This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/HH1XX0C9mVqJ3jkZsABD61Kzc2k.roa File: HH1XX0C9mVqJ3jkZsABD61Kzc2k.roa (raw, json) Hash identifier: bmQ/ag1Lu6nwLlZv2LxE+C1ZMBCU64BZNJ1w9Xn7AYU= Subject key identifier: 1C:7D:57:5F:40:BD:99:5A:89:DE:39:19:B0:00:43:EB:52:B3:73:69 Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27 Certificate serial: 019B7BA32221EA5278CBC4063AFF8B4AB6BF Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/HH1XX0C9mVqJ3jkZsABD61Kzc2k.roa Signing time: Thu 01 Jan 2026 22:17:27 +0000 ROA not before: Thu 01 Jan 2026 22:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29278 IP address blocks: 95.141.255.0/24 maxlen: 24 2a13:46c0:ce00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:22:21:ea:52:78:cb:c4:06:3a:ff:8b:4a:b6:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27 Validity Not Before: Jan 1 22:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c7d575f40bd995a89de3919b00043eb52b37369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:aa:35:42:8a:42:07:e9:77:2c:a0:5c:54:e3: ef:89:95:80:51:11:e5:cf:eb:cc:32:02:7c:27:37: 8d:62:b8:b7:d0:0d:09:12:10:f9:37:21:7b:d0:61: 98:71:56:5d:ee:03:f0:7c:a7:48:6c:5b:2c:05:91: 67:38:18:b6:00:5b:ab:71:da:46:7c:6e:a5:e4:76: 96:a0:ba:1c:c8:dd:e9:76:41:63:94:23:48:ca:69: 81:3e:c9:21:01:27:f6:42:d0:9d:d7:4a:17:0b:e0: 1c:e2:5c:62:28:88:6d:d7:3d:ac:2d:84:04:42:aa: da:ff:4c:4d:37:96:cf:0e:76:ed:aa:bb:35:95:ab: 5f:cd:c0:96:bb:83:fd:ba:66:fd:04:b5:b9:59:de: 7d:a1:ce:4b:70:54:e1:5a:72:39:0e:a8:9f:b0:64: 42:33:1d:45:de:00:18:f9:e4:4f:8a:91:5c:38:9e: e3:64:8e:c9:fd:e6:b5:50:67:59:35:06:93:04:2f: b4:dd:12:24:e5:42:91:5f:cc:fa:d9:ef:13:1a:33: 2e:b4:92:70:ab:64:07:de:45:54:0d:ef:f4:46:2c: f2:c9:91:78:f1:84:ea:b4:63:ef:a4:9a:2e:79:d3: f7:39:d6:01:57:25:a8:25:93:3c:63:86:96:e8:ef: 89:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7D:57:5F:40:BD:99:5A:89:DE:39:19:B0:00:43:EB:52:B3:73:69 X509v3 Authority Key Identifier: keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/HH1XX0C9mVqJ3jkZsABD61Kzc2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.141.255.0/24 IPv6: 2a13:46c0:ce00::/48 Signature Algorithm: sha256WithRSAEncryption 97:12:0c:d4:89:d4:39:42:fe:7f:89:35:aa:a8:3c:82:8d:08: 1d:9e:31:4a:97:62:98:6a:fd:a4:66:6f:d4:20:1d:8a:b9:36: 78:61:a1:27:66:0a:83:bc:e5:72:96:7a:2f:6c:8c:27:8a:72: ef:b9:5d:4f:54:e6:75:94:73:91:62:a3:3f:8f:52:2a:ca:11: 9b:4d:b3:4d:9c:9a:72:da:f3:b3:12:6f:cb:25:19:25:ea:0e: bc:9e:f8:5f:13:d7:95:28:f1:32:f2:db:7c:3f:12:b6:ae:21: 23:aa:c5:10:94:e6:dd:76:55:95:11:f4:2a:cf:2b:df:fe:c5: 11:3b:24:3a:e9:8e:25:40:af:a9:2e:8f:f8:9d:dd:da:cf:d1: e7:ba:9b:9b:b1:39:1b:ce:7c:86:9d:fb:c8:e8:49:a8:5d:58: 54:55:d2:45:00:54:76:32:85:70:52:80:ff:8c:e1:de:44:54: 03:0d:c3:ef:07:91:51:c5:48:a0:37:36:97:5c:e5:15:57:5b: 02:20:fd:cd:44:d3:2d:c0:70:35:50:57:7a:30:54:72:19:12: 4e:57:f7:82:97:fa:67:b0:a6:a3:94:2f:7e:95:9b:1d:c4:ab: fb:d9:bc:3b:29:69:a3:15:55:50:da:65:23:f5:a2:bd:ce:93: bc:72:36:9e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7oyIh6lJ4y8QGOv+LSra/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODk3ZjFhMzQ5N2ViYmUyN2I5ZTJmMGQ2ZjNlYWUyYmJl NjhiMjcwHhcNMjYwMTAxMjIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzdkNTc1ZjQwYmQ5OTVhODlkZTM5MTliMDAwNDNlYjUyYjM3MzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqo1QopCB+l3LKBcVOPviZWAURHl z+vMMgJ8JzeNYri30A0JEhD5NyF70GGYcVZd7gPwfKdIbFssBZFnOBi2AFurcdpG fG6l5HaWoLocyN3pdkFjlCNIymmBPskhASf2QtCd10oXC+Ac4lxiKIht1z2sLYQE Qqra/0xNN5bPDnbtqrs1latfzcCWu4P9umb9BLW5Wd59oc5LcFThWnI5DqifsGRC Mx1F3gAY+eRPipFcOJ7jZI7J/ea1UGdZNQaTBC+03RIk5UKRX8z62e8TGjMutJJw q2QH3kVUDe/0RizyyZF48YTqtGPvpJouedP3OdYBVyWoJZM8Y4aW6O+JlwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBx9V19AvZlaid45GbAAQ+tSs3NpMB8GA1UdIwQY MBaAFEyJfxo0l+u+J7ni8Nbz6uK75osnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zOGU5NzUtMWY0Zi00MTE0LWJmYTEt YTc5ZGExYTg1NTEzLzEvSEgxWFgwQzltVnFKM2prWnNBQkQ2MUt6YzJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zOGU5NzUtMWY0Zi00MTE0LWJmYTEtYTc5ZGExYTg1NTEz LzEvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAX43/MA8E AgACMAkDBwAqE0bAzgAwDQYJKoZIhvcNAQELBQADggEBAJcSDNSJ1DlC/n+JNaqo PIKNCB2eMUqXYphq/aRmb9QgHYq5NnhhoSdmCoO85XKWei9sjCeKcu+5XU9U5nWU c5Fioz+PUirKEZtNs02cmnLa87MSb8slGSXqDrye+F8T15Uo8TLy23w/ErauISOq xRCU5t12VZUR9CrPK9/+xRE7JDrpjiVAr6kuj/id3drP0ee6m5uxORvOfIad+8jo SahdWFRV0kUAVHYyhXBSgP+M4d5EVAMNw+8HkVHFSKA3Npdc5RVXWwIg/c1E0y3A cDVQV3owVHIZEk5X94KX+mewpqOUL36Vmx3Eq/vZvDspaaMVVVDaZSP1or3Ok7xy Np4= -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:08 2026 by rpki-client