This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/h2jVwiR7Lh2MAQnxMqEGLv7sppk.roa File: h2jVwiR7Lh2MAQnxMqEGLv7sppk.roa (raw, json) Hash identifier: 3osAIXavdJskI4rH2LZk+IJQBT3o4jfoACiyZsdB4K0= Subject key identifier: 87:68:D5:C2:24:7B:2E:1D:8C:01:09:F1:32:A1:06:2E:FE:EC:A6:99 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B775954AA0746C63F2419E70B39964607 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/h2jVwiR7Lh2MAQnxMqEGLv7sppk.roa Signing time: Thu 01 Jan 2026 02:18:21 +0000 ROA not before: Thu 01 Jan 2026 02:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50614 IP address blocks: 188.210.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:54:aa:07:46:c6:3f:24:19:e7:0b:39:96:46:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8768d5c2247b2e1d8c0109f132a1062efeeca699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f1:0f:52:39:37:38:ba:e4:5e:77:6b:77:fa: af:38:10:39:39:79:3a:8f:33:2a:77:3a:7f:b5:76: db:e9:8a:ba:d5:0a:74:83:1c:a5:02:67:4a:73:13: 26:e5:c4:e6:24:96:32:8b:0a:9e:94:08:6b:1b:77: ce:8a:a8:53:27:35:99:3c:18:a1:0a:f6:59:6a:51: 67:c9:41:8e:07:f0:64:60:81:b6:4c:c7:29:32:52: 82:7f:8a:80:01:1a:66:e6:5f:d4:38:d7:b2:7d:cf: 1f:7e:4a:ab:b6:00:ea:33:87:dc:43:56:a8:95:fa: d1:f9:6d:bb:c7:b7:af:7f:b5:4f:46:6d:5f:79:b5: a5:cc:67:8b:21:0f:ed:89:08:18:ff:6d:de:1d:31: 70:48:ef:30:03:60:ea:9c:9a:ba:15:44:55:1f:b2: 3d:f4:8b:2a:ef:9a:45:45:aa:b3:f5:f4:95:c1:90: e5:57:5c:32:a5:1c:1e:a1:ea:f9:8f:8e:95:d4:58: f6:da:b5:d5:2d:68:af:42:7e:97:da:c4:06:f5:f1: a4:71:51:7c:c9:1b:ab:4a:3b:3c:28:03:48:6b:17: 2c:f6:b0:cc:53:4d:29:84:f7:f4:4b:f0:d4:45:f5: 50:1f:41:c5:f9:e5:84:b2:80:3a:61:9a:4d:5b:73: 7d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:68:D5:C2:24:7B:2E:1D:8C:01:09:F1:32:A1:06:2E:FE:EC:A6:99 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/h2jVwiR7Lh2MAQnxMqEGLv7sppk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.210.91.0/24 Signature Algorithm: sha256WithRSAEncryption 65:49:f9:5e:b1:b9:d6:f8:bf:b5:9b:2e:d4:9b:ab:37:28:1d: ca:d7:35:41:37:29:f2:5b:b3:1b:fb:3d:05:67:71:67:26:7a: 9c:bf:d1:d2:32:01:7a:f2:60:1f:29:30:a6:3f:f3:c9:20:3a: b4:d7:5d:97:6f:16:f1:ce:ff:db:ee:fb:ee:75:67:8c:3c:32: 3b:84:71:fe:ba:24:4d:c8:9a:8e:41:f9:0f:32:2c:b9:b2:48: 0b:c9:de:70:e5:38:b2:24:08:30:67:e4:9b:39:fd:f7:42:56: 7d:9a:65:6d:46:62:fe:16:c3:ae:35:b9:38:9c:d3:cb:ee:7d: d2:62:81:11:9e:3d:59:22:80:cd:f2:cb:24:d2:9e:9c:0a:33: fb:02:dd:d2:dc:8c:5a:ff:2a:40:6c:b6:0b:36:9a:de:ec:fc: 00:1c:53:cb:e0:5e:a1:83:0e:29:16:c9:06:f0:29:da:c9:af: 09:a3:dd:79:13:b9:5f:f3:a7:04:01:ef:6b:59:90:f6:a1:c4: dc:9d:1b:42:f1:19:98:c3:ee:e2:d6:68:d9:53:c6:33:9b:ad: de:bc:39:df:ee:c1:64:d4:11:a7:d1:0d:69:99:22:90:0d:cb: d1:39:36:56:4a:64:b4:37:66:30:15:53:ee:5e:3a:f5:9d:60: e4:ca:bd:97 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WVSqB0bGPyQZ5ws5lkYHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzY4ZDVjMjI0N2IyZTFkOGMwMTA5ZjEzMmExMDYyZWZlZWNhNjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfEPUjk3OLrkXndrd/qvOBA5OXk6 jzMqdzp/tXbb6Yq61Qp0gxylAmdKcxMm5cTmJJYyiwqelAhrG3fOiqhTJzWZPBih CvZZalFnyUGOB/BkYIG2TMcpMlKCf4qAARpm5l/UONeyfc8ffkqrtgDqM4fcQ1ao lfrR+W27x7evf7VPRm1febWlzGeLIQ/tiQgY/23eHTFwSO8wA2DqnJq6FURVH7I9 9Isq75pFRaqz9fSVwZDlV1wypRweoer5j46V1Fj22rXVLWivQn6X2sQG9fGkcVF8 yRurSjs8KANIaxcs9rDMU00phPf0S/DURfVQH0HF+eWEsoA6YZpNW3N9YwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIdo1cIkey4djAEJ8TKhBi7+7KaZMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL2gyalZ3aVI3TGgyTUFRbnhNcUVHTHY3c3Bway5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC80lsw DQYJKoZIhvcNAQELBQADggEBAGVJ+V6xudb4v7WbLtSbqzcoHcrXNUE3KfJbsxv7 PQVncWcmepy/0dIyAXryYB8pMKY/88kgOrTXXZdvFvHO/9vu++51Z4w8MjuEcf66 JE3Imo5B+Q8yLLmySAvJ3nDlOLIkCDBn5Js5/fdCVn2aZW1GYv4Ww641uTic08vu fdJigRGePVkigM3yyyTSnpwKM/sC3dLcjFr/KkBstgs2mt7s/AAcU8vgXqGDDikW yQbwKdrJrwmj3XkTuV/zpwQB72tZkPahxNydG0LxGZjD7uLWaNlTxjObrd68Od/u wWTUEafRDWmZIpANy9E5NlZKZLQ3ZjAVU+5eOvWdYOTKvZc= -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:32 2026 by rpki-client