This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/hN7XUM5Glyrot6zaK4scGwI3uPQ.roa File: hN7XUM5Glyrot6zaK4scGwI3uPQ.roa (raw, json) Hash identifier: NvKjw+roiIXWY/ok1kEl36Mdnj7pgwk3grKasFBC3AA= Subject key identifier: 84:DE:D7:50:CE:46:97:2A:E8:B7:AC:DA:2B:8B:1C:1B:02:37:B8:F4 Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709 Certificate serial: 019B797EF5F79AFE5EF7DC965FF4A23939E6 Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/hN7XUM5Glyrot6zaK4scGwI3uPQ.roa Signing time: Thu 01 Jan 2026 12:18:42 +0000 ROA not before: Thu 01 Jan 2026 12:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206060 IP address blocks: 185.197.176.0/22 maxlen: 22 185.197.176.0/24 maxlen: 24 185.197.177.0/24 maxlen: 24 185.197.178.0/24 maxlen: 24 185.197.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f5:f7:9a:fe:5e:f7:dc:96:5f:f4:a2:39:39:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709 Validity Not Before: Jan 1 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84ded750ce46972ae8b7acda2b8b1c1b0237b8f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1e:12:e3:7b:55:5a:3d:8e:cb:39:73:c4:44: ef:2a:fb:f9:e7:ee:2c:ec:18:73:5b:2d:0c:50:67: b7:4d:41:67:39:c9:6c:d0:1f:d4:62:54:14:9c:ab: 38:98:32:23:13:07:5c:57:8a:7e:6a:81:b5:9f:67: 3a:2d:4f:42:9b:89:14:44:47:1a:80:38:d8:57:cb: bb:dc:25:c4:b1:f6:74:4c:19:3c:c6:28:48:8f:ee: 62:28:16:fd:87:45:de:11:7c:ca:f9:ef:cc:42:fa: 6d:5e:9f:ba:7c:02:c8:a5:51:54:d5:0f:28:12:f1: 98:af:1e:33:cb:2f:3d:17:48:6d:f0:31:01:7c:0a: e0:86:ff:31:3f:5f:f0:d8:5c:60:22:50:58:7a:83: d0:ba:24:5a:61:da:0e:5e:54:fa:ab:dc:1e:ad:91: 6f:68:55:92:a8:47:40:59:e0:e1:9c:12:ad:50:ab: 9c:26:fc:4f:5a:74:34:19:a2:57:91:0d:1f:5b:0e: 8e:22:62:07:38:e4:80:a8:67:3c:ba:c5:67:af:9e: 84:ab:89:1c:a0:c1:f3:41:d4:97:c2:d3:46:71:1e: 2b:c9:76:b8:31:8a:45:c2:0d:7c:ff:94:f2:f6:3b: 08:5f:cd:09:34:6d:6e:66:c1:56:04:ef:5a:19:57: 7e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DE:D7:50:CE:46:97:2A:E8:B7:AC:DA:2B:8B:1C:1B:02:37:B8:F4 X509v3 Authority Key Identifier: keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/hN7XUM5Glyrot6zaK4scGwI3uPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.176.0/22 Signature Algorithm: sha256WithRSAEncryption 75:d7:5f:4d:19:cc:94:92:ab:cf:7e:be:2d:9d:c8:90:7d:58: 17:fa:c4:f7:79:01:23:bf:e0:45:7c:3b:fd:b9:52:f7:20:cd: a8:47:fc:84:bf:d5:56:b6:88:eb:4d:48:c6:12:2a:12:e2:55: 9c:d2:50:d9:56:2c:cf:21:e0:c7:a0:de:8d:c0:03:5c:4f:07: b2:9f:0a:15:13:61:76:0a:04:bb:8b:c3:20:de:02:d6:12:f3: df:1c:ed:41:65:74:a6:57:67:75:3f:17:7a:ed:26:bd:9c:09: 8e:53:08:f5:49:87:c2:8b:d8:98:8f:76:2c:ab:49:6c:e4:0f: 14:56:2a:05:d2:f0:0b:ae:cb:b4:c0:b0:53:fa:9d:41:70:36: 99:8c:61:3a:1d:01:2c:e4:c6:ca:69:fc:ad:85:de:38:b5:48: f7:2a:e5:d2:ec:d0:8f:bd:d7:6d:12:93:9d:a6:c1:8e:db:d9: d1:7b:64:e2:66:7c:58:74:a2:2d:54:ff:5e:f5:f5:7a:ed:ca: cd:c3:b1:94:f0:8f:ef:0e:c6:9e:44:73:7a:be:b5:6b:57:64: a1:61:89:4d:00:5b:90:46:7b:5b:77:a7:d9:0a:b0:14:e1:28: df:59:4a:ab:07:0f:44:ad:d4:5a:95:3f:c2:09:de:65:8f:8e: e7:f9:e8:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fvX3mv5e99yWX/SiOTnmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OWVmMWI0ZWI2YTBmODEyNTExYjZiYjI3MDQ4MDFhMzMx MWY3MDkwHhcNMjYwMTAxMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGRlZDc1MGNlNDY5NzJhZThiN2FjZGEyYjhiMWMxYjAyMzdiOGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx4S43tVWj2OyzlzxETvKvv55+4s 7BhzWy0MUGe3TUFnOcls0B/UYlQUnKs4mDIjEwdcV4p+aoG1n2c6LU9Cm4kUREca gDjYV8u73CXEsfZ0TBk8xihIj+5iKBb9h0XeEXzK+e/MQvptXp+6fALIpVFU1Q8o EvGYrx4zyy89F0ht8DEBfArghv8xP1/w2FxgIlBYeoPQuiRaYdoOXlT6q9werZFv aFWSqEdAWeDhnBKtUKucJvxPWnQ0GaJXkQ0fWw6OImIHOOSAqGc8usVnr56Eq4kc oMHzQdSXwtNGcR4ryXa4MYpFwg18/5Ty9jsIX80JNG1uZsFWBO9aGVd+owIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFITe11DORpcq6Les2iuLHBsCN7j0MB8GA1UdIwQY MBaAFBme8bTrag+BJRG2uycEgBozEfcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1o3eHRPdHFENEVsRWJhN0p3U0FHak1SOXdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lYWZlNmUtY2ZlMy00MjQ1LTljMzYt MDdhMjhhZDNjYjY0LzEvaE43WFVNNUdseXJvdDZ6YUs0c2NHd0kzdVBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9lYWZlNmUtY2ZlMy00MjQ1LTljMzYtMDdhMjhhZDNjYjY0 LzEvR1o3eHRPdHFENEVsRWJhN0p3U0FHak1SOXdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucWwMA0G CSqGSIb3DQEBCwUAA4IBAQB1119NGcyUkqvPfr4tnciQfVgX+sT3eQEjv+BFfDv9 uVL3IM2oR/yEv9VWtojrTUjGEioS4lWc0lDZVizPIeDHoN6NwANcTweynwoVE2F2 CgS7i8Mg3gLWEvPfHO1BZXSmV2d1Pxd67Sa9nAmOUwj1SYfCi9iYj3Ysq0ls5A8U VioF0vALrsu0wLBT+p1BcDaZjGE6HQEs5MbKafythd44tUj3KuXS7NCPvddtEpOd psGO29nRe2TiZnxYdKItVP9e9fV67crNw7GU8I/vDsaeRHN6vrVrV2ShYYlNAFuQ Rntbd6fZCrAU4SjfWUqrBw9ErdRalT/CCd5lj47n+eji -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:29 2026 by rpki-client