This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/hIJ7BxSqfQNayGkNVH4Xy86Dhbc.roa File: hIJ7BxSqfQNayGkNVH4Xy86Dhbc.roa (raw, json) Hash identifier: fAcJlzHm8GX5dH8gtKkRjvytkl6PKP9fjOi2EMtY8+8= Subject key identifier: 84:82:7B:07:14:AA:7D:03:5A:C8:69:0D:54:7E:17:CB:CE:83:85:B7 Certificate issuer: /CN=e758524459f91350bf3a70bddea02bb7f198f627 Certificate serial: 019B77C73BA10A8F40436C11419ED79986FD Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/hIJ7BxSqfQNayGkNVH4Xy86Dhbc.roa Signing time: Thu 01 Jan 2026 04:18:24 +0000 ROA not before: Thu 01 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203039 IP address blocks: 185.153.52.0/24 maxlen: 24 213.134.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3b:a1:0a:8f:40:43:6c:11:41:9e:d7:99:86:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627 Validity Not Before: Jan 1 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84827b0714aa7d035ac8690d547e17cbce8385b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9a:8b:c2:3f:40:1d:1b:b3:26:25:40:02:43: 0a:44:ec:ea:ed:a1:1b:dd:0a:ca:23:f6:58:fd:a2: 3c:f8:cb:1a:43:17:b5:52:6a:f8:92:5b:0f:5b:7d: 7b:93:a9:eb:92:fe:46:ca:df:37:f3:68:dc:b4:6f: ec:80:38:0f:e7:cf:ab:6a:9f:02:fa:d1:4b:aa:da: c3:8e:77:44:a3:f8:b5:bd:e2:bc:8b:ad:55:5e:65: ea:8e:27:49:e5:72:87:42:af:2c:97:e3:9b:75:64: 60:13:aa:3d:ee:05:4f:89:c7:47:7a:69:be:5f:78: 86:d9:ed:ed:63:93:c4:e7:c1:d5:83:27:f9:67:d4: a3:8b:a6:fe:89:6c:34:21:60:bc:5d:9d:f8:77:19: 43:60:2a:8d:71:3a:10:f5:9c:e7:6e:74:06:aa:16: 05:a6:48:58:e3:2c:d9:c0:bb:a0:55:d1:5f:32:ae: 3f:e3:0f:6f:6d:48:29:d3:cf:b0:70:bd:32:dc:25: 23:ce:ca:cf:83:67:c3:c0:8e:78:20:37:57:f8:5b: 3f:b6:b8:3c:f5:d0:27:16:3e:05:5f:f3:e3:69:2d: 9f:e4:30:b4:52:fe:79:f4:68:1d:67:16:a9:bb:6d: 1b:2d:dc:62:90:b7:6b:b0:b6:3d:70:f4:c2:a3:1d: 3b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:82:7B:07:14:AA:7D:03:5A:C8:69:0D:54:7E:17:CB:CE:83:85:B7 X509v3 Authority Key Identifier: keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/hIJ7BxSqfQNayGkNVH4Xy86Dhbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.153.52.0/24 213.134.15.0/24 Signature Algorithm: sha256WithRSAEncryption 49:ab:9c:c5:d7:24:02:df:85:23:d6:ff:19:14:40:97:e1:bf: 54:94:32:8c:18:a5:57:76:a2:b9:8e:b2:14:a5:0f:ce:15:e3: 24:ff:40:52:4a:ce:a5:d8:89:b9:4e:49:fc:1f:67:eb:cb:96: b4:e2:0d:a2:d4:6b:26:d1:97:9a:eb:45:6b:32:84:6a:9f:6d: 4f:c6:e3:76:ba:a5:45:be:d5:9e:f2:5b:1d:17:82:69:e1:24: bc:5f:48:86:d6:eb:15:25:bd:8d:c8:78:7d:ce:db:af:1e:f1: f9:13:d2:29:bf:35:be:20:6c:29:9c:e3:99:c8:1b:2d:e7:45: ca:54:6e:68:aa:88:d8:73:3e:2e:8c:db:8a:bc:2c:b5:08:d4: 61:c4:9c:22:37:8f:c8:1a:82:77:62:56:94:9f:9a:14:52:fa: bc:ee:88:c6:61:34:e5:5c:39:ed:07:f6:06:7b:ae:be:7d:96: 37:59:f2:49:01:5b:74:71:b7:f2:32:e6:6e:03:4e:84:f7:44: a2:83:3b:3c:37:41:57:48:65:46:6e:64:cf:7d:ec:d5:d1:ea: 00:92:0b:8c:7b:ff:db:ea:fd:41:26:80:46:8b:b0:68:50:bc: a7:bb:6f:b6:cf:dc:52:f4:24:a2:a8:95:fd:9a:aa:94:08:49: 23:f2:92:44 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xzuhCo9AQ2wRQZ7XmYb9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NTg1MjQ0NTlmOTEzNTBiZjNhNzBiZGRlYTAyYmI3ZjE5 OGY2MjcwHhcNMjYwMTAxMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDgyN2IwNzE0YWE3ZDAzNWFjODY5MGQ1NDdlMTdjYmNlODM4NWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pqLwj9AHRuzJiVAAkMKROzq7aEb 3QrKI/ZY/aI8+MsaQxe1Umr4klsPW317k6nrkv5Gyt8382jctG/sgDgP58+rap8C +tFLqtrDjndEo/i1veK8i61VXmXqjidJ5XKHQq8sl+ObdWRgE6o97gVPicdHemm+ X3iG2e3tY5PE58HVgyf5Z9Sji6b+iWw0IWC8XZ34dxlDYCqNcToQ9ZznbnQGqhYF pkhY4yzZwLugVdFfMq4/4w9vbUgp08+wcL0y3CUjzsrPg2fDwI54IDdX+Fs/trg8 9dAnFj4FX/PjaS2f5DC0Uv559GgdZxapu20bLdxikLdrsLY9cPTCox07qQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFISCewcUqn0DWshpDVR+F8vOg4W3MB8GA1UdIwQY MBaAFOdYUkRZ+RNQvzpwvd6gK7fxmPYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNWE2MjktOGY2OC00MzJlLTllNWEt YzQxOWU3MTI5OTI4LzEvaElKN0J4U3FmUU5heUdrTlZINFh5ODZEaGJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lNWE2MjktOGY2OC00MzJlLTllNWEtYzQxOWU3MTI5OTI4 LzEvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuZk0AwQA 1YYPMA0GCSqGSIb3DQEBCwUAA4IBAQBJq5zF1yQC34Uj1v8ZFECX4b9UlDKMGKVX dqK5jrIUpQ/OFeMk/0BSSs6l2Im5Tkn8H2fry5a04g2i1Gsm0Zea60VrMoRqn21P xuN2uqVFvtWe8lsdF4Jp4SS8X0iG1usVJb2NyHh9ztuvHvH5E9IpvzW+IGwpnOOZ yBst50XKVG5oqojYcz4ujNuKvCy1CNRhxJwiN4/IGoJ3YlaUn5oUUvq87ojGYTTl XDntB/YGe66+fZY3WfJJAVt0cbfyMuZuA06E90Sigzs8N0FXSGVGbmTPfezV0eoA kguMe//b6v1BJoBGi7BoULynu2+2z9xS9CSiqJX9mqqUCEkj8pJE -----END CERTIFICATE-----Generated at Mon Jan 26 02:32:37 2026 by rpki-client