This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/H3RmjMDhi-VIQKw953O9EUU-NrU.roa File: H3RmjMDhi-VIQKw953O9EUU-NrU.roa (raw, json) Hash identifier: u8dYTQtYNEtT+hfaZbOUxQvhTTWTaktw3famZ+VPWSU= Subject key identifier: 1F:74:66:8C:C0:E1:8B:E5:48:40:AC:3D:E7:73:BD:11:45:3E:36:B5 Certificate issuer: /CN=a27c641b530a7c6ba234022e3327246232367100 Certificate serial: 019B7F15C29569932A66CF0050237647BD95 Authority key identifier: A2:7C:64:1B:53:0A:7C:6B:A2:34:02:2E:33:27:24:62:32:36:71:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/H3RmjMDhi-VIQKw953O9EUU-NrU.roa Signing time: Fri 02 Jan 2026 14:21:31 +0000 ROA not before: Fri 02 Jan 2026 14:21:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43541 IP address blocks: 91.239.200.0/22 maxlen: 22 2001:67c:e94::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c2:95:69:93:2a:66:cf:00:50:23:76:47:bd:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a27c641b530a7c6ba234022e3327246232367100 Validity Not Before: Jan 2 14:21:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f74668cc0e18be54840ac3de773bd11453e36b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e4:79:9d:6f:06:c7:d0:2f:48:88:5e:ba:01: 24:38:4b:a5:30:58:76:29:d7:4e:b6:16:71:f1:c1: 02:bb:12:49:ff:99:3d:0a:81:df:02:36:a9:18:1a: 51:cc:cf:02:1b:7a:05:d4:26:a1:81:2a:4c:a8:02: a0:a8:d1:b1:31:44:eb:83:92:0d:5d:0f:32:45:33: 83:e8:b5:f3:38:28:f5:43:2a:0c:10:7f:44:48:7d: 15:6c:5b:17:b9:76:35:b4:72:e2:5c:0d:da:3b:94: 73:f1:ef:3f:11:47:a7:15:ba:ba:2a:01:e7:e5:ed: 94:a3:5f:a4:c7:a1:c7:c6:d9:1c:d9:75:5e:b7:73: 74:d2:7a:da:28:29:11:bf:db:26:17:cb:82:79:26: 79:c6:c9:f1:d2:80:84:80:6f:f8:e8:c3:ab:6f:d4: 3f:e1:53:89:f9:e6:85:cb:6b:14:f5:75:ab:c3:c4: 9f:c4:f6:47:21:7d:95:25:04:33:20:86:d5:39:35: db:2b:f4:58:e1:ef:01:55:70:1d:de:ef:87:c9:33: 1c:e4:50:6a:0c:e8:68:e6:79:b7:43:ed:ca:27:6f: f8:f2:8d:13:81:cc:8f:95:4c:bf:bf:4f:93:5a:69: 99:fd:c2:60:90:a6:9b:9e:0e:56:68:00:0c:a6:1e: 5f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:74:66:8C:C0:E1:8B:E5:48:40:AC:3D:E7:73:BD:11:45:3E:36:B5 X509v3 Authority Key Identifier: keyid:A2:7C:64:1B:53:0A:7C:6B:A2:34:02:2E:33:27:24:62:32:36:71:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/H3RmjMDhi-VIQKw953O9EUU-NrU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.200.0/22 IPv6: 2001:67c:e94::/48 Signature Algorithm: sha256WithRSAEncryption 73:a4:51:1f:18:b4:54:fb:bc:31:8f:61:ae:22:e7:eb:c2:e4: af:59:ac:41:36:10:03:f5:99:43:c6:40:b3:70:72:8e:fb:67: 