This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/v2HU-O26_Ox_izyEAzWjTgSDSjA.roa File: v2HU-O26_Ox_izyEAzWjTgSDSjA.roa (raw, json) Hash identifier: oL/ObQcuILx3PCIrA6iIqY8GO/MJMz6xvPpy6djgBm8= Subject key identifier: BF:61:D4:F8:ED:BA:FC:EC:7F:8B:3C:84:03:35:A3:4E:04:83:4A:30 Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d Certificate serial: 019B7DCB2A0B0213F499138DA928B221540E Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/v2HU-O26_Ox_izyEAzWjTgSDSjA.roa Signing time: Fri 02 Jan 2026 08:20:25 +0000 ROA not before: Fri 02 Jan 2026 08:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12479 IP address blocks: 88.87.192.0/19 maxlen: 24 94.229.192.0/20 maxlen: 24 193.254.8.0/22 maxlen: 24 212.31.32.0/19 maxlen: 24 213.151.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:2a:0b:02:13:f4:99:13:8d:a9:28:b2:21:54:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d Validity Not Before: Jan 2 08:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf61d4f8edbafcec7f8b3c840335a34e04834a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8d:e0:36:bb:4c:05:41:9d:98:83:98:0f:1e: de:7c:82:6b:13:fc:60:01:7a:4a:ce:9d:2e:a8:0c: 61:b1:7e:2f:0e:1f:d6:57:7d:8e:af:b5:cd:30:3a: a9:e1:0d:e8:df:06:1c:b5:22:51:f5:ea:4c:f0:b4: 2a:ec:1e:b7:3e:bb:0d:67:8e:44:fc:14:ca:c7:9c: 28:e8:e4:ad:e8:a9:01:95:41:9f:05:bf:ff:55:90: 5e:d7:ac:94:4a:9d:70:08:5f:db:4a:ac:37:75:1e: 3d:1b:8e:59:f2:d6:18:9d:86:07:c5:9c:3e:be:71: e4:8a:bf:66:e3:e3:12:88:1d:a5:bb:e6:2f:aa:63: b6:2d:a2:51:db:33:20:fb:40:86:6f:1a:af:5c:91: cf:7e:20:e7:0d:69:84:20:49:fe:36:84:25:3a:fb: 46:8f:1c:9f:8c:c4:07:39:b4:74:33:87:80:ca:21: e9:3e:91:79:2a:29:3a:e8:f3:8c:9f:5a:98:b3:2a: 48:c9:fb:f6:cf:0e:9c:1a:59:af:ce:d4:fc:50:1f: 00:d7:8f:fb:37:49:50:f5:7c:7e:f8:ee:a9:83:d6: 71:cd:84:4f:b1:98:9f:3b:05:0a:81:3c:9a:1b:c2: 00:e4:3c:8e:0d:cb:18:5e:76:b7:15:19:6b:c5:2c: ee:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:61:D4:F8:ED:BA:FC:EC:7F:8B:3C:84:03:35:A3:4E:04:83:4A:30 X509v3 Authority Key Identifier: keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/v2HU-O26_Ox_izyEAzWjTgSDSjA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.87.192.0/19 94.229.192.0/20 193.254.8.0/22 212.31.32.0/19 213.151.96.0/19 Signature Algorithm: sha256WithRSAEncryption a4:a8:14:24:d2:c1:20:1d:a7:9a:1b:79:81:e6:12:20:08:27: 