This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/h2gp67O50OZSa1oqQZXjN2SNpx4.roa File: h2gp67O50OZSa1oqQZXjN2SNpx4.roa (raw, json) Hash identifier: Pa+pjoEKIMF2XBf3tbxUYkCZYzHfL5nJuwgyvpsFLdw= Subject key identifier: 87:68:29:EB:B3:B9:D0:E6:52:6B:5A:2A:41:95:E3:37:64:8D:A7:1E Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Certificate serial: 019B76EB0E71495159A52913DE1EA468B1DB Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/h2gp67O50OZSa1oqQZXjN2SNpx4.roa Signing time: Thu 01 Jan 2026 00:17:54 +0000 ROA not before: Thu 01 Jan 2026 00:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204227 IP address blocks: 193.57.20.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0e:71:49:51:59:a5:29:13:de:1e:a4:68:b1:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Validity Not Before: Jan 1 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=876829ebb3b9d0e6526b5a2a4195e337648da71e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:36:2b:c7:0f:d5:a7:bf:91:18:73:93:16:14: 40:83:d7:df:e8:b7:af:a9:d6:6f:ff:a6:88:20:bf: b1:60:8b:1e:37:b8:91:e7:29:90:2d:a7:da:47:ca: 65:3c:c8:15:e5:a0:f1:9b:27:8f:1d:3d:29:e3:dd: ce:c9:2a:d8:2f:17:b7:c8:85:d1:ac:42:8e:78:09: ca:18:d5:04:80:cd:91:0d:6c:65:4d:66:fc:5c:6a: 26:5c:54:cd:c3:24:d9:21:08:95:e1:c8:c5:d2:f7: 00:b1:18:ab:cf:6f:d7:35:8e:a0:8b:61:42:94:89: b2:18:f0:21:bc:2e:5e:28:06:06:35:75:25:82:e7: 2d:db:d8:8d:ab:ef:4f:1a:05:5e:89:f4:63:04:bd: 50:b4:68:12:f2:08:80:0b:c6:6f:22:2f:07:df:6f: 06:12:9b:45:39:8d:11:1e:5a:a3:f6:0c:6d:b5:e2: 43:61:69:55:bc:84:e8:18:be:33:fc:58:5c:d9:df: 25:0b:f7:e0:ce:00:2b:81:01:8b:3a:9e:c8:c0:0b: a7:74:36:cd:64:35:aa:c3:8c:e6:4f:b5:98:19:27: 45:d8:c9:c4:67:27:c9:17:1a:c9:f1:ce:11:1f:8a: af:7a:53:89:d6:38:6a:a5:69:7b:3b:3f:58:4e:ae: 58:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:68:29:EB:B3:B9:D0:E6:52:6B:5A:2A:41:95:E3:37:64:8D:A7:1E X509v3 Authority Key Identifier: keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/h2gp67O50OZSa1oqQZXjN2SNpx4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.20.0/24 Signature Algorithm: sha256WithRSAEncryption 32:d8:2c:a9:d9:c4:81:ad:9b:00:6a:93:bc:6a:ab:ba:b6:07: 97:d8:2f:05:76:1b:9b:18:35:b5:e0:12:f1:50:8a:51:3d:e4: 4c:ff:48:1b:7f:bb:09:86:f5:db:00:93:ac:26:db:2b:cc:0d: 57:3e:17:5d:79:a5:3c:a8:5b:11:1f:0b:5b:c5:fc:bb:87:3c: b4:09:74:c8:5e:f5:36:a6:56:5c:80:b5:0b:2a:64:b4:8c:3f: 74:14:cb:86:80:49:64:f6:c7:26:d7:d4:e1:39:75:ca:63:25: 27:c5:0d:63:a7:30:18:42:3a:30:32:4d:4b:14:8f:dc:05:a6: 65:0a:dc:74:0d:3f:42:81:9d:45:a8:fc:ed:c1:2a:17:b2:e6: 47:16:f7:c4:a4:a1:2e:3d:a6:b0:cf:f5:67:e9:25:c1:d7:9b: 6b:d5:c8:d5:7d:1a:14:c9:62:ba:d9:92:e7:d6:40:00:8f:3f: e8:b1:90:8e:60:52:21:67:79:45:a5:76:0f:70:33:ff:75:63: e8:f0:45:56:ee:98:f7:ff:0f:bc:e0:dc:4e:53:69:96:9c:ea: 33:30:6f:91:b7:78:5c:58:38:78:c2:74:cc:f6:b0:b7:4b:7e: 7c:cd:f6:cf:70:da:8b:af:c2:18:43:79:3f:6f:6d:ab:9d:57: 4f:2a:d4:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26w5xSVFZpSkT3h6kaLHbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy MmQyNWIwHhcNMjYwMTAxMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzY4MjllYmIzYjlkMGU2NTI2YjVhMmE0MTk1ZTMzNzY0OGRhNzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzYrxw/Vp7+RGHOTFhRAg9ff6Lev qdZv/6aIIL+xYIseN7iR5ymQLafaR8plPMgV5aDxmyePHT0p493OySrYLxe3yIXR rEKOeAnKGNUEgM2RDWxlTWb8XGomXFTNwyTZIQiV4cjF0vcAsRirz2/XNY6gi2FC lImyGPAhvC5eKAYGNXUlguct29iNq+9PGgVeifRjBL1QtGgS8giAC8ZvIi8H328G EptFOY0RHlqj9gxtteJDYWlVvIToGL4z/Fhc2d8lC/fgzgArgQGLOp7IwAundDbN ZDWqw4zmT7WYGSdF2MnEZyfJFxrJ8c4RH4qvelOJ1jhqpWl7Oz9YTq5YiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIdoKeuzudDmUmtaKkGV4zdkjaceMB8GA1UdIwQY MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt ZWI1YmM3ZDk3YWEwLzEvaDJncDY3TzUwT1pTYTFvcVFaWGpOMlNOcHg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTkUMA0G CSqGSIb3DQEBCwUAA4IBAQAy2Cyp2cSBrZsAapO8aqu6tgeX2C8FdhubGDW14BLx UIpRPeRM/0gbf7sJhvXbAJOsJtsrzA1XPhddeaU8qFsRHwtbxfy7hzy0CXTIXvU2 plZcgLULKmS0jD90FMuGgElk9scm19ThOXXKYyUnxQ1jpzAYQjowMk1LFI/cBaZl Ctx0DT9CgZ1FqPztwSoXsuZHFvfEpKEuPaawz/Vn6SXB15tr1cjVfRoUyWK62ZLn 1kAAjz/osZCOYFIhZ3lFpXYPcDP/dWPo8EVW7pj3/w+84NxOU2mWnOozMG+Rt3hc WDh4wnTM9rC3S358zfbPcNqLr8IYQ3k/b22rnVdPKtQk -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:31 2026 by rpki-client