This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5bHCkvOFTtsA5xO1pjNzme6nqz4.roa File: 5bHCkvOFTtsA5xO1pjNzme6nqz4.roa (raw, json) Hash identifier: 5VYr4zt5SvUOlM2ji1bratsFIrYPFPUYKZQuhgZ6WUg= Subject key identifier: E5:B1:C2:92:F3:85:4E:DB:00:E7:13:B5:A6:33:73:99:EE:A7:AB:3E Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC85BD6F74C6061E11694408EE0F052 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5bHCkvOFTtsA5xO1pjNzme6nqz4.roa Signing time: Thu 01 Jan 2026 18:18:29 +0000 ROA not before: Thu 01 Jan 2026 18:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63473 IP address blocks: 45.151.142.0/24 maxlen: 24 103.63.28.0/24 maxlen: 24 103.63.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:5b:d6:f7:4c:60:61:e1:16:94:40:8e:e0:f0:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5b1c292f3854edb00e713b5a6337399eea7ab3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b5:42:04:b2:f5:03:25:ee:21:d0:77:6a:5f: a5:5f:f3:b4:70:6e:18:65:e7:e0:fd:ee:80:7f:0b: 2c:9b:0e:dd:56:31:2a:91:dd:f6:f4:63:5e:6b:30: b5:58:80:1d:ab:d0:e8:77:41:a4:04:86:9a:56:d1: 6e:14:c5:8e:77:c6:c2:fd:b7:00:de:ce:1d:f3:47: 00:16:c6:86:e7:68:9e:e7:34:c6:fc:31:8e:71:90: 8c:3d:3a:59:a5:8e:95:4e:bb:65:af:d9:db:c9:81: 9a:7c:72:67:b3:ce:07:02:1f:4b:43:97:f2:e7:a6: 66:fa:a4:49:69:d0:c8:23:2d:6a:cd:b9:0b:9d:16: 55:55:61:0c:38:a0:1f:5d:df:f5:84:04:4b:63:11: 1c:dc:53:ec:80:73:65:8b:41:b3:f0:02:5a:59:4e: 17:ef:c3:76:22:38:2b:67:d2:cb:fb:39:69:d8:99: 80:4a:05:f1:a1:40:40:1e:26:c5:7e:12:fb:d7:6a: d3:fb:a6:79:8f:81:45:ca:d7:18:94:f3:fe:5c:3c: d0:d3:81:67:ce:53:e5:ce:a0:c6:2d:a9:7c:22:bc: 8f:8c:3a:71:3f:00:ee:df:d1:0e:93:c1:b4:98:5c: 18:a8:9b:97:f8:76:98:7c:7f:a2:b0:40:18:db:53: 4f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B1:C2:92:F3:85:4E:DB:00:E7:13:B5:A6:33:73:99:EE:A7:AB:3E X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5bHCkvOFTtsA5xO1pjNzme6nqz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.142.0/24 103.63.28.0/24 103.63.30.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:79:41:46:57:8d:ff:8e:1a:3c:71:86:08:7b:f9:15:3e:f5: b6:6f:cb:1b:d5:54:2a:a7:74:50:36:25:b2:1d:d6:13:7c:77: cf:00:82:d4:b9:32:54:fb:00:d4:54:52:97:5f:14:b8:24:45: 8c:04:39:e4:9a:9d:0c:08:09:c0:4f:c2:35:ca:1a:67:ff:d0: be:99:f8:ca:ac:cc:96:5f:c2:04:4a:d3:26:3b:d7:c3:71:ba: 55:79:c4:f0:e2:4f:0a:b3:38:b8:19:7d:d3:da:1a:74:bb:38: 72:70:0a:c6:4e:d1:61:aa:17:cc:30:2e:f5:cd:3d:d3:aa:c8: 02:ea:4d:7a:dc:ee:9c:65:8e:ec:13:9d:17:4b:ff:99:f5:67: 75:60:04:b0:b3:98:28:ea:35:86:ce:7c:71:63:8b:66:bb:35: 73:7d:39:c4:f0:e7:cf:16:4e:6f:d0:84:26:19:a8:5c:f7:92: 99:a2:59:6d:12:60:ed:ea:36:cb:3a:e4:89:82:05:27:87:96: f4:ce:bf:53:97:8e:c2:0e:45:cb:31:af:86:b3:81:cc:24:d4: 97:30:9d:93:7c:2c:76:db:04:b6:4b:e8:12:5a:04:2b:af:b1: 14:9d:d5:8c:16:d2:17:e5:27:4c:c2:64:34:b0:cb:60:60:f8: 10:67:60:d4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yFvW90xgYeEWlECO4PBSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWIxYzI5MmYzODU0ZWRiMDBlNzEzYjVhNjMzNzM5OWVlYTdhYjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07VCBLL1AyXuIdB3al+lX/O0cG4Y Zefg/e6Afwssmw7dVjEqkd329GNeazC1WIAdq9Dod0GkBIaaVtFuFMWOd8bC/bcA 3s4d80cAFsaG52ie5zTG/DGOcZCMPTpZpY6VTrtlr9nbyYGafHJns84HAh9LQ5fy 56Zm+qRJadDIIy1qzbkLnRZVVWEMOKAfXd/1hARLYxEc3FPsgHNli0Gz8AJaWU4X 78N2IjgrZ9LL+zlp2JmASgXxoUBAHibFfhL712rT+6Z5j4FFytcYlPP+XDzQ04Fn zlPlzqDGLal8IryPjDpxPwDu39EOk8G0mFwYqJuX+HaYfH+isEAY21NPQwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOWxwpLzhU7bAOcTtaYzc5nup6s+MB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvNWJIQ2t2T0ZUdHNBNXhPMXBqTnptZTZucXo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZeOAwQA Zz8cAwQAZz8eMA0GCSqGSIb3DQEBCwUAA4IBAQCLeUFGV43/jho8cYYIe/kVPvW2 b8sb1VQqp3RQNiWyHdYTfHfPAILUuTJU+wDUVFKXXxS4JEWMBDnkmp0MCAnAT8I1 yhpn/9C+mfjKrMyWX8IEStMmO9fDcbpVecTw4k8Kszi4GX3T2hp0uzhycArGTtFh qhfMMC71zT3TqsgC6k163O6cZY7sE50XS/+Z9Wd1YASws5go6jWGznxxY4tmuzVz fTnE8OfPFk5v0IQmGahc95KZolltEmDt6jbLOuSJggUnh5b0zr9Tl47CDkXLMa+G s4HMJNSXMJ2TfCx22wS2S+gSWgQrr7EUndWMFtIX5SdMwmQ0sMtgYPgQZ2DU -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:58 2026 by rpki-client