This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/hSwhgn7GqbDE2g92wIWvoRDpJt0.roa File: hSwhgn7GqbDE2g92wIWvoRDpJt0.roa (raw, json) Hash identifier: 1tYyHehnlq7huNEHSU0Bk4wVNe02+9T/+COLNPbU76Y= Subject key identifier: 85:2C:21:82:7E:C6:A9:B0:C4:DA:0F:76:C0:85:AF:A1:10:E9:26:DD Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 019B7C12BDE250B23884548BA6EDE4BFA2B3 Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/hSwhgn7GqbDE2g92wIWvoRDpJt0.roa Signing time: Fri 02 Jan 2026 00:19:21 +0000 ROA not before: Fri 02 Jan 2026 00:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33852 IP address blocks: 83.139.0.0/24 maxlen: 24 83.139.1.0/24 maxlen: 24 83.139.2.0/24 maxlen: 24 83.139.5.0/24 maxlen: 24 83.139.6.0/23 maxlen: 23 83.139.8.0/21 maxlen: 21 83.139.8.0/24 maxlen: 24 83.139.9.0/24 maxlen: 24 83.139.10.0/24 maxlen: 24 83.139.11.0/24 maxlen: 24 83.139.12.0/24 maxlen: 24 83.139.13.0/24 maxlen: 24 83.139.14.0/24 maxlen: 24 83.139.15.0/24 maxlen: 24 83.139.16.0/24 maxlen: 24 83.139.17.0/24 maxlen: 24 83.139.18.0/24 maxlen: 24 83.139.20.0/24 maxlen: 24 83.139.36.0/22 maxlen: 22 83.139.39.0/24 maxlen: 24 2a01:4000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:bd:e2:50:b2:38:84:54:8b:a6:ed:e4:bf:a2:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Jan 2 00:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=852c21827ec6a9b0c4da0f76c085afa110e926dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2e:0d:48:3f:08:2d:a5:0d:fa:23:f9:7e:0e: 8e:ef:ed:2e:c5:b3:76:a5:ac:85:00:3b:25:66:a3: 7e:bc:4f:e7:56:aa:0d:6d:9c:b3:63:e8:0a:23:c8: 26:b7:65:97:3e:11:f5:ea:12:90:b6:ed:f1:2e:77: e4:84:fc:73:2f:d9:b1:db:6b:51:1d:0d:17:94:c4: 4f:bc:6e:d2:63:3c:c2:99:e8:a7:e6:6e:bc:4a:0f: 13:66:f8:44:1c:5d:ff:e8:40:6c:7e:72:86:59:72: af:69:7c:4a:e4:b3:a5:56:41:3e:55:c2:fe:ab:ea: 3f:ac:7a:42:5f:e9:9d:c6:8a:11:d0:e4:02:ab:00: a9:c7:35:e8:e4:b4:26:65:36:26:0a:2f:c8:b4:04: ae:85:04:22:7d:ef:17:44:a6:f7:7e:10:90:95:8f: 7d:94:12:50:bb:24:9f:bb:51:e7:53:df:a1:da:76: 01:7f:cf:e3:94:ba:b8:e6:2d:83:60:f0:62:92:d7: 92:60:42:25:9a:6c:1f:7c:d4:ea:dc:e5:97:e7:ee: 72:74:e0:43:01:41:bb:74:b2:75:65:2a:46:d4:a6: 5a:f1:3a:10:ba:d3:4b:c3:e5:57:64:aa:b7:99:86: 61:df:de:37:74:78:6e:4c:4c:99:dd:48:7a:50:2f: d4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2C:21:82:7E:C6:A9:B0:C4:DA:0F:76:C0:85:AF:A1:10:E9:26:DD