This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/0hHrURySDaM780x4AUZEHg55jtk.roa File: 0hHrURySDaM780x4AUZEHg55jtk.roa (raw, json) Hash identifier: cu3BkfDhARHEryR2V7+D+Aq5/lJB/sJgtqeOvdD4R8o= Subject key identifier: D2:11:EB:51:1C:92:0D:A3:3B:F3:4C:78:01:46:44:1E:0E:79:8E:D9 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C7853CDA60DA2593C6500877FF2612 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/0hHrURySDaM780x4AUZEHg55jtk.roa Signing time: Thu 01 Jan 2026 04:18:43 +0000 ROA not before: Thu 01 Jan 2026 04:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198984 IP address blocks: 195.136.172.0/24 maxlen: 24 195.136.175.0/24 maxlen: 24 195.136.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:85:3c:da:60:da:25:93:c6:50:08:77:ff:26:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d211eb511c920da33bf34c780146441e0e798ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5a:4d:7b:c9:e6:de:be:75:0c:fa:18:1f:89: f2:bb:5b:75:8d:0c:69:da:aa:fa:cc:6b:54:49:e4: 86:f5:73:2c:b1:a2:69:ed:b0:79:c6:af:61:4a:a4: 49:44:8d:6d:40:3f:39:82:f3:2c:9c:72:94:49:e9: f7:1d:31:db:bd:4c:9e:1e:b9:8c:49:82:09:cc:fb: be:fb:cd:40:1e:69:f6:0d:c5:ff:5f:a9:02:dd:61: be:07:32:ca:6f:00:8b:1b:2f:df:0f:8c:49:5d:4a: 1d:0b:c8:2e:84:fb:e2:7a:6d:83:2a:14:77:70:82: 82:37:25:18:07:13:d1:a0:a2:d9:98:95:89:32:cb: 3b:43:98:92:1f:da:55:b2:bf:0c:ea:1b:58:35:f1: c7:c2:46:2f:10:54:7a:4f:f9:8d:5c:3b:4e:b1:f1: 74:75:18:89:62:c1:bb:81:2d:e1:88:c7:2a:1f:a7: 03:6f:73:9a:53:a2:2d:c4:7d:34:74:02:21:07:92: d5:5a:85:be:55:d8:21:df:30:b5:5d:c0:10:79:9b: de:2e:f7:60:3e:7b:df:3d:0e:6f:20:59:d7:65:75: 78:36:3f:04:d2:d3:e4:01:ce:76:03:67:bc:31:95: f5:43:4d:31:cc:f4:d0:5d:34:0b:1b:05:08:04:98: 43:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:11:EB:51:1C:92:0D:A3:3B:F3:4C:78:01:46:44:1E:0E:79:8E:D9 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/0hHrURySDaM780x4AUZEHg55jtk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.136.172.0/24 195.136.175.0/24 195.136.184.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:0b:b0:7c:0b:23:37:e6:c4:d0:8b:dc:cd:41:9e:9e:72:5e: c7:54:fc:76:db:74:82:bb:6c:5e:92:9a:5e:95:ba:20:ee:04: 9b:ad:16:96:dd:07:40:63:44:eb:20:36:8f:00:d8:8e:ae:85: 38:c1:98:a3:e6:d3:49:a9:46:17:8a:c2:2d:06:c1:d0:34:ad: 41:a6:3c:0e:e6:ee:89:db:6b:95:1d:c2:77:da:2d:27:f3:a4: 8e:4c:91:28:93:ec:6c:92:ca:64:66:97:dc:29:cf:dd:4c:4e: 06:83:f3:1d:4b:c2:d7:3b:ce:1c:d6:ff:5b:f7:67:37:9a:7d: 66:b8:3a:b6:51:a2:e9:78:79:6f:c8:74:70:a1:e6:0d:9c:af: cb:f2:a5:42:0f:87:ab:80:ce:07:97:66:fb:45:e9:0a:ec:25: eb:f8:d3:3f:c4:5e:cb:5b:30:18:20:ad:c5:60:61:6b:22:07: 9a:27:3f:47:16:73:91:e1:c0:ec:d6:dd:6e:8c:e7:b1:a6:6f: 4d:88:c9:25:3f:a7:49:4e:27:7c:2e:1d:98:69:87:18:d2:53: d7:65:2a:bd:14:09:b8:ca:9d:b5:42:7c:9b:b1:a8:4b:4a:9f: ec:d1:1f:51:d7:d2:ee:d5:8f:5c:7e:c0:62:19:f9:25:25:99: f8:6d:82:d3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3x4U82mDaJZPGUAh3/yYSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjExZWI1MTFjOTIwZGEzM2JmMzRjNzgwMTQ2NDQxZTBlNzk4ZWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lpNe8nm3r51DPoYH4nyu1t1jQxp 2qr6zGtUSeSG9XMssaJp7bB5xq9hSqRJRI1tQD85gvMsnHKUSen3HTHbvUyeHrmM SYIJzPu++81AHmn2DcX/X6kC3WG+BzLKbwCLGy/fD4xJXUodC8guhPviem2DKhR3 cIKCNyUYBxPRoKLZmJWJMss7Q5iSH9pVsr8M6htYNfHHwkYvEFR6T/mNXDtOsfF0 dRiJYsG7gS3hiMcqH6cDb3OaU6ItxH00dAIhB5LVWoW+Vdgh3zC1XcAQeZveLvdg PnvfPQ5vIFnXZXV4Nj8E0tPkAc52A2e8MZX1Q00xzPTQXTQLGwUIBJhDewIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNIR61Eckg2jO/NMeAFGRB4OeY7ZMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvMGhIclVSeVNEYU03ODB4NEFVWkVIZzU1anRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAw4isAwQA w4ivAwQBw4i4MA0GCSqGSIb3DQEBCwUAA4IBAQAdC7B8CyM35sTQi9zNQZ6ecl7H VPx223SCu2xekppelbog7gSbrRaW3QdAY0TrIDaPANiOroU4wZij5tNJqUYXisIt BsHQNK1BpjwO5u6J22uVHcJ32i0n86SOTJEok+xskspkZpfcKc/dTE4Gg/MdS8LX O84c1v9b92c3mn1muDq2UaLpeHlvyHRwoeYNnK/L8qVCD4ergM4Hl2b7RekK7CXr +NM/xF7LWzAYIK3FYGFrIgeaJz9HFnOR4cDs1t1ujOexpm9NiMklP6dJTid8Lh2Y aYcY0lPXZSq9FAm4yp21QnybsahLSp/s0R9R19Lu1Y9cfsBiGfklJZn4bYLT -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:10 2026 by rpki-client