This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/hG50_KBTn4tGtAzXKWeSLj2I7Cs.roa File: hG50_KBTn4tGtAzXKWeSLj2I7Cs.roa (raw, json) Hash identifier: ZlLOq+DjqTuGB51pOYnT+Z+XgppTM9A1E+GQwxqU1iE= Subject key identifier: 84:6E:74:FC:A0:53:9F:8B:46:B4:0C:D7:29:67:92:2E:3D:88:EC:2B Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019BE6658360CE2876F8CC8932A1E540D294 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/hG50_KBTn4tGtAzXKWeSLj2I7Cs.roa Signing time: Thu 22 Jan 2026 15:49:30 +0000 ROA not before: Thu 22 Jan 2026 15:49:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205886 IP address blocks: 217.147.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e6:65:83:60:ce:28:76:f8:cc:89:32:a1:e5:40:d2:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Jan 22 15:49:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=846e74fca0539f8b46b40cd72967922e3d88ec2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:ef:73:fa:16:23:88:b4:f8:1a:87:b7:ff: f0:04:cd:fc:a2:3d:77:a4:58:4e:6a:db:d1:b0:3d: 61:f9:cf:27:49:10:71:59:21:c5:18:16:48:e7:73: 72:e1:8a:96:81:37:73:d5:a7:74:7f:22:7b:03:46: 04:f2:ad:a4:03:e7:09:c6:4a:da:2f:0e:1f:ad:87: 89:3b:15:f3:02:8a:72:1b:0f:0c:14:3f:03:c7:59: a9:cf:00:54:66:45:d6:97:d5:23:5c:55:85:da:65: 74:2b:3e:3a:ad:3e:6b:d2:14:02:e3:fc:6f:02:f3: 57:0e:c8:38:09:38:d2:97:ca:11:0b:9c:b1:7c:28: 47:28:23:f8:93:0d:df:83:ad:12:6c:7c:da:4a:ed: 86:c4:6c:b7:6c:47:b4:7e:d0:c5:3f:f1:28:a0:c6: 90:9d:1a:fb:de:a7:bd:7c:ac:93:5b:ec:60:54:2b: 51:2a:b3:c6:0d:7a:8a:93:41:8a:36:83:6a:01:5d: ac:df:83:c5:65:9e:72:83:b9:bb:e8:d8:b5:5e:6a: ca:4d:1c:97:9f:e5:a4:7e:d4:d6:3d:8b:cf:20:ad: 86:19:53:dc:9e:eb:3e:01:6d:7f:f1:3f:85:37:37: c6:2d:b6:e1:28:fb:32:58:da:b8:a3:78:9c:95:89: aa:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6E:74:FC:A0:53:9F:8B:46:B4:0C:D7:29:67:92:2E:3D:88:EC:2B X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/hG50_KBTn4tGtAzXKWeSLj2I7Cs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.147.167.0/24 Signature Algorithm: sha256WithRSAEncryption d3:31:f8:cd:24:8b:e6:2a:6c:38:3a:77:ca:a5:35:4f:e7:1a: 86:1f:e3:96:e3:b0:85:25:45:a9:a8:36:7a:86:24:95:de:14: 66:14:97:b4:c4:7e:4c:f6:ef:c0:b6:c7:a9:80:a5:a1:bb:02: 11:81:86:de:7d:99:77:fc:3c:f0:b3:3d:4a:a3:cc:e8:60:66: 34:74:f2:0f:ba:9f:ae:d4:95:49:30:ef:ae:ec:75:36:8a:88: ca:ba:a7:5d:0b:17:3d:99:11:8a:b9:cb:68:24:04:60:92:b8: 45:c1:3e:bd:55:d4:24:d5:29:c0:93:d0:e6:bb:0d:39:7f:5c: 19:1b:72:af:29:b6:b3:c7:b9:eb:bc:80:db:36:92:44:3b:52: 61:b4:6a:2e:17:8d:f6:25:8d:42:ba:69:c5:65:6d:55:96:ac: e2:ff:57:f9:78:e7:15:7a:90:e8:31:cb:a2:69:19:dc:16:94: de:79:77:49:28:d4:fb:e0:d2:ce:a3:bf:6a:8b:2f:ee:02:59: e7:84:cd:dc:fc:ce:6e:b0:3c:91:22:a3:a6:09:f4:c4:5c:46: 85:6e:fa:aa:8f:e5:da:de:b0:4b:1b:0b:26:57:c1:c2:12:f7: 4c:66:d1:bc:6a:a3:5a:34:fa:57:9b:0c:d1:22:48:94:29:f1: 14:21:02:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvmZYNgzih2+MyJMqHlQNKUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjYwMTIyMTU0OTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDZlNzRmY2EwNTM5ZjhiNDZiNDBjZDcyOTY3OTIyZTNkODhlYzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9zvc/oWI4i0+BqHt//wBM38oj13 pFhOatvRsD1h+c8nSRBxWSHFGBZI53Ny4YqWgTdz1ad0fyJ7A0YE8q2kA+cJxkra Lw4frYeJOxXzAopyGw8MFD8Dx1mpzwBUZkXWl9UjXFWF2mV0Kz46rT5r0hQC4/xv AvNXDsg4CTjSl8oRC5yxfChHKCP4kw3fg60SbHzaSu2GxGy3bEe0ftDFP/EooMaQ nRr73qe9fKyTW+xgVCtRKrPGDXqKk0GKNoNqAV2s34PFZZ5yg7m76Ni1XmrKTRyX n+WkftTWPYvPIK2GGVPcnus+AW1/8T+FNzfGLbbhKPsyWNq4o3iclYmq7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIRudPygU5+LRrQM1ylnki49iOwrMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvaEc1MF9LQlRuNHRHdEF6WEtXZVNMajJJN0NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZOnMA0G CSqGSIb3DQEBCwUAA4IBAQDTMfjNJIvmKmw4OnfKpTVP5xqGH+OW47CFJUWpqDZ6 hiSV3hRmFJe0xH5M9u/AtsepgKWhuwIRgYbefZl3/Dzwsz1Ko8zoYGY0dPIPup+u 1JVJMO+u7HU2iojKuqddCxc9mRGKuctoJARgkrhFwT69VdQk1SnAk9Dmuw05f1wZ G3KvKbazx7nrvIDbNpJEO1JhtGouF432JY1CumnFZW1Vlqzi/1f5eOcVepDoMcui aRncFpTeeXdJKNT74NLOo79qiy/uAlnnhM3c/M5usDyRIqOmCfTEXEaFbvqqj+Xa 3rBLGwsmV8HCEvdMZtG8aqNaNPpXmwzRIkiUKfEUIQLC -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:10 2026 by rpki-client