This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/H54jzQPAm3UOAJSQIdc_4WPllVI.roa File: H54jzQPAm3UOAJSQIdc_4WPllVI.roa (raw, json) Hash identifier: dXl+adkMvURSgdag7IUjV3leHOggDvBEQrhocr/nNKc= Subject key identifier: 1F:9E:23:CD:03:C0:9B:75:0E:00:94:90:21:D7:3F:E1:63:E5:95:52 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE5A5EB45E42ACCFB3BD1F14A9270E Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/H54jzQPAm3UOAJSQIdc_4WPllVI.roa Signing time: Fri 02 Jan 2026 04:19:14 +0000 ROA not before: Fri 02 Jan 2026 04:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49795 IP address blocks: 178.238.213.0/24 maxlen: 24 2a02:730:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5a:5e:b4:5e:42:ac:cf:b3:bd:1f:14:a9:27:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f9e23cd03c09b750e00949021d73fe163e59552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:17:b3:ef:32:32:02:01:6b:a2:82:8b:65:8b: ba:cc:19:d4:3a:b5:13:47:db:7c:81:9b:05:6e:37: 67:6b:29:aa:d0:95:22:87:35:35:51:40:d5:f4:fc: 9a:55:be:9c:14:3a:4c:67:94:ea:cd:f9:f1:f9:53: c9:e6:fd:ca:a6:f5:0a:23:1a:40:88:e0:0d:bd:75: 6b:5f:7a:70:79:5f:9b:2f:74:96:70:40:9d:28:f6: 6e:eb:b8:04:61:37:21:7b:0f:21:6e:da:4e:87:e8: 13:6f:05:f6:0f:93:b0:27:ad:c6:67:4b:21:9c:62: 60:93:8b:37:c7:85:6a:34:7d:32:09:58:fa:7d:a6: d1:9b:97:97:25:d5:3e:d7:f4:6f:1b:f2:98:99:98: 70:99:ae:d7:7e:77:1d:8a:49:e4:cc:fa:61:df:de: a8:0d:a4:f9:11:73:03:75:9a:84:11:69:8f:6c:7c: f0:85:77:93:1d:34:f0:c8:ef:31:99:11:ca:29:c1: 8a:96:89:39:5e:c6:52:9b:1f:d0:35:d4:57:0c:6e: a5:2e:c9:11:52:41:92:6d:4a:46:f1:1b:b3:26:88: 5b:79:db:e5:c6:1a:70:14:86:e6:8f:51:3d:15:cd: fd:62:62:0c:c4:51:b6:24:47:4f:2e:e7:83:0a:d3: 45:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9E:23:CD:03:C0:9B:75:0E:00:94:90:21:D7:3F:E1:63:E5:95:52 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/H54jzQPAm3UOAJSQIdc_4WPllVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.238.213.0/24 IPv6: 2a02:730:8000::/48 Signature Algorithm: sha256WithRSAEncryption 7c:71:ce:7d:49:7f:32:b5:f4:bc:60:3c:3f:c8:ca:26:8e:42: bd:8e:ba:9f:dd:fd:b3:d7:29:84:8e:c3:2f:b3:2f:68:08:b5: 05:df:04:b9:0f:fe:31:57:e6:98:59:91:8d:f7:1d:f5:14:21: 73:b5:b2:dd:d5:e8:da:fa:9a:f3:9e:91:5f:2a:99:af:83:79: ba:44:ef:d5:29:c6:ea:d6:1e:d9:35:ec:99:07:83:3a:c2:d2: 95:92:5c:04:56:dc:4b:de:2e:8f:88:82:a0:f1:35:71:34:22: 72:27:2d:3e:49:19:94:51:1b:f3:54:88:17:0a:b3:7a:bf:4c: 3f:a2:3e:5c:7e:a2:aa:cd:19:2a:1a:37:13:b7:04:76:d4:a5: 49:0b:61:c2:26:87:5a:65:09:9e:f9:4e:58:86:54:9d:ee:63: 2c:a1:7b:54:94:23:b4:01:fd:b9:b2:31:4c:b5:94:80:82:eb: fa:60:2f:23:7c:b4:a2:50:5e:e8:a9:c8:20:b6:5a:70:b3:ad: a2:ed:fc:bb:a2:2b:f0:cd:9e:9c:fb:89:a6:7a:86:17:fc:ef: 17:f0:b7:85:3b:83:ee:90:db:b9:4f:c2:c0:29:1c:52:cb:b2: b9:68:74:8c:35:24:79:02:b7:bc:a8:02:b5:67:34:9b:97:cc: f2:d4:ae:68 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt87lpetF5CrM+zvR8UqScOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjllMjNjZDAzYzA5Yjc1MGUwMDk0OTAyMWQ3M2ZlMTYzZTU5NTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxez7zIyAgFrooKLZYu6zBnUOrUT R9t8gZsFbjdnaymq0JUihzU1UUDV9PyaVb6cFDpMZ5Tqzfnx+VPJ5v3KpvUKIxpA iOANvXVrX3pweV+bL3SWcECdKPZu67gEYTchew8hbtpOh+gTbwX2D5OwJ63GZ0sh nGJgk4s3x4VqNH0yCVj6fabRm5eXJdU+1/RvG/KYmZhwma7XfncdiknkzPph396o DaT5EXMDdZqEEWmPbHzwhXeTHTTwyO8xmRHKKcGKlok5XsZSmx/QNdRXDG6lLskR UkGSbUpG8RuzJohbedvlxhpwFIbmj1E9Fc39YmIMxFG2JEdPLueDCtNFaQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFB+eI80DwJt1DgCUkCHXP+Fj5ZVSMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvSDU0anpRUEFtM1VPQUpTUUlkY180V1BsbFZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAsu7VMA8E AgACMAkDBwAqAgcwgAAwDQYJKoZIhvcNAQELBQADggEBAHxxzn1JfzK19LxgPD/I yiaOQr2Oup/d/bPXKYSOwy+zL2gItQXfBLkP/jFX5phZkY33HfUUIXO1st3V6Nr6 mvOekV8qma+DebpE79UpxurWHtk17JkHgzrC0pWSXARW3EveLo+IgqDxNXE0InIn LT5JGZRRG/NUiBcKs3q/TD+iPlx+oqrNGSoaNxO3BHbUpUkLYcImh1plCZ75TliG VJ3uYyyhe1SUI7QB/bmyMUy1lICC6/pgLyN8tKJQXuipyCC2WnCzraLt/LuiK/DN npz7iaZ6hhf87xfwt4U7g+6Q27lPwsApHFLLsrlodIw1JHkCt7yoArVnNJuXzPLU rmg= -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:56 2026 by rpki-client