This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/HR52VHb2xwQIwQ8nYo_MUxwRCms.roa File: HR52VHb2xwQIwQ8nYo_MUxwRCms.roa (raw, json) Hash identifier: TbFaT/PpzXVRAiKnbKd45KfqI8+dX+V6Uzbwpos22ak= Subject key identifier: 1D:1E:76:54:76:F6:C7:04:08:C1:0F:27:62:8F:CC:53:1C:11:0A:6B Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e Certificate serial: 019B7BA31C300614F6062698FB76107BB71B Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/HR52VHb2xwQIwQ8nYo_MUxwRCms.roa Signing time: Thu 01 Jan 2026 22:17:25 +0000 ROA not before: Thu 01 Jan 2026 22:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59703 IP address blocks: 94.139.180.0/24 maxlen: 24 94.139.181.0/24 maxlen: 24 94.139.182.0/23 maxlen: 23 94.139.182.0/24 maxlen: 24 94.139.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:1c:30:06:14:f6:06:26:98:fb:76:10:7b:b7:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e Validity Not Before: Jan 1 22:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d1e765476f6c70408c10f27628fcc531c110a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6c:39:7d:46:d0:dd:88:27:34:93:40:0e:dd: 8c:87:bf:89:e7:18:09:60:a4:90:89:4f:95:cb:9d: 31:f4:1b:ef:d9:1e:1e:6e:09:aa:29:26:89:b9:8b: 4f:ca:9e:1a:fc:3b:4d:a7:7d:10:78:e7:d4:7c:d4: aa:6a:88:07:41:e4:fc:6c:66:7c:9a:94:42:b2:f8: 3a:fc:9f:21:a7:e0:bd:93:54:e0:6f:e2:42:c7:8a: 74:69:26:63:67:3f:83:dc:cd:a0:31:39:46:1a:50: 03:31:18:dd:a9:d1:f9:6d:3b:73:87:f2:0a:8c:05: aa:bc:79:a3:1c:a0:26:0a:d4:b4:d2:20:b8:42:ea: 40:23:1d:5e:5b:73:0d:12:e2:27:4d:f1:e1:ee:d1: 34:8a:51:e4:50:bb:8b:ea:d6:c7:35:96:ca:f2:6b: aa:3b:85:66:7a:99:ca:25:a8:7d:47:a6:9d:6e:56: 25:bf:60:95:88:02:95:82:6a:d0:ac:ac:97:be:12: b3:43:f6:8e:10:12:ae:35:be:83:1d:36:c6:95:d3: 6c:3e:23:86:5a:4f:d7:41:56:41:39:be:03:d9:1b: 9a:bf:e0:da:fd:79:0b:61:2e:d9:1b:8f:d1:e6:ac: d8:16:96:84:31:a3:bc:71:55:fd:56:47:ce:76:35: 61:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1E:76:54:76:F6:C7:04:08:C1:0F:27:62:8F:CC:53:1C:11:0A:6B X509v3 Authority Key Identifier: keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/HR52VHb2xwQIwQ8nYo_MUxwRCms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.139.180.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:75:39:ca:95:3a:64:ac:1c:dc:ba:cd:5a:54:66:05:02:bc: 98:2e:ad:a6:70:38:04:77:24:2e:31:da:ae:be:34:a3:36:5b: 6f:07:52:bc:53:24:04:41:5b:bf:0b:dd:f1:9d:f5:0c:a9:ce: ab:85:c0:fc:31:2f:e2:a4:d5:bb:e1:78:be:72:10:d2:13:41: 24:89:89:58:c2:b6:79:c7:63:88:b1:0a:6e:c6:6d:c6:c3:a0: 2f:4a:f5:73:39:ae:5c:93:c5:16:6b:68:0f:97:d8:bc:e5:51: a0:83:a6:d5:78:b6:f4:06:95:d9:0d:57:c4:f6:28:5b:00:2e: b0:52:2e:f7:1d:ae:22:a8:63:3d:de:8a:de:0c:cc:66:43:82: 15:b1:bf:f6:05:c1:f3:39:be:c2:36:43:82:d0:42:e0:19:1d: 5a:a7:3a:35:a0:b5:60:72:ca:9f:91:e1:29:2f:c4:f6:84:88: 0a:4b:99:ed:bf:9e:15:be:87:50:e6:a6:78:e9:b8:99:8b:0b: 30:bf:19:10:93:ad:45:6c:dd:9d:82:70:87:41:2f:3a:de:e5: 14:f1:5d:5f:d8:49:f0:bc:b3:f3:b3:b2:c8:9f:79:c4:5d:b2: d4:a6:9e:da:2d:14:90:b6:8a:ea:30:94:43:ca:b0:ba:60:d3: fa:6f:2f:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7oxwwBhT2BiaY+3YQe7cbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0 NzdmN2UwHhcNMjYwMTAxMjIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDFlNzY1NDc2ZjZjNzA0MDhjMTBmMjc2MjhmY2M1MzFjMTEwYTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWw5fUbQ3YgnNJNADt2Mh7+J5xgJ YKSQiU+Vy50x9Bvv2R4ebgmqKSaJuYtPyp4a/DtNp30QeOfUfNSqaogHQeT8bGZ8 mpRCsvg6/J8hp+C9k1Tgb+JCx4p0aSZjZz+D3M2gMTlGGlADMRjdqdH5bTtzh/IK jAWqvHmjHKAmCtS00iC4QupAIx1eW3MNEuInTfHh7tE0ilHkULuL6tbHNZbK8muq O4VmepnKJah9R6adblYlv2CViAKVgmrQrKyXvhKzQ/aOEBKuNb6DHTbGldNsPiOG Wk/XQVZBOb4D2Ruav+Da/XkLYS7ZG4/R5qzYFpaEMaO8cVX9VkfOdjVhqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB0edlR29scECMEPJ2KPzFMcEQprMB8GA1UdIwQY MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt OGVhYjdmNGZlNzdlLzEvSFI1MlZIYjJ4d1FJd1E4bllvX01VeHdSQ21zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXou0MA0G CSqGSIb3DQEBCwUAA4IBAQBvdTnKlTpkrBzcus1aVGYFAryYLq2mcDgEdyQuMdqu vjSjNltvB1K8UyQEQVu/C93xnfUMqc6rhcD8MS/ipNW74Xi+chDSE0EkiYlYwrZ5 x2OIsQpuxm3Gw6AvSvVzOa5ck8UWa2gPl9i85VGgg6bVeLb0BpXZDVfE9ihbAC6w Ui73Ha4iqGM93oreDMxmQ4IVsb/2BcHzOb7CNkOC0ELgGR1apzo1oLVgcsqfkeEp L8T2hIgKS5ntv54VvodQ5qZ46biZiwswvxkQk61FbN2dgnCHQS863uUU8V1f2Enw vLPzs7LIn3nEXbLUpp7aLRSQtorqMJRDyrC6YNP6by/8 -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:09 2026 by rpki-client