This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/n50HYNvX301s5gEUcCw5M0DpFnA.roa File: n50HYNvX301s5gEUcCw5M0DpFnA.roa (raw, json) Hash identifier: jEK7Am032lzW1juS2l3eGVIV9V+ymC/9POxHIJyEPwU= Subject key identifier: 9F:9D:07:60:DB:D7:DF:4D:6C:E6:01:14:70:2C:39:33:40:E9:16:70 Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019B7AC7902616076C54E924E09E317FC3E5 Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/n50HYNvX301s5gEUcCw5M0DpFnA.roa Signing time: Thu 01 Jan 2026 18:17:37 +0000 ROA not before: Thu 01 Jan 2026 18:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49596 IP address blocks: 5.202.34.0/23 maxlen: 23 5.202.36.0/23 maxlen: 23 5.202.38.0/24 maxlen: 24 185.103.128.0/22 maxlen: 22 188.253.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:90:26:16:07:6c:54:e9:24:e0:9e:31:7f:c3:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Jan 1 18:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f9d0760dbd7df4d6ce60114702c393340e91670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:04:10:f9:e1:cc:b3:71:14:6d:64:2f:b6:d5: 82:83:67:d1:00:89:5f:55:3a:92:f3:47:2e:11:9d: 1b:18:01:bf:96:9d:f5:21:69:0b:d5:06:18:99:a4: 3c:80:a2:a5:34:67:49:04:49:fc:17:d9:83:ea:31: 2f:aa:f9:8e:e8:ac:57:45:83:cc:f6:85:46:9a:cc: fa:b6:de:bc:04:01:9c:bd:76:1b:4b:37:cc:34:37: 58:bb:94:b4:a9:94:ed:f7:b7:ad:29:ae:fd:fe:d7: 7e:8b:ff:ba:81:1e:a8:db:e2:fc:97:d5:f4:e0:88: 67:fe:04:d4:ae:9e:f1:9e:c6:55:ba:66:bf:df:5d: 9d:3b:6c:d0:9d:ae:30:b5:5a:97:7d:23:55:82:91: dd:eb:ef:29:4d:da:65:90:1e:4c:21:ef:3c:4a:0c: 3e:9e:1f:f8:4f:99:41:3e:00:91:fa:95:9d:38:4a: 1e:7b:f9:19:c5:af:65:23:4c:36:a9:65:71:ba:f9: 45:4d:0f:ed:21:44:94:15:cf:2f:c1:f6:e1:c1:68: ca:59:ca:67:e2:48:7d:ea:64:27:bb:f1:02:9f:14: dd:0d:18:9b:68:e9:ae:1c:6d:88:5a:c7:a1:be:8c: 7c:63:ec:fa:59:cc:6a:0d:0e:d0:3b:b6:f2:c5:04: 49:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9D:07:60:DB:D7:DF:4D:6C:E6:01:14:70:2C:39:33:40:E9:16:70 X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/n50HYNvX301s5gEUcCw5M0DpFnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.202.34.0-5.202.38.255 185.103.128.0/22 188.253.84.0/22 Signature Algorithm: sha256WithRSAEncryption 96:6d:b7:2a:62:14:18:be:54:3e:e8:4b:84:5c:aa:45:36:4c: c0:4f:e9:fa:67:9d:7b:80:35:be:70:11:1a:0e:d2:77:a1:3a: 23:f5:dd:5e:80:95:24:30:45:48:df:c4:77:d9:85:d2:b4:74: 8f:5d:7b:80:de:3d:9d:d3:b5:7d:1b:c6:b7:00:50:f1:c3:64: 73:a5:e7:fc:2d:2f:ec:15:9d:2e:6d:b5:b6:22:5f:db:e0:f3: 1b:87:1d:b2:47:33:a0:0e:85:bd:5e:a6:f0:4b:4e:43:77:e9: 82:b0:46:53:35:df:ba:da:f7:e9:47:36:3a:90:59:d3:96:04: 18:93:6a:10:73:d6:c6:8d:69:7a:e2:69:aa:ee:4f:5f:f2:99: 21:41:29:ae:a9:64:14:ba:28:ea:e1:39:6e:15:a6:87:68:39: cd:f5:a5:23:58:7d:2a:7d:d8:d6:fb:02:e6:76:62:17:d0:e8: e0:27:86:7e:86:44:f5:9d:27:2c:74:59:17:ab:1c:5e:9c:3a: 4c:c7:2e:05:b0:f9:71:36:c8:eb:f5:d5:2b:0c:a0:c5:e1:cc: ce:d5:2a:d4:0d:a9:7f:7c:39:e5:e4:38:76:66:db:f3:51:1c: 1c:08:df:5d:dd:1a:92:40:f6:f1:67:bb:8f:55:2c:34:b9:af: 5f:e7:1b:0d -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt6x5AmFgdsVOkk4J4xf8PlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwMTAxMTgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjlkMDc2MGRiZDdkZjRkNmNlNjAxMTQ3MDJjMzkzMzQwZTkxNjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAQQ+eHMs3EUbWQvttWCg2fRAIlf VTqS80cuEZ0bGAG/lp31IWkL1QYYmaQ8gKKlNGdJBEn8F9mD6jEvqvmO6KxXRYPM 9oVGmsz6tt68BAGcvXYbSzfMNDdYu5S0qZTt97etKa79/td+i/+6gR6o2+L8l9X0 4Ihn/gTUrp7xnsZVuma/312dO2zQna4wtVqXfSNVgpHd6+8pTdplkB5MIe88Sgw+ nh/4T5lBPgCR+pWdOEoee/kZxa9lI0w2qWVxuvlFTQ/tIUSUFc8vwfbhwWjKWcpn 4kh96mQnu/ECnxTdDRibaOmuHG2IWsehvox8Y+z6WcxqDQ7QO7byxQRJCQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFJ+dB2Db199NbOYBFHAsOTNA6RZwMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvbjUwSFlOdlgzMDFzNWdFVWNDdzVNMERwRm5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAEFyiID BAAFyiYDBAK5Z4ADBAK8/VQwDQYJKoZIhvcNAQELBQADggEBAJZttypiFBi+VD7o S4RcqkU2TMBP6fpnnXuANb5wERoO0nehOiP13V6AlSQwRUjfxHfZhdK0dI9de4De PZ3TtX0bxrcAUPHDZHOl5/wtL+wVnS5ttbYiX9vg8xuHHbJHM6AOhb1epvBLTkN3 6YKwRlM137ra9+lHNjqQWdOWBBiTahBz1saNaXriaaruT1/ymSFBKa6pZBS6KOrh OW4VpodoOc31pSNYfSp92Nb7AuZ2YhfQ6OAnhn6GRPWdJyx0WRerHF6cOkzHLgWw +XE2yOv11SsMoMXhzM7VKtQNqX98OeXkOHZm2/NRHBwI313dGpJA9vFnu49VLDS5 r1/nGw0= -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:53 2026 by rpki-client