This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/H3TYAMLFFlNCp3XM0jhoUoBeQy8.roa File: H3TYAMLFFlNCp3XM0jhoUoBeQy8.roa (raw, json) Hash identifier: J5xTusXlhkXdt1S3mE6QU/UGZ2zGPT9Q3Ow+NVkju+o= Subject key identifier: 1F:74:D8:00:C2:C5:16:53:42:A7:75:CC:D2:38:68:52:80:5E:43:2F Certificate issuer: /CN=7651762de3d3f19cedd438b03cf23986ce91727f Certificate serial: 019B76EB10D75823AA0922B27646839A5DC8 Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/H3TYAMLFFlNCp3XM0jhoUoBeQy8.roa Signing time: Thu 01 Jan 2026 00:17:55 +0000 ROA not before: Thu 01 Jan 2026 00:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34756 IP address blocks: 45.15.12.0/22 maxlen: 22 77.95.96.0/21 maxlen: 21 91.194.136.0/23 maxlen: 23 176.58.24.0/21 maxlen: 21 176.58.30.0/24 maxlen: 24 176.58.31.0/24 maxlen: 24 185.47.236.0/22 maxlen: 22 193.138.109.0/24 maxlen: 24 195.114.12.0/24 maxlen: 24 195.230.110.0/24 maxlen: 24 2a03:fc00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:10:d7:58:23:aa:09:22:b2:76:46:83:9a:5d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f Validity Not Before: Jan 1 00:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f74d800c2c5165342a775ccd2386852805e432f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f1:61:4c:9f:78:4f:6f:fc:b6:aa:b6:60:c0: 6e:13:a2:44:80:d9:6b:1a:a6:72:c2:e7:99:b0:60: 2b:e1:24:4a:aa:a3:d1:72:95:43:9a:83:c8:8d:1b: 93:37:f4:94:63:e5:ea:23:8a:53:6b:ee:ce:64:e8: e5:2d:f0:ad:e4:ef:cf:96:a9:88:bd:27:8e:2e:60: 00:98:a8:41:d7:41:c2:36:f6:ff:c7:06:0d:f0:62: cb:9f:dd:bd:02:56:a1:b7:61:8e:98:49:65:09:50: dc:f5:d4:41:9f:08:81:32:ae:65:71:78:1b:9f:78: a1:5a:d1:10:0b:5a:bb:f5:a9:b3:ed:10:b6:11:61: 91:2f:c6:d3:14:8e:7a:7f:bd:24:17:d9:9b:78:7b: 12:cd:8c:1f:1a:e7:7d:fc:71:14:f3:ec:ae:4c:b4: 27:35:a3:07:72:39:79:3b:32:9b:88:0b:b1:45:ff: ef:67:da:5b:c8:c2:7f:de:b1:60:40:8f:e4:8a:6c: 27:14:6e:ff:0e:03:25:1a:10:07:45:d1:82:1e:75: 2a:a7:d8:b9:bb:ef:b9:fb:b5:c6:f5:ad:a8:16:3e: a1:9d:77:7b:48:f9:77:7e:c7:0f:a6:48:26:a1:8d: 32:15:cc:63:60:7b:7f:ae:94:c9:c8:51:fc:76:55: ff:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:74:D8:00:C2:C5:16:53:42:A7:75:CC:D2:38:68:52:80:5E:43:2F X509v3 Authority Key Identifier: keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/H3TYAMLFFlNCp3XM0jhoUoBeQy8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.12.0/22 77.95.96.0/21 91.194.136.0/23 176.58.24.0/21 185.47.236.0/22 193.138.109.0/24 195.114.12.0/24 195.230.110.0/24 IPv6: 2a03:fc00::/29 Signature Algorithm: sha256WithRSAEncryption 71:43:1e:58:9c:ac:d0:43:1e:98:72:5a:21:ad:17:e6:14:fc: 