This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/fha1VSKoPt6cK2sET1Jj38-yOok.roa File: fha1VSKoPt6cK2sET1Jj38-yOok.roa (raw, json) Hash identifier: W0MGBTvTSIq90WagM0VaMvEdLjNyeHWx5hc5C2lrK+8= Subject key identifier: 7E:16:B5:55:22:A8:3E:DE:9C:2B:6B:04:4F:52:63:DF:CF:B2:3A:89 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83BE3FC42E0464A2276EB10DFDF17B Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/fha1VSKoPt6cK2sET1Jj38-yOok.roa Signing time: Fri 02 Jan 2026 16:21:38 +0000 ROA not before: Fri 02 Jan 2026 16:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212539 IP address blocks: 37.230.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:be:3f:c4:2e:04:64:a2:27:6e:b1:0d:fd:f1:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e16b55522a83ede9c2b6b044f5263dfcfb23a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:54:0c:d7:21:3b:92:d5:66:28:a8:a9:6b:84: e8:02:24:72:02:7e:23:93:bb:72:ee:87:48:7b:ec: e8:8d:c6:c7:cd:ac:4b:52:f6:e5:61:28:75:a9:fe: e3:ab:99:f8:03:ef:7c:b3:51:2d:d7:ef:1f:9e:5e: ee:7b:04:2a:e4:9b:cc:3d:60:63:bc:31:11:18:b5: a9:c6:13:bf:21:01:5a:82:4a:60:07:ca:11:6c:54: c4:70:43:4e:b5:98:9e:e8:2b:3b:bd:f3:50:dc:8b: 14:21:39:f0:35:45:56:93:d1:7d:6d:de:5c:51:2a: 0e:be:28:09:35:51:86:96:af:11:85:ec:cb:c9:64: bc:ba:c0:b2:62:18:eb:a7:a2:af:93:42:3c:88:6d: 0b:20:75:77:da:aa:b9:53:6f:48:66:67:87:67:eb: 66:a5:b9:7c:90:5b:71:bf:d5:3f:3f:e3:9b:02:25: 6d:2a:77:83:26:9c:c6:6f:3a:a7:3a:51:9e:06:12: da:e2:0e:cf:ea:5b:d7:27:f3:b9:fb:1f:2b:4d:74: de:d2:64:56:79:4b:9f:fe:ef:68:b6:39:af:7f:d4: 45:e2:5c:16:64:d0:2a:84:42:43:92:71:58:2b:db: 33:29:5a:d0:a1:1b:dd:dc:d7:a3:11:bd:62:2f:5f: 5c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:16:B5:55:22:A8:3E:DE:9C:2B:6B:04:4F:52:63:DF:CF:B2:3A:89 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/fha1VSKoPt6cK2sET1Jj38-yOok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.237.0/24 Signature Algorithm: sha256WithRSAEncryption 23:99:50:8c:59:9f:a7:d0:f9:56:54:d3:36:8b:ca:a6:06:4f: d9:44:65:cb:c1:db:1c:a6:f5:21:2d:78:59:4d:c7:ab:10:75: a8:08:3c:79:a3:cd:69:be:b7:32:13:9c:db:58:88:9f:16:81: 1f:19:c0:8a:b0:fe:fe:6a:86:c0:9e:1e:f2:63:30:5d:c7:f5: 0f:cb:67:71:ae:3c:07:09:67:4d:94:fc:2e:64:1d:3a:b8:2f: 33:c4:91:7f:f2:8d:9a:38:5c:e4:13:79:06:9d:aa:63:28:3c: c0:ff:0f:db:38:1a:d4:ff:3f:c8:6b:ac:c4:6c:c3:60:be:8b: ed:17:65:a7:8f:36:86:d5:98:8a:2a:64:b7:ac:ae:3b:fe:92: 79:a9:b0:22:2b:dc:2b:c1:34:f1:c5:42:c4:5a:b2:e4:5a:20: 13:cb:8c:87:72:ca:1c:45:47:ad:56:6a:8a:41:b9:e1:f2:c3: 10:be:81:fa:ce:bc:26:f1:83:d0:92:ca:71:80:e5:72:14:6d: 28:2e:ff:68:35:93:0e:17:d1:cc:d4:fb:aa:d1:42:90:da:84: 62:5d:f5:9c:e0:91:df:8a:21:03:cd:0b:58:69:f1:59:73:7f: e1:45:a7:b6:0a:13:a1:eb:64:12:b6:1b:a8:f1:03:e4:30:fa: d1:7b:49:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g74/xC4EZKInbrEN/fF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTE2YjU1NTIyYTgzZWRlOWMyYjZiMDQ0ZjUyNjNkZmNmYjIzYTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVQM1yE7ktVmKKipa4ToAiRyAn4j k7ty7odIe+zojcbHzaxLUvblYSh1qf7jq5n4A+98s1Et1+8fnl7uewQq5JvMPWBj vDERGLWpxhO/IQFagkpgB8oRbFTEcENOtZie6Cs7vfNQ3IsUITnwNUVWk9F9bd5c USoOvigJNVGGlq8RhezLyWS8usCyYhjrp6Kvk0I8iG0LIHV32qq5U29IZmeHZ+tm pbl8kFtxv9U/P+ObAiVtKneDJpzGbzqnOlGeBhLa4g7P6lvXJ/O5+x8rTXTe0mRW eUuf/u9otjmvf9RF4lwWZNAqhEJDknFYK9szKVrQoRvd3NejEb1iL19c2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH4WtVUiqD7enCtrBE9SY9/PsjqJMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvZmhhMVZTS29QdDZjSzJzRVQxSmozOC15T29rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJebtMA0G CSqGSIb3DQEBCwUAA4IBAQAjmVCMWZ+n0PlWVNM2i8qmBk/ZRGXLwdscpvUhLXhZ TcerEHWoCDx5o81pvrcyE5zbWIifFoEfGcCKsP7+aobAnh7yYzBdx/UPy2dxrjwH CWdNlPwuZB06uC8zxJF/8o2aOFzkE3kGnapjKDzA/w/bOBrU/z/Ia6zEbMNgvovt F2WnjzaG1ZiKKmS3rK47/pJ5qbAiK9wrwTTxxULEWrLkWiATy4yHcsocRUetVmqK Qbnh8sMQvoH6zrwm8YPQkspxgOVyFG0oLv9oNZMOF9HM1Puq0UKQ2oRiXfWc4JHf iiEDzQtYafFZc3/hRae2ChOh62QSthuo8QPkMPrRe0k2 -----END CERTIFICATE-----Generated at Mon Jan 26 05:33:47 2026 by rpki-client