6a:f8:34:f7:ad:f8:f4:ec:f7:c7:a8:57:ca:cd:a0:fd:b2:7d: 42:b0:0e:80:bf:ac:e3:b7:f0:32:2a:e0:85:5a:8a:91:8d:46: cf:b0:4a:5b:d9:6c:b0:e6:8f:51:4a:44:ad:db:42:ba:95:3f: c4:1e:e6:8c:0f:dd:e1:70:95:aa:b1:25:37:64:18:3c:26:7d: b0:80:1c:ae:c7:6d:3a:c5:77:73:e8:c5:1a:22:c6:26:b7:da: 2a:a7:cd:c6:24:6a:97:44:7b:15:f3:eb:fb:97:cc:10:5e:12: 06:94:13:e2:08:d5:b6:9a:a3:8d:d4:5d:21:d7:18:15:a1:a2: 74:30:8f:bd:c0:32:4c:78:8d:2d:8f:8f:bc:7d:f9:79:19:9c: 69:ea:53:c9:fc:7c:5e:2a:5b:8a:f7:11:2a:33:21:b7:95:f2: a6:4b:fc:bc:35:d8:f1:09:39:a8:74:2e:72:38:3e:46:71:d6: 7a:d1:5b:ba:ef:3d:87:5a:4a:27:54:87:4d:c5:a5:af:27:cb: ff:2c:9c:f7:da:39:27:fc:67:9e:56:7c:6f:77:9a:45:84:79: 54:a0:4b:ca:29:19:56:bc:8e:94:e5:98:f5:07:46:f5:37:8a: 3c:69:cc:bc -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9yyoLAhP0mRONqSiyIVQOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODM4YmY1ZDNkZWZmYzAyZGZhMTg0ZTRmMGU4NTExNTM1 ZTUxN2QwHhcNMjYwMTAyMDgyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjYxZDRmOGVkYmFmY2VjN2Y4YjNjODQwMzM1YTM0ZTA0ODM0YTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo3gNrtMBUGdmIOYDx7efIJrE/xg AXpKzp0uqAxhsX4vDh/WV32Or7XNMDqp4Q3o3wYctSJR9epM8LQq7B63PrsNZ45E /BTKx5wo6OSt6KkBlUGfBb//VZBe16yUSp1wCF/bSqw3dR49G45Z8tYYnYYHxZw+ vnHkir9m4+MSiB2lu+YvqmO2LaJR2zMg+0CGbxqvXJHPfiDnDWmEIEn+NoQlOvtG jxyfjMQHObR0M4eAyiHpPpF5Kik66POMn1qYsypIyfv2zw6cGlmvztT8UB8A14/7 N0lQ9Xx++O6pg9ZxzYRPsZifOwUKgTyaG8IA5DyODcsYXna3FRlrxSzufQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFL9h1Pjtuvzsf4s8hAM1o04Eg0owMB8GA1UdIwQY MBaAFC6Di/XT3v/ALfoYTk8OhRFTXlF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jNDQzODktODFiNS00NTVjLTg1YWMt NGNkODAzMDgxNzFhLzEvdjJIVS1PMjZfT3hfaXp5RUF6V2pUZ1NEU2pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9jNDQzODktODFiNS00NTVjLTg1YWMtNGNkODAzMDgxNzFh LzEvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQFWFfAAwQE XuXAAwQCwf4IAwQF1B8gAwQF1ZdgMA0GCSqGSIb3DQEBCwUAA4IBAQCkqBQk0sEg HaeaG3mB5hIgCCdq+DT3rfj07PfHqFfKzaD9sn1CsA6Av6zjt/AyKuCFWoqRjUbP sEpb2Wyw5o9RSkSt20K6lT/EHuaMD93hcJWqsSU3ZBg8Jn2wgByux206xXdz6MUa IsYmt9oqp83GJGqXRHsV8+v7l8wQXhIGlBPiCNW2mqON1F0h1xgVoaJ0MI+9wDJM eI0tj4+8ffl5GZxp6lPJ/HxeKluK9xEqMyG3lfKmS/y8NdjxCTmodC5yOD5GcdZ6 0Vu67z2HWkonVIdNxaWvJ8v/LJz32jkn/GeeVnxvd5pFhHlUoEvKKRlWvI6U5Zj1 B0b1N4o8acy8 -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:29 2026 by rpki-client