This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/H8G6D-Wk6u8Ak866YQFvElddI-c.roa File: H8G6D-Wk6u8Ak866YQFvElddI-c.roa (raw, json) Hash identifier: PEnd5yN8T5n1W+yxVyKPvkVNjUPkgKs3BkeHGhdDjdU= Subject key identifier: 1F:C1:BA:0F:E5:A4:EA:EF:00:93:CE:BA:61:01:6F:12:57:5D:23:E7 Certificate issuer: /CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4 Certificate serial: 019B775916BC862FD664C0B6605AF61D8FA2 Authority key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/H8G6D-Wk6u8Ak866YQFvElddI-c.roa Signing time: Thu 01 Jan 2026 02:18:05 +0000 ROA not before: Thu 01 Jan 2026 02:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39762 IP address blocks: 195.60.70.0/23 maxlen: 23 195.60.70.0/24 maxlen: 24 195.60.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:16:bc:86:2f:d6:64:c0:b6:60:5a:f6:1d:8f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4 Validity Not Before: Jan 1 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fc1ba0fe5a4eaef0093ceba61016f12575d23e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:31:68:da:3e:43:67:db:0f:4b:9e:42:21:5c: 20:58:e6:9e:f5:a7:d1:f2:59:e4:79:73:d0:f2:a8: 5e:dc:e0:39:04:ac:44:be:6e:e6:7d:37:49:ee:a1: 53:ad:2d:30:d0:0a:e4:ac:d3:5b:16:8d:bd:30:28: 78:a6:9a:07:48:3b:07:87:09:ba:ca:0e:51:f3:c2: 0f:cc:c3:bf:98:28:ba:74:d2:59:5c:50:96:16:8a: 31:c7:cc:5d:b1:5d:63:d9:34:7d:56:ec:d4:5b:5c: b8:44:8c:f4:4c:17:40:90:af:98:3e:4a:24:5e:46: 8f:9e:6b:f4:4e:ee:ff:71:8e:e5:25:c2:fb:4d:e1: 6c:4f:f5:ef:84:ab:2a:4f:2d:06:4e:8b:3e:c1:78: ca:df:7a:c5:77:1d:e9:5e:a9:e6:61:6f:ee:fe:4e: be:07:be:b0:f1:6a:20:23:fd:82:65:21:9d:01:3e: f1:79:f2:ec:a8:b8:fe:e2:44:68:3f:66:63:37:ec: 93:1b:46:c4:26:ba:60:75:6b:47:a3:f3:69:29:ad: 1a:0f:a4:22:5f:89:b4:9e:0c:74:18:c2:d2:f8:28: 04:b7:dc:08:c9:0f:82:8c:1e:62:80:77:8b:9f:fe: cb:11:ef:6f:6a:0f:37:7f:59:d9:7d:cd:1f:7e:6b: 68:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C1:BA:0F:E5:A4:EA:EF:00:93:CE:BA:61:01:6F:12:57:5D:23:E7 X509v3 Authority Key Identifier: keyid:E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/H8G6D-Wk6u8Ak866YQFvElddI-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.60.70.0/23 Signature Algorithm: sha256WithRSAEncryption 85:8e:20:7b:63:6b:08:72:bf:e7:f3:aa:51:bb:a7:ad:ee:82: 88:e7:16:72:0c:dc:ee:23:e5:1a:90:8e:4e:69:66:56:cb:2d: 02:2d:9c:ee:1a:ec:82:6d:66:02:c2:0f:b8:e7:ae:0e:43:12: 4a:0d:f0:45:f7:e3:07:28:2b:f9:98:36:98:af:35:ee:95:76: 2a:8a:4b:18:74:0b:f1:91:0f:3a:f4:33:3e:d6:f6:a0:71:8d: 3d:9a:82:8d:6a:bb:28:59:95:0f:4b:3a:75:a2:84:a0:21:01: 25:e7:05:57:2c:b7:e3:67:8e:f9:c6:62:3d:79:2d:ee:8b:89: b5:68:2b:99:6a:17:52:2b:ed:ff:57:40:71:b2:b9:57:b0:1d: ff:18:03:56:1c:6a:69:ac:6c:3a:fc:57:b6:51:79:9e:13:86: 27:be:bc:63:2c:dc:df:37:78:a9:72:dc:16:da:0d:50:a5:1e: 62:d0:96:a6:4b:22:c3:e8:84:21:db:97:69:f8:1b:64:dd:27: fa:ba:a0:8c:01:9b:8e:11:3a:6c:e5:33:ea:a2:b5:5b:73:1a: 55:6d:f1:f5:dc:05:04:60:1c:e7:b0:da:ad:d5:71:de:30:26: a1:60:22:b4:48:24:3f:8d:ee:f2:ef:ca:a5:f7:20:44:71:fe: ec:d6:3f:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WRa8hi/WZMC2YFr2HY+iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyM2MwYzNlMDEwNmM5NjVkNDYwY2QwYzNjYmM1ZTIzNGY4 MmE2YjQwHhcNMjYwMTAxMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmMxYmEwZmU1YTRlYWVmMDA5M2NlYmE2MTAxNmYxMjU3NWQyM2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zFo2j5DZ9sPS55CIVwgWOae9afR 8lnkeXPQ8qhe3OA5BKxEvm7mfTdJ7qFTrS0w0ArkrNNbFo29MCh4ppoHSDsHhwm6 yg5R88IPzMO/mCi6dNJZXFCWFooxx8xdsV1j2TR9VuzUW1y4RIz0TBdAkK+YPkok XkaPnmv0Tu7/cY7lJcL7TeFsT/XvhKsqTy0GTos+wXjK33rFdx3pXqnmYW/u/k6+ B76w8WogI/2CZSGdAT7xefLsqLj+4kRoP2ZjN+yTG0bEJrpgdWtHo/NpKa0aD6Qi X4m0ngx0GMLS+CgEt9wIyQ+CjB5igHeLn/7LEe9vag83f1nZfc0ffmtouQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB/Bug/lpOrvAJPOumEBbxJXXSPnMB8GA1UdIwQY MBaAFOI8DD4BBsll1GDNDDy8XiNPgqa0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82NDdmMjgtNTljZi00ZDY4LWE1MGYt MTc2NGIwMzYxOGZjLzEvSDhHNkQtV2s2dThBazg2NllRRnZFbGRkSS1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82NDdmMjgtNTljZi00ZDY4LWE1MGYtMTc2NGIwMzYxOGZj LzEvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwzxGMA0G CSqGSIb3DQEBCwUAA4IBAQCFjiB7Y2sIcr/n86pRu6et7oKI5xZyDNzuI+UakI5O aWZWyy0CLZzuGuyCbWYCwg+4564OQxJKDfBF9+MHKCv5mDaYrzXulXYqiksYdAvx kQ869DM+1vagcY09moKNarsoWZUPSzp1ooSgIQEl5wVXLLfjZ475xmI9eS3ui4m1 aCuZahdSK+3/V0BxsrlXsB3/GANWHGpprGw6/Fe2UXmeE4YnvrxjLNzfN3ipctwW 2g1QpR5i0JamSyLD6IQh25dp+Btk3Sf6uqCMAZuOETps5TPqorVbcxpVbfH13AUE YBznsNqt1XHeMCahYCK0SCQ/je7y78ql9yBEcf7s1j95 -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:53 2026 by rpki-client