This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/Ha5ls7-s4ydFIqi1cIfxEQYIJ3s.roa File: Ha5ls7-s4ydFIqi1cIfxEQYIJ3s.roa (raw, json) Hash identifier: QNUSDeQ5+vKisVWLIDdycMdXbuXxERVUMifDeFc9EHI= Subject key identifier: 1D:AE:65:B3:BF:AC:E3:27:45:22:A8:B5:70:87:F1:11:06:08:27:7B Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808 Certificate serial: 019B7EA6714C8EA4CE2FB1D48A775394140B Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/Ha5ls7-s4ydFIqi1cIfxEQYIJ3s.roa Signing time: Fri 02 Jan 2026 12:19:55 +0000 ROA not before: Fri 02 Jan 2026 12:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50714 IP address blocks: 195.191.242.0/24 maxlen: 24 195.191.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:71:4c:8e:a4:ce:2f:b1:d4:8a:77:53:94:14:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808 Validity Not Before: Jan 2 12:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dae65b3bface3274522a8b57087f1110608277b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ea:da:d3:d8:44:91:0e:ee:95:89:f8:3a:2a: b5:e7:3f:1a:fb:af:76:44:de:a5:92:62:85:7c:50: ab:d5:d1:27:c0:14:d8:b4:aa:30:86:ab:34:65:43: 7e:60:21:dd:26:76:aa:ea:56:ba:c6:a4:bb:2e:80: e4:51:6e:f1:7e:6d:38:2f:03:65:56:00:7e:32:c5: 76:2d:2e:8c:97:52:bb:0e:18:53:7c:db:fd:f2:5b: 45:27:e2:7a:12:0c:12:a3:19:f4:0d:91:89:26:c1: 4e:7f:bc:80:31:a5:87:6b:48:9c:b7:02:97:72:4d: 90:eb:e9:35:b2:a0:7b:30:26:85:48:3f:20:2f:7d: 0e:7f:4c:0c:dd:1d:2c:d4:cc:7f:fb:41:ba:f1:b2: ca:20:6d:c1:80:86:1f:e3:11:8c:f4:80:08:74:c7: 89:71:24:d8:22:5a:82:47:4f:bf:ac:95:b4:d4:c8: 7a:b9:04:f6:e3:b0:ae:46:5b:a0:61:47:79:3e:36: a2:b7:34:b8:3a:e3:a2:db:69:a8:cd:10:0e:0a:5b: af:c8:9e:b6:96:6b:97:ae:cf:5c:63:4a:90:ac:d6: f9:6e:17:13:b7:38:1e:60:25:3a:3e:99:40:d3:1f: 82:1f:4c:83:d9:eb:5d:40:96:38:de:00:9b:75:a1: dc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AE:65:B3:BF:AC:E3:27:45:22:A8:B5:70:87:F1:11:06:08:27:7B X509v3 Authority Key Identifier: keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/Ha5ls7-s4ydFIqi1cIfxEQYIJ3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.242.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:a1:02:a9:25:72:b5:4a:8d:e0:ba:20:67:e0:dd:dd:ac:7b: 4e:cb:8b:7c:b7:4f:9d:7f:43:f2:37:13:df:d1:19:66:91:c9: a7:8f:37:e6:54:d8:fe:22:49:97:66:78:86:54:ba:6a:59:d5: 46:29:5a:fe:95:98:8c:84:c0:f1:eb:0e:69:8a:e3:5c:d3:20: e2:bf:65:8b:7d:5f:29:b2:00:38:cd:47:2d:86:b1:a5:66:59: 88:26:7d:ed:a8:5e:96:9e:15:37:a1:88:24:9f:91:e0:bb:de: a3:c5:37:b0:8c:9d:24:5b:c5:32:10:67:5a:b5:9b:e3:12:76: 5c:92:79:df:a1:4f:22:5c:94:f5:3f:5b:67:7e:33:8b:e3:ed: 1b:a5:6d:e6:29:6d:ca:f9:77:88:0e:a9:6b:bd:b5:2b:41:21: c5:66:73:da:ae:7e:3a:69:8f:9d:67:e2:d7:63:43:2f:80:95: 01:f7:de:24:56:99:0d:3b:66:f2:d0:84:17:9f:c2:f9:f3:a2: 0b:ee:ad:90:d2:78:40:10:0b:a3:98:5a:4a:e6:cc:47:ad:e9: d6:c0:df:aa:c4:22:8e:35:42:ce:8e:b8:03:18:4e:ad:82:9e: 09:7f:34:ec:26:d9:18:62:27:0f:ee:0e:77:47:e9:95:33:0d: 5e:5f:c2:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pnFMjqTOL7HUindTlBQLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj NmY4MDgwHhcNMjYwMTAyMTIxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGFlNjViM2JmYWNlMzI3NDUyMmE4YjU3MDg3ZjExMTA2MDgyNzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+ra09hEkQ7ulYn4Oiq15z8a+692 RN6lkmKFfFCr1dEnwBTYtKowhqs0ZUN+YCHdJnaq6la6xqS7LoDkUW7xfm04LwNl VgB+MsV2LS6Ml1K7DhhTfNv98ltFJ+J6EgwSoxn0DZGJJsFOf7yAMaWHa0ictwKX ck2Q6+k1sqB7MCaFSD8gL30Of0wM3R0s1Mx/+0G68bLKIG3BgIYf4xGM9IAIdMeJ cSTYIlqCR0+/rJW01Mh6uQT247CuRlugYUd5PjaitzS4OuOi22mozRAOCluvyJ62 lmuXrs9cY0qQrNb5bhcTtzgeYCU6PplA0x+CH0yD2etdQJY43gCbdaHceQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB2uZbO/rOMnRSKotXCH8REGCCd7MB8GA1UdIwQY MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt OTI5ZjdkNjM1ZjRiLzEvSGE1bHM3LXM0eWRGSXFpMWNJZnhFUVlJSjNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7/yMA0G CSqGSIb3DQEBCwUAA4IBAQBsoQKpJXK1So3guiBn4N3drHtOy4t8t0+df0PyNxPf 0RlmkcmnjzfmVNj+IkmXZniGVLpqWdVGKVr+lZiMhMDx6w5piuNc0yDiv2WLfV8p sgA4zUcthrGlZlmIJn3tqF6WnhU3oYgkn5Hgu96jxTewjJ0kW8UyEGdatZvjEnZc knnfoU8iXJT1P1tnfjOL4+0bpW3mKW3K+XeIDqlrvbUrQSHFZnParn46aY+dZ+LX Y0MvgJUB994kVpkNO2by0IQXn8L586IL7q2Q0nhAEAujmFpK5sxHrenWwN+qxCKO NULOjrgDGE6tgp4JfzTsJtkYYicP7g53R+mVMw1eX8LE -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:48 2026 by rpki-client