This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/h4TS8P3Y9MPkSGxAwU5ny5ii-0Q.roa File: h4TS8P3Y9MPkSGxAwU5ny5ii-0Q.roa (raw, json) Hash identifier: Z3pTNwIsVEmIXkCWPiwIUSynncIo2xxknOvYt/KXrfg= Subject key identifier: 87:84:D2:F0:FD:D8:F4:C3:E4:48:6C:40:C1:4E:67:CB:98:A2:FB:44 Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Certificate serial: 019B7AC8E5CA920A79CE48274D6DB7C095CC Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/h4TS8P3Y9MPkSGxAwU5ny5ii-0Q.roa Signing time: Thu 01 Jan 2026 18:19:04 +0000 ROA not before: Thu 01 Jan 2026 18:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203066 IP address blocks: 80.82.26.0/24 maxlen: 24 94.124.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e5:ca:92:0a:79:ce:48:27:4d:6d:b7:c0:95:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Validity Not Before: Jan 1 18:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8784d2f0fdd8f4c3e4486c40c14e67cb98a2fb44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:59:7d:d0:8f:3d:71:99:d8:88:41:c8:6b:57: 38:79:d0:14:c3:1d:37:5e:d4:ea:c5:07:44:bf:2e: cb:8b:38:a6:dc:83:a0:af:99:b9:dd:55:48:28:51: d9:ba:55:d4:a0:db:94:7a:d5:5c:98:88:90:29:a5: 0b:99:e8:d2:13:00:db:66:b3:43:71:2d:af:c6:67: 46:be:a0:5c:50:eb:92:26:25:0f:8e:2b:ce:e1:43: 68:82:3e:0f:46:e4:00:50:1c:89:9c:09:e0:b3:95: 0d:05:c2:fe:7c:70:7a:3e:fe:c6:f7:ad:83:40:e2: 10:b0:49:a3:7d:ce:18:68:89:f7:64:1e:7b:5e:d4: 58:ee:7d:19:71:b6:6c:78:12:2a:3f:96:22:5e:fd: 44:51:c5:cb:cd:66:dc:6a:6f:6c:d1:f1:7a:7f:ef: 02:24:27:0c:57:66:93:c0:98:62:33:21:62:f6:f2: ab:9c:06:9d:c7:d6:ef:0d:3c:ad:69:7f:6a:ac:86: 90:c7:d3:51:e0:10:4f:66:13:c7:36:a1:67:21:0d: 62:e6:16:53:50:8d:89:de:af:2c:58:24:a6:88:48: 21:2e:f7:35:81:27:31:29:83:f2:b0:01:26:dc:72: 93:64:11:c3:57:41:e5:b0:49:98:08:92:53:9a:87: bc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:84:D2:F0:FD:D8:F4:C3:E4:48:6C:40:C1:4E:67:CB:98:A2:FB:44 X509v3 Authority Key Identifier: keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/h4TS8P3Y9MPkSGxAwU5ny5ii-0Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.82.26.0/24 94.124.1.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:3e:d0:24:3f:85:55:05:95:77:bc:f9:7a:aa:a6:d2:4b:80: 3f:b2:de:72:fa:89:c0:42:9e:6f:be:bd:5b:c7:5d:fe:c5:da: d9:99:db:21:48:16:ed:e3:f5:18:69:d6:56:55:71:fc:3d:cd: 65:d0:a3:4a:97:9c:08:6c:f3:8e:db:5a:e0:10:32:1d:c9:ec: e6:35:29:0f:04:cc:53:8d:f6:23:ad:87:ea:ea:f8:b3:79:f8: b2:e1:66:a9:91:6d:dd:95:49:17:42:74:72:37:4d:9c:51:34: 0b:97:54:0e:c4:6e:ca:58:40:6d:14:7a:03:20:b8:32:d5:3b: c2:35:0a:bf:9e:91:e9:93:46:2d:14:a3:1e:36:81:bc:61:57: 9d:77:20:aa:fd:ed:c2:0d:81:e9:16:b9:b1:0a:d4:15:e4:37: 6c:2a:95:0f:46:95:1e:a4:6a:45:90:f1:47:5e:4d:e5:05:4f: 79:6b:03:c7:d0:a1:62:67:2a:b3:ec:8d:68:1f:f9:38:4a:1f: 81:9b:8a:ba:c7:c4:5d:fd:3a:fd:fd:a7:b4:cf:5c:ff:54:95: 0e:9a:2e:b9:16:28:94:7a:bb:fb:63:25:d2:38:93:29:29:50: 21:b0:89:db:c5:1f:e9:4c:9f:ec:ec:c0:37:74:dd:29:5e:3d: 66:3e:73:c0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yOXKkgp5zkgnTW23wJXMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYmZhMjk2MWZhMGUwYjA3MDQxMjkzZGRjMGMzNjkzYTll MGEyMzgwHhcNMjYwMTAxMTgxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Nzg0ZDJmMGZkZDhmNGMzZTQ0ODZjNDBjMTRlNjdjYjk4YTJmYjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFl90I89cZnYiEHIa1c4edAUwx03 XtTqxQdEvy7Lizim3IOgr5m53VVIKFHZulXUoNuUetVcmIiQKaULmejSEwDbZrND cS2vxmdGvqBcUOuSJiUPjivO4UNogj4PRuQAUByJnAngs5UNBcL+fHB6Pv7G962D QOIQsEmjfc4YaIn3ZB57XtRY7n0ZcbZseBIqP5YiXv1EUcXLzWbcam9s0fF6f+8C JCcMV2aTwJhiMyFi9vKrnAadx9bvDTytaX9qrIaQx9NR4BBPZhPHNqFnIQ1i5hZT UI2J3q8sWCSmiEghLvc1gScxKYPysAEm3HKTZBHDV0HlsEmYCJJTmoe8GwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIeE0vD92PTD5EhsQMFOZ8uYovtEMB8GA1UdIwQY MBaAFBG/opYfoOCwcEEpPdwMNpOp4KI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgt Nzg3OTFjOTM1NmEzLzEvaDRUUzhQM1k5TVBrU0d4QXdVNW55NWlpLTBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgtNzg3OTFjOTM1NmEz LzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUFIaAwQA XnwBMA0GCSqGSIb3DQEBCwUAA4IBAQB+PtAkP4VVBZV3vPl6qqbSS4A/st5y+onA Qp5vvr1bx13+xdrZmdshSBbt4/UYadZWVXH8Pc1l0KNKl5wIbPOO21rgEDIdyezm NSkPBMxTjfYjrYfq6vizefiy4WapkW3dlUkXQnRyN02cUTQLl1QOxG7KWEBtFHoD ILgy1TvCNQq/npHpk0YtFKMeNoG8YVeddyCq/e3CDYHpFrmxCtQV5DdsKpUPRpUe pGpFkPFHXk3lBU95awPH0KFiZyqz7I1oH/k4Sh+Bm4q6x8Rd/Tr9/ae0z1z/VJUO mi65FiiUerv7YyXSOJMpKVAhsInbxR/pTJ/s7MA3dN0pXj1mPnPA -----END CERTIFICATE-----Generated at Mon Jan 26 07:31:40 2026 by rpki-client