This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/fHozs5tMz7kIjrLoS5xjOq0Zfcc.roa File: fHozs5tMz7kIjrLoS5xjOq0Zfcc.roa (raw, json) Hash identifier: mgxi+ZbD7+yz67tvJMbZDZV/reH5WuncejcL1UkrxoM= Subject key identifier: 7C:7A:33:B3:9B:4C:CF:B9:08:8E:B2:E8:4B:9C:63:3A:AD:19:7D:C7 Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Certificate serial: 019B78A257DBF635614778DE73F3B42DBC2C Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/fHozs5tMz7kIjrLoS5xjOq0Zfcc.roa Signing time: Thu 01 Jan 2026 08:17:43 +0000 ROA not before: Thu 01 Jan 2026 08:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15589 IP address blocks: 62.94.0.0/16 maxlen: 24 81.92.32.0/20 maxlen: 24 83.211.0.0/16 maxlen: 24 194.153.192.0/20 maxlen: 24 194.153.208.0/22 maxlen: 24 212.90.0.0/19 maxlen: 24 212.110.0.0/19 maxlen: 24 213.136.128.0/18 maxlen: 24 213.183.128.0/19 maxlen: 24 213.198.128.0/18 maxlen: 24 217.15.208.0/20 maxlen: 24 2001:750::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:57:db:f6:35:61:47:78:de:73:f3:b4:2d:bc:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Validity Not Before: Jan 1 08:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c7a33b39b4ccfb9088eb2e84b9c633aad197dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f4:d1:61:29:24:4e:f5:87:48:ad:de:fb:e2: a9:c4:08:27:de:c5:e4:a1:22:5d:5c:01:41:19:61: 51:3c:25:0b:ed:b8:5c:d2:e4:22:fc:4a:d3:c1:46: 5e:f8:47:83:cc:36:8c:fd:7f:6f:29:2b:95:9c:07: 86:a1:25:21:d1:35:7a:94:ce:aa:1c:bc:78:b6:37: 9f:9f:7a:81:3f:4a:e8:3f:6e:6f:97:bf:10:f3:f3: 1b:ac:51:1d:e0:a4:3c:c3:90:2a:a2:8a:ff:7f:ed: f8:69:b6:e5:26:bf:66:11:13:d7:04:fc:94:b7:d3: 24:ce:a8:dd:73:de:5a:42:83:6f:40:81:27:c0:e1: 0e:e0:e7:e3:30:27:8c:3d:0c:c6:3b:8c:ec:42:fb: 34:ff:8f:83:2b:3e:37:df:45:52:99:ce:ab:75:10: f5:2f:d3:7c:75:d2:95:23:21:7e:d4:40:e5:63:c0: 22:f9:ef:42:78:96:05:9a:1b:61:82:3b:7b:2c:8d: 91:a1:ba:4a:bb:c4:e2:25:b1:70:82:98:2a:26:9e: 39:29:8d:d1:e3:8e:85:c8:8a:a0:23:9d:06:3f:ff: af:7a:85:61:e5:e5:5a:2f:6e:1e:c3:3c:b5:a0:3a: e3:b2:84:e5:1c:bf:2c:12:22:1f:ce:11:4a:09:02: 2a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7A:33:B3:9B:4C:CF:B9:08:8E:B2:E8:4B:9C:63:3A:AD:19:7D:C7 X509v3 Authority Key Identifier: keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/fHozs5tMz7kIjrLoS5xjOq0Zfcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.94.0.0/16 81.92.32.0/20 83.211.0.0/16 194.153.192.0-194.153.211.255 212.90.0.0/19 