This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/xJH_hObu47NQAEZXy5oLh9VkIAc.roa File: xJH_hObu47NQAEZXy5oLh9VkIAc.roa (raw, json) Hash identifier: 4Dk7/rqnOwM68MYpX2SX9kUT9VCrAuSm9jEE6Z2mvJo= Subject key identifier: C4:91:FF:84:E6:EE:E3:B3:50:00:46:57:CB:9A:0B:87:D5:64:20:07 Certificate issuer: /CN=304a791dc74f2377232fbb07b6ae71240ab9555f Certificate serial: 019B7F81502793CDF7EF6C897FE4A9C3028A Authority key identifier: 30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/xJH_hObu47NQAEZXy5oLh9VkIAc.roa Signing time: Fri 02 Jan 2026 16:18:59 +0000 ROA not before: Fri 02 Jan 2026 16:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12905 IP address blocks: 62.176.160.0/19 maxlen: 19 185.250.244.0/22 maxlen: 22 2a06:6bc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:50:27:93:cd:f7:ef:6c:89:7f:e4:a9:c3:02:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=304a791dc74f2377232fbb07b6ae71240ab9555f Validity Not Before: Jan 2 16:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c491ff84e6eee3b350004657cb9a0b87d5642007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b0:02:1d:8b:66:3e:c6:5f:30:2c:7e:d3:58: 42:9d:80:79:f9:b3:39:4a:b1:1c:31:94:87:f3:9b: 1c:66:2a:6b:aa:84:d7:da:b7:b5:43:16:c8:42:90: 74:7d:86:32:4a:4e:c2:a1:31:98:9a:ab:79:c3:01: 61:27:40:3b:a9:90:9d:f9:ad:bc:a3:c9:5b:08:d4: 7d:6d:a3:49:e8:3f:4f:1a:42:67:9c:41:9d:41:ca: ad:b5:56:57:05:d2:0a:36:02:1e:db:30:0f:3d:70: 8a:12:a8:6f:16:e2:19:31:11:84:10:82:a2:72:94: 50:3e:e0:a0:eb:d3:a1:69:3d:2e:93:33:65:7b:ae: 68:bd:f9:7a:22:19:ca:34:48:c5:4a:f6:8c:f8:fa: d8:88:65:c9:cd:9d:d2:e8:f3:79:49:f9:c9:64:5d: c6:3f:a1:74:ce:db:dc:7e:e8:8c:00:59:c3:2e:b5: 05:3f:db:3f:e9:7d:8c:95:c8:a3:f1:ba:d3:59:9c: a4:b5:13:ba:bc:5a:51:0b:69:d4:40:78:5d:e9:86: 27:e1:c1:f1:61:6d:ae:07:e1:23:4c:d5:cf:21:b2: e7:6e:e1:fc:6e:65:b4:3f:c4:3c:5b:84:8c:1d:72: 47:98:75:f1:79:60:3f:c7:f9:54:2b:d8:c1:54:2b: c5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:91:FF:84:E6:EE:E3:B3:50:00:46:57:CB:9A:0B:87:D5:64:20:07 X509v3 Authority Key Identifier: keyid:30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/xJH_hObu47NQAEZXy5oLh9VkIAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.176.160.0/19 185.250.244.0/22 IPv6: 2a06:6bc0::/29 Signature Algorithm: sha256WithRSAEncryption b5:d4:74:3e:0b:e8:e9:56:10:ec:92:71:1a:ab:00:8e:c3:fb: e9:5c:6f:fc:47:45:ac:b4:0b:09:dd:2c:36:72:b0:70:a0:66: