This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/RHDQQEmbcOrqTmjc99mQ-Eu0900.roa File: RHDQQEmbcOrqTmjc99mQ-Eu0900.roa (raw, json) Hash identifier: x+3xhE8Ho8gzcy+Ei5kfiLpvFaz62BymEv0joq6kEPs= Subject key identifier: 44:70:D0:40:49:9B:70:EA:EA:4E:68:DC:F7:D9:90:F8:4B:B4:F7:4D Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 019B7AC9320FDB18DD873BCD43D08EBC1B0A Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/RHDQQEmbcOrqTmjc99mQ-Eu0900.roa Signing time: Thu 01 Jan 2026 18:19:24 +0000 ROA not before: Thu 01 Jan 2026 18:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29255 IP address blocks: 82.147.192.0/19 maxlen: 19 85.194.64.0/18 maxlen: 18 89.237.128.0/18 maxlen: 18 89.237.128.0/19 maxlen: 19 89.237.176.0/20 maxlen: 20 185.27.220.0/22 maxlen: 22 185.29.92.0/22 maxlen: 22 212.24.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:32:0f:db:18:dd:87:3b:cd:43:d0:8e:bc:1b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Jan 1 18:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4470d040499b70eaea4e68dcf7d990f84bb4f74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9d:76:11:9a:21:25:56:e5:3e:bf:bc:66:88: 8c:bc:e1:1c:f3:66:8e:b1:7f:80:fa:9c:93:d1:e7: 95:14:5d:47:6b:cb:e7:d7:a4:f2:ad:22:1f:29:db: c3:b5:90:2f:4b:f6:10:6b:d6:aa:3d:46:15:6a:39: d4:39:ae:53:37:5b:a3:2f:59:04:48:3f:9c:f0:7e: 25:f2:db:d9:a0:6f:25:66:74:e5:de:24:1b:3f:b7: a6:bb:3f:f5:05:4f:fc:ae:19:65:40:9b:56:75:3b: 28:4b:01:95:39:df:36:b8:77:11:3d:39:52:d0:27: 88:dc:b4:1a:90:ca:f1:ac:aa:a8:2b:88:5f:45:cb: 12:70:77:3a:5f:14:03:13:63:59:f2:db:d1:e8:4d: 2e:83:f3:e6:80:b9:55:4f:10:84:9e:31:e0:02:3c: bf:a2:17:7a:c6:12:dd:a7:8e:5a:00:fa:38:06:87: b6:3a:3a:17:bf:9f:25:75:6c:f7:c4:a3:f0:70:7a: 67:43:9c:95:13:58:f0:09:cd:ac:3b:05:55:86:cb: 29:bd:dc:d2:bd:67:cd:08:a0:bb:12:b5:77:5d:6c: 19:4e:8a:4c:e0:94:3d:67:cb:6a:1c:8f:5d:ed:bc: cd:0b:a2:6d:7a:9a:6c:41:0d:85:1c:7c:e1:ca:a0: d9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:70:D0:40:49:9B:70:EA:EA:4E:68:DC:F7:D9:90:F8:4B:B4:F7:4D X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/RHDQQEmbcOrqTmjc99mQ-Eu0900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.147.192.0/19 85.194.64.0/18 89.237.128.0/18 185.27.220.0/22 185.29.92.0/22 212.24.224.0/19 Signature Algorithm: sha256WithRSAEncryption 00:d5:ee:53:de:17:ed:da:b2:9d:a3:ca:2e:2d:fe:ef:95:ad: 76:3e:14:57:b4:30:9a:45:c3:2f:b1:2a:1b:e0:7b:99:58:e8: bc:70:6c:e6:b2:d9:5d:fb:a7:65:88:3d:a7:e5:ec:51:d4:f0: 41:f9:ea:06:f5:9c:82:6d:f8:04:0c:f7:85:ae:93:5c:32:e0: 2e:f0:71:5c:de:2b:cc:6b:23:69:17:f8:d1:1b:1e:03:22:a8: 22:a9:06:61:47:89:bc:15:15:06:3c:bf:15:7a:ec:a8:ac:17: 7c:0b:60:9c:60:4d:7d:5f:36:c6:66:ec:31:a3:b1:44:35:2a: 22:c6:c0:fd:aa:0e:53:e5:cd:23:64:90:c3:ca:b4:ee:09:d2: f5:a9:30:00:bb:96:ee:ed:13:0f:8e:ff:5d:37:59:19:4b:4e: 94:53:1b:0e:01:61:59:71:9a:15:91:47:3f:b1:05:fd:3e:d6: 6b:c3:05:1d:b3:8f:ec:8e:e6:59:17:f2:5f:20:8e:70:94:a9: c9:20:20:34:8e:ae:a4:53:e6:80:97:af:06:6b:5e:4d:13:ea: aa:7f:c3:2a:df:9e:ad:0f:5e:93:30:27:d4:f3:66:33:d4:55: 45:88:13:65:fa:89:57:03:2f:c0:00:89:ee:a9:96:a9:a6:78: c9:f6:cf:f6 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt6yTIP2xjdhzvNQ9COvBsKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjYwMTAxMTgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDcwZDA0MDQ5OWI3MGVhZWE0ZTY4ZGNmN2Q5OTBmODRiYjRmNzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp12EZohJVblPr+8ZoiMvOEc82aO sX+A+pyT0eeVFF1Ha8vn16TyrSIfKdvDtZAvS/YQa9aqPUYVajnUOa5TN1ujL1kE SD+c8H4l8tvZoG8lZnTl3iQbP7emuz/1BU/8rhllQJtWdTsoSwGVOd82uHcRPTlS 0CeI3LQakMrxrKqoK4hfRcsScHc6XxQDE2NZ8tvR6E0ug/PmgLlVTxCEnjHgAjy/ ohd6xhLdp45aAPo4Boe2OjoXv58ldWz3xKPwcHpnQ5yVE1jwCc2sOwVVhsspvdzS vWfNCKC7ErV3XWwZTopM4JQ9Z8tqHI9d7bzNC6JteppsQQ2FHHzhyqDZ1QIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFERw0EBJm3Dq6k5o3PfZkPhLtPdNMB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvUkhEUVFFbWJjT3JxVG1qYzk5bVEtRXUwOTAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQFUpPAAwQG VcJAAwQGWe2AAwQCuRvcAwQCuR1cAwQF1BjgMA0GCSqGSIb3DQEBCwUAA4IBAQAA 1e5T3hft2rKdo8ouLf7vla12PhRXtDCaRcMvsSob4HuZWOi8cGzmstld+6dliD2n 5exR1PBB+eoG9ZyCbfgEDPeFrpNcMuAu8HFc3ivMayNpF/jRGx4DIqgiqQZhR4m8 FRUGPL8VeuyorBd8C2CcYE19XzbGZuwxo7FENSoixsD9qg5T5c0jZJDDyrTuCdL1 qTAAu5bu7RMPjv9dN1kZS06UUxsOAWFZcZoVkUc/sQX9PtZrwwUds4/sjuZZF/Jf II5wlKnJICA0jq6kU+aAl68Ga15NE+qqf8Mq356tD16TMCfU82Yz1FVFiBNl+olX Ay/AAInuqZappnjJ9s/2 -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:00 2026 by rpki-client