This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/h2NmHgEuIROZq_hEdlknexmBTGM.roa File: h2NmHgEuIROZq_hEdlknexmBTGM.roa (raw, json) Hash identifier: 7SwAGH9Cu/tcgfRdpv3e3i4Xnp328jS2BOR70XX2pq0= Subject key identifier: 87:63:66:1E:01:2E:21:13:99:AB:F8:44:76:59:27:7B:19:81:4C:63 Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113 Certificate serial: 019B7E3930BC3760A08189B7CACFC4AFA722 Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/h2NmHgEuIROZq_hEdlknexmBTGM.roa Signing time: Fri 02 Jan 2026 10:20:35 +0000 ROA not before: Fri 02 Jan 2026 10:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56791 IP address blocks: 94.243.224.0/21 maxlen: 22 94.243.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:30:bc:37:60:a0:81:89:b7:ca:cf:c4:af:a7:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113 Validity Not Before: Jan 2 10:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8763661e012e211399abf8447659277b19814c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:48:02:7a:55:a1:d0:e5:19:d4:98:bd:76:ca: 4a:6b:07:cb:d9:da:49:33:86:68:fb:24:0f:4e:77: 8c:03:27:bf:84:5e:7f:e6:50:dd:9e:95:cd:95:6f: 16:2c:b2:8d:d6:b2:91:3d:ec:cf:4b:2a:10:0e:e7: 54:a9:3e:26:16:49:e3:6c:69:d2:d3:99:93:da:de: b2:8f:bd:d3:40:da:88:cb:a0:a3:f1:72:b7:0a:48: 23:45:23:61:25:18:8a:bf:15:c1:0c:71:01:02:a6: 52:92:4d:83:a2:9e:a7:f4:dc:9c:7c:27:22:97:5f: 1c:30:e5:2d:de:7e:ad:97:17:f5:f2:f8:cb:1a:44: 0a:e8:d1:3a:64:e1:77:ff:9e:4a:3b:39:b9:20:cf: 58:1a:25:c7:bb:1d:2e:fa:ea:92:fa:67:98:84:2c: ef:9e:20:ef:4c:90:05:8e:1e:93:78:4b:c8:a0:c8: 84:a4:b9:fa:a8:c5:88:cb:a7:2b:a0:61:b6:2d:30: 73:0e:01:39:3d:00:7a:76:ec:86:0b:29:72:80:9f: 4a:38:8e:16:ee:e8:b6:ec:9d:3d:ab:1e:ef:15:cb: e6:c6:ae:7a:64:7a:0e:49:0c:40:5e:b0:b4:4b:79: bf:3c:8a:a7:32:a1:56:8e:fa:6c:d5:de:8e:9d:e9: 88:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:63:66:1E:01:2E:21:13:99:AB:F8:44:76:59:27:7B:19:81:4C:63 X509v3 Authority Key Identifier: keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/h2NmHgEuIROZq_hEdlknexmBTGM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.243.224.0-94.243.235.255 Signature Algorithm: sha256WithRSAEncryption 65:2e:35:16:d3:a1:7d:48:f5:67:e0:15:d0:5d:0a:49:a2:a7: 18:86:4b:f4:c4:41:1c:30:48:20:43:e2:8a:dc:0c:3b:82:bc: fc:8e:cf:fb:4e:e2:80:be:1f:6a:41:38:7e:03:21:cb:3a:92: 08:b3:c0:c9:3b:dc:27:89:d5:4e:40:ca:0e:8a:be:8e:a8:cd: eb:71:38:ab:ee:d2:3e:37:32:4a:55:46:f8:b8:61:9f:01:18: 63:9a:ce:0a:5f:00:02:26:f8:26:fa:7e:e9:01:2a:52:4b:b0: 9c:c9:0e:27:0e:f8:a1:67:2d:b6:6b:53:4a:b5:da:4b:3a:a1: 45:f6:39:05:dd:bf:e3:c3:9f:10:49:f8:41:e2:9a:fd:b0:7c: 33:d6:0f:16:1f:cb:2b:06:93:a2:61:27:d7:4f:31:ca:9a:24: 85:98:29:ce:5f:f5:16:c4:32:75:c4:28:8e:6d:d2:0e:b3:0d: 57:14:c4:28:11:a6:ef:c2:bb:78:68:6e:25:5c:2d:7d:fb:c4: 6d:91:28:e8:04:35:cb:6e:e9:ec:f8:1b:63:16:82:65:d4:42: 78:15:9f:8e:e4:de:5c:cc:78:6a:34:66:3d:4f:95:9b:89:33: 38:98:4c:a2:b1:cd:b8:eb:eb:ab:0e:07:70:a8:7c:c1:f2:b8: fc:0e:54:9b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+OTC8N2CggYm3ys/Er6ciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MDA5OWE4MWIzNDZmOWFiY2FmMjYwNTZmNWI3NzA5NGQx Y2YxMTMwHhcNMjYwMTAyMTAyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzYzNjYxZTAxMmUyMTEzOTlhYmY4NDQ3NjU5Mjc3YjE5ODE0YzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UgCelWh0OUZ1Ji9dspKawfL2dpJ M4Zo+yQPTneMAye/hF5/5lDdnpXNlW8WLLKN1rKRPezPSyoQDudUqT4mFknjbGnS 05mT2t6yj73TQNqIy6Cj8XK3CkgjRSNhJRiKvxXBDHEBAqZSkk2Dop6n9NycfCci l18cMOUt3n6tlxf18vjLGkQK6NE6ZOF3/55KOzm5IM9YGiXHux0u+uqS+meYhCzv niDvTJAFjh6TeEvIoMiEpLn6qMWIy6croGG2LTBzDgE5PQB6duyGCylygJ9KOI4W 7ui27J09qx7vFcvmxq56ZHoOSQxAXrC0S3m/PIqnMqFWjvps1d6OnemIXwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIdjZh4BLiETmav4RHZZJ3sZgUxjMB8GA1UdIwQY MBaAFDgAmagbNG+avK8mBW9bdwlNHPETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0FDWnFCczBiNXE4cnlZRmIxdDNDVTBjOFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMt NDUwZmUzMzU5NWQxLzEvaDJObUhnRXVJUk9acV9oRWRsa25leG1CVEdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMtNDUwZmUzMzU5NWQx LzEvT0FDWnFCczBiNXE4cnlZRmIxdDNDVTBjOFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVe8+AD BAJe8+gwDQYJKoZIhvcNAQELBQADggEBAGUuNRbToX1I9WfgFdBdCkmipxiGS/TE QRwwSCBD4orcDDuCvPyOz/tO4oC+H2pBOH4DIcs6kgizwMk73CeJ1U5Ayg6Kvo6o zetxOKvu0j43MkpVRvi4YZ8BGGOazgpfAAIm+Cb6fukBKlJLsJzJDicO+KFnLbZr U0q12ks6oUX2OQXdv+PDnxBJ+EHimv2wfDPWDxYfyysGk6JhJ9dPMcqaJIWYKc5f 9RbEMnXEKI5t0g6zDVcUxCgRpu/Cu3hobiVcLX37xG2RKOgENctu6ez4G2MWgmXU QngVn47k3lzMeGo0Zj1PlZuJMziYTKKxzbjr66sOB3CofMHyuPwOVJs= -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:56 2026 by rpki-client