This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/H-cc_01X7HCeNBp36vW5EI8KQ1w.roa File: H-cc_01X7HCeNBp36vW5EI8KQ1w.roa (raw, json) Hash identifier: mxEHsfiCLi07ELQcE7gKcIOzH/MPPao30nURDU7XoEs= Subject key identifier: 1F:E7:1C:FF:4D:57:EC:70:9E:34:1A:77:EA:F5:B9:10:8F:0A:43:5C Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019B797F30274519D4E9579985EC77A700BD Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/H-cc_01X7HCeNBp36vW5EI8KQ1w.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3163 IP address blocks: 81.88.21.0/24 maxlen: 24 93.90.183.0/24 maxlen: 24 178.250.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:30:27:45:19:d4:e9:57:99:85:ec:77:a7:00:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fe71cff4d57ec709e341a77eaf5b9108f0a435c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a0:2b:c6:75:d6:4f:c2:b2:8a:55:68:a2:c7: 15:f4:41:24:09:f3:0d:29:b7:46:a5:f2:10:78:46: ca:11:e8:8d:24:5c:14:e4:9e:0a:aa:91:d3:08:e6: 0a:30:0a:71:d7:55:fe:24:10:c7:e6:62:a4:a2:1d: 70:82:96:aa:01:7c:38:ba:7b:e8:b5:f8:8b:44:e8: d2:d6:4b:94:0d:f4:db:68:5b:6e:5d:8e:1b:5f:d2: 5e:84:30:ed:82:2f:e8:63:cc:dc:73:86:5a:ab:be: 67:54:13:fa:fe:5d:9b:e8:0e:96:cb:ec:cf:08:c1: e1:b0:8a:18:17:8a:3d:4b:c4:ab:97:4c:05:16:fb: 71:0a:95:79:04:9a:85:62:93:85:bb:df:09:ab:77: b2:7a:f8:1f:dc:66:20:17:19:1a:b9:b7:ec:78:0c: 46:ff:8e:f7:a9:26:0d:15:f9:9b:0a:89:39:85:af: 14:18:00:49:16:02:23:b0:6c:d0:00:c1:4e:e5:85: e7:06:f6:c2:d6:5d:81:2b:42:f3:62:4b:30:67:ce: b7:c8:9e:55:ae:c0:21:e5:1c:de:64:d1:57:66:5b: 43:3f:97:a4:0a:90:09:6e:55:70:3a:75:a9:93:2a: b5:de:5b:f1:c7:43:ab:54:bb:6b:e0:c6:4c:bf:03: 85:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E7:1C:FF:4D:57:EC:70:9E:34:1A:77:EA:F5:B9:10:8F:0A:43:5C X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/H-cc_01X7HCeNBp36vW5EI8KQ1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.88.21.0/24 93.90.183.0/24 178.250.169.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:ef:12:f9:35:9c:23:f4:8c:f8:5d:93:0f:0f:a2:2f:0c:92: ec:74:55:5f:c5:c4:d9:b8:be:ed:e7:ae:0d:a4:e5:e1:db:c6: f7:2e:ec:42:70:74:21:61:83:08:88:24:f9:d8:f9:9c:91:2f: 79:28:85:0a:f0:09:18:e9:7c:65:2c:e3:68:97:1a:9c:ea:41: b3:dc:bf:55:39:62:34:d0:94:dd:62:c8:7f:1b:db:7c:67:22: d7:f1:3a:29:04:74:65:f7:a0:50:32:a2:15:0a:39:ad:df:f1: 30:fa:46:20:b6:41:f7:3b:8a:bf:96:de:cc:ce:57:a0:83:4a: 9b:39:d7:52:cc:bb:1d:11:55:47:db:e7:bf:00:39:ba:d1:9d: 9b:02:f5:d7:ad:a9:85:c4:96:d0:ed:6e:14:ef:2e:ad:68:86: 18:26:dd:e8:9a:9b:63:20:12:aa:0f:c7:b6:4d:88:7f:18:e8: 0d:49:19:fb:be:bd:4f:fd:c2:e1:a8:35:ce:c1:4c:c3:0c:57: 58:07:be:0f:e3:3b:fc:06:ae:ef:2a:3d:23:c2:cf:36:ee:27: 73:d9:ac:a7:b1:39:07:cc:39:6e:c4:a7:e8:31:57:01:2b:5f: 0d:bd:b5:40:e2:42:8f:00:74:41:c9:6f:f4:5b:f6:62:c3:ea: d3:ef:17:49 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5fzAnRRnU6VeZhex3pwC9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmU3MWNmZjRkNTdlYzcwOWUzNDFhNzdlYWY1YjkxMDhmMGE0MzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06ArxnXWT8KyilVooscV9EEkCfMN KbdGpfIQeEbKEeiNJFwU5J4KqpHTCOYKMApx11X+JBDH5mKkoh1wgpaqAXw4unvo tfiLROjS1kuUDfTbaFtuXY4bX9JehDDtgi/oY8zcc4Zaq75nVBP6/l2b6A6Wy+zP CMHhsIoYF4o9S8Srl0wFFvtxCpV5BJqFYpOFu98Jq3eyevgf3GYgFxkaubfseAxG /473qSYNFfmbCok5ha8UGABJFgIjsGzQAMFO5YXnBvbC1l2BK0LzYkswZ863yJ5V rsAh5RzeZNFXZltDP5ekCpAJblVwOnWpkyq13lvxx0OrVLtr4MZMvwOFIQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFB/nHP9NV+xwnjQad+r1uRCPCkNcMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEvSC1jY18wMVg3SENlTkJwMzZ2VzVFSThLUTF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUVgVAwQA XVq3AwQAsvqpMA0GCSqGSIb3DQEBCwUAA4IBAQB+7xL5NZwj9Iz4XZMPD6IvDJLs dFVfxcTZuL7t564NpOXh28b3LuxCcHQhYYMIiCT52PmckS95KIUK8AkY6XxlLONo lxqc6kGz3L9VOWI00JTdYsh/G9t8ZyLX8TopBHRl96BQMqIVCjmt3/Ew+kYgtkH3 O4q/lt7Mzlegg0qbOddSzLsdEVVH2+e/ADm60Z2bAvXXramFxJbQ7W4U7y6taIYY Jt3omptjIBKqD8e2TYh/GOgNSRn7vr1P/cLhqDXOwUzDDFdYB74P4zv8Bq7vKj0j ws827idz2aynsTkHzDluxKfoMVcBK18NvbVA4kKPAHRByW/0W/Ziw+rT7xdJ -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:08 2026 by rpki-client