This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/ht0ZHZI605xUDKgSuTW22dQeuGI.roa File: ht0ZHZI605xUDKgSuTW22dQeuGI.roa (raw, json) Hash identifier: 4Wq4/BC9bk0nDo/1dAW7K8pSTWikWYSsafNCxLUrqSo= Subject key identifier: 86:DD:19:1D:92:3A:D3:9C:54:0C:A8:12:B9:35:B6:D9:D4:1E:B8:62 Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Certificate serial: 019B7DCA9DE43070C7BDBF77C31A680BA1C6 Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/ht0ZHZI605xUDKgSuTW22dQeuGI.roa Signing time: Fri 02 Jan 2026 08:19:49 +0000 ROA not before: Fri 02 Jan 2026 08:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 213.178.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:9d:e4:30:70:c7:bd:bf:77:c3:1a:68:0b:a1:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Validity Not Before: Jan 2 08:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86dd191d923ad39c540ca812b935b6d9d41eb862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:86:14:0a:71:5e:59:dc:d3:f8:38:c4:45:9e: d6:43:91:1f:3d:da:51:62:f7:88:7c:0d:ce:5b:d9: 21:b9:46:0a:f9:25:ac:2f:f5:3d:00:c7:a2:5c:df: d8:06:a2:1d:1a:f2:68:d1:0b:2a:40:a1:80:54:de: 94:91:e2:90:75:16:64:de:32:83:8e:ec:c9:67:af: a6:a8:e5:8b:42:92:94:db:c3:24:b8:ec:df:7f:40: 7a:e7:b4:18:ae:f3:26:41:23:6d:a8:3a:3a:5e:0c: ad:83:1e:e6:1b:6a:08:c5:ea:dc:52:be:86:a2:93: 62:18:d0:94:6f:d7:6a:ae:a0:d3:67:06:46:38:d1: ec:3a:6e:1e:60:32:8e:c5:95:5c:27:90:99:d8:07: 54:00:ed:9a:0c:ad:2d:7a:4b:0f:fa:d7:06:10:d0: d8:0c:06:5c:b3:bc:36:4f:a6:81:00:f4:03:10:36: 85:9d:00:7d:8c:8e:2a:73:e4:20:f3:6f:89:93:b0: 66:b6:4d:8d:db:e7:1d:6b:02:69:0d:58:08:6e:0e: ab:a2:ad:84:d0:b8:06:0d:19:79:1c:f4:d5:ca:9f: 9c:96:0e:41:77:32:c3:49:71:3f:d7:a7:42:ca:5c: 33:1f:03:d2:bd:6a:4a:ca:6f:84:70:8b:0a:2c:b4: 9d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DD:19:1D:92:3A:D3:9C:54:0C:A8:12:B9:35:B6:D9:D4:1E:B8:62 X509v3 Authority Key Identifier: keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/ht0ZHZI605xUDKgSuTW22dQeuGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.178.142.0/24 Signature Algorithm: sha256WithRSAEncryption b1:5d:99:66:80:ea:69:69:93:28:2e:dd:f0:1f:80:91:56:9f: d3:2f:44:86:aa:2f:ca:89:22:b0:eb:f3:0f:ef:1c:4d:5d:ab: 80:ca:3c:26:8f:21:86:a8:9d:6f:69:5a:74:e4:65:93:a8:fc: 50:8a:71:e8:d8:83:29:c3:7b:65:fe:a0:96:dc:dc:40:ba:53: c5:40:55:f8:66:79:bf:54:05:b6:6c:13:3b:f2:19:bc:e7:ac: de:8f:a7:30:f1:b1:9e:47:0c:a0:29:0a:24:e6:50:82:3c:62: 3e:5e:9e:63:40:22:23:10:b0:6d:19:7a:9c:77:24:b6:69:b9: 47:a3:8d:87:78:b6:ad:f6:78:a4:58:04:c9:3b:69:cc:dc:8b: a8:30:1d:39:97:2c:37:ab:69:af:8d:ab:5a:30:b6:06:c0:b7: da:08:65:4c:c6:f8:58:86:10:85:5a:ba:59:a5:7e:ff:a3:52: 1b:e8:b0:89:00:6e:75:2a:18:df:a0:64:59:e2:4d:98:8d:6b: 2c:22:58:32:c9:e0:57:3d:89:54:8f:f6:f2:04:fe:15:b3:22: aa:d2:fa:19:05:77:b9:7a:0d:fd:65:a7:2b:71:03:bd:76:8c: d4:27:62:ef:1a:cb:34:48:7e:a8:c4:ce:66:4a:ea:5b:82:5d: 53:6f:62:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yp3kMHDHvb93wxpoC6HGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm OWRlNTYwHhcNMjYwMTAyMDgxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmRkMTkxZDkyM2FkMzljNTQwY2E4MTJiOTM1YjZkOWQ0MWViODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IYUCnFeWdzT+DjERZ7WQ5EfPdpR YveIfA3OW9khuUYK+SWsL/U9AMeiXN/YBqIdGvJo0QsqQKGAVN6UkeKQdRZk3jKD juzJZ6+mqOWLQpKU28MkuOzff0B657QYrvMmQSNtqDo6Xgytgx7mG2oIxercUr6G opNiGNCUb9dqrqDTZwZGONHsOm4eYDKOxZVcJ5CZ2AdUAO2aDK0teksP+tcGENDY DAZcs7w2T6aBAPQDEDaFnQB9jI4qc+Qg82+Jk7Bmtk2N2+cdawJpDVgIbg6roq2E 0LgGDRl5HPTVyp+clg5BdzLDSXE/16dCylwzHwPSvWpKym+EcIsKLLSdfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIbdGR2SOtOcVAyoErk1ttnUHrhiMB8GA1UdIwQY MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt ZDkzMzdkYjM5ZDFmLzEvaHQwWkhaSTYwNXhVREtnU3VUVzIyZFFldUdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bKOMA0G CSqGSIb3DQEBCwUAA4IBAQCxXZlmgOppaZMoLt3wH4CRVp/TL0SGqi/KiSKw6/MP 7xxNXauAyjwmjyGGqJ1vaVp05GWTqPxQinHo2IMpw3tl/qCW3NxAulPFQFX4Znm/ VAW2bBM78hm856zej6cw8bGeRwygKQok5lCCPGI+Xp5jQCIjELBtGXqcdyS2ablH o42HeLat9nikWATJO2nM3IuoMB05lyw3q2mvjataMLYGwLfaCGVMxvhYhhCFWrpZ pX7/o1Ib6LCJAG51KhjfoGRZ4k2YjWssIlgyyeBXPYlUj/byBP4VsyKq0voZBXe5 eg39ZacrcQO9dozUJ2LvGss0SH6oxM5mSupbgl1Tb2JP -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:27 2026 by rpki-client