This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/hM3q0tm1hGdyTy4Pq63zsy3D7-Q.roa File: hM3q0tm1hGdyTy4Pq63zsy3D7-Q.roa (raw, json) Hash identifier: LpyLjFrIDk+LFAUQPWPNyV38HQSScxJQeF0sXMSFCqU= Subject key identifier: 84:CD:EA:D2:D9:B5:84:67:72:4F:2E:0F:AB:AD:F3:B3:2D:C3:EF:E4 Certificate issuer: /CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9 Certificate serial: 019B7AC801188BAF20B3CE9DD0910137206A Authority key identifier: A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/hM3q0tm1hGdyTy4Pq63zsy3D7-Q.roa Signing time: Thu 01 Jan 2026 18:18:06 +0000 ROA not before: Thu 01 Jan 2026 18:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34530 IP address blocks: 194.126.216.0/24 maxlen: 24 213.222.192.0/24 maxlen: 24 213.222.198.0/24 maxlen: 24 213.222.199.0/24 maxlen: 24 213.222.220.0/22 maxlen: 22 213.222.221.0/24 maxlen: 24 213.222.222.0/24 maxlen: 24 213.222.223.0/24 maxlen: 24 2a03:7580:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:01:18:8b:af:20:b3:ce:9d:d0:91:01:37:20:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9 Validity Not Before: Jan 1 18:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84cdead2d9b58467724f2e0fabadf3b32dc3efe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:17:24:7a:84:26:4c:65:8f:ab:9b:04:35:75: f1:b5:5b:61:2a:c5:ee:12:2e:92:ce:84:48:67:42: 3b:2f:7d:3c:e8:de:27:7d:ce:04:71:94:d8:5b:3b: 4a:47:93:a4:05:79:3e:25:87:74:e2:81:ca:45:f9: 9f:bf:22:15:f8:4f:8f:cc:a7:83:63:31:60:99:52: d5:b8:ce:30:53:45:9d:9b:7d:12:b2:c3:fe:ca:4d: 70:c1:34:49:4d:cb:c2:5e:31:d1:d7:1b:ec:ae:11: fd:7e:c2:d0:1a:e2:ab:ec:29:66:af:f6:a1:73:20: 0f:3c:07:37:40:7c:3c:5c:65:66:44:3a:fb:8d:69: 32:d2:7e:a1:04:d5:b9:56:3b:86:b6:f3:43:76:ac: 42:40:c7:1d:ea:15:46:26:c9:f5:f4:67:e1:48:5a: b0:01:9c:d3:c0:f6:4f:83:50:2a:00:33:df:92:1e: ee:1d:56:b8:f7:a4:ef:14:0d:2b:fa:ed:b1:f5:9d: 2e:22:7c:c9:e0:8f:5a:de:9b:e8:33:68:2a:12:e6: fb:67:86:e3:00:c5:e5:ea:5b:38:65:9c:b7:2f:80: cd:59:00:15:3d:8f:3c:05:ba:41:4f:39:d4:58:d5: 4d:9d:76:f3:91:64:15:68:00:9c:5c:21:77:82:55: c4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CD:EA:D2:D9:B5:84:67:72:4F:2E:0F:AB:AD:F3:B3:2D:C3:EF:E4 X509v3 Authority Key Identifier: keyid:A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/hM3q0tm1hGdyTy4Pq63zsy3D7-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.126.216.0/24 213.222.192.0/24 213.222.198.0/23 213.222.220.0/22 IPv6: 2a03:7580:4000::/40 Signature Algorithm: sha256WithRSAEncryption 99:2d:e7:72:fc:ea:d3:68:40:dc:b1:a9:b4:f1:25:0f:ea:9b: c6:91:f4:ae:e2:88:d6:d2:fc:ae:e4:c9:c2:09:36:b0:d1:37: 62:90:2e:40:f6:1c:17:4c:11:7a:d1:43:aa:51:a3:2f:2f:7a: d5:35:75:67:25:28:af:71:2b:aa:12:0b:1a:c5:1f:f7:92:28: c4:81:78:25:b8:38:66:ae:e4:1c:7c:ea:21:ed:95:4f:01:a1: 46:df:99:e2:e9:0a:6a:8b:c8:92:b5:26:b1:f2:12:af:5d:71: e5:2b:80:51:9f:51:c6:57:f8:c2:48:d4:d5:1e:c8:bd:b5:c8: 71:51:09:2e:18:b9:ee:77:a8:fe:0f:4e:de:6d:86:a5:36:c4: 20:bf:ba:01:8d:56:45:be:e2:5a:09:29:c0:f3:2d:47:62:2f: 4a:3e:e7:e5:d7:a0:16:99:7b:cf:06:fa:25:e7:2c:74:d8:b5: 72:42:2d:02:0b:0f:98:47:83:a0:c3:60:2a:8d:46:99:dc:c4: 82:69:7f:aa:0b:0a:39:f7:d7:8f:09:a4:2b:f6:1c:98:5d:7a: b5:07:20:9d:05:3a:8d:6f:39:3c:7f:77:9a:8b:ba:0d:47:b7: 9a:60:85:51:8f:83:b9:6d:a9:47:47:20:f4:45:7e:2b:cd:0d: 9d:0b:25:5a -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt6yAEYi68gs86d0JEBNyBqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZTVmYzYzNWExYTc3NTU3NGI3NzlhZWE5Y2NkNjUyNGNj NGQwZjkwHhcNMjYwMTAxMTgxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGNkZWFkMmQ5YjU4NDY3NzI0ZjJlMGZhYmFkZjNiMzJkYzNlZmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRckeoQmTGWPq5sENXXxtVthKsXu Ei6SzoRIZ0I7L3086N4nfc4EcZTYWztKR5OkBXk+JYd04oHKRfmfvyIV+E+PzKeD YzFgmVLVuM4wU0Wdm30SssP+yk1wwTRJTcvCXjHR1xvsrhH9fsLQGuKr7Clmr/ah cyAPPAc3QHw8XGVmRDr7jWky0n6hBNW5VjuGtvNDdqxCQMcd6hVGJsn19GfhSFqw AZzTwPZPg1AqADPfkh7uHVa496TvFA0r+u2x9Z0uInzJ4I9a3pvoM2gqEub7Z4bj AMXl6ls4ZZy3L4DNWQAVPY88BbpBTznUWNVNnXbzkWQVaACcXCF3glXE0wIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFITN6tLZtYRnck8uD6ut87Mtw+/kMB8GA1UdIwQY MBaAFKHl/GNaGndVdLd5rqnM1lJMxND5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wN2QwYzctZGMxZS00MDg5LWJkNDgt N2VlMGU2MGJiMDUzLzEvaE0zcTB0bTFoR2R5VHk0UHE2M3pzeTNENy1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8wN2QwYzctZGMxZS00MDg5LWJkNDgtN2VlMGU2MGJiMDUz LzEvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQAwn7YAwQA 1d7AAwQB1d7GAwQC1d7cMA4EAgACMAgDBgAqA3WAQDANBgkqhkiG9w0BAQsFAAOC AQEAmS3ncvzq02hA3LGptPElD+qbxpH0ruKI1tL8ruTJwgk2sNE3YpAuQPYcF0wR etFDqlGjLy961TV1ZyUor3ErqhILGsUf95IoxIF4Jbg4Zq7kHHzqIe2VTwGhRt+Z 4ukKaovIkrUmsfISr11x5SuAUZ9Rxlf4wkjU1R7IvbXIcVEJLhi57neo/g9O3m2G pTbEIL+6AY1WRb7iWgkpwPMtR2IvSj7n5degFpl7zwb6JecsdNi1ckItAgsPmEeD oMNgKo1GmdzEgml/qgsKOffXjwmkK/YcmF16tQcgnQU6jW85PH93mou6DUe3mmCF UY+DuW2pR0cg9EV+K80NnQslWg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:44:40 2026 by rpki-client