This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/h2NAEmh9bsegz-FoJXfTB15ZZJk.roa File: h2NAEmh9bsegz-FoJXfTB15ZZJk.roa (raw, json) Hash identifier: uh3QBTKdg1DqO9gqwS5lnG2/Dsfn0YxPIDMUAOSyI9I= Subject key identifier: 87:63:40:12:68:7D:6E:C7:A0:CF:E1:68:25:77:D3:07:5E:59:64:99 Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa Certificate serial: 019B7758D4CE09DEE38D695248A356BA4228 Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/h2NAEmh9bsegz-FoJXfTB15ZZJk.roa Signing time: Thu 01 Jan 2026 02:17:48 +0000 ROA not before: Thu 01 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59796 IP address blocks: 188.0.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d4:ce:09:de:e3:8d:69:52:48:a3:56:ba:42:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87634012687d6ec7a0cfe1682577d3075e596499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ee:8e:4b:e0:52:5e:00:ba:b7:b8:50:80:7c: 85:0d:a6:33:a4:6b:58:b0:99:1c:9a:5f:b7:8d:bd: 42:ff:71:44:80:0f:57:bf:4a:bf:b5:6d:88:b9:17: c0:05:1a:29:bc:8a:59:2d:68:4e:c7:cd:cc:91:c2: bf:d0:e0:9d:04:48:8a:3f:8f:71:56:64:6c:3e:24: 6e:b2:80:d0:d2:ae:f4:82:18:a6:e9:87:3e:ed:58: d5:79:b2:b2:80:2c:c2:60:56:bc:07:41:15:9a:22: e7:2b:2a:0b:04:d2:07:e4:85:46:61:2b:1c:f4:41: 92:3c:7f:72:70:bc:38:52:93:24:3b:27:17:c8:92: 71:b3:d6:5f:e2:cc:07:af:07:95:64:ad:23:3e:ef: eb:d9:6c:9b:f9:2c:8e:8a:84:c3:53:e0:d6:1e:75: bc:0d:d4:d3:c5:db:d3:5a:b3:1e:48:da:2b:f8:54: 6b:38:eb:6a:e5:ac:22:03:b6:ba:44:56:aa:56:1f: e3:34:4b:76:9e:f3:69:cb:e3:5c:ea:83:eb:ee:fc: 8d:b2:dc:9a:0f:64:80:d7:b2:46:df:dc:d8:8b:c0: 56:63:5f:3e:d5:26:a7:04:f5:ff:00:df:5b:ff:7d: dc:32:93:d9:45:40:d4:a4:6e:fb:f1:ed:c7:9e:ec: e7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:63:40:12:68:7D:6E:C7:A0:CF:E1:68:25:77:D3:07:5E:59:64:99 X509v3 Authority Key Identifier: keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/h2NAEmh9bsegz-FoJXfTB15ZZJk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.0.150.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:d6:22:02:8b:7b:c1:ed:6b:d4:d9:4e:c8:fb:aa:4b:41:c0: bd:0e:6b:e5:64:5d:bf:45:e1:0c:fd:cf:cc:58:f1:73:5d:90: 10:65:83:9f:75:3a:e8:08:de:55:f4:95:9d:21:eb:4c:83:73: eb:b2:1f:db:b4:b7:ed:df:5c:41:c4:49:54:89:8f:28:a8:88: 1a:cf:3f:2f:5a:68:7a:97:e2:70:68:13:83:71:4b:fa:31:e7: 9c:86:8c:8a:ad:93:7d:f8:41:59:de:09:3c:fc:80:07:f0:97: 97:fd:10:d0:ca:c3:98:c1:f9:40:63:b2:b4:ca:04:f4:0c:0b: 96:0a:37:d6:6e:30:93:23:e7:8f:aa:51:cc:b4:7a:f8:34:57: 9f:8e:29:ee:bd:21:34:85:28:11:f3:12:dc:d3:3f:3f:7e:b6: de:0b:ec:56:53:c1:ca:5f:f1:a4:2a:52:e0:e2:95:de:3f:97: eb:f9:e3:0f:fc:2d:72:66:b6:74:84:f1:6f:19:3d:02:93:13: 6b:1f:8a:09:6e:8f:16:2f:c2:7c:43:28:2d:5a:2b:67:c8:18: 3c:0c:36:20:b4:49:f3:96:5f:71:87:31:2a:ba:7a:4d:22:8f: b7:56:92:02:e0:af:bf:f5:c9:22:b7:b5:ef:a2:bc:7a:bd:df: 78:be:fb:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WNTOCd7jjWlSSKNWukIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjEwZjIyNTkwOTNhYWY0NTI4NTkyMmE1ODhlOWE2NjFh YmE5ZmEwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzYzNDAxMjY4N2Q2ZWM3YTBjZmUxNjgyNTc3ZDMwNzVlNTk2NDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+6OS+BSXgC6t7hQgHyFDaYzpGtY sJkcml+3jb1C/3FEgA9Xv0q/tW2IuRfABRopvIpZLWhOx83MkcK/0OCdBEiKP49x VmRsPiRusoDQ0q70ghim6Yc+7VjVebKygCzCYFa8B0EVmiLnKyoLBNIH5IVGYSsc 9EGSPH9ycLw4UpMkOycXyJJxs9Zf4swHrweVZK0jPu/r2Wyb+SyOioTDU+DWHnW8 DdTTxdvTWrMeSNor+FRrOOtq5awiA7a6RFaqVh/jNEt2nvNpy+Nc6oPr7vyNstya D2SA17JG39zYi8BWY18+1SanBPX/AN9b/33cMpPZRUDUpG778e3HnuznjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIdjQBJofW7HoM/haCV30wdeWWSZMB8GA1UdIwQY MBaAFJ0hDyJZCTqvRShZIqWI6aZhq6n6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQt NDM4NDNjMmU5NDNiLzEvaDJOQUVtaDlic2Vnei1Gb0pYZlRCMTVaWkprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQtNDM4NDNjMmU5NDNi LzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvACWMA0G CSqGSIb3DQEBCwUAA4IBAQCP1iICi3vB7WvU2U7I+6pLQcC9DmvlZF2/ReEM/c/M WPFzXZAQZYOfdTroCN5V9JWdIetMg3Prsh/btLft31xBxElUiY8oqIgazz8vWmh6 l+JwaBODcUv6MeechoyKrZN9+EFZ3gk8/IAH8JeX/RDQysOYwflAY7K0ygT0DAuW CjfWbjCTI+ePqlHMtHr4NFefjinuvSE0hSgR8xLc0z8/frbeC+xWU8HKX/GkKlLg 4pXeP5fr+eMP/C1yZrZ0hPFvGT0CkxNrH4oJbo8WL8J8QygtWitnyBg8DDYgtEnz ll9xhzEqunpNIo+3VpIC4K+/9ckit7Xvorx6vd94vvvU -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:13 2026 by rpki-client