This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/H0_IomRRpyz9ZuX5Gk79E728dxM.roa File: H0_IomRRpyz9ZuX5Gk79E728dxM.roa (raw, json) Hash identifier: e7ZDp/bE6peOT9CEy08QjhlQAfh2fOeWM0+4hMAUyDw= Subject key identifier: 1F:4F:C8:A2:64:51:A7:2C:FD:66:E5:F9:1A:4E:FD:13:BD:BC:77:13 Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58 Certificate serial: 019B7E3843B0A2D253ACD21EF768EA089F86 Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/H0_IomRRpyz9ZuX5Gk79E728dxM.roa Signing time: Fri 02 Jan 2026 10:19:35 +0000 ROA not before: Fri 02 Jan 2026 10:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206746 IP address blocks: 185.176.100.0/24 maxlen: 24 185.176.101.0/24 maxlen: 24 185.176.102.0/24 maxlen: 24 185.176.103.0/24 maxlen: 24 2a0a:1180::/32 maxlen: 32 2a0a:1181::/32 maxlen: 32 2a0a:1182::/32 maxlen: 32 2a0a:1183::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:43:b0:a2:d2:53:ac:d2:1e:f7:68:ea:08:9f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58 Validity Not Before: Jan 2 10:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f4fc8a26451a72cfd66e5f91a4efd13bdbc7713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8f:9f:4b:21:6d:72:bf:08:ce:da:31:8c:27: 5c:ec:40:16:66:38:2a:21:8c:9d:bc:cf:88:51:24: 78:73:1b:7f:97:c1:97:c1:a6:ca:a0:63:06:8e:51: 6d:4b:dd:97:d4:fb:05:bf:ef:37:8b:83:87:66:f1: 7c:c2:36:c4:11:56:9d:d8:75:ac:42:92:76:ad:96: df:83:2d:74:e8:e1:10:52:07:16:56:2a:49:aa:d3: 40:4d:3f:79:f8:23:33:0e:e6:ba:53:3d:f5:1e:85: ab:95:0f:5c:a2:d0:86:03:5e:4e:2e:80:48:ca:ef: 24:b5:47:73:2a:7a:44:c4:68:90:d4:d4:3c:ef:81: f8:8f:98:ce:d6:bc:a3:02:2b:fb:e3:d0:40:ed:a7: 2d:99:dd:50:33:7d:90:17:5c:37:15:8b:c2:5d:aa: 7a:8d:34:93:0b:71:18:ff:42:75:32:37:ba:3d:60: e2:96:5a:1f:4c:32:9a:49:af:40:31:a6:7a:ac:66: 28:da:e6:61:cd:0d:81:97:22:eb:86:17:fe:32:0a: 9c:01:e0:39:80:bf:8c:92:34:36:fc:b6:67:61:26: a1:d8:fc:a1:12:16:42:bf:9a:41:e9:3c:1d:91:a5: 30:51:d9:ab:1f:5c:72:fa:14:17:5d:5b:0e:34:78: 86:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4F:C8:A2:64:51:A7:2C:FD:66:E5:F9:1A:4E:FD:13:BD:BC:77:13 X509v3 Authority Key Identifier: keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/H0_IomRRpyz9ZuX5Gk79E728dxM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.176.100.0/22 IPv6: 2a0a:1180::/30 Signature Algorithm: sha256WithRSAEncryption 8c:98:cd:27:d8:90:03:7f:3c:96:57:64:39:cd:54:24:b0:1e: c7:92:05:4e:65:23:b9:58:c4:8a:7b:90:bc:fb:d7:ea:03:f4: 07:2e:be:45:6a:fe:c3:1b:a4:2b:9a:49:8b:72:d4:71:8d:b1: b2:8d:87:eb:f0:4c:4c:c8:51:22:70:30:c3:1f:1c:8e:22:7a: 6b:31:a8:b4:75:ae:57:57:ee:29:4c:8e:04:7b:33:d1:50:ce: 08:38:80:da:2b:eb:e9:12:32:8b:4d:0f:2a:74:39:01:0a:aa: 0a:36:8a:57:1e:90:ec:95:fa:b6:10:3c:0b:1a:4c:12:7c:97: 1e:ee:bd:a2:54:02:9b:7b:0c:fc:f1:00:a5:30:45:cb:e9:b8: 55:40:d9:48:c6:8e:e6:62:1a:16:86:bc:cc:c5:02:9f:60:57: 4c:6f:7e:56:7c:c1:69:ad:eb:f8:32:2c:25:f7:46:de:1a:b2: 58:88:9f:8e:2d:75:2e:96:56:c2:4c:84:19:2c:a8:49:ea:de: 54:97:f4:fb:3c:12:7e:95:a1:3e:08:ca:cb:f1:0b:ab:1d:0d: 18:5d:51:c4:83:1f:92:21:4e:3b:0c:5e:d0:22:a4:ae:96:b8: 12:9b:9f:a8:40:34:2c:56:ff:e5:1f:64:a5:08:40:87:99:9f: 31:bf:2e:3b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OEOwotJTrNIe92jqCJ+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMDFlYTA1OTYzYzk3NTZmMjhlZTJlOThiOGYzY2M0Nzlk YzlmNTgwHhcNMjYwMTAyMTAxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjRmYzhhMjY0NTFhNzJjZmQ2NmU1ZjkxYTRlZmQxM2JkYmM3NzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY+fSyFtcr8IztoxjCdc7EAWZjgq IYydvM+IUSR4cxt/l8GXwabKoGMGjlFtS92X1PsFv+83i4OHZvF8wjbEEVad2HWs QpJ2rZbfgy106OEQUgcWVipJqtNATT95+CMzDua6Uz31HoWrlQ9cotCGA15OLoBI yu8ktUdzKnpExGiQ1NQ874H4j5jO1ryjAiv749BA7actmd1QM32QF1w3FYvCXap6 jTSTC3EY/0J1Mje6PWDillofTDKaSa9AMaZ6rGYo2uZhzQ2BlyLrhhf+MgqcAeA5 gL+MkjQ2/LZnYSah2PyhEhZCv5pB6TwdkaUwUdmrH1xy+hQXXVsONHiGPQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFB9PyKJkUacs/Wbl+RpO/RO9vHcTMB8GA1UdIwQY MBaAFJMB6gWWPJdW8o7i6YuPPMR53J9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUt OGYwOGUwMjcyZGY4LzEvSDBfSW9tUlJweXo5WnVYNUdrNzlFNzI4ZHhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUtOGYwOGUwMjcyZGY4 LzEva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubBkMA0E AgACMAcDBQIqChGAMA0GCSqGSIb3DQEBCwUAA4IBAQCMmM0n2JADfzyWV2Q5zVQk sB7HkgVOZSO5WMSKe5C8+9fqA/QHLr5Fav7DG6QrmkmLctRxjbGyjYfr8ExMyFEi cDDDHxyOInprMai0da5XV+4pTI4EezPRUM4IOIDaK+vpEjKLTQ8qdDkBCqoKNopX HpDslfq2EDwLGkwSfJce7r2iVAKbewz88QClMEXL6bhVQNlIxo7mYhoWhrzMxQKf YFdMb35WfMFprev4Miwl90beGrJYiJ+OLXUullbCTIQZLKhJ6t5Ul/T7PBJ+laE+ CMrL8QurHQ0YXVHEgx+SIU47DF7QIqSulrgSm5+oQDQsVv/lH2SlCECHmZ8xvy47 -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:10 2026 by rpki-client