This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/h1sOmmPQkR6wMsW--farvI-0lFo.roa File: h1sOmmPQkR6wMsW--farvI-0lFo.roa (raw, json) Hash identifier: UHLVBJzaHqPHhbxniF5TdY0Xhri2ZiYP3ztIQwklXQk= Subject key identifier: 87:5B:0E:9A:63:D0:91:1E:B0:32:C5:BE:F9:F6:AB:BC:8F:B4:94:5A Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAC12B4A5BBCD4A048311957E94ADA Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/h1sOmmPQkR6wMsW--farvI-0lFo.roa Signing time: Thu 01 Jan 2026 00:17:34 +0000 ROA not before: Thu 01 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58110 IP address blocks: 45.88.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c1:2b:4a:5b:bc:d4:a0:48:31:19:57:e9:4a:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=875b0e9a63d0911eb032c5bef9f6abbc8fb4945a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:df:20:02:0b:1d:a1:a5:37:49:f4:8f:6f: 94:4f:1d:5e:73:4c:cd:5c:b1:c9:04:bb:76:55:18: b6:bb:6c:c2:11:48:08:3c:0b:6d:8c:94:84:98:09: 38:2c:64:e9:be:a9:58:3c:a7:de:d2:84:c6:79:b2: 88:2b:89:07:84:d3:71:2e:37:8c:9b:2a:b9:cf:9a: f3:ee:ca:10:6b:04:2f:20:d8:12:22:52:8f:c1:7d: b0:c8:6c:24:d5:52:1d:f3:44:42:38:f1:07:32:50: 0b:ea:44:07:1a:9d:f0:29:d9:76:a9:b4:1b:6a:9d: 16:94:4c:4e:b9:c4:31:2b:9a:4f:e3:14:39:8b:c9: 04:50:ae:2e:03:84:5a:4d:3c:04:02:58:cb:b2:14: d4:34:c5:5d:78:18:6e:17:4d:6c:d3:e7:9a:20:ec: 8c:6b:ac:47:de:3d:b3:e3:51:bb:42:2f:0f:a6:a4: db:aa:66:55:b8:12:92:69:af:ac:85:fb:d0:a1:7f: 12:cc:d8:62:1e:c6:92:ae:bc:5f:22:6f:c4:82:62: a2:43:09:4d:90:ce:44:8c:e3:4e:02:a4:7a:98:dd: 52:ac:d1:69:75:5a:d3:6f:44:a7:f2:fa:07:30:2e: e1:9b:c0:bc:b8:6a:19:6e:5c:78:2d:4d:77:54:6a: f9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5B:0E:9A:63:D0:91:1E:B0:32:C5:BE:F9:F6:AB:BC:8F:B4:94:5A X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/h1sOmmPQkR6wMsW--farvI-0lFo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.169.0/24 Signature Algorithm: sha256WithRSAEncryption 47:b2:6c:94:74:39:30:b0:30:32:33:a8:a7:46:07:5d:62:70: dc:b0:60:4a:a0:c7:df:af:2e:cc:e6:8a:c7:63:14:08:b6:8a: 34:92:f2:b6:e5:c6:fb:5f:57:f3:6f:88:5e:51:be:31:82:f0: cd:60:a4:f3:be:6f:47:bf:30:d4:f7:82:37:de:7d:d4:47:c0: 5c:80:6a:8a:ea:e3:44:55:66:87:2a:d8:49:48:f7:a2:7d:06: dc:0d:a6:e2:fb:5f:e2:b8:a3:24:ac:19:1a:ac:4e:0a:09:da: 6a:07:c6:b9:80:04:63:7b:05:68:73:3b:26:34:ef:e9:58:26: 9a:df:58:7a:8f:62:32:c8:72:03:51:94:b4:4c:8b:a8:71:6d: 8d:98:8c:ba:07:99:c4:01:d6:c8:b2:a3:3c:1a:1e:ba:61:70: 94:d0:0f:e4:71:a3:b9:35:be:cf:f7:bb:3b:71:58:ec:ee:e5: c0:85:42:d3:c7:1a:dc:eb:44:74:51:bf:77:9c:19:37:4f:70: 99:c3:e4:22:25:99:ff:1a:20:ef:d0:74:29:5f:10:5b:37:bc: 9d:b7:dc:4f:6a:41:41:8e:de:42:e1:70:e4:9c:34:bc:fd:69: e1:d3:3d:5b:5f:53:3e:ac:0a:2b:98:c0:35:0a:65:13:a6:44: 27:36:90:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26sErSlu81KBIMRlX6UraMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzViMGU5YTYzZDA5MTFlYjAzMmM1YmVmOWY2YWJiYzhmYjQ5NDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYnfIAILHaGlN0n0j2+UTx1ec0zN XLHJBLt2VRi2u2zCEUgIPAttjJSEmAk4LGTpvqlYPKfe0oTGebKIK4kHhNNxLjeM myq5z5rz7soQawQvINgSIlKPwX2wyGwk1VId80RCOPEHMlAL6kQHGp3wKdl2qbQb ap0WlExOucQxK5pP4xQ5i8kEUK4uA4RaTTwEAljLshTUNMVdeBhuF01s0+eaIOyM a6xH3j2z41G7Qi8PpqTbqmZVuBKSaa+shfvQoX8SzNhiHsaSrrxfIm/EgmKiQwlN kM5EjONOAqR6mN1SrNFpdVrTb0Sn8voHMC7hm8C8uGoZblx4LU13VGr5GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIdbDppj0JEesDLFvvn2q7yPtJRaMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvaDFzT21tUFFrUjZ3TXNXLS1mYXJ2SS0wbEZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVipMA0G CSqGSIb3DQEBCwUAA4IBAQBHsmyUdDkwsDAyM6inRgddYnDcsGBKoMffry7M5orH YxQItoo0kvK25cb7X1fzb4heUb4xgvDNYKTzvm9HvzDU94I33n3UR8BcgGqK6uNE VWaHKthJSPeifQbcDabi+1/iuKMkrBkarE4KCdpqB8a5gARjewVoczsmNO/pWCaa 31h6j2IyyHIDUZS0TIuocW2NmIy6B5nEAdbIsqM8Gh66YXCU0A/kcaO5Nb7P97s7 cVjs7uXAhULTxxrc60R0Ub93nBk3T3CZw+QiJZn/GiDv0HQpXxBbN7ydt9xPakFB jt5C4XDknDS8/Wnh0z1bX1M+rAormMA1CmUTpkQnNpDE -----END CERTIFICATE-----Generated at Sun Jan 25 08:49:09 2026 by rpki-client