ae:ba:82:d8:de:aa:75:1d:4c:c3:cf:1f:66:3a:27:ca:13:6e: f0:0c:8c:9e:ba:b6:fb:32:fa:e2:64:7a:9a:c7:13:8a:90:ac: 86:b9:a4:ba:97:d0:2a:c7:46:66:ea:07:48:1b:1f:ba:65:4f: c3:55:84:af:96:8d:b6:f9:25:33:69:51:35:da:12:c0:db:15: eb:4a:57:46:93:1b:07:de:0a:11:9c:b0:0b:08:ed:22:a0:48: 18:a4:42:37:03:ce:3f:0a:3e:46:5e:f8:83:ab:b6:ec:10:03: 0c:36:a8:b9:d1:fa:dc:17:28:d1:05:4f:c5:51:83:4f:fe:3a: b9:8e:40:f9:ae:af:a2:56:09:67:21:c1:0b:13:f8:fe:df:fd: a5:eb:2f:1f:8e:4c:53:c6:d7:c0:b4:30:3c:c0:1c:46:22:81: cf:8b:7f:6d:9e:c3:94:6e:7a:21:d9:30:c9:db:2e:80:5f:dc: a9:b2:11:48:fc:66:65:03:6b:94:d5:fd:58:f6:5c:17:d1:ac: 5d:c8:8d:02:6b:69:ce:84:a0:71:ec:37:83:fe:d1:13:9a:61: ad:f9:72:77 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/gVAnk83372yJf+SpwwKKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNGE3OTFkYzc0ZjIzNzcyMzJmYmIwN2I2YWU3MTI0MGFi OTU1NWYwHhcNMjYwMTAyMTYxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDkxZmY4NGU2ZWVlM2IzNTAwMDQ2NTdjYjlhMGI4N2Q1NjQyMDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7ACHYtmPsZfMCx+01hCnYB5+bM5 SrEcMZSH85scZiprqoTX2re1QxbIQpB0fYYySk7CoTGYmqt5wwFhJ0A7qZCd+a28 o8lbCNR9baNJ6D9PGkJnnEGdQcqttVZXBdIKNgIe2zAPPXCKEqhvFuIZMRGEEIKi cpRQPuCg69OhaT0ukzNle65ovfl6IhnKNEjFSvaM+PrYiGXJzZ3S6PN5SfnJZF3G P6F0ztvcfuiMAFnDLrUFP9s/6X2Mlcij8brTWZyktRO6vFpRC2nUQHhd6YYn4cHx YW2uB+EjTNXPIbLnbuH8bmW0P8Q8W4SMHXJHmHXxeWA/x/lUK9jBVCvFBwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMSR/4Tm7uOzUABGV8uaC4fVZCAHMB8GA1UdIwQY MBaAFDBKeR3HTyN3Iy+7B7aucSQKuVVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUVwNUhjZFBJM2NqTDdzSHRxNXhKQXE1VlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xOTRjOGUtZTFiNi00YWFlLWI1YjIt Nzk4MWZkZTZiZjM5LzEveEpIX2hPYnU0N05RQUVaWHk1b0xoOVZrSUFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8xOTRjOGUtZTFiNi00YWFlLWI1YjItNzk4MWZkZTZiZjM5 LzEvTUVwNUhjZFBJM2NqTDdzSHRxNXhKQXE1VlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFPrCgAwQC ufr0MA0EAgACMAcDBQMqBmvAMA0GCSqGSIb3DQEBCwUAA4IBAQC11HQ+C+jpVhDs knEaqwCOw/vpXG/8R0WstAsJ3Sw2crBwoGauuoLY3qp1HUzDzx9mOifKE27wDIye urb7MvriZHqaxxOKkKyGuaS6l9Aqx0Zm6gdIGx+6ZU/DVYSvlo22+SUzaVE12hLA 2xXrSldGkxsH3goRnLALCO0ioEgYpEI3A84/Cj5GXviDq7bsEAMMNqi50frcFyjR BU/FUYNP/jq5jkD5rq+iVglnIcELE/j+3/2l6y8fjkxTxtfAtDA8wBxGIoHPi39t nsOUbnoh2TDJ2y6AX9ypshFI/GZlA2uU1f1Y9lwX0axdyI0Ca2nOhKBx7DeD/tET mmGt+XJ3 -----END CERTIFICATE-----Generated at Mon Jan 26 12:55:41 2026 by rpki-client