This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa File: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (raw, json) Hash identifier: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms= Subject key identifier: 87:B8:0B:D2:17:FC:3C:A5:B9:51:F2:4A:79:63:2F:94:C6:EE:17:84 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019B7DC97075AD20152BD863AAA71A080CA5 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa Signing time: Fri 02 Jan 2026 08:18:32 +0000 ROA not before: Fri 02 Jan 2026 08:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39238 IP address blocks: 45.153.72.0/23 maxlen: 23 185.183.160.0/22 maxlen: 22 193.109.217.0/24 maxlen: 24 2a05:541:1a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:70:75:ad:20:15:2b:d8:63:aa:a7:1a:08:0c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Jan 2 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87b80bd217fc3ca5b951f24a79632f94c6ee1784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:9d:2a:a4:89:49:27:dd:5b:22:9d:d7:4d: 1d:3e:a6:af:73:da:f2:81:ec:64:1b:2a:e8:3d:d4: 7e:83:a7:db:38:79:60:63:94:4b:ba:1e:7b:06:de: c7:98:22:5f:77:5f:6f:2a:14:27:bd:ad:a9:af:f4: 4f:cc:d3:6d:2a:d2:6b:fb:f0:c6:cf:83:2a:8b:1c: b7:e1:77:bc:54:28:e5:9c:01:9f:cc:0f:c1:a8:5f: 45:9a:50:fc:87:fa:7d:fc:d8:0f:13:fd:4b:35:4c: 18:1d:40:7e:78:ce:74:b2:50:2a:f2:a8:3c:b8:77: d8:f1:c4:0d:e0:64:e5:fa:78:56:ff:95:6f:7d:ec: f8:49:24:c0:b5:cd:46:4c:23:a9:90:1e:f6:f9:ab: 62:27:96:35:3b:02:3b:20:71:3a:97:3d:b8:ab:90: 6d:ca:c4:20:f7:fe:90:24:60:25:ab:cc:78:76:e6: f1:0c:2c:c5:63:fc:5a:b9:b2:db:3b:83:ec:d8:a2: 17:41:cd:66:14:19:25:b7:ca:02:49:91:a1:e8:6a: 61:42:a3:ff:60:0d:1f:d4:6b:10:e3:6a:56:b5:5d: 07:ba:a4:2f:27:03:06:3c:e7:65:6d:f8:81:84:79: ea:0e:41:00:d3:d2:64:06:8f:2f:1b:51:84:b2:f1: af:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B8:0B:D2:17:FC:3C:A5:B9:51:F2:4A:79:63:2F:94:C6:EE:17:84 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.72.0/23 185.183.160.0/22 193.109.217.0/24 IPv6: 2a05:541:1a1::/48 Signature Algorithm: sha256WithRSAEncryption 7f:50:e0:74:9f:fd:d5:c2:29:26:4c:df:4b:ea:a2:69:e6:60: 19:f1:b6:d1:47:70:7d:dc:a3:e9:4d:12:0a:b3:88:0b:af:da: b2:16:ca:c2:58:58:87:d4:c9:25:e7:c2:8c:0b:2c:47:17:4d: 87:e1:dc:c7:62:e6:5e:34:ef:51:e1:a3:85:9d:8a:df:19:3d: dc:d1:cb:6b:90:a7:98:64:e7:72:a9:9e:c1:a4:d0:ff:b8:78: 1a:ba:06:42:af:5b:fc:56:c0:06:95:f1:49:65:f0:98:8c:5e: 45:c2:a5:e2:6c:96:06:93:46:cc:f4:40:f2:f7:59:3a:5f:0c: e3:15:ec:f2:f1:8a:72:c0:1e:be:cd:ee:94:64:2c:ce:67:c1: 3f:99:8a:84:f1:a4:68:0e:98:2c:a0:69:bf:1f:49:e7:e9:ae: 60:8f:e5:32:47:64:62:18:37:bb:9f:a7:44:d1:54:2a:d9:d6: 69:73:27:fc:72:93:5f:5b:32:6f:03:40:59:0b:8a:0f:b7:a2: 58:81:d3:6b:a9:8f:3c:0f:af:d7:05:36:1c:94:11:76:20:ba: dc:6a:6a:7f:33:07:d2:2e:9a:bd:27:05:23:dd:a6:1e:02:c1: 08:ac:49:06:80:24:9f:88:1c:b7:dc:cb:8b:86:b6:8e:9c:7d: 00:ae:00:77 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt9yXB1rSAVK9hjqqcaCAylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwMTAyMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2I4MGJkMjE3ZmMzY2E1Yjk1MWYyNGE3OTYzMmY5NGM2ZWUxNzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKWdKqSJSSfdWyKd100dPqavc9ry gexkGyroPdR+g6fbOHlgY5RLuh57Bt7HmCJfd19vKhQnva2pr/RPzNNtKtJr+/DG z4Mqixy34Xe8VCjlnAGfzA/BqF9FmlD8h/p9/NgPE/1LNUwYHUB+eM50slAq8qg8 uHfY8cQN4GTl+nhW/5Vvfez4SSTAtc1GTCOpkB72+atiJ5Y1OwI7IHE6lz24q5Bt ysQg9/6QJGAlq8x4dubxDCzFY/xaubLbO4Ps2KIXQc1mFBklt8oCSZGh6GphQqP/ YA0f1GsQ42pWtV0HuqQvJwMGPOdlbfiBhHnqDkEA09JkBo8vG1GEsvGvvQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFIe4C9IX/DyluVHySnljL5TG7heEMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvaDdnTDBoZjhQS1c1VWZKS2VXTXZsTWJ1RjRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQBLZlIAwQC ubegAwQAwW3ZMA8EAgACMAkDBwAqBQVBAaEwDQYJKoZIhvcNAQELBQADggEBAH9Q 4HSf/dXCKSZM30vqomnmYBnxttFHcH3co+lNEgqziAuv2rIWysJYWIfUySXnwowL LEcXTYfh3Mdi5l4071Hho4Wdit8ZPdzRy2uQp5hk53KpnsGk0P+4eBq6BkKvW/xW wAaV8Ull8JiMXkXCpeJslgaTRsz0QPL3WTpfDOMV7PLxinLAHr7N7pRkLM5nwT+Z ioTxpGgOmCygab8fSefprmCP5TJHZGIYN7ufp0TRVCrZ1mlzJ/xyk19bMm8DQFkL ig+3oliB02upjzwPr9cFNhyUEXYgutxqan8zB9Iumr0nBSPdph4CwQisSQaAJJ+I HLfcy4uGto6cfQCuAHc= -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:17 2026 by rpki-client