This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/5_ZmoHurJKhnGZTZ0e5BJEp79YI.roa File: 5_ZmoHurJKhnGZTZ0e5BJEp79YI.roa (raw, json) Hash identifier: yn0cjymRjcdvSTfP5sKk/yNpbZCwsNTIyv7YD+9/xQw= Subject key identifier: E7:F6:66:A0:7B:AB:24:A8:67:19:94:D9:D1:EE:41:24:4A:7B:F5:82 Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20 Certificate serial: 019B7EA63D71C9E4447FA4643C40E451667C Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/5_ZmoHurJKhnGZTZ0e5BJEp79YI.roa Signing time: Fri 02 Jan 2026 12:19:42 +0000 ROA not before: Fri 02 Jan 2026 12:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5588 IP address blocks: 62.29.128.0/17 maxlen: 17 212.38.192.0/19 maxlen: 19 212.203.128.0/17 maxlen: 17 213.218.96.0/20 maxlen: 20 213.218.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:3d:71:c9:e4:44:7f:a4:64:3c:40:e4:51:66:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20 Validity Not Before: Jan 2 12:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7f666a07bab24a8671994d9d1ee41244a7bf582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4a:cc:80:96:fc:86:73:ab:d2:ce:92:de:a7: 99:41:05:ad:9b:a8:ee:42:b2:16:63:f0:98:6b:f3: 38:dd:6f:69:62:fb:19:a5:73:35:09:f6:e2:3a:dc: d3:f2:cb:1a:58:cf:c7:d6:8c:46:7c:4e:5b:27:c4: 56:e8:fb:2c:da:98:1d:63:d5:af:52:bd:0f:ae:82: 62:1d:ce:fd:be:8e:75:83:e5:03:74:fc:f2:21:e0: fc:c6:2c:20:43:fe:59:be:30:61:bf:c0:3a:5c:ae: cd:91:98:03:a5:8c:c0:ef:7a:a5:6b:22:57:97:ed: 26:9c:04:01:21:7e:d8:0e:e7:de:7a:fe:93:05:a0: 38:23:dc:7b:bd:4b:db:79:3c:9c:35:b1:cf:45:7c: 7e:9d:31:ac:57:79:36:52:f9:0d:8d:88:d5:32:b7: 28:44:43:00:f0:00:63:ec:bb:3c:34:dc:97:e1:90: 73:96:9a:e6:51:7a:1c:74:cd:84:2a:cc:7d:1f:bf: 0c:9b:ee:98:08:fc:a7:90:4a:b2:72:31:14:18:a6: b8:c5:af:78:c6:e1:f4:6a:40:0a:0a:17:6d:0d:35: 3e:da:d2:6f:f9:3e:97:0e:49:fb:d5:2f:70:ed:44: 36:27:08:73:c9:f2:45:3e:0d:f1:82:7d:fd:db:fa: a9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F6:66:A0:7B:AB:24:A8:67:19:94:D9:D1:EE:41:24:4A:7B:F5:82 X509v3 Authority Key Identifier: keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/5_ZmoHurJKhnGZTZ0e5BJEp79YI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.29.128.0/17 212.38.192.0/19 212.203.128.0/17 213.218.96.0/19 Signature Algorithm: sha256WithRSAEncryption 32:33:c3:23:3a:c8:b6:fc:7e:00:05:3a:b2:a5:a6:27:a9:cc: 8e:ec:b7:72:8e:ad:78:93:47:eb:33:65:23:93:03:79:e8:53: