This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/H6jlQnwQ3aiH-RYU25LA_SCJ8YQ.roa File: H6jlQnwQ3aiH-RYU25LA_SCJ8YQ.roa (raw, json) Hash identifier: z0WYajZ68GEteUnmX5OmcBfJ0ynCGdGVIvLSKmVhonU= Subject key identifier: 1F:A8:E5:42:7C:10:DD:A8:87:F9:16:14:DB:92:C0:FD:20:89:F1:84 Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8 Certificate serial: 019B797E098CF3DD38C88533C1AA3F824AC0 Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/H6jlQnwQ3aiH-RYU25LA_SCJ8YQ.roa Signing time: Thu 01 Jan 2026 12:17:41 +0000 ROA not before: Thu 01 Jan 2026 12:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31712 IP address blocks: 195.153.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:09:8c:f3:dd:38:c8:85:33:c1:aa:3f:82:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8 Validity Not Before: Jan 1 12:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fa8e5427c10dda887f91614db92c0fd2089f184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8a:de:a4:a2:4f:5c:43:1f:55:76:aa:0d:9c: 71:31:d5:b4:5a:6d:17:56:41:37:6e:a9:7c:56:a1: 96:b0:65:c1:ac:15:e4:14:68:e2:dd:59:a9:d5:c1: 0a:a9:34:7b:ed:a6:a7:56:ee:69:6b:e7:d5:d2:50: aa:6e:e7:24:48:c7:a2:58:c2:04:9b:12:ce:86:70: b1:b2:95:42:ca:1c:b3:1d:11:fa:7f:e3:be:a3:68: c6:38:7d:b8:00:93:25:ad:ec:2c:db:05:10:c4:4a: 53:65:53:10:cb:be:be:7e:a5:23:22:1b:fd:2f:5b: d8:e3:05:f7:5d:12:be:bd:4c:c4:af:a1:b7:b8:b9: f6:b1:3a:fd:02:0f:68:bc:c6:51:a0:4b:f1:d8:ac: 2b:d3:41:33:19:28:2a:fb:5c:cb:f7:14:aa:52:bd: 87:3a:e1:d6:dc:cd:e4:84:74:e6:3c:ac:d8:3e:80: b7:0e:47:69:dc:5d:e0:3a:e5:97:83:5c:35:b8:4e: a7:df:9f:f2:a6:42:48:dd:fb:f3:5a:42:23:4a:c4: b1:09:07:e9:2d:31:c7:4d:f8:31:4c:77:76:01:f9: cb:2e:c1:95:59:3a:8b:6b:bd:48:03:89:a5:ad:ba: ba:7e:a8:82:a0:c1:92:db:76:bf:15:37:70:34:7f: a9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A8:E5:42:7C:10:DD:A8:87:F9:16:14:DB:92:C0:FD:20:89:F1:84 X509v3 Authority Key Identifier: keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/H6jlQnwQ3aiH-RYU25LA_SCJ8YQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.153.19.0/24 Signature Algorithm: sha256WithRSAEncryption 51:34:d4:77:96:d6:a7:c1:6d:aa:0b:c8:f6:25:5f:52:8b:9a: 63:c1:08:83:c9:32:a2:2c:f2:bd:b2:d3:55:98:f5:70:39:db: 2f:3c:fb:3f:89:9f:92:5f:10:6b:98:3f:d1:a3:09:1c:1e:72: e5:2b:10:2a:bf:6e:39:d2:05:48:f7:fc:11:b1:bd:6a:62:c3: 76:31:38:34:59:09:53:aa:e2:cd:b2:d0:20:c1:f9:f1:ec:62: 56:db:44:28:c8:4b:66:a7:b8:86:f9:65:b6:cc:fa:42:6a:08: ba:59:24:a6:45:30:f8:72:29:1d:66:66:50:2e:27:e1:0f:0a: 61:24:93:73:c5:ee:12:d1:f5:fa:a8:2e:d4:aa:a6:5c:db:bc: b5:fe:3b:8d:a9:c8:2b:06:c0:82:58:5a:48:ba:a8:d4:b1:ae: bf:2f:a5:3f:79:33:ab:c2:8a:52:55:56:46:ee:12:96:26:81: 5a:5d:e3:fe:34:19:24:d4:4b:64:45:9c:57:4e:37:f0:94:6b: ac:03:18:72:4b:6e:1c:69:61:6c:a9:1f:d3:23:f2:17:c6:40: be:49:ea:70:e5:13:ba:3b:b5:0f:15:2d:b5:3a:8d:45:88:ad: fd:f8:d7:2b:13:d8:e2:63:32:b0:3c:bc:c9:4d:d4:f8:a0:18: 43:b7:2d:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fgmM8904yIUzwao/gkrAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1M2Y1NTYyOTEyMWI2MGZiMTljOTdmOTljNzVkZDZmMDE1 ZGQ2ZTgwHhcNMjYwMTAxMTIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmE4ZTU0MjdjMTBkZGE4ODdmOTE2MTRkYjkyYzBmZDIwODlmMTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkorepKJPXEMfVXaqDZxxMdW0Wm0X VkE3bql8VqGWsGXBrBXkFGji3Vmp1cEKqTR77aanVu5pa+fV0lCqbuckSMeiWMIE mxLOhnCxspVCyhyzHRH6f+O+o2jGOH24AJMlrews2wUQxEpTZVMQy76+fqUjIhv9 L1vY4wX3XRK+vUzEr6G3uLn2sTr9Ag9ovMZRoEvx2Kwr00EzGSgq+1zL9xSqUr2H OuHW3M3khHTmPKzYPoC3Dkdp3F3gOuWXg1w1uE6n35/ypkJI3fvzWkIjSsSxCQfp LTHHTfgxTHd2AfnLLsGVWTqLa71IA4mlrbq6fqiCoMGS23a/FTdwNH+p0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB+o5UJ8EN2oh/kWFNuSwP0gifGEMB8GA1UdIwQY MBaAFGU/VWKRIbYPsZyX+Zx13W8BXdboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NGNmM2ItOWY1Yy00ZjVlLTk2YzQt MjkyNmQyODFiNTE0LzEvSDZqbFFud1EzYWlILVJZVTI1TEFfU0NKOFlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NGNmM2ItOWY1Yy00ZjVlLTk2YzQtMjkyNmQyODFiNTE0 LzEvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5kTMA0G CSqGSIb3DQEBCwUAA4IBAQBRNNR3ltanwW2qC8j2JV9Si5pjwQiDyTKiLPK9stNV mPVwOdsvPPs/iZ+SXxBrmD/RowkcHnLlKxAqv2450gVI9/wRsb1qYsN2MTg0WQlT quLNstAgwfnx7GJW20QoyEtmp7iG+WW2zPpCagi6WSSmRTD4cikdZmZQLifhDwph JJNzxe4S0fX6qC7UqqZc27y1/juNqcgrBsCCWFpIuqjUsa6/L6U/eTOrwopSVVZG 7hKWJoFaXeP+NBkk1EtkRZxXTjfwlGusAxhyS24caWFsqR/TI/IXxkC+Sepw5RO6 O7UPFS21Oo1FiK39+NcrE9jiYzKwPLzJTdT4oBhDty3d -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:22 2026 by rpki-client