212.110.0.0/19 213.136.128.0/18 213.183.128.0/19 213.198.128.0/18 217.15.208.0/20 IPv6: 2001:750::/29 Signature Algorithm: sha256WithRSAEncryption 2a:e7:97:38:51:41:22:58:28:81:bc:1b:cf:0f:43:aa:82:01: e4:55:98:52:97:59:9b:4e:24:7c:12:55:a3:e1:02:44:1f:b3: ec:73:0d:67:52:42:ea:2e:fd:02:11:80:4d:9a:6b:c9:a3:ce: d5:95:6c:3b:ba:fc:fd:d1:bc:ef:f3:61:81:28:3f:da:3e:4b: 1b:df:55:ec:3b:43:a2:94:c3:fc:2f:89:86:36:2c:6d:8b:c2: 64:f4:31:c9:5c:68:09:2e:d1:61:bb:f9:08:f2:47:51:57:e9: e5:a1:97:4a:73:82:43:7d:64:f4:6c:f4:15:8b:a2:22:9c:7a: 2d:7a:e5:30:a4:0d:b0:c3:c2:28:0e:71:9f:07:af:f8:93:c1: c6:66:18:d4:27:61:c5:21:e0:61:93:3f:bb:a2:f5:3f:4d:c7: 7f:93:b1:38:41:6c:d2:e2:1f:56:ee:9b:0b:c7:cb:82:71:51: 79:4b:5d:e1:9a:a7:52:ba:6c:95:e9:bb:fd:cd:dd:a1:8b:48: dd:b5:5b:0b:78:d2:e1:5b:65:2e:d6:eb:3f:22:6b:6b:42:4a: 31:e1:6a:d6:a7:5e:ad:eb:e1:ae:ca:74:0f:2a:50:60:ff:ea: 16:bd:09:ac:78:df:31:e9:09:2c:99:95:d0:83:23:c3:d8:ad: 3e:19:9f:e9 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt4olfb9jVhR3jec/O0LbwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi MGNhMDkwHhcNMjYwMTAxMDgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzdhMzNiMzliNGNjZmI5MDg4ZWIyZTg0YjljNjMzYWFkMTk3ZGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPTRYSkkTvWHSK3e++KpxAgn3sXk oSJdXAFBGWFRPCUL7bhc0uQi/ErTwUZe+EeDzDaM/X9vKSuVnAeGoSUh0TV6lM6q HLx4tjefn3qBP0roP25vl78Q8/MbrFEd4KQ8w5Aqoor/f+34abblJr9mERPXBPyU t9Mkzqjdc95aQoNvQIEnwOEO4OfjMCeMPQzGO4zsQvs0/4+DKz4330VSmc6rdRD1 L9N8ddKVIyF+1EDlY8Ai+e9CeJYFmhthgjt7LI2RobpKu8TiJbFwgpgqJp45KY3R 446FyIqgI50GP/+veoVh5eVaL24ewzy1oDrjsoTlHL8sEiIfzhFKCQIq2QIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFHx6M7ObTM+5CI6y6EucYzqtGX3HMB8GA1UdIwQY MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct NWI1ZTMzY2U3MGFkLzEvZkhvenM1dE16N2tJanJMb1M1eGpPcTBaZmNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwMAPl4DBARR XCADAwBT0zAMAwQGwpnAAwQCwpnQAwQF1FoAAwQF1G4AAwQG1YiAAwQF1beAAwQG 1caAAwQE2Q/QMA0EAgACMAcDBQMgAQdQMA0GCSqGSIb3DQEBCwUAA4IBAQAq55c4 UUEiWCiBvBvPD0OqggHkVZhSl1mbTiR8ElWj4QJEH7Pscw1nUkLqLv0CEYBNmmvJ o87VlWw7uvz90bzv82GBKD/aPksb31XsO0OilMP8L4mGNixti8Jk9DHJXGgJLtFh u/kI8kdRV+nloZdKc4JDfWT0bPQVi6IinHoteuUwpA2ww8IoDnGfB6/4k8HGZhjU J2HFIeBhkz+7ovU/Tcd/k7E4QWzS4h9W7psLx8uCcVF5S13hmqdSumyV6bv9zd2h i0jdtVsLeNLhW2Uu1us/ImtrQkox4WrWp16t6+GuynQPKlBg/+oWvQmseN8x6Qks mZXQgyPD2K0+GZ/p -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:22 2026 by rpki-client