f5:ee:8d:53:87:82:19:00:b9:5b:d1:8a:51:1b:06:20:6d:ca: 17:77:69:a9:4a:60:10:dd:15:5f:48:57:5f:0e:c3:c2:84:15: 74:bf:3f:e7:c3:bd:fe:16:3e:6e:f1:f5:23:89:7b:69:ed:e4: fc:3e:8c:cd:1b:58:9a:b3:e2:22:cb:c0:cd:b0:db:d5:c2:3d: a9:74:40:ef:b3:ad:de:a3:eb:57:53:00:b7:a4:94:e0:49:5e: 0a:b6:14:67:74:ca:d6:62:68:fd:c2:d3:ad:a7:25:6f:db:8b: f0:8c:b6:27:6b:4e:cf:8c:39:52:33:15:2b:8e:4e:9e:4f:3e: e5:ea:1d:76:91:76:d5:15:ec:8e:f3:95:0d:a4:62:29:74:aa: 79:16:ca:68:1e:88:8a:47:1d:d2:ae:14:5a:3b:12:38:d4:15: bc:d5:a6:c4:9b:84:f9:d0:0e:c3:f6:ce:c4:fb:0b:01:ce:c5: ab:a4:c3:f5:24:ac:56:d4:a0:a1:45:cb:a1:c8:8f:d6:f8:11: 89:35:43:f8:2c:62:15:ae:a0:b2:e8:46:4d:17:a9:08:a7:dd: 0c:80:76:2d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+pj1xyeREf6RkPEDkUWZ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMGJlOGU0OGRiYTA3ZGYyMTcxMTc0NWI4NjllMzkxMWNl OThlMjAwHhcNMjYwMTAyMTIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2Y2NjZhMDdiYWIyNGE4NjcxOTk0ZDlkMWVlNDEyNDRhN2JmNTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkrMgJb8hnOr0s6S3qeZQQWtm6ju QrIWY/CYa/M43W9pYvsZpXM1CfbiOtzT8ssaWM/H1oxGfE5bJ8RW6Pss2pgdY9Wv Ur0ProJiHc79vo51g+UDdPzyIeD8xiwgQ/5ZvjBhv8A6XK7NkZgDpYzA73qlayJX l+0mnAQBIX7YDufeev6TBaA4I9x7vUvbeTycNbHPRXx+nTGsV3k2UvkNjYjVMrco REMA8ABj7Ls8NNyX4ZBzlprmUXocdM2EKsx9H78Mm+6YCPynkEqycjEUGKa4xa94 xuH0akAKChdtDTU+2tJv+T6XDkn71S9w7UQ2JwhzyfJFPg3xgn392/qpvQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOf2ZqB7qySoZxmU2dHuQSRKe/WCMB8GA1UdIwQY MBaAFD4L6OSNugffIXEXRbhp45Ec6Y4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGd2bzVJMjZCOThoY1JkRnVHbmprUnpwamlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NWJjZTktMWU4ZS00MWMxLTg5Zjgt MjBmOWYwZGJmNDU4LzEvNV9abW9IdXJKS2huR1pUWjBlNUJKRXA3OVlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NWJjZTktMWU4ZS00MWMxLTg5ZjgtMjBmOWYwZGJmNDU4 LzEvUGd2bzVJMjZCOThoY1JkRnVHbmprUnpwamlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQHPh2AAwQF 1CbAAwQH1MuAAwQF1dpgMA0GCSqGSIb3DQEBCwUAA4IBAQAyM8MjOsi2/H4ABTqy paYnqcyO7Ldyjq14k0frM2UjkwN56FP17o1Th4IZALlb0YpRGwYgbcoXd2mpSmAQ 3RVfSFdfDsPChBV0vz/nw73+Fj5u8fUjiXtp7eT8PozNG1ias+Iiy8DNsNvVwj2p dEDvs63eo+tXUwC3pJTgSV4KthRndMrWYmj9wtOtpyVv24vwjLYna07PjDlSMxUr jk6eTz7l6h12kXbVFeyO85UNpGIpdKp5FspoHoiKRx3SrhRaOxI41BW81abEm4T5 0A7D9s7E+wsBzsWrpMP1JKxW1KChRcuhyI/W+BGJNUP4LGIVrqCy6EZNF6kIp90M gHYt -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:33 2026 by rpki-client