This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/h9csAbPkQWfATuuCxHD4BYCCVSo.roa File: h9csAbPkQWfATuuCxHD4BYCCVSo.roa (raw, json) Hash identifier: uOXNbpvZvHEf4Spk0vf1dg88f9LIRcDmba0q2K0ziEA= Subject key identifier: 87:D7:2C:01:B3:E4:41:67:C0:4E:EB:82:C4:70:F8:05:80:82:55:2A Certificate issuer: /CN=34958a58d17cab8ff9a79156f66bed5a78799f7e Certificate serial: 019B7E38686F4DAFDF08C241333815AC7AF3 Authority key identifier: 34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/h9csAbPkQWfATuuCxHD4BYCCVSo.roa Signing time: Fri 02 Jan 2026 10:19:44 +0000 ROA not before: Fri 02 Jan 2026 10:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39122 IP address blocks: 85.159.16.0/21 maxlen: 21 2a01:4d8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:68:6f:4d:af:df:08:c2:41:33:38:15:ac:7a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34958a58d17cab8ff9a79156f66bed5a78799f7e Validity Not Before: Jan 2 10:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87d72c01b3e44167c04eeb82c470f8058082552a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:e1:14:7b:20:c2:35:6d:cf:ea:37:12:16: 9a:26:af:05:2a:e9:7b:93:ca:13:5c:5e:9b:00:18: e4:c9:73:da:6d:2a:64:10:9a:3d:ca:67:5a:37:5a: 67:b8:bc:61:2b:0f:29:58:29:79:cc:9e:e8:4d:aa: 56:7b:e0:d5:32:55:d3:66:1b:83:1d:7c:63:19:ce: a6:42:c3:a3:db:d4:53:d2:5c:46:93:8e:e4:72:9c: 99:c6:55:97:1a:8e:4b:ec:96:74:89:f7:0d:e2:c8: 1b:fa:61:62:9e:73:da:dc:39:82:11:e6:75:eb:37: 6d:e3:75:8c:ce:01:f7:d5:e0:33:07:e2:44:a5:7a: d9:c0:e2:54:65:d1:38:b2:9c:57:80:fd:d8:3b:3f: 5f:a4:3e:8a:64:00:f4:36:80:e0:d8:83:98:41:d4: 7b:41:3d:dc:dd:0b:41:b1:38:67:48:bb:33:80:43: f3:66:f6:f2:de:dc:c3:4d:98:39:91:43:45:7b:b3: 1b:4f:d9:d4:83:22:d9:44:95:98:e7:c9:86:79:b4: f0:95:2c:c6:ce:16:69:1f:90:a3:b0:f4:0d:77:9c: 92:b2:0d:f7:aa:e9:d2:6a:ae:c4:74:c5:d9:2d:a2: 63:d1:e7:6a:28:66:06:f1:14:05:8a:03:dc:b9:0b: f1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D7:2C:01:B3:E4:41:67:C0:4E:EB:82:C4:70:F8:05:80:82:55:2A X509v3 Authority Key Identifier: keyid:34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/h9csAbPkQWfATuuCxHD4BYCCVSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.159.16.0/21 IPv6: 2a01:4d8::/32 Signature Algorithm: sha256WithRSAEncryption 37:cd:20:87:5c:2b:f6:c3:14:bc:3c:67:d3:fc:80:73:a1:f8: 25:fe:23:a0:83:c7:19:15:f9:b2:72:31:26:58:df:b1:73:1e: 7a:45:84:a1:bb:69:62:bd:b1:76:01:db:dc:55:75:77:16:13: 91:c3:95:b1:f1:04:e9:7c:f0:ea:ad:36:5d:e4:99:01:4c:56: f3:bc:09:93:77:41:20:b6:3c:b6:1b:37:b3:58:ae:4f:0b:95: 8e:0c:f9:a3:62:59:1c:4d:8a:72:ca:4f:d9:b9:49:e0:6f:52: 22:02:13:f5:78:ce:a6:eb:fc:79:59:a9:70:c1:5c:95:49:8c: a0:a6:e9:cb:dd:63:02:27:04:e6:e4:2c:6b:d1:85:5e:59:eb: 13:3b:e0:d5:dc:5d:4e:90:53:9a:f8:e6:e1:e7:cd:5f:e6:af: d0:68:58:60:cb:36:f1:26:9c:9b:cd:af:4b:0f:15:27:b0:51: 99:e0:fc:94:7a:92:98:4e:90:e6:b5:d7:9e:ee:16:a4:06:1b: 6c:8b:36:a5:40:be:99:86:e2:a8:f4:74:9c:e2:7f:e8:8c:0d: cb:86:05:80:0d:b3:56:81:a6:09:24:ce:f5:92:e6:ca:00:9f: 88:49:4f:e0:06:9c:82:0d:6c:16:e7:21:ca:c4:66:7b:0c:10: 82:7f:1e:ba -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OGhvTa/fCMJBMzgVrHrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OTU4YTU4ZDE3Y2FiOGZmOWE3OTE1NmY2NmJlZDVhNzg3 OTlmN2UwHhcNMjYwMTAyMTAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2Q3MmMwMWIzZTQ0MTY3YzA0ZWViODJjNDcwZjgwNTgwODI1NTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIjhFHsgwjVtz+o3EhaaJq8FKul7 k8oTXF6bABjkyXPabSpkEJo9ymdaN1pnuLxhKw8pWCl5zJ7oTapWe+DVMlXTZhuD HXxjGc6mQsOj29RT0lxGk47kcpyZxlWXGo5L7JZ0ifcN4sgb+mFinnPa3DmCEeZ1 6zdt43WMzgH31eAzB+JEpXrZwOJUZdE4spxXgP3YOz9fpD6KZAD0NoDg2IOYQdR7 QT3c3QtBsThnSLszgEPzZvby3tzDTZg5kUNFe7MbT9nUgyLZRJWY58mGebTwlSzG zhZpH5CjsPQNd5ySsg33qunSaq7EdMXZLaJj0edqKGYG8RQFigPcuQvxxQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIfXLAGz5EFnwE7rgsRw+AWAglUqMB8GA1UdIwQY MBaAFDSViljRfKuP+aeRVvZr7Vp4eZ9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQt NDY4MTA2MTM1MzhhLzEvaDljc0FiUGtRV2ZBVHV1Q3hIRDRCWUNDVlNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQtNDY4MTA2MTM1Mzhh LzEvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDVZ8QMA0E AgACMAcDBQAqAQTYMA0GCSqGSIb3DQEBCwUAA4IBAQA3zSCHXCv2wxS8PGfT/IBz ofgl/iOgg8cZFfmycjEmWN+xcx56RYShu2livbF2AdvcVXV3FhORw5Wx8QTpfPDq rTZd5JkBTFbzvAmTd0Egtjy2GzezWK5PC5WODPmjYlkcTYpyyk/ZuUngb1IiAhP1 eM6m6/x5WalwwVyVSYygpunL3WMCJwTm5Cxr0YVeWesTO+DV3F1OkFOa+Obh581f 5q/QaFhgyzbxJpybza9LDxUnsFGZ4PyUepKYTpDmtdee7hakBhtsizalQL6ZhuKo 9HSc4n/ojA3LhgWADbNWgaYJJM71kubKAJ+ISU/gBpyCDWwW5yHKxGZ7DBCCfx66 -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:38 2026 by rpki-client