This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/Ha1zzuR5phsP43HrNuYV02K8JmM.roa File: Ha1zzuR5phsP43HrNuYV02K8JmM.roa (raw, json) Hash identifier: OIS0Kv+EMSNX8skAuIawL3We9Kkncv5+iFQyWWdpmbk= Subject key identifier: 1D:AD:73:CE:E4:79:A6:1B:0F:E3:71:EB:36:E6:15:D3:62:BC:26:63 Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6 Certificate serial: 019BDB8CC8F4A1936B58C4928B8FE2391032 Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/Ha1zzuR5phsP43HrNuYV02K8JmM.roa Signing time: Tue 20 Jan 2026 13:16:35 +0000 ROA not before: Tue 20 Jan 2026 13:16:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211114 IP address blocks: 146.19.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:8c:c8:f4:a1:93:6b:58:c4:92:8b:8f:e2:39:10:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6 Validity Not Before: Jan 20 13:16:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dad73cee479a61b0fe371eb36e615d362bc2663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:90:c8:07:10:29:08:4b:5b:62:fb:7e:35:7d: 3f:65:b8:3f:b8:ce:51:d5:41:04:3d:4a:0b:a8:ab: c1:27:de:ce:b4:55:18:d2:dc:92:b7:69:9a:43:10: 12:ae:1e:94:2f:88:60:20:fb:b6:be:14:9e:37:4c: a3:88:b1:6f:9d:05:ae:6d:28:dc:e5:cf:1f:f2:23: f7:23:20:cd:73:eb:72:eb:e6:6c:d7:95:f1:99:63: ef:03:6a:dd:36:46:67:19:0f:6e:c1:56:43:42:07: e2:5a:18:2b:41:5b:f4:90:a3:a2:a8:df:cb:64:c3: 33:4f:b2:57:db:9a:08:57:2e:41:0c:79:ff:2d:36: c1:17:c0:52:45:87:0c:85:a3:ec:94:a8:5e:c7:d2: 40:14:5f:05:cb:5b:97:eb:60:f2:06:96:99:c9:48: cc:2c:bc:ef:37:23:8f:78:08:6c:02:cd:44:18:9b: cf:6a:c3:a1:73:be:28:b0:44:db:08:10:be:69:69: ef:fc:b6:f3:8d:dd:98:57:42:2c:7d:a7:dc:7b:af: 40:b2:8b:14:9e:f7:3a:5f:67:a7:86:51:47:a2:98: d0:55:fe:ec:3b:21:09:a3:38:4e:e5:52:db:f3:51: 9c:91:b5:6e:47:5e:78:0a:bb:06:7b:5c:35:66:49: e6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AD:73:CE:E4:79:A6:1B:0F:E3:71:EB:36:E6:15:D3:62:BC:26:63 X509v3 Authority Key Identifier: keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/Ha1zzuR5phsP43HrNuYV02K8JmM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.59.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:14:98:60:a2:ab:78:ae:18:b8:5c:0e:c4:a7:45:40:c9:f8: 40:5b:a3:5c:ed:67:77:31:b5:20:a7:2c:00:ba:68:a9:f4:12: 41:5a:c2:de:54:01:e8:0c:29:d8:c4:9e:5e:ee:b3:32:ae:30: eb:8e:9b:95:38:6a:d0:1a:34:ab:9b:f5:ab:f7:a7:3f:53:82: e8:3d:95:22:aa:56:68:4f:92:82:03:f5:f4:47:5a:7b:73:47: 8c:de:70:91:e1:31:a0:76:2d:1d:1b:32:f8:8c:d3:c0:f6:92: 09:21:3b:73:88:fd:88:20:19:cd:94:4b:74:bd:8d:95:ff:20: 5a:80:78:a4:cf:77:cb:b6:6b:09:7f:fc:1f:28:05:fb:5c:5e: e2:fc:43:fd:f7:33:e8:bb:88:98:85:a5:f7:59:86:67:c3:a1: 6f:ea:ec:ba:df:3a:63:df:87:1e:53:43:f6:15:d3:3c:1a:3e: a7:f2:52:72:ad:da:af:20:fe:6b:ec:df:ec:90:1b:15:da:f8: 80:8f:f5:f3:01:19:6c:29:0b:8b:38:1a:bd