This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/zHuQT1h6WymF9W0YTCrGMOffBdY.roa File: zHuQT1h6WymF9W0YTCrGMOffBdY.roa (raw, json) Hash identifier: G5XgkiF52iU56SNjiVgsr4R/Y20EWE7ywulEZTWtMSA= Subject key identifier: CC:7B:90:4F:58:7A:5B:29:85:F5:6D:18:4C:2A:C6:30:E7:DF:05:D6 Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Certificate serial: 019B7AC953FE7A3FD186B0D16E73A4D1CEF8 Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/zHuQT1h6WymF9W0YTCrGMOffBdY.roa Signing time: Thu 01 Jan 2026 18:19:33 +0000 ROA not before: Thu 01 Jan 2026 18:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211137 IP address blocks: 5.59.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:53:fe:7a:3f:d1:86:b0:d1:6e:73:a4:d1:ce:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Validity Not Before: Jan 1 18:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc7b904f587a5b2985f56d184c2ac630e7df05d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4c:2d:31:8c:91:e8:21:64:ec:1f:4f:0b:f0: 90:3c:50:f6:c7:5e:db:4e:e5:a6:bb:b1:82:9d:55: de:79:4c:19:52:6d:54:d7:92:ad:0c:c9:7b:5e:17: d8:31:5c:1d:d6:30:c3:22:ab:69:cd:a8:59:1f:31: c0:ce:b9:60:7b:0d:1c:5d:ac:1f:f3:f6:d7:4a:c4: 8c:43:1f:ff:b1:13:59:3e:d5:56:5b:16:a3:b9:d6: d1:24:e1:cc:b7:7f:68:84:82:45:bf:50:4c:8e:1e: 32:a6:d5:1e:0a:b2:97:f3:33:9f:09:43:4f:7d:95: 5c:73:df:ff:5e:ec:0f:0e:97:0c:c1:e9:ef:f3:b2: 26:61:7b:d5:1d:89:0c:b5:2f:13:e3:9f:04:c4:c8: 0f:69:5c:08:b3:ce:f4:4e:f5:4b:d3:d8:87:cc:82: 3d:31:ea:6d:4f:fe:0b:2b:fc:a8:3c:88:14:90:d8: da:0f:59:90:80:91:f1:62:45:f7:b7:8b:66:13:25: 9d:b3:25:12:55:fc:94:be:ae:a1:9f:ef:4c:3e:92: 92:89:de:c1:7b:30:6f:ca:40:ed:2b:00:5e:1d:5e: 71:6e:45:91:68:c0:ba:c9:0f:76:1c:11:de:6d:6f: 56:d4:e8:21:ec:22:a8:2f:32:18:a5:ea:12:a0:13: 4c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7B:90:4F:58:7A:5B:29:85:F5:6D:18:4C:2A:C6:30:E7:DF:05:D6 X509v3 Authority Key Identifier: keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/zHuQT1h6WymF9W0YTCrGMOffBdY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.59.78.0/24 Signature Algorithm: sha256WithRSAEncryption 12:5c:3e:cb:e8:32:7a:48:bc:2f:8a:3d:5a:60:13:c7:f3:ed: 9f:ec:dc:cb:fb:04:57:0b:2b:a9:24:09:f9:81:c1:ac:07:8b: fe:e1:cf:91:9c:aa:d3:16:63:63:e6:d2:b3:16:e0:70:0b:a4: 25:74:ac:9d:c8:51:d2:57:fb:19:09:bb:d4:37:ac:ac:4c:69: 27:76:17:29:bb:c1:e5:da:6d:18:08:50:5a:aa:1d:cd:30:98: da:26:3c:b7:b8:73:7b:96:01:71:ec:94:12:e1:d4:f6:d2:3a: 11:27:3a:84:83:08:f8:ae:4f:a2:20:c2:64:d2:a4:1e:b7:92: 7b:99:3f:0c:bc:df:22:64:10:79:5a:a3:b1:d3:6b:b1:25:eb: a1:81:02:5c:7b:64:33:9b:2f:24:c0:52:3b:c7:20:3d:7c:72: 99:f8:d2:f0:e6:e8:c7:9f:69:df:c8:0c:91:f4:bf:7f:36:4d: 4c:ae:e2:4f:b0:b6:0c:85:1a:ef:2b:63:dd:84:4d:66:37:4a: 77:13:ea:fd:f3:3c:fd:90:0e:87:1b:64:f0:0b:a7:ab:67:31: 35:72:65:e9:9b:31:f6:83:5c:95:f4:f0:53:ff:55:96:e5:88: 89:53:18:a6:c3:30:0b:c2:b2:9e:79:25:8c:e5:02:21:61:99: 56:30:a8:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yVP+ej/RhrDRbnOk0c74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh YmVhZjIwHhcNMjYwMTAxMTgxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzdiOTA0ZjU4N2E1YjI5ODVmNTZkMTg0YzJhYzYzMGU3ZGYwNWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0wtMYyR6CFk7B9PC/CQPFD2x17b TuWmu7GCnVXeeUwZUm1U15KtDMl7XhfYMVwd1jDDIqtpzahZHzHAzrlgew0cXawf 8/bXSsSMQx//sRNZPtVWWxajudbRJOHMt39ohIJFv1BMjh4yptUeCrKX8zOfCUNP fZVcc9//XuwPDpcMwenv87ImYXvVHYkMtS8T458ExMgPaVwIs870TvVL09iHzII9 MeptT/4LK/yoPIgUkNjaD1mQgJHxYkX3t4tmEyWdsyUSVfyUvq6hn+9MPpKSid7B ezBvykDtKwBeHV5xbkWRaMC6yQ92HBHebW9W1Ogh7CKoLzIYpeoSoBNM2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMx7kE9YelsphfVtGEwqxjDn3wXWMB8GA1UdIwQY MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt OWI5YmNlMTVlMGM2LzEvekh1UVQxaDZXeW1GOVcwWVRDckdNT2ZmQmRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2 LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTtOMA0G CSqGSIb3DQEBCwUAA4IBAQASXD7L6DJ6SLwvij1aYBPH8+2f7NzL+wRXCyupJAn5 gcGsB4v+4c+RnKrTFmNj5tKzFuBwC6QldKydyFHSV/sZCbvUN6ysTGkndhcpu8Hl 2m0YCFBaqh3NMJjaJjy3uHN7lgFx7JQS4dT20joRJzqEgwj4rk+iIMJk0qQet5J7 mT8MvN8iZBB5WqOx02uxJeuhgQJce2Qzmy8kwFI7xyA9fHKZ+NLw5ujHn2nfyAyR 9L9/Nk1MruJPsLYMhRrvK2PdhE1mN0p3E+r98zz9kA6HG2TwC6erZzE1cmXpmzH2 g1yV9PBT/1WW5YiJUximwzALwrKeeSWM5QIhYZlWMKjU -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:21 2026 by rpki-client