This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/heDTdXiIU3U5I0MIE__M9Lti7cM.roa File: heDTdXiIU3U5I0MIE__M9Lti7cM.roa (raw, json) Hash identifier: znxQVerRqN+xoXF1iL3YCKDXrvt5ZgceZ8vYsUDl8wQ= Subject key identifier: 85:E0:D3:75:78:88:53:75:39:23:43:08:13:FF:CC:F4:BB:62:ED:C3 Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638 Certificate serial: 019B7C136101633865EB7AE4323A785CB2A5 Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/heDTdXiIU3U5I0MIE__M9Lti7cM.roa Signing time: Fri 02 Jan 2026 00:20:03 +0000 ROA not before: Fri 02 Jan 2026 00:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58267 IP address blocks: 5.145.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:61:01:63:38:65:eb:7a:e4:32:3a:78:5c:b2:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638 Validity Not Before: Jan 2 00:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85e0d375788853753923430813ffccf4bb62edc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:84:fc:f9:83:f8:4b:4a:c7:82:6c:42:7d:2f: 3a:34:d9:29:13:00:d8:9f:72:b1:2f:7c:53:9d:3d: 87:39:98:e5:3e:ae:51:59:6a:56:a7:41:22:01:d5: b3:af:57:cf:f4:2f:87:3c:16:be:9a:ca:1f:34:59: dc:3e:a2:d9:5e:96:eb:39:26:d6:a3:f7:32:40:f0: fb:7a:d6:89:7b:31:62:01:a3:d5:bf:d4:a0:12:c8: c9:e2:04:82:c5:3d:5a:d6:92:9d:64:66:2e:14:fe: 77:f3:dd:a0:ca:75:da:1a:3e:5d:58:45:01:75:1f: cd:eb:07:78:aa:b2:37:c0:bb:c6:76:31:cb:86:51: b6:b4:2d:20:24:f9:98:01:e6:3e:4e:ce:5b:ec:d5: 7d:ab:9b:61:9d:7e:50:16:8b:24:e9:4b:a7:ad:41: f2:51:f6:3f:1e:c9:0c:41:35:15:85:e8:1b:0d:5b: 83:8f:b8:22:0f:b3:02:94:50:5e:24:88:e7:ff:89: 8d:16:c7:04:99:0a:28:7e:67:8a:5e:73:c9:0a:19: f3:e2:4b:8b:93:08:4d:9a:02:03:87:aa:41:e7:76: 60:3a:5a:b6:ac:fb:8e:28:cb:de:67:6d:a5:e0:d3: aa:bc:c5:c7:ee:f5:76:bc:f7:0b:67:9a:6c:fb:81: 28:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E0:D3:75:78:88:53:75:39:23:43:08:13:FF:CC:F4:BB:62:ED:C3 X509v3 Authority Key Identifier: keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/heDTdXiIU3U5I0MIE__M9Lti7cM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.145.116.0/24 Signature Algorithm: sha256WithRSAEncryption cf:61:5d:8d:1d:0c:5c:d9:01:a9:09:e1:d4:6b:14:b3:90:5d: 68:62:a8:ec:25:19:21:8c:84:7c:10:42:23:f6:52:82:7e:c9: ef:bd:66:26:00:49:dd:d5:a6:10:ad:60:13:db:fc:70:6f:3a: bf:ce:8c:97:2e:2f:7a:ef:6b:62:86:d5:36:4b:bd:2b:48:85: d7:8c:d9:f7:f7:dd:88:4f:71:7a:2b:a2:99:95:b2:94:cf:03: b4:6f:ee:6a:06:9e:e2:89:1b:41:7f:8d:99:01:7b:0b:7a:0d: df:1a:11:11:2d:e3:76:14:fd:f3:60:29:91:e8:c6:ee:1c:53: 5b:05:4e:92:6c:d9:25:7d:56:fb:50:bc:19:4b:9c:aa:aa:26: 62:d1:7b:d3:f6:af:d9:d6:02:b7:ae:90:7d:ca:a6:2a:54:fc: 2a:a8:45:67:f4:93:e5:a3:b0:4d:d1:6d:d5:9a:aa:9e:66:29: 19:43:25:26:26:1c:be:76:30:9f:b6:fc:86:aa:aa:20:07:c6: 38:3c:76:d0:89:b5:33:1e:44:62:b2:be:65:ea:b2:52:f7:d3: 04:0f:75:f1:8b:6d:99:1b:de:ba:22:22:d7:22:03:98:00:36: 6c:07:cf:6a:cb:39:be:08:cb:16:45:cb:30:bf:18:ae:9f:40: 44:9f:6e:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E2EBYzhl63rkMjp4XLKlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZTI2OTQ2NTJhYTI5ODUxMWVkYWZiZTE4ZDJiMWNkYmM3 OTI2MzgwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWUwZDM3NTc4ODg1Mzc1MzkyMzQzMDgxM2ZmY2NmNGJiNjJlZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oT8+YP4S0rHgmxCfS86NNkpEwDY n3KxL3xTnT2HOZjlPq5RWWpWp0EiAdWzr1fP9C+HPBa+msofNFncPqLZXpbrOSbW o/cyQPD7etaJezFiAaPVv9SgEsjJ4gSCxT1a1pKdZGYuFP53892gynXaGj5dWEUB dR/N6wd4qrI3wLvGdjHLhlG2tC0gJPmYAeY+Ts5b7NV9q5thnX5QFosk6UunrUHy UfY/HskMQTUVhegbDVuDj7giD7MClFBeJIjn/4mNFscEmQoofmeKXnPJChnz4kuL kwhNmgIDh6pB53ZgOlq2rPuOKMveZ22l4NOqvMXH7vV2vPcLZ5ps+4EovwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIXg03V4iFN1OSNDCBP/zPS7Yu3DMB8GA1UdIwQY MBaAFNbiaUZSqimFEe2vvhjSsc28eSY4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84Y2M1MDYtN2U3MS00NzA1LWEyODkt YjQyMzY0ODk1MDgzLzEvaGVEVGRYaUlVM1U1STBNSUVfX005THRpN2NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC84Y2M1MDYtN2U3MS00NzA1LWEyODktYjQyMzY0ODk1MDgz LzEvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABZF0MA0G CSqGSIb3DQEBCwUAA4IBAQDPYV2NHQxc2QGpCeHUaxSzkF1oYqjsJRkhjIR8EEIj 9lKCfsnvvWYmAEnd1aYQrWAT2/xwbzq/zoyXLi9672tihtU2S70rSIXXjNn3992I T3F6K6KZlbKUzwO0b+5qBp7iiRtBf42ZAXsLeg3fGhERLeN2FP3zYCmR6MbuHFNb BU6SbNklfVb7ULwZS5yqqiZi0XvT9q/Z1gK3rpB9yqYqVPwqqEVn9JPlo7BN0W3V mqqeZikZQyUmJhy+djCftvyGqqogB8Y4PHbQibUzHkRisr5l6rJS99MED3Xxi22Z G966IiLXIgOYADZsB89qyzm+CMsWRcswvxiun0BEn25l -----END CERTIFICATE-----Generated at Mon Jan 26 12:21:10 2026 by rpki-client