This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/2Hc4YFcU8ovqMtT3nDy_-Mmmpuk.roa File: 2Hc4YFcU8ovqMtT3nDy_-Mmmpuk.roa (raw, json) Hash identifier: By6JZckFdiOutj8o+6oMyXRB9HR4gdxFVnXhuj/iQm0= Subject key identifier: D8:77:38:60:57:14:F2:8B:EA:32:D4:F7:9C:3C:BF:F8:C9:A6:A6:E9 Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019B7AC7999A949269000C7CA5806FB4AEF6 Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/2Hc4YFcU8ovqMtT3nDy_-Mmmpuk.roa Signing time: Thu 01 Jan 2026 18:17:39 +0000 ROA not before: Thu 01 Jan 2026 18:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208412 IP address blocks: 5.202.204.0/23 maxlen: 24 5.202.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:99:9a:94:92:69:00:0c:7c:a5:80:6f:b4:ae:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Jan 1 18:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d87738605714f28bea32d4f79c3cbff8c9a6a6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:cb:3b:3d:75:8b:38:f4:cc:06:9f:b1:32: 39:59:1b:13:aa:7a:3a:b4:63:0a:4e:73:24:a8:da: 77:fd:ee:bb:9f:78:29:36:de:de:05:38:8f:f7:3b: c7:44:ad:1a:77:96:7a:26:30:c1:97:82:38:79:c0: 97:fc:e8:7d:d9:15:ce:0a:0f:5f:9f:02:c6:8b:52: 2c:6c:34:3d:2a:a0:ca:88:49:47:bf:f7:7f:4a:03: 48:f6:a9:34:3f:52:44:06:91:93:a0:ba:5a:08:90: b4:7c:bd:b2:8e:07:c1:bf:ca:45:b3:1b:64:a0:c7: 00:4b:27:71:12:3b:7e:21:0e:7e:b8:7a:3a:63:e8: c6:87:73:36:e9:13:92:35:9e:82:ff:94:19:91:a9: 86:85:f8:2b:93:d3:1f:b4:be:88:6e:22:41:b7:3e: 23:01:10:8d:55:a2:a0:29:bc:33:cf:c0:39:f7:5a: 9d:de:35:cf:09:ba:0e:ab:b9:00:96:7d:85:5e:50: 78:b0:9f:45:86:61:30:79:82:7f:28:e6:66:70:48: ae:ff:78:fd:e9:43:b2:bf:c8:05:7b:f5:e6:df:b4: 87:a5:31:eb:5f:42:f9:30:0e:17:ed:c9:47:fb:c1: ad:90:91:b2:37:4d:44:bd:e2:72:f1:8c:19:ef:da: 4f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:77:38:60:57:14:F2:8B:EA:32:D4:F7:9C:3C:BF:F8:C9:A6:A6:E9 X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/2Hc4YFcU8ovqMtT3nDy_-Mmmpuk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.202.204.0/23 Signature Algorithm: sha256WithRSAEncryption 91:9b:ad:b9:5a:11:c2:5a:30:ac:e0:c2:96:f5:2a:d0:48:9c: 6a:ad:42:94:c8:8d:d7:15:05:b2:1e:54:02:49:ec:52:64:7c: eb:c2:e0:65:e0:84:7b:5f:e7:0b:cf:83:34:a6:4e:8b:a2:d5: be:ef:7c:9d:b9:12:79:62:fb:c7:0a:38:51:af:45:e3:b9:7d: 50:80:ed:a4:db:94:8e:83:29:ca:dd:14:94:ea:ef:e2:1d:5d: 54:ba:85:81:d9:29:5e:c3:da:4d:df:f4:39:aa:5f:bf:18:87: b6:4f:b1:6d:a0:1b:3a:1a:22:e0:24:ba:f2:30:7c:e3:85:1a: a2:c2:3f:b9:0c:32:e8:84:88:1b:1b:ff:02:28:54:5c:85:13: cc:6b:a8:30:65:62:5d:42:b8:fb:66:b2:1a:7c:15:9c:37:9e: 2e:19:52:2a:18:93:95:bc:7f:94:25:a1:76:3c:54:c8:3a:e5: 5c:49:63:a1:5f:c1:67:95:fc:10:4d:d8:59:a0:b0:15:4a:e8: aa:42:b7:de:7a:58:5d:02:db:0e:a6:76:0d:54:92:7c:31:a8: 5e:b8:87:67:a1:b4:7e:86:b2:8f:bd:f4:9d:3b:1b:38:2e:23: 10:3d:72:5c:5d:e6:99:47:cc:f6:00:21:32:01:9f:06:ac:06: 3f:14:dd:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x5malJJpAAx8pYBvtK72MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwMTAxMTgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODc3Mzg2MDU3MTRmMjhiZWEzMmQ0Zjc5YzNjYmZmOGM5YTZhNmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud3LOz11izj0zAafsTI5WRsTqno6 tGMKTnMkqNp3/e67n3gpNt7eBTiP9zvHRK0ad5Z6JjDBl4I4ecCX/Oh92RXOCg9f nwLGi1IsbDQ9KqDKiElHv/d/SgNI9qk0P1JEBpGToLpaCJC0fL2yjgfBv8pFsxtk oMcASydxEjt+IQ5+uHo6Y+jGh3M26ROSNZ6C/5QZkamGhfgrk9MftL6IbiJBtz4j ARCNVaKgKbwzz8A591qd3jXPCboOq7kAln2FXlB4sJ9FhmEweYJ/KOZmcEiu/3j9 6UOyv8gFe/Xm37SHpTHrX0L5MA4X7clH+8GtkJGyN01EveJy8YwZ79pPiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNh3OGBXFPKL6jLU95w8v/jJpqbpMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvMkhjNFlGY1U4b3ZxTXRUM25EeV8tTW1tcHVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBcrMMA0G CSqGSIb3DQEBCwUAA4IBAQCRm625WhHCWjCs4MKW9SrQSJxqrUKUyI3XFQWyHlQC SexSZHzrwuBl4IR7X+cLz4M0pk6LotW+73yduRJ5YvvHCjhRr0XjuX1QgO2k25SO gynK3RSU6u/iHV1UuoWB2Slew9pN3/Q5ql+/GIe2T7FtoBs6GiLgJLryMHzjhRqi wj+5DDLohIgbG/8CKFRchRPMa6gwZWJdQrj7ZrIafBWcN54uGVIqGJOVvH+UJaF2 PFTIOuVcSWOhX8FnlfwQTdhZoLAVSuiqQrfeelhdAtsOpnYNVJJ8MaheuIdnobR+ hrKPvfSdOxs4LiMQPXJcXeaZR8z2ACEyAZ8GrAY/FN3s -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:44 2026 by rpki-client