This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/H9Xbs19Dof8eiG5lJjAhQV9WdWI.roa File: H9Xbs19Dof8eiG5lJjAhQV9WdWI.roa (raw, json) Hash identifier: iXBhXfrYk+sqUaa89rfM9pApaz51gWzZlcef+RPdmsg= Subject key identifier: 1F:D5:DB:B3:5F:43:A1:FF:1E:88:6E:65:26:30:21:41:5F:56:75:62 Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 019B7C8063B298D68E03C695C72DE3CC0A9B Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/H9Xbs19Dof8eiG5lJjAhQV9WdWI.roa Signing time: Fri 02 Jan 2026 02:19:07 +0000 ROA not before: Fri 02 Jan 2026 02:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198099 IP address blocks: 188.247.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:63:b2:98:d6:8e:03:c6:95:c7:2d:e3:cc:0a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: Jan 2 02:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fd5dbb35f43a1ff1e886e65263021415f567562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:de:73:76:32:69:4d:78:68:f7:71:3a:60:40: d8:16:e2:d0:f5:1b:70:c6:f3:32:7a:6b:9c:eb:e0: 76:11:c4:38:e0:42:62:38:93:25:0d:bc:b5:9f:93: d3:71:64:9e:f9:f9:f7:10:df:33:e3:70:f8:ee:56: b1:ed:dc:0a:6d:92:82:a9:ff:70:90:23:7e:57:9d: 24:e4:3c:b7:c8:87:d2:63:63:fc:68:15:4d:30:ab: 8b:21:08:f2:df:82:77:e0:21:d9:bf:8c:e8:f9:d2: 3e:08:5f:73:e1:b9:82:b1:50:50:a8:fa:3a:d3:53: 92:b3:8c:90:bf:d6:d0:4a:11:d6:a2:5d:7b:62:26: c8:aa:0d:9a:6e:ef:19:7e:b7:6a:4a:27:38:5e:99: 0e:eb:c4:03:ac:6d:2a:60:7b:56:5e:35:ba:00:b1: 0e:db:02:46:8f:6a:df:e5:fe:99:ef:9d:9e:11:fe: a2:45:5f:09:04:8f:c5:d7:5f:e6:7b:af:cf:05:05: 14:53:54:84:c5:ae:e6:14:d4:3b:e6:79:40:bd:25: c4:10:ac:b2:ba:5d:9a:05:bf:6e:ef:db:dc:91:a7: ca:4f:00:bb:bd:9c:86:72:04:58:4e:c8:97:05:48: 63:d3:04:c6:78:57:5d:c8:0b:d5:51:34:a2:6e:3d: d2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D5:DB:B3:5F:43:A1:FF:1E:88:6E:65:26:30:21:41:5F:56:75:62 X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/H9Xbs19Dof8eiG5lJjAhQV9WdWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.247.134.0/24 Signature Algorithm: sha256WithRSAEncryption bb:4f:62:fa:26:cf:d5:06:b1:75:be:ff:99:1b:7d:e9:d1:e4: 9d:c6:0b:11:08:d6:5f:2b:07:e3:3b:eb:f8:51:01:53:fa:3e: 7f:fb:a8:46:a7:dd:83:8d:4d:98:14:ff:8b:ea:74:e3:8f:60: d1:e7:f7:6a:d1:45:f6:4b:84:29:1b:39:3b:8a:e8:88:c2:3d: c4:de:24:25:87:be:1e:b6:19:a1:e4:ca:aa:f2:15:a5:78:9e: 19:41:ad:ec:8f:60:22:b1:23:19:66:3c:0e:86:bf:0d:65:e5: b4:2c:ab:e5:9a:69:f1:92:ea:68:de:fb:00:71:de:cb:75:a0: 87:c6:32:c6:6c:b6:38:75:2b:22:3f:4b:34:2f:04:5b:5d:20: cc:f9:76:e2:2e:a7:11:df:78:00:75:fd:0b:44:89:5c:ef:db: 5c:de:73:d4:63:ab:20:8f:83:cb:3e:d1:16:b5:ef:51:78:ab: 1e:eb:df:5e:ba:35:7a:db:b2:a6:e8:16:cd:e8:d3:34:08:a2: 16:05:b4:59:ff:98:a8:09:00:44:1e:27:5d:cd:30:18:1f:fa: 17:d8:a5:08:0f:f6:97:ef:66:7d:04:66:cc:25:4b:76:c9:b5: 3c:94:3a:1e:e6:ed:63:2b:52:25:8d:2c:af:75:62:e7:b5:c5: 74:29:d4:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGOymNaOA8aVxy3jzAqbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmQ1ZGJiMzVmNDNhMWZmMWU4ODZlNjUyNjMwMjE0MTVmNTY3NTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN5zdjJpTXho93E6YEDYFuLQ9Rtw xvMyemuc6+B2EcQ44EJiOJMlDby1n5PTcWSe+fn3EN8z43D47lax7dwKbZKCqf9w kCN+V50k5Dy3yIfSY2P8aBVNMKuLIQjy34J34CHZv4zo+dI+CF9z4bmCsVBQqPo6 01OSs4yQv9bQShHWol17YibIqg2abu8ZfrdqSic4XpkO68QDrG0qYHtWXjW6ALEO 2wJGj2rf5f6Z752eEf6iRV8JBI/F11/me6/PBQUUU1SExa7mFNQ75nlAvSXEEKyy ul2aBb9u79vckafKTwC7vZyGcgRYTsiXBUhj0wTGeFddyAvVUTSibj3S5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB/V27NfQ6H/HohuZSYwIUFfVnViMB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvSDlYYnMxOURvZjhlaUc1bEpqQWhRVjlXZFdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPeGMA0G CSqGSIb3DQEBCwUAA4IBAQC7T2L6Js/VBrF1vv+ZG33p0eSdxgsRCNZfKwfjO+v4 UQFT+j5/+6hGp92DjU2YFP+L6nTjj2DR5/dq0UX2S4QpGzk7iuiIwj3E3iQlh74e thmh5Mqq8hWleJ4ZQa3sj2AisSMZZjwOhr8NZeW0LKvlmmnxkupo3vsAcd7LdaCH xjLGbLY4dSsiP0s0LwRbXSDM+XbiLqcR33gAdf0LRIlc79tc3nPUY6sgj4PLPtEW te9ReKse699eujV627Km6BbN6NM0CKIWBbRZ/5ioCQBEHiddzTAYH/oX2KUID/aX 72Z9BGbMJUt2ybU8lDoe5u1jK1IljSyvdWLntcV0KdRF -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:18 2026 by rpki-client