This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/H50t-PIobmATZjn7AyyJjzFukns.roa File: H50t-PIobmATZjn7AyyJjzFukns.roa (raw, json) Hash identifier: 3sVvkD5sRr0QXHZkHSWyDx8GSm4R4JlcKC5UqxIF5J0= Subject key identifier: 1F:9D:2D:F8:F2:28:6E:60:13:66:39:FB:03:2C:89:8F:31:6E:92:7B Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd Certificate serial: 019B7F84FAEBD7340C04087F2E47E96C9C23 Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/H50t-PIobmATZjn7AyyJjzFukns.roa Signing time: Fri 02 Jan 2026 16:22:59 +0000 ROA not before: Fri 02 Jan 2026 16:22:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31244 IP address blocks: 91.216.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:fa:eb:d7:34:0c:04:08:7f:2e:47:e9:6c:9c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd Validity Not Before: Jan 2 16:22:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f9d2df8f2286e60136639fb032c898f316e927b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2b:8f:27:1b:ac:c6:ba:7d:da:93:02:44:ab: 0e:1b:b1:b3:f3:20:f9:f6:71:40:94:c3:0c:32:40: 5e:b7:89:39:94:6b:b1:49:de:2a:59:fc:66:e6:55: a0:12:cd:e2:71:fd:ff:6f:f8:b4:1e:92:7b:35:f4: 63:f5:02:a3:9f:84:0f:ee:84:0b:d9:5d:93:6c:6a: 30:de:b3:6b:fd:25:ba:95:1d:ea:52:2e:5f:0f:48: 81:f9:d3:68:8b:a8:f5:81:37:7c:fe:78:56:17:57: 70:c4:e9:54:41:79:6e:5f:09:71:0f:4d:45:c8:a6: 09:d3:83:f7:d8:94:48:67:74:bc:55:35:cd:41:26: 40:d4:d0:88:87:5b:e3:67:6e:34:9a:ae:c3:21:72: 2d:c0:f3:30:07:0e:e6:ad:39:a6:aa:c8:33:f4:39: d7:2e:09:22:7d:e0:20:50:f2:38:02:93:2c:89:7b: 81:72:f7:8b:84:eb:03:e7:98:c5:3f:80:ad:0b:56: e3:fd:bc:07:2a:e5:1b:53:c1:0a:50:f2:a5:5e:e3: d8:04:32:2d:7d:a6:7c:e6:67:3e:22:a0:a7:eb:4d: d4:55:47:01:69:0d:69:6f:5f:94:3d:1d:52:68:85: 93:e8:80:56:4d:3f:13:0b:f6:bc:cf:b2:53:ea:a1: c4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9D:2D:F8:F2:28:6E:60:13:66:39:FB:03:2C:89:8F:31:6E:92:7B X509v3 Authority Key Identifier: keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/H50t-PIobmATZjn7AyyJjzFukns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.156.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:74:e4:1d:34:39:68:ff:f6:de:e0:ae:72:73:a4:1b:0d:93: a0:58:76:ba:d8:19:aa:a1:55:5a:12:78:b8:c2:ca:ca:06:6d: 1e:72:d4:cb:1b:62:d5:fb:5c:d2:26:19:7b:6a:f8:22:ec:4c: 71:fe:57:12:94:0f:eb:5b:09:f5:d4:fb:d5:70:32:a4:aa:f6: 07:63:1f:38:12:fd:4e:4f:dd:d2:27:0a:9a:7f:4b:a6:70:80: ed:0a:46:8f:4b:43:9e:c7:e5:54:a6:65:28:38:73:7c:7f:04: 13:f6:5d:f0:9f:4b:b9:a4:74:ca:ba:c3:5d:f5:6f:99:b8:f6: da:5f:1b:32:10:b3:9b:eb:6e:f1:9f:32:91:a9:1c:84:6d:17: fc:ac:5a:af:b1:83:1e:ec:69:27:ca:07:d2:45:85:49:1d:44: 9c:73:df:ad:3c:8a:9f:b5:23:48:7a:c9:a6:cc:67:e1:99:71: 05:99:2f:c5:a4:97:91:2c:d8:3d:51:23:9a:3d:1d:dc:b5:fd: 50:1f:dd:fa:8e:a9:55:26:b2:5a:33:4e:73:29:6a:6c:c0:85: 6f:eb:0e:4b:9a:31:27:96:9d:86:df:a8:f5:78:0a:bd:26:dd: 13:08:54:93:b7:db:45:cf:cc:67:3f:7f:cd:26:fd:77:69:4d: 5f:65:1d:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hPrr1zQMBAh/LkfpbJwjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMThjNzkwNTgyZTk5YmZiNTBlZTc1ODQ2M2RjNWFmZGNj YmY0YmQwHhcNMjYwMTAyMTYyMjU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjlkMmRmOGYyMjg2ZTYwMTM2NjM5ZmIwMzJjODk4ZjMxNmU5MjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCuPJxusxrp92pMCRKsOG7Gz8yD5 9nFAlMMMMkBet4k5lGuxSd4qWfxm5lWgEs3icf3/b/i0HpJ7NfRj9QKjn4QP7oQL 2V2TbGow3rNr/SW6lR3qUi5fD0iB+dNoi6j1gTd8/nhWF1dwxOlUQXluXwlxD01F yKYJ04P32JRIZ3S8VTXNQSZA1NCIh1vjZ240mq7DIXItwPMwBw7mrTmmqsgz9DnX LgkifeAgUPI4ApMsiXuBcveLhOsD55jFP4CtC1bj/bwHKuUbU8EKUPKlXuPYBDIt faZ85mc+IqCn603UVUcBaQ1pb1+UPR1SaIWT6IBWTT8TC/a8z7JT6qHElwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB+dLfjyKG5gE2Y5+wMsiY8xbpJ7MB8GA1UdIwQY MBaAFJoYx5BYLpm/tQ7nWEY9xa/cy/S9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xY2QwMWUtZTQ0OS00NTIwLTkwNmYt NWMzNWRiYWJhMjRiLzEvSDUwdC1QSW9ibUFUWmpuN0F5eUpqekZ1a25zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8xY2QwMWUtZTQ0OS00NTIwLTkwNmYtNWMzNWRiYWJhMjRi LzEvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9icMA0G CSqGSIb3DQEBCwUAA4IBAQBOdOQdNDlo//be4K5yc6QbDZOgWHa62BmqoVVaEni4 wsrKBm0ectTLG2LV+1zSJhl7avgi7Exx/lcSlA/rWwn11PvVcDKkqvYHYx84Ev1O T93SJwqaf0umcIDtCkaPS0Oex+VUpmUoOHN8fwQT9l3wn0u5pHTKusNd9W+ZuPba XxsyELOb627xnzKRqRyEbRf8rFqvsYMe7GknygfSRYVJHUScc9+tPIqftSNIesmm zGfhmXEFmS/FpJeRLNg9USOaPR3ctf1QH936jqlVJrJaM05zKWpswIVv6w5LmjEn lp2G36j1eAq9Jt0TCFSTt9tFz8xnP3/NJv13aU1fZR13 -----END CERTIFICATE-----Generated at Sun Jan 25 17:33:36 2026 by rpki-client