This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/H0mOY9wuLVETq2ln9i8nsRGizPs.roa File: H0mOY9wuLVETq2ln9i8nsRGizPs.roa (raw, json) Hash identifier: f6tqfXk1h6HwESq3+qY8gA0p10qoZtvqkambfiIyPc4= Subject key identifier: 1F:49:8E:63:DC:2E:2D:51:13:AB:69:67:F6:2F:27:B1:11:A2:CC:FB Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec Certificate serial: 019BEAD780BB6C381B079CC7694D17112E05 Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/H0mOY9wuLVETq2ln9i8nsRGizPs.roa Signing time: Fri 23 Jan 2026 12:32:30 +0000 ROA not before: Fri 23 Jan 2026 12:32:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210559 IP address blocks: 82.158.127.0/24 maxlen: 24 146.185.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:d7:80:bb:6c:38:1b:07:9c:c7:69:4d:17:11:2e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec Validity Not Before: Jan 23 12:32:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f498e63dc2e2d5113ab6967f62f27b111a2ccfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:80:01:67:cc:92:4e:82:bf:6d:3f:68:c2:c2: 6d:82:3d:92:c8:ac:4b:bb:20:9e:5d:69:b9:34:ce: 43:b8:14:a4:55:f8:bf:ec:c6:21:0f:49:6f:1b:91: 82:30:b6:69:c2:e0:65:c6:86:33:7d:ea:15:1e:f3: 7d:b3:07:e4:72:a3:3c:5b:e8:d4:29:11:c7:e0:d1: ce:5f:6f:b4:01:97:56:34:be:2e:14:69:05:a2:f9: 65:87:18:89:b7:d0:e0:23:7e:c6:65:5b:fe:77:23: 03:18:72:47:5f:f6:e3:a5:41:51:d5:da:a8:04:64: d6:8f:01:d4:2a:06:fe:1d:d0:8e:d7:93:e0:02:ff: 32:c4:a1:76:91:49:6a:89:c9:04:d9:28:e3:2b:c8: 27:86:0c:b0:d4:8a:ed:35:6b:2f:7f:02:70:76:4c: a2:2d:78:bc:71:78:07:18:be:cf:e6:ed:4f:14:47: b8:79:66:bd:cc:59:28:f9:2b:f1:12:e7:4d:6a:e2: d9:61:ec:19:d2:84:1a:2b:a3:39:a6:6f:e5:38:0d: b6:60:bb:be:d7:96:f9:da:02:04:c6:c0:b7:65:5b: 4d:72:42:b3:5c:de:b1:85:4e:ba:69:0f:16:bf:36: 77:82:77:8d:b7:da:b6:ed:fb:01:10:c2:71:31:4b: a4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:49:8E:63:DC:2E:2D:51:13:AB:69:67:F6:2F:27:B1:11:A2:CC:FB X509v3 Authority Key Identifier: keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/H0mOY9wuLVETq2ln9i8nsRGizPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.158.127.0/24 146.185.216.0/24 Signature Algorithm: sha256WithRSAEncryption c1:36:37:bd:b3:38:46:c1:ab:a6:4d:e5:76:93:cc:33:c1:7d: 58:60:de:0e:b5:cd:79:83:13:cc:cc:98:30:b2:66:d8:cf:f3: 8b:e4:f0:52:be:a6:32:07:b0:67:92:a8:e4:e6:89:7f:d1:4a: 09:a4:f9:43:b0:c3:88:d2:7c:7c:f1:d3:cb:71:bc:6b:d6:e6: 14:65:8b:82:53:a0:07:ac:17:92:fd:ad:66:6e:4a:54:72:6d: 78:dd:14:06:3a:81:34:ce:2f:82:77:e4:df:e8:a8:19:4b:dd: eb:0b:08:39:1e:e1:f9:82:14:91:b4:19:96:72:8a:53:27:a9: 2f:bd:0c:ef:dd:a7:bf:74:78:61:8c:95:1a:02:22:f0:39:97: 28:80:2e:f6:33:03:59:7f:4d:85:4d:87:70:47:f3:c9:ce:ba: 62:6f:b6:08:5e:84:62:b2:15:e0:22:53:8a:91:8a:83:30:f3: 55:c9:7a:2f:1a:2d:11:1b:dd:23:0e:8f:18:a4:19:83:02:84: bd:f4:4f:69:d5:e2:51:d0:09:eb:e7:d9:80:14:df:6b:44:1e: a5:35:e5:dd:7a:9c:64:7c:6e:1a:3f:c1:d6:c6:29:e9:4b:1d: 4f:08:08:7e:09:a1:99:c4:51:9c:b3:8c:c9:c8:0e:79:a8:47: dc:bf:72:5e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvq14C7bDgbB5zHaU0XES4FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw MDhhZWMwHhcNMjYwMTIzMTIzMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjQ5OGU2M2RjMmUyZDUxMTNhYjY5NjdmNjJmMjdiMTExYTJjY2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoABZ8ySToK/bT9owsJtgj2SyKxL uyCeXWm5NM5DuBSkVfi/7MYhD0lvG5GCMLZpwuBlxoYzfeoVHvN9swfkcqM8W+jU KRHH4NHOX2+0AZdWNL4uFGkFovllhxiJt9DgI37GZVv+dyMDGHJHX/bjpUFR1dqo BGTWjwHUKgb+HdCO15PgAv8yxKF2kUlqickE2SjjK8gnhgyw1IrtNWsvfwJwdkyi LXi8cXgHGL7P5u1PFEe4eWa9zFko+SvxEudNauLZYewZ0oQaK6M5pm/lOA22YLu+ 15b52gIExsC3ZVtNckKzXN6xhU66aQ8WvzZ3gneNt9q27fsBEMJxMUuk9wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB9JjmPcLi1RE6tpZ/YvJ7ERosz7MB8GA1UdIwQY MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt YjA3ZDg0MTZhZTRhLzEvSDBtT1k5d3VMVkVUcTJsbjlpOG5zUkdpelBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUp5/AwQA krnYMA0GCSqGSIb3DQEBCwUAA4IBAQDBNje9szhGwaumTeV2k8wzwX1YYN4Otc15 gxPMzJgwsmbYz/OL5PBSvqYyB7Bnkqjk5ol/0UoJpPlDsMOI0nx88dPLcbxr1uYU ZYuCU6AHrBeS/a1mbkpUcm143RQGOoE0zi+Cd+Tf6KgZS93rCwg5HuH5ghSRtBmW copTJ6kvvQzv3ae/dHhhjJUaAiLwOZcogC72MwNZf02FTYdwR/PJzrpib7YIXoRi shXgIlOKkYqDMPNVyXovGi0RG90jDo8YpBmDAoS99E9p1eJR0Anr59mAFN9rRB6l NeXdepxkfG4aP8HWxinpSx1PCAh+CaGZxFGcs4zJyA55qEfcv3Je -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:48 2026 by rpki-client