This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/UHt3t85lrKHcyjienOyacQwMwos.roa File: UHt3t85lrKHcyjienOyacQwMwos.roa (raw, json) Hash identifier: hY4NRwA9EwRYqsnV0/TdPTzMBwj14qwILJc+qsHefLY= Subject key identifier: 50:7B:77:B7:CE:65:AC:A1:DC:CA:38:9E:9C:EC:9A:71:0C:0C:C2:8B Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019B79ED21ACFEEF40E04001EF3C6712ACF1 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/UHt3t85lrKHcyjienOyacQwMwos.roa Signing time: Thu 01 Jan 2026 14:19:02 +0000 ROA not before: Thu 01 Jan 2026 14:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211163 IP address blocks: 94.188.180.0/23 maxlen: 23 94.188.180.0/24 maxlen: 24 94.188.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:21:ac:fe:ef:40:e0:40:01:ef:3c:67:12:ac:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Jan 1 14:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=507b77b7ce65aca1dcca389e9cec9a710c0cc28b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b4:28:63:8c:ba:d8:3b:eb:9e:0e:f4:9e:1d: f5:9c:38:8e:d5:e1:57:9b:90:63:c1:07:95:ec:1d: 6b:93:29:62:c5:4f:b8:0f:e4:48:35:56:f3:70:e8: 77:88:6e:78:b9:8d:9d:37:e7:9a:89:54:88:46:df: 30:ac:74:cf:9b:18:df:7b:0b:a2:83:9c:e1:24:de: 71:e9:3a:9d:15:81:fa:31:c2:41:2f:53:92:27:a2: 9e:a8:48:31:76:02:77:ae:21:01:79:b2:81:43:92: 8c:a1:ef:21:3c:71:b3:08:1d:52:55:0e:b9:bd:13: 0f:5f:8a:46:76:1c:dc:52:5f:01:11:9c:0a:de:6b: f5:90:43:7c:55:d7:26:07:e7:87:5b:95:e3:a8:2b: 75:36:43:1b:63:69:de:70:f9:a7:ee:74:0c:26:0f: 4b:12:05:02:89:4d:ec:91:e7:1c:f8:89:c8:04:fe: 68:ef:98:9a:3d:63:6a:e4:2b:b6:3e:5c:78:99:22: 84:57:09:64:b5:45:e8:15:69:90:8e:58:88:95:02: 1e:2d:80:4c:81:6c:6a:3c:cd:70:a9:69:4b:30:47: ab:c0:9f:35:9b:d6:d6:c3:f3:90:d1:3d:b5:1d:a8: bb:e7:2c:6b:3f:5d:9c:a7:51:75:4b:09:f2:90:8c: b7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7B:77:B7:CE:65:AC:A1:DC:CA:38:9E:9C:EC:9A:71:0C:0C:C2:8B X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/UHt3t85lrKHcyjienOyacQwMwos.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.188.180.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:ad:32:4f:07:e7:9f:4a:31:f0:19:c7:e9:5a:3f:c5:5e:72: f5:81:cf:f7:ae:cb:ac:c4:fe:e7:9d:fe:35:f0:42:f1:00:37: 28:1b:d7:07:f2:55:a4:56:23:de:28:4f:98:9a:74:51:38:45: 07:a9:08:b0:39:f1:14:d4:18:fe:47:1f:df:02:64:eb:63:c9: fe:0a:db:10:d7:45:83:a3:1a:2f:0d:09:8b:09:ce:e2:b0:0f: 09:fe:85:8a:d7:c5:8f:52:a0:05:19:99:28:b5:a9:54:27:8d: 56:77:3b:20:46:ad:49:dc:35:71:6a:37:a7:76:47:88:41:cd: b9:9d:8d:49:b3:3e:7e:69:9b:8d:d2:50:e2:d1:38:94:ca:52: 59:71:1f:85:d5:99:9f:7b:aa:9c:ec:6e:f8:f5:d2:ce:18:d0: be:bb:74:9c:2c:57:a5:60:41:b7:3e:1f:8a:c3:26:f1:f8:a3: 17:62:2c:84:26:33:39:94:2d:c4:05:57:6c:5b:46:f2:50:39: 39:b2:f6:0d:b5:47:3f:1e:1e:62:48:07:d2:e8:9c:0a:07:97: 19:cf:53:44:df:96:54:22:da:bb:c7:9a:6a:0e:e6:09:1e:7f: 4a:ba:66:ba:2c:a6:e2:2d:a4:11:ad:e6:dd:90:4b:78:17:5d: 0f:77:79:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SGs/u9A4EAB7zxnEqzxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjYwMTAxMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDdiNzdiN2NlNjVhY2ExZGNjYTM4OWU5Y2VjOWE3MTBjMGNjMjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLQoY4y62Dvrng70nh31nDiO1eFX m5BjwQeV7B1rkylixU+4D+RINVbzcOh3iG54uY2dN+eaiVSIRt8wrHTPmxjfewui g5zhJN5x6TqdFYH6McJBL1OSJ6KeqEgxdgJ3riEBebKBQ5KMoe8hPHGzCB1SVQ65 vRMPX4pGdhzcUl8BEZwK3mv1kEN8VdcmB+eHW5XjqCt1NkMbY2necPmn7nQMJg9L EgUCiU3skecc+InIBP5o75iaPWNq5Cu2Plx4mSKEVwlktUXoFWmQjliIlQIeLYBM gWxqPM1wqWlLMEerwJ81m9bWw/OQ0T21Hai75yxrP12cp1F1SwnykIy3GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFB7d7fOZayh3Mo4npzsmnEMDMKLMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvVUh0M3Q4NWxyS0hjeWppZW5PeWFjUXdNd29zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXry0MA0G CSqGSIb3DQEBCwUAA4IBAQCNrTJPB+efSjHwGcfpWj/FXnL1gc/3rsusxP7nnf41 8ELxADcoG9cH8lWkViPeKE+YmnRROEUHqQiwOfEU1Bj+Rx/fAmTrY8n+CtsQ10WD oxovDQmLCc7isA8J/oWK18WPUqAFGZkotalUJ41WdzsgRq1J3DVxajendkeIQc25 nY1Jsz5+aZuN0lDi0TiUylJZcR+F1Zmfe6qc7G749dLOGNC+u3ScLFelYEG3Ph+K wybx+KMXYiyEJjM5lC3EBVdsW0byUDk5svYNtUc/Hh5iSAfS6JwKB5cZz1NE35ZU Itq7x5pqDuYJHn9Kuma6LKbiLaQRrebdkEt4F10Pd3mG -----END CERTIFICATE-----Generated at Sun Jan 25 08:52:15 2026 by rpki-client