This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/hViAZ8mOr1hzAT656AEpdRlBl9I.roa File: hViAZ8mOr1hzAT656AEpdRlBl9I.roa (raw, json) Hash identifier: 1Pn04FcL7rc2dquNu+JARWKqZUxMvCZV0MdA28AfbSw= Subject key identifier: 85:58:80:67:C9:8E:AF:58:73:01:3E:B9:E8:01:29:75:19:41:97:D2 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C7734E88EA4D87CA665B6566BAC9B5 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/hViAZ8mOr1hzAT656AEpdRlBl9I.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39039 IP address blocks: 195.136.110.0/23 maxlen: 23 195.136.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:73:4e:88:ea:4d:87:ca:66:5b:65:66:ba:c9:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85588067c98eaf5873013eb9e8012975194197d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:90:33:23:1f:ae:1e:4c:df:c3:af:0f:7b: 78:50:03:15:b3:5f:11:ec:db:86:10:bb:c6:0c:6a: 6f:45:cf:b5:0a:b6:a3:01:26:c5:fd:c0:20:47:ec: 72:6e:5c:59:a5:89:66:6e:43:39:79:b9:03:c2:c6: e5:8e:a1:33:c3:3f:07:8d:a3:21:bb:99:45:d4:ab: d1:32:4f:69:8c:b3:ee:53:fb:a9:de:c3:88:93:f5: a4:0f:7d:5d:61:43:0b:ad:cc:3c:a5:01:83:2a:6f: 76:00:1a:57:31:ff:a9:eb:17:40:25:df:ff:e2:b0: 58:3c:df:5a:3b:d6:14:3a:8b:15:76:6c:7c:17:86: 82:bc:f9:c4:16:fe:2a:3b:a2:fb:f9:c7:91:7c:1f: a6:78:3e:0e:95:ee:28:05:1f:d0:30:3c:84:fe:74: d9:9b:96:b4:46:16:60:3c:a8:b5:2e:e1:f3:6a:5c: 1a:47:ce:53:9c:26:10:65:e2:24:44:19:ec:62:79: 9b:82:b4:20:1e:8d:e0:22:9e:2d:c2:a3:62:4f:7c: d8:30:ff:fa:e1:86:5c:f2:30:01:a5:2b:2a:9f:2d: a2:99:07:37:25:67:ca:5b:12:31:52:34:08:97:e3: 5b:b1:96:9a:04:94:c4:93:21:3e:8e:4d:c4:bd:48: e9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:58:80:67:C9:8E:AF:58:73:01:3E:B9:E8:01:29:75:19:41:97:D2 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/hViAZ8mOr1hzAT656AEpdRlBl9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.136.110.0/23 195.136.190.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:e0:d1:d5:f7:ac:df:3e:82:7e:e6:c1:30:33:14:75:f6:a7: 2b:ee:9e:c4:d9:16:78:32:80:02:6c:61:1d:e2:84:0b:a6:71: af:cb:7f:72:1e:b0:33:83:14:82:f8:23:cb:9c:83:6f:67:a8: cb:b5:dc:fb:f0:b1:d9:ab:4b:05:86:44:87:ff:04:19:64:be: 6b:f1:4a:6c:c7:07:76:83:c3:56:c4:f3:37:a2:57:ad:7a:68: c1:f6:28:d4:df:ff:f9:5d:67:fa:36:f8:c2:54:64:bb:a8:ac: 74:64:f3:7e:79:c8:1e:78:7c:20:ab:b1:5b:42:48:0d:4b:f0: 37:fc:a6:8d:73:72:ba:4e:08:7b:85:6a:39:89:a4:84:e1:13: 39:c3:c4:0e:52:bd:8b:cc:d5:ea:54:ac:48:d2:ea:b0:75:79: 85:5b:c5:59:c9:c3:67:9c:fd:e0:48:93:e0:eb:fe:a3:02:ea: 21:14:fc:18:ed:96:2a:da:49:19:a9:7d:d4:67:6d:7f:c0:6f: b5:21:d0:9f:30:52:cc:fd:70:d1:94:48:3e:da:53:14:ed:76: 8a:18:4c:59:eb:5b:15:2d:b3:e5:8e:d5:7e:e3:0a:af:d9:cc: aa:9e:13:8a:c6:12:ce:66:7a:e2:8c:46:6e:8a:20:2b:07:29: 64:08:f8:20 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x3NOiOpNh8pmW2Vmusm1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTU4ODA2N2M5OGVhZjU4NzMwMTNlYjllODAxMjk3NTE5NDE5N2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC6QMyMfrh5M38OvD3t4UAMVs18R 7NuGELvGDGpvRc+1CrajASbF/cAgR+xyblxZpYlmbkM5ebkDwsbljqEzwz8HjaMh u5lF1KvRMk9pjLPuU/up3sOIk/WkD31dYUMLrcw8pQGDKm92ABpXMf+p6xdAJd// 4rBYPN9aO9YUOosVdmx8F4aCvPnEFv4qO6L7+ceRfB+meD4Ole4oBR/QMDyE/nTZ m5a0RhZgPKi1LuHzalwaR85TnCYQZeIkRBnsYnmbgrQgHo3gIp4twqNiT3zYMP/6 4YZc8jABpSsqny2imQc3JWfKWxIxUjQIl+NbsZaaBJTEkyE+jk3EvUjpHwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIVYgGfJjq9YcwE+uegBKXUZQZfSMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvaFZpQVo4bU9yMWh6QVQ2NTZBRXBkUmxCbDlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBw4huAwQB w4i+MA0GCSqGSIb3DQEBCwUAA4IBAQA+4NHV96zfPoJ+5sEwMxR19qcr7p7E2RZ4 MoACbGEd4oQLpnGvy39yHrAzgxSC+CPLnINvZ6jLtdz78LHZq0sFhkSH/wQZZL5r 8Upsxwd2g8NWxPM3oletemjB9ijU3//5XWf6NvjCVGS7qKx0ZPN+ecgeeHwgq7Fb QkgNS/A3/KaNc3K6Tgh7hWo5iaSE4RM5w8QOUr2LzNXqVKxI0uqwdXmFW8VZycNn nP3gSJPg6/6jAuohFPwY7ZYq2kkZqX3UZ21/wG+1IdCfMFLM/XDRlEg+2lMU7XaK GExZ61sVLbPljtV+4wqv2cyqnhOKxhLOZnrijEZuiiArBylkCPgg -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:44 2026 by rpki-client