This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/ha79IahEugt55pyXch2rl5eqNpY.roa File: ha79IahEugt55pyXch2rl5eqNpY.roa (raw, json) Hash identifier: /2Q4OxJwb2IrGYC5cRQW4yWcjEMQEg/M8fPIE1oKn0c= Subject key identifier: 85:AE:FD:21:A8:44:BA:0B:79:E6:9C:97:72:1D:AB:97:97:AA:36:96 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019B7BA36E31EA7638EABAC4F654252C188C Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/ha79IahEugt55pyXch2rl5eqNpY.roa Signing time: Thu 01 Jan 2026 22:17:46 +0000 ROA not before: Thu 01 Jan 2026 22:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206810 IP address blocks: 176.96.184.0/22 maxlen: 22 176.96.184.0/24 maxlen: 24 176.96.185.0/24 maxlen: 24 176.96.186.0/24 maxlen: 24 176.96.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:6e:31:ea:76:38:ea:ba:c4:f6:54:25:2c:18:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Jan 1 22:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85aefd21a844ba0b79e69c97721dab9797aa3696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cb:42:21:59:b9:02:b4:6d:c6:22:59:d4:83: 01:e0:42:5e:11:9c:c7:68:89:e8:b2:66:ba:4b:81: 58:ed:9a:53:6f:f8:77:5d:2c:0e:ed:25:06:8e:52: 75:d4:65:40:9e:eb:00:9b:db:ee:30:d8:78:43:cc: c9:a7:9e:f0:c3:2e:93:f8:50:5d:84:a1:ec:28:0c: bd:8a:92:0d:8f:a5:69:5f:92:51:c7:3b:2c:67:e4: cf:db:f8:5b:d9:40:4f:a9:02:9a:74:a2:23:3e:a4: 87:60:a7:b6:94:7e:41:a1:bb:8b:7a:1f:23:ce:ad: 86:9b:19:76:25:e6:f7:3f:ee:cf:cb:46:16:c1:ae: 43:85:a1:2f:4d:5b:c7:f6:c9:b6:f6:c8:a1:a2:09: a6:74:81:5e:47:08:df:d0:60:80:bd:c8:bf:2f:0a: be:ff:93:3c:ac:b6:76:21:60:9f:be:f4:72:80:87: 2d:42:35:f0:2d:04:4d:d7:2b:9e:ab:30:1c:46:6f: 6d:2c:72:dc:82:d1:df:f8:b7:d2:a0:0d:02:cf:70: c6:2a:bc:8c:f1:b9:7b:c7:38:78:36:17:d5:e8:66: e6:7c:82:3a:e8:6f:10:76:58:9c:5e:0a:7d:30:1f: 1e:2d:a8:9c:7d:1d:84:e2:14:b4:09:14:4e:3f:1e: a0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AE:FD:21:A8:44:BA:0B:79:E6:9C:97:72:1D:AB:97:97:AA:36:96 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/ha79IahEugt55pyXch2rl5eqNpY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.96.184.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:8c:bb:67:03:97:aa:7a:d9:a2:25:c6:b1:bf:d5:43:49:c0: fd:e3:01:c3:fe:9a:0c:ce:88:70:37:9b:72:be:f0:e7:e9:66: 5f:69:92:b2:8d:16:e0:f5:02:1d:33:4f:ea:9d:ed:a0:c6:ea: 08:25:0d:d3:70:90:0d:27:02:a8:45:d6:f8:b4:91:6d:ba:28: ae:b5:54:fb:f8:4d:34:85:67:e0:4f:cc:53:8b:b9:3a:d4:07: 7b:bc:6c:b7:af:48:23:15:c1:d9:92:6f:a9:96:63:a3:a0:4c: 56:b0:b0:66:95:9d:da:5c:6d:e7:57:e6:21:10:50:fe:21:fa: 17:3d:26:d0:49:7f:2a:07:01:b6:20:c6:e5:c4:5b:1a:7e:c1: b1:da:c6:84:67:6d:31:b3:94:d2:72:07:c4:6a:68:8d:e9:f7: 82:52:8f:55:bf:f0:96:83:d3:ec:d8:3d:f1:f2:bd:59:0f:7e: d5:08:1d:dd:91:ce:d9:08:2e:fc:e0:09:fa:ce:dc:a8:88:96: 48:da:11:3b:1d:9a:e1:1c:76:c4:94:9a:33:c8:01:13:7c:93: a5:4e:80:fc:39:51:05:08:30:db:67:f4:c4:eb:d7:ed:ee:69: 98:73:41:88:d7:64:d4:29:56:09:97:c7:39:4e:7b:c2:3e:e0: 1a:62:61:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o24x6nY46rrE9lQlLBiMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjYwMTAxMjIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWFlZmQyMWE4NDRiYTBiNzllNjljOTc3MjFkYWI5Nzk3YWEzNjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApctCIVm5ArRtxiJZ1IMB4EJeEZzH aInosma6S4FY7ZpTb/h3XSwO7SUGjlJ11GVAnusAm9vuMNh4Q8zJp57wwy6T+FBd hKHsKAy9ipINj6VpX5JRxzssZ+TP2/hb2UBPqQKadKIjPqSHYKe2lH5BobuLeh8j zq2Gmxl2Jeb3P+7Py0YWwa5DhaEvTVvH9sm29sihogmmdIFeRwjf0GCAvci/Lwq+ /5M8rLZ2IWCfvvRygIctQjXwLQRN1yueqzAcRm9tLHLcgtHf+LfSoA0Cz3DGKryM 8bl7xzh4NhfV6GbmfII66G8QdlicXgp9MB8eLaicfR2E4hS0CRROPx6gvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIWu/SGoRLoLeeacl3Idq5eXqjaWMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvaGE3OUlhaEV1Z3Q1NXB5WGNoMnJsNWVxTnBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsGC4MA0G CSqGSIb3DQEBCwUAA4IBAQA/jLtnA5eqetmiJcaxv9VDScD94wHD/poMzohwN5ty vvDn6WZfaZKyjRbg9QIdM0/qne2gxuoIJQ3TcJANJwKoRdb4tJFtuiiutVT7+E00 hWfgT8xTi7k61Ad7vGy3r0gjFcHZkm+plmOjoExWsLBmlZ3aXG3nV+YhEFD+IfoX PSbQSX8qBwG2IMblxFsafsGx2saEZ20xs5TScgfEamiN6feCUo9Vv/CWg9Ps2D3x 8r1ZD37VCB3dkc7ZCC784An6ztyoiJZI2hE7HZrhHHbElJozyAETfJOlToD8OVEF CDDbZ/TE69ft7mmYc0GI12TUKVYJl8c5TnvCPuAaYmE0 -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:29 2026 by rpki-client