70:53:53:4e:42:73:4f:c3:48:ba:40:bc:9b:88:77:14:43:8e: b0:b2:a3:45:02:6e:f0:e6:94:60:f1:26:e8:82:73:c2:ff:1e: d4:18:53:2f:b9:22:25:65:03:66:17:aa:91:09:e3:6c:91:cd: 98:bc:c7:0d:65:8d:4c:8d:9d:00:26:12:74:18:70:4d:56:d4: 78:86:59:b2:2a:09:9d:6a:bd:3b:cf:13:b2:da:80:73:5b:fc: a7:0a:6d:d2:07:12:23:f3:23:d5:5f:85:f9:0d:2d:2c:7a:77: ca:fb:75:e9:1c:c6:28:e2:04:ed:2d:ef:a6:c2:82:be:5a:bf: d9:d7:f9:0e:36:ca:99:6e:9e:b7:93:de:c3:32:37:2f:d1:1b: 15:cf:dc:a5:b7:f6:78:ad:4e:0a:e4:b5:8f:50:53:7f:87:04: d3:61:ba:f7:85:55:42:c9:70:e0:6c:38:59:d3:ec:bd:bd:c5: cd:4a:23:32:7f:b5:22:b6:93:25:61:de:56:94:a5:be:69:20: dd:12:4d:9c:a8:11:e0:bb:54:00:c1:09:4d:34:a1:a6:34:3e: 9e:4a:37:15:2a:68:43:9e:ca:88:08:3c:50:e9:d2:db:d0:b6: 35:f2:0d:69 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt26xDXWCOqCSKydkaDml3IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NTE3NjJkZTNkM2YxOWNlZGQ0MzhiMDNjZjIzOTg2Y2U5 MTcyN2YwHhcNMjYwMTAxMDAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjc0ZDgwMGMyYzUxNjUzNDJhNzc1Y2NkMjM4Njg1MjgwNWU0MzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfFhTJ94T2/8tqq2YMBuE6JEgNlr GqZywueZsGAr4SRKqqPRcpVDmoPIjRuTN/SUY+XqI4pTa+7OZOjlLfCt5O/PlqmI vSeOLmAAmKhB10HCNvb/xwYN8GLLn929Alaht2GOmEllCVDc9dRBnwiBMq5lcXgb n3ihWtEQC1q79amz7RC2EWGRL8bTFI56f70kF9mbeHsSzYwfGud9/HEU8+yuTLQn NaMHcjl5OzKbiAuxRf/vZ9pbyMJ/3rFgQI/kimwnFG7/DgMlGhAHRdGCHnUqp9i5 u++5+7XG9a2oFj6hnXd7SPl3fscPpkgmoY0yFcxjYHt/rpTJyFH8dlX/AQIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFB902ADCxRZTQqd1zNI4aFKAXkMvMB8GA1UdIwQY MBaAFHZRdi3j0/Gc7dQ4sDzyOYbOkXJ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGxGMkxlUFQ4Wnp0MURpd1BQSTVoczZSY244LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80ZTI4MDgtZThmNC00MmE3LWE4Mjct N2FiY2U2MDBjMjE4LzEvSDNUWUFNTEZGbE5DcDNYTTBqaG9Vb0JlUXk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80ZTI4MDgtZThmNC00MmE3LWE4MjctN2FiY2U2MDBjMjE4 LzEvZGxGMkxlUFQ4Wnp0MURpd1BQSTVoczZSY244LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQCLQ8MAwQD TV9gAwQBW8KIAwQDsDoYAwQCuS/sAwQAwYptAwQAw3IMAwQAw+ZuMA0EAgACMAcD BQMqA/wAMA0GCSqGSIb3DQEBCwUAA4IBAQBxQx5YnKzQQx6YclohrRfmFPxwU1NO QnNPw0i6QLybiHcUQ46wsqNFAm7w5pRg8SbognPC/x7UGFMvuSIlZQNmF6qRCeNs kc2YvMcNZY1MjZ0AJhJ0GHBNVtR4hlmyKgmdar07zxOy2oBzW/ynCm3SBxIj8yPV X4X5DS0senfK+3XpHMYo4gTtLe+mwoK+Wr/Z1/kONsqZbp63k97DMjcv0RsVz9yl t/Z4rU4K5LWPUFN/hwTTYbr3hVVCyXDgbDhZ0+y9vcXNSiMyf7UitpMlYd5WlKW+ aSDdEk2cqBHgu1QAwQlNNKGmND6eSjcVKmhDnsqICDxQ6dLb0LY18g1p -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:41 2026 by rpki-client