X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/hSwhgn7GqbDE2g92wIWvoRDpJt0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.139.0.0-83.139.2.255 83.139.5.0-83.139.18.255 83.139.20.0/24 83.139.36.0/22 IPv6: 2a01:4000::/32 Signature Algorithm: sha256WithRSAEncryption 33:4c:e6:db:a5:27:94:f1:f2:22:e5:64:73:c5:70:97:c9:b5: e1:78:2c:11:cc:f4:1f:18:5b:e8:3d:91:a6:74:49:2a:5a:5d: fd:40:e5:59:96:3c:38:78:27:37:92:80:5f:7a:ac:99:16:b3: 44:08:9e:67:45:ea:93:fe:4b:11:68:42:12:8e:10:bb:b4:2a: 91:a2:7e:a4:00:65:10:13:ae:f2:10:d3:10:05:5a:c7:af:60: 77:13:96:92:0d:fb:50:12:73:90:f7:1c:c1:53:58:69:e2:5a: 74:70:13:b9:0d:cf:46:80:b7:8d:a2:aa:8e:6a:5c:4e:0a:0a: ec:25:c2:22:ed:ec:35:81:72:22:e9:b6:c9:0f:80:7c:63:28: 65:a9:e9:37:32:33:b8:b7:66:36:f2:72:71:7d:61:af:1e:94: f1:e8:01:13:1f:41:bb:e4:f6:77:44:54:41:52:fc:a7:fb:b2: 3a:04:ae:c1:ec:9a:48:bd:46:f5:0e:cb:ea:f5:ec:45:cc:33: f2:e8:e6:b1:b0:57:8e:1b:fc:61:87:68:96:8a:b8:29:dc:1b: 8d:94:26:fc:e0:02:b2:f6:e4:05:58:d3:13:9c:11:1e:37:29: ab:df:6f:a2:80:c6:72:79:71:b3:e2:26:d4:65:19:5f:e8:02: c4:88:34:53 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt8Er3iULI4hFSLpu3kv6KzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjYwMTAyMDAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTJjMjE4MjdlYzZhOWIwYzRkYTBmNzZjMDg1YWZhMTEwZTkyNmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi4NSD8ILaUN+iP5fg6O7+0uxbN2 payFADslZqN+vE/nVqoNbZyzY+gKI8gmt2WXPhH16hKQtu3xLnfkhPxzL9mx22tR HQ0XlMRPvG7SYzzCmein5m68Sg8TZvhEHF3/6EBsfnKGWXKvaXxK5LOlVkE+VcL+ q+o/rHpCX+mdxooR0OQCqwCpxzXo5LQmZTYmCi/ItASuhQQife8XRKb3fhCQlY99 lBJQuySfu1HnU9+h2nYBf8/jlLq45i2DYPBikteSYEIlmmwffNTq3OWX5+5ydOBD AUG7dLJ1ZSpG1KZa8ToQutNLw+VXZKq3mYZh3943dHhuTEyZ3Uh6UC/U1wIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFIUsIYJ+xqmwxNoPdsCFr6EQ6SbdMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvaFN3aGduN0dxYkRFMmc5MndJV3ZvUkRwSnQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAtBAIAATAnMAsDAwBTiwME AFOLAjAMAwQAU4sFAwQAU4sSAwQAU4sUAwQCU4skMA0EAgACMAcDBQAqAUAAMA0G CSqGSIb3DQEBCwUAA4IBAQAzTObbpSeU8fIi5WRzxXCXybXheCwRzPQfGFvoPZGm dEkqWl39QOVZljw4eCc3koBfeqyZFrNECJ5nReqT/ksRaEISjhC7tCqRon6kAGUQ E67yENMQBVrHr2B3E5aSDftQEnOQ9xzBU1hp4lp0cBO5Dc9GgLeNoqqOalxOCgrs JcIi7ew1gXIi6bbJD4B8Yyhlqek3MjO4t2Y28nJxfWGvHpTx6AETH0G75PZ3RFRB Uvyn+7I6BK7B7JpIvUb1Dsvq9exFzDPy6OaxsFeOG/xhh2iWirgp3BuNlCb84AKy 9uQFWNMTnBEeNymr32+igMZyeXGz4ibUZRlf6ALEiDRT -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:00 2026 by rpki-client