56:23:49:01:f6:d6:70:67:63:0e:2e:18:80:30:df:17:8d:e5: 72:14:83:0f:95:c7:50:72:61:49:7e:5b:e4:70:c9:47:80:4c: d9:53:84:b5:b0:0d:b4:d5:86:0a:c8:78:b1:3a:8d:29:ed:5a: e1:da:79:c0:dc:c3:d9:74:aa:50:19:a2:a8:77:d5:ba:04:21: 7a:52:03:7c:48:51:78:bd:51:43:b6:69:03:a5:6f:fa:f6:52: 92:03:5e:02:df:8f:65:20:8c:1e:b5:94:a1:b4:9f:b4:19:7c: 75:9c:07:26:ff:82:06:64:d4:62:09:d9:09:cc:96:62:d1:39: e8:e8:40:ff:3b:d0:90:2d:2a:e1:b3:2b:21:89:23:05:19:f6: 9e:f2:31:49:92:b3:2b:72:00:cb:08:80:9c:b4:e7:6d:a5:4c: 89:a1:ee:92:d5:36:d8:2d:e5:fe:ae:91:90:d6:29:76:0b:e1: 15:32:6f:d4:07:a9:a5:e8:01:63:46:89:ea:3d:8b:2b:fe:27: 1a:09:1b:de:34:ee:69:71:f3:0b:f8:5d:bd:f4:aa:99:21:c4: 2a:33:d6:ca -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/FcKVaZMqZs8AUCN2R72VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyN2M2NDFiNTMwYTdjNmJhMjM0MDIyZTMzMjcyNDYyMzIz NjcxMDAwHhcNMjYwMTAyMTQyMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjc0NjY4Y2MwZTE4YmU1NDg0MGFjM2RlNzczYmQxMTQ1M2UzNmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8uR5nW8Gx9AvSIheugEkOEulMFh2 KddOthZx8cECuxJJ/5k9CoHfAjapGBpRzM8CG3oF1CahgSpMqAKgqNGxMUTrg5IN XQ8yRTOD6LXzOCj1QyoMEH9ESH0VbFsXuXY1tHLiXA3aO5Rz8e8/EUenFbq6KgHn 5e2Uo1+kx6HHxtkc2XVet3N00nraKCkRv9smF8uCeSZ5xsnx0oCEgG/46MOrb9Q/ 4VOJ+eaFy2sU9XWrw8SfxPZHIX2VJQQzIIbVOTXbK/RY4e8BVXAd3u+HyTMc5FBq DOho5nm3Q+3KJ2/48o0TgcyPlUy/v0+TWmmZ/cJgkKabng5WaAAMph5fPwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFB90ZozA4YvlSECsPedzvRFFPja1MB8GA1UdIwQY MBaAFKJ8ZBtTCnxrojQCLjMnJGIyNnEAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb254a0cxTUtmR3VpTkFJdU15Y2tZakkyY1FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wMDZmNTYtMWQ4ZS00NWNjLTg2OTQt MWYxODhmY2NlODU1LzEvSDNSbWpNRGhpLVZJUUt3OTUzTzlFVVUtTnJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wMDZmNTYtMWQ4ZS00NWNjLTg2OTQtMWYxODhmY2NlODU1 LzEvb254a0cxTUtmR3VpTkFJdU15Y2tZakkyY1FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCW+/IMA8E AgACMAkDBwAgAQZ8DpQwDQYJKoZIhvcNAQELBQADggEBAHOkUR8YtFT7vDGPYa4i 5+vC5K9ZrEE2EAP1mUPGQLNwco77Z1YjSQH21nBnYw4uGIAw3xeN5XIUgw+Vx1By YUl+W+RwyUeATNlThLWwDbTVhgrIeLE6jSntWuHaecDcw9l0qlAZoqh31boEIXpS A3xIUXi9UUO2aQOlb/r2UpIDXgLfj2UgjB61lKG0n7QZfHWcByb/ggZk1GIJ2QnM lmLROejoQP870JAtKuGzKyGJIwUZ9p7yMUmSsytyAMsIgJy0522lTImh7pLVNtgt 5f6ukZDWKXYL4RUyb9QHqaXoAWNGieo9iyv+JxoJG9407mlx8wv4Xb30qpkhxCoz 1so= -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:17 2026 by rpki-client