This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/dSHFWX1fBlnvZGt_85vKcFy2g94.roa File: dSHFWX1fBlnvZGt_85vKcFy2g94.roa (raw, json) Hash identifier: bldrPAV8KhzGXMuRkSur7g7IevkTOel2pmTMMHqvI1k= Subject key identifier: 75:21:C5:59:7D:5F:06:59:EF:64:6B:7F:F3:9B:CA:70:5C:B6:83:DE Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA785B8C749394CAFE719F5EAA149E2 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/dSHFWX1fBlnvZGt_85vKcFy2g94.roa Signing time: Fri 02 Jan 2026 12:21:06 +0000 ROA not before: Fri 02 Jan 2026 12:21:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203841 IP address blocks: 5.143.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:85:b8:c7:49:39:4c:af:e7:19:f5:ea:a1:49:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7521c5597d5f0659ef646b7ff39bca705cb683de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:bc:65:d9:0c:e9:d6:0e:0c:6a:6a:25:ee:83: 8a:13:f4:0f:19:f2:e4:e7:b7:70:20:37:05:bc:59: 22:a9:32:86:9a:4f:5f:d2:e4:ce:f9:9b:79:64:b1: d4:19:16:f0:2a:b8:89:03:ed:00:ae:f0:26:b0:ba: 7a:c5:55:33:f9:44:c1:91:71:29:19:e1:4d:bf:bf: b1:da:6e:fb:91:47:62:7f:3e:c3:30:d9:48:fb:5d: cb:bf:a2:a1:a5:aa:cf:cb:d8:11:87:b3:08:ac:41: dc:74:4e:8b:3e:74:d7:8e:cc:80:2b:fe:38:83:9c: 11:da:b5:79:c8:45:b9:e4:27:0b:d7:6c:9e:06:99: bc:06:33:14:35:1f:be:7a:a7:53:60:ef:0d:fc:8a: 4c:0e:0d:53:c0:f6:1a:10:1e:19:b0:fb:e9:da:13: 18:45:11:f2:ad:da:41:6b:b3:4f:d8:1d:7d:49:ff: 44:3c:18:52:9d:c3:89:94:53:3d:63:0b:b1:0f:fc: e1:8f:90:ad:d2:93:1f:85:46:87:84:03:9f:79:d0: c1:6b:7d:0f:f8:b4:c6:19:c5:23:f9:ad:48:1a:06: a9:66:47:c6:0c:36:e5:8c:9c:e5:15:2e:82:a9:9d: bb:48:6e:2c:26:4c:06:42:d0:78:c8:15:1a:bb:c3: d2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:21:C5:59:7D:5F:06:59:EF:64:6B:7F:F3:9B:CA:70:5C:B6:83:DE X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/dSHFWX1fBlnvZGt_85vKcFy2g94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.143.238.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:31:c2:96:77:68:29:1f:6f:05:8b:1f:cb:34:6e:58:84:75: 1d:41:a8:46:7e:46:81:1b:e4:87:41:16:e2:9a:26:9e:3d:20: d8:84:bb:2c:80:ff:73:df:31:c4:a0:0e:de:cb:29:93:a3:b5: cd:a1:c1:ee:d1:03:8a:d3:06:18:2f:9c:56:6a:ab:f9:90:08: c5:90:fd:7c:2c:bf:38:b1:9b:db:ab:b4:46:f7:26:52:2c:b7: e7:04:1e:f6:4b:f4:04:87:91:e1:8d:84:41:6c:e6:fd:ea:39: d5:bd:29:90:b2:09:ba:f2:ab:b4:13:65:5e:0f:02:63:ac:b6: d6:67:57:dc:5e:06:6b:d3:1c:13:65:59:06:f2:07:ed:61:3f: 64:89:0f:e6:51:bf:71:44:79:ed:b2:49:61:89:36:d7:42:c1: c1:92:c7:41:4a:59:84:91:ea:b8:de:cd:46:eb:d9:bc:51:0a: 21:b9:9f:49:26:09:00:61:ab:39:db:af:06:af:c9:40:da:02: 3b:d3:2a:8b:1b:d9:3d:d6:8c:06:c6:30:fd:49:33:f4:23:70: 63:50:4c:51:16:97:8b:0d:ef:f3:a7:ed:72:46:42:ed:1a:b7: 65:e5:e4:79:97:f7:1d:80:3a:15:69:0c:02:a4:06:f0:1a:6f: ec:03:86:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p4W4x0k5TK/nGfXqoUniMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTIxYzU1OTdkNWYwNjU5ZWY2NDZiN2ZmMzliY2E3MDVjYjY4M2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Lxl2Qzp1g4Mamol7oOKE/QPGfLk 57dwIDcFvFkiqTKGmk9f0uTO+Zt5ZLHUGRbwKriJA+0ArvAmsLp6xVUz+UTBkXEp GeFNv7+x2m77kUdifz7DMNlI+13Lv6KhparPy9gRh7MIrEHcdE6LPnTXjsyAK/44 g5wR2rV5yEW55CcL12yeBpm8BjMUNR++eqdTYO8N/IpMDg1TwPYaEB4ZsPvp2hMY RRHyrdpBa7NP2B19Sf9EPBhSncOJlFM9YwuxD/zhj5Ct0pMfhUaHhAOfedDBa30P +LTGGcUj+a1IGgapZkfGDDbljJzlFS6CqZ27SG4sJkwGQtB4yBUau8PSewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHUhxVl9XwZZ72Rrf/ObynBctoPeMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvZFNIRldYMWZCbG52Wkd0Xzg1dktjRnkyZzk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABY/uMA0G CSqGSIb3DQEBCwUAA4IBAQCNMcKWd2gpH28Fix/LNG5YhHUdQahGfkaBG+SHQRbi miaePSDYhLssgP9z3zHEoA7eyymTo7XNocHu0QOK0wYYL5xWaqv5kAjFkP18LL84 sZvbq7RG9yZSLLfnBB72S/QEh5HhjYRBbOb96jnVvSmQsgm68qu0E2VeDwJjrLbW Z1fcXgZr0xwTZVkG8gftYT9kiQ/mUb9xRHntsklhiTbXQsHBksdBSlmEkeq43s1G 69m8UQohuZ9JJgkAYas5268Gr8lA2gI70yqLG9k91owGxjD9STP0I3BjUExRFpeL De/zp+1yRkLtGrdl5eR5l/cdgDoVaQwCpAbwGm/sA4bf -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:49 2026 by rpki-client