This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/hRBOq97yc0j5iPcr4gfDn3KJQyY.roa File: hRBOq97yc0j5iPcr4gfDn3KJQyY.roa (raw, json) Hash identifier: Xy2a29JOYTMfN3fVGwk03l3mrjFbTa3ns9VGhqHF9bU= Subject key identifier: 85:10:4E:AB:DE:F2:73:48:F9:88:F7:2B:E2:07:C3:9F:72:89:43:26 Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Certificate serial: 019B7E388685D1D9FC65F42406BF1EE99AAF Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/hRBOq97yc0j5iPcr4gfDn3KJQyY.roa Signing time: Fri 02 Jan 2026 10:19:52 +0000 ROA not before: Fri 02 Jan 2026 10:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47748 IP address blocks: 94.155.47.0/24 maxlen: 24 94.155.48.0/24 maxlen: 24 94.155.49.0/24 maxlen: 24 94.155.55.0/24 maxlen: 24 94.155.93.0/24 maxlen: 24 2a02:4c8:af::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:86:85:d1:d9:fc:65:f4:24:06:bf:1e:e9:9a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Validity Not Before: Jan 2 10:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85104eabdef27348f988f72be207c39f72894326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:79:a9:d7:ec:fd:00:49:1e:4d:59:d6:57:09: 5a:2e:94:b5:38:3f:f2:57:e4:51:6a:b7:ab:0f:b2: 4c:bb:28:89:b9:c9:a8:56:1f:ec:7e:7a:9b:0b:d7: 6b:e1:d3:79:e7:5a:7f:e9:eb:68:69:b7:c1:be:69: b6:c5:a6:e7:4d:18:80:79:06:d3:e3:a2:e5:13:2f: ac:96:6b:58:98:47:71:1d:7a:f1:54:b0:a1:17:51: 5e:1d:8e:41:28:e7:dc:a3:48:31:23:16:c0:ff:9f: 33:a2:16:d1:a0:83:eb:0e:4e:59:0f:d9:54:cd:93: 81:f9:3a:36:ce:16:cc:b6:1c:b8:d8:ea:cf:99:f0: 27:1d:7b:22:5b:9a:0d:61:9a:64:06:33:f8:d5:ce: 96:84:46:3a:8d:6a:20:b1:41:51:34:41:00:fb:7d: e9:4e:cc:44:f5:b8:62:e9:eb:c6:f8:e6:88:93:bc: 8a:0b:26:8d:2b:d0:38:cc:97:76:da:eb:c4:3e:2b: af:22:07:7f:07:79:f7:30:05:96:4d:65:b2:1b:6d: dd:dd:7f:7d:2b:ff:dc:a4:9d:2b:f3:89:33:1f:ad: db:66:11:b7:0c:88:82:b0:28:d7:5a:3b:80:c6:95: ce:b8:73:6b:5c:ec:95:66:14:29:c9:a5:81:54:ea: a8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:10:4E:AB:DE:F2:73:48:F9:88:F7:2B:E2:07:C3:9F:72:89:43:26 X509v3 Authority Key Identifier: keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/hRBOq97yc0j5iPcr4gfDn3KJQyY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.155.47.0-94.155.49.255 94.155.55.0/24 94.155.93.0/24 IPv6: 2a02:4c8:af::/48 Signature Algorithm: sha256WithRSAEncryption 9a:01:9d:2d:e8:d7:6e:19:85:1f:a7:8b:2e:0a:02:06:5a:c9: 51:5f:d2:31:91:d2:a7:4c:04:d4:6e:71:d0:03:cd:52:31:be: d4:dd:f2:c3:9c:11:97:b3:17:80:82:c7:09:df:19:02:7a:61: 09:62:74:ec:53:5a:e3:cf:b8:6a:76:11:21:91:43:be:5f:5f: 02:28:54:a0:b3:2c:57:17:ac:47:e2:ec:2c:a6:e1:5a:a9:b9: 27:fb:f9:45:61:ea:23:ce:4c:49:7d:14:eb:79:29:b9:dd:92: 7e:d3:10:0a:ff:98:88:66:fb:43:8e:f5:50:76:ea:a1:dc:d2: 0c:dd:88:69:cc:c9:7f:a7:8e:cf:e4:16:c7:f1:c3:4f:52:ba: c0:d3:61:8b:30:ae:9f:ba:6c:fd:7a:6b:8e:75:47:6a:c4:15: bd:52:b4:a9:77:a3:a8:09:83:d0:30:61:4b:f1:c1:74:2c:61: 6a:8d:a8:78:d2:1e:d5:f2:ec:25:9d:8a:f7:f9:e9:1a:b3:43: 6a:4c:6e:70:ce:cc:07:0b:10:fb:42:62:62:55:b2:dc:3b:09: 50:8d:c6:21:af:eb:d1:c8:44:77:66:c5:f5:b7:e0:76:08:65: b8:89:ee:9c:f7:6c:5f:a6:8a:4a:e8:5f:16:af:de:ff:d9:ef: 5d:d2:90:25 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt+OIaF0dn8ZfQkBr8e6ZqvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw MWFiNDEwHhcNMjYwMTAyMTAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTEwNGVhYmRlZjI3MzQ4Zjk4OGY3MmJlMjA3YzM5ZjcyODk0MzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXmp1+z9AEkeTVnWVwlaLpS1OD/y V+RRarerD7JMuyiJucmoVh/sfnqbC9dr4dN551p/6etoabfBvmm2xabnTRiAeQbT 46LlEy+slmtYmEdxHXrxVLChF1FeHY5BKOfco0gxIxbA/58zohbRoIPrDk5ZD9lU zZOB+To2zhbMthy42OrPmfAnHXsiW5oNYZpkBjP41c6WhEY6jWogsUFRNEEA+33p TsxE9bhi6evG+OaIk7yKCyaNK9A4zJd22uvEPiuvIgd/B3n3MAWWTWWyG23d3X99 K//cpJ0r84kzH63bZhG3DIiCsCjXWjuAxpXOuHNrXOyVZhQpyaWBVOqolwIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFIUQTqve8nNI+Yj3K+IHw59yiUMmMB8GA1UdIwQY MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt Y2Y5ZGM1YmFhYTc5LzEvaFJCT3E5N3ljMGo1aVBjcjRnZkRuM0tKUXlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5 LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAgBAIAATAaMAwDBABemy8D BAFemzADBABemzcDBABem10wDwQCAAIwCQMHACoCBMgArzANBgkqhkiG9w0BAQsF AAOCAQEAmgGdLejXbhmFH6eLLgoCBlrJUV/SMZHSp0wE1G5x0APNUjG+1N3yw5wR l7MXgILHCd8ZAnphCWJ07FNa48+4anYRIZFDvl9fAihUoLMsVxesR+LsLKbhWqm5 J/v5RWHqI85MSX0U63kpud2SftMQCv+YiGb7Q471UHbqodzSDN2IaczJf6eOz+QW x/HDT1K6wNNhizCun7ps/XprjnVHasQVvVK0qXejqAmD0DBhS/HBdCxhao2oeNIe 1fLsJZ2K9/npGrNDakxucM7MBwsQ+0JiYlWy3DsJUI3GIa/r0chEd2bF9bfgdghl uInunPdsX6aKSuhfFq/e/9nvXdKQJQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:42 2026 by rpki-client