94:67:0e:0c:b7:f8:28:aa:9c:1b:29:77:17: c6:8a:43:56:25:ad:53:38:bf:64:51:c6:ba:b6:be:d2:08:88: 0e:02:69:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fdr2Kidpsah1WWoneokWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MTA0NmRjYjE4NWIwYmZkOTk3NjYyOGQ2OWExODlkM2Mz OTg3ZDgwHhcNMjYwMTAxMTIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDcxMzllNTBhOTM3ZTU4ZDYwYTdlMWM2NzU2YTJmMWNiZTU4Nzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Xm31o8wnrpz8zuJBBimmTUKo2wA nYeoCASwq/63kCsuU98AXE26cY9aXlpN8Hhadd+kPeqlEOp+NlhLgPX7tyS75dks bgeytZzliMF5zfSl0TecOYvUWjQyGFdmrDyZ0AxUO7Ge0pkrNBDRQzW+AZLUXXzv wdecHijdXqLook1CUIH+Zs8Ej1+l3C8hzyOcdimpVibURoIdGd8EJMSpKKSoH08R R0eiX2THfu4ocTn86YlxOiq682doosbisNwekXih4PM+BAU4YeJ2m0PPbzn0v2r/ OTydVY3iZNBAcAuJJ/2Z4/vlnpqDqGQKVUxySLParwLYyQ9ERafXnO2faQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOBxOeUKk35Y1gp+HGdWovHL5YeEMB8GA1UdIwQY MBaAFLYQRtyxhbC/2ZdmKNaaGJ08OYfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMt Y2YxZjJmYThlNWYyLzEvNEhFNTVRcVRmbGpXQ240Y1oxYWk4Y3ZsaDRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMtY2YxZjJmYThlNWYy LzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABT8XMA0G CSqGSIb3DQEBCwUAA4IBAQCYJmiOHRrr5Hg+hnDBrc/bUmbokHyXSMc7H4gap3CR 2APIVlftAuGyqdd8s4PCxN2T7Lieq1OrTgDUFEt1Hfc5XVSeeLMk4RKExGWc/03K hh9SW545B+v8P/G3UfUBkhvGB29IaOPfdZmk9uumybz4ncQLe3CWeNvT0M9mRpzO k5flmPsduWQKupbNh5PtdwJYFNe8qGtgY3Xn0uxmyH1dJbpQIBdYkiWMBdPDtkru oMSB7Sxbi8wRjQOYChUBXpEp+be8osuNFGKXm+V1NtPXIb0tXzkWPydlYi9msZRn Dgy3+CiqnBspdxfGikNWJa1TOL9kUca6tr7SCIgOAmli -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:46 2026 by rpki-client