This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/H9U_A4wh_9Z7JnyDm8lxwQiHRqk.roa File: H9U_A4wh_9Z7JnyDm8lxwQiHRqk.roa (raw, json) Hash identifier: ZSrzbHzbVXGMfxFBNpsxJAkMUjxVWA1EldfsuxBrxgA= Subject key identifier: 1F:D5:3F:03:8C:21:FF:D6:7B:26:7C:83:9B:C9:71:C1:08:87:46:A9 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14B16247DCAB624BD9F3E033E3EE9B Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/H9U_A4wh_9Z7JnyDm8lxwQiHRqk.roa Signing time: Fri 02 Jan 2026 14:20:21 +0000 ROA not before: Fri 02 Jan 2026 14:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43180 IP address blocks: 135.196.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:b1:62:47:dc:ab:62:4b:d9:f3:e0:33:e3:ee:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fd53f038c21ffd67b267c839bc971c1088746a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d2:47:fa:84:35:c5:db:49:31:28:de:b5:50: 46:8a:f0:fa:86:dc:76:ef:4d:58:f4:83:99:a9:7c: 5c:82:3b:48:97:e7:10:6f:65:dc:09:fd:99:55:f5: 5a:88:9e:d6:eb:cc:6f:93:f5:9d:e0:24:a9:ff:12: 45:63:32:3e:6f:95:b9:2f:bc:75:4c:1b:d3:2a:a9: f7:1d:38:0f:b5:c1:b9:9b:8c:45:61:ba:a7:02:9a: 6a:90:c3:d6:73:b7:a9:d4:da:53:4a:86:25:43:30: c4:7e:ac:00:c4:50:3a:77:65:ad:fe:23:2c:bd:3c: db:f9:47:96:8d:0c:a8:9c:5c:78:52:36:fe:fc:36: ca:58:f0:c0:e1:89:fd:1a:b2:0d:ef:7d:93:1b:63: 9a:6e:fa:1e:cc:24:20:75:05:19:1d:ac:d0:05:26: 93:99:07:4f:39:1e:92:f4:cc:6f:1b:fc:29:c0:ab: 83:27:85:d7:31:53:ea:0d:e5:22:66:bb:13:66:27: 54:58:09:fd:ca:49:34:8a:bf:6a:be:74:18:61:1f: 4a:5f:13:df:dc:06:8f:3a:dd:80:27:9e:ad:4e:31: 1d:e2:79:d0:4b:7c:29:fe:c4:08:85:9c:b8:45:e8: ae:58:c0:fd:37:1b:40:64:71:ca:ab:83:72:bd:9d: b3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D5:3F:03:8C:21:FF:D6:7B:26:7C:83:9B:C9:71:C1:08:87:46:A9 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/H9U_A4wh_9Z7JnyDm8lxwQiHRqk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.196.171.0/24 Signature Algorithm: sha256WithRSAEncryption 40:bf:6a:db:ee:36:d9:b0:9a:2b:32:57:14:d4:59:82:86:bf: f5:4c:2e:4f:06:0d:1c:c8:2f:30:93:f5:84:41:3b:a2:4e:13: ad:f1:bf:92:d2:98:95:92:a6:9d:5c:02:16:41:34:e7:24:82: 4a:ee:ec:c3:0c:91:31:de:ea:65:25:ab:c4:d3:fb:3c:4b:88: a0:92:f5:b9:02:98:1b:e6:a2:d8:b1:95:6e:c9:41:9d:40:c1: 3b:2b:76:fa:42:32:67:15:86:80:f7:60:51:c5:3e:e2:6c:8a: 44:11:5b:9a:da:47:fe:d9:32:18:c9:e3:5d:4e:5d:bf:f4:88: f6:28:e2:9e:29:38:fa:49:4d:7d:b4:37:d5:08:f6:0f:5e:ae: 6d:b6:1c:13:a7:b2:d8:f1:8b:92:12:23:ca:47:bf:6a:19:e0: 04:25:3d:97:2e:32:15:e6:a4:52:fe:32:a1:e6:0b:43:a1:ae: 0f:ef:3d:26:73:8c:04:95:03:a5:bd:20:5a:e6:a2:ce:b6:fa: 27:81:6d:20:45:09:20:1e:4b:20:29:51:16:fc:cf:12:b8:2f: 4e:4a:b4:d3:e9:41:f7:25:84:f0:84:80:39:3f:ed:b9:c9:f9: 78:8a:c4:97:54:70:f5:2a:75:f8:e3:87:eb:7f:20:4a:6d:4a: 13:c6:17:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FLFiR9yrYkvZ8+Az4+6bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmQ1M2YwMzhjMjFmZmQ2N2IyNjdjODM5YmM5NzFjMTA4ODc0NmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tJH+oQ1xdtJMSjetVBGivD6htx2 701Y9IOZqXxcgjtIl+cQb2XcCf2ZVfVaiJ7W68xvk/Wd4CSp/xJFYzI+b5W5L7x1 TBvTKqn3HTgPtcG5m4xFYbqnAppqkMPWc7ep1NpTSoYlQzDEfqwAxFA6d2Wt/iMs vTzb+UeWjQyonFx4Ujb+/DbKWPDA4Yn9GrIN732TG2OabvoezCQgdQUZHazQBSaT mQdPOR6S9MxvG/wpwKuDJ4XXMVPqDeUiZrsTZidUWAn9ykk0ir9qvnQYYR9KXxPf 3AaPOt2AJ56tTjEd4nnQS3wp/sQIhZy4ReiuWMD9NxtAZHHKq4NyvZ2zcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB/VPwOMIf/WeyZ8g5vJccEIh0apMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvSDlVX0E0d2hfOVo3Sm55RG04bHh3UWlIUnFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAh8SrMA0G CSqGSIb3DQEBCwUAA4IBAQBAv2rb7jbZsJorMlcU1FmChr/1TC5PBg0cyC8wk/WE QTuiThOt8b+S0piVkqadXAIWQTTnJIJK7uzDDJEx3uplJavE0/s8S4igkvW5Apgb 5qLYsZVuyUGdQME7K3b6QjJnFYaA92BRxT7ibIpEEVua2kf+2TIYyeNdTl2/9Ij2 KOKeKTj6SU19tDfVCPYPXq5tthwTp7LY8YuSEiPKR79qGeAEJT2XLjIV5qRS/jKh 5gtDoa4P7z0mc4wElQOlvSBa5qLOtvongW0gRQkgHksgKVEW/M8SuC9OSrTT6UH3 JYTwhIA5P+25yfl4isSXVHD1KnX444frfyBKbUoTxhcS -----END CERTIFICATE-----Generated at Sun Jan 25 12:22:20 2026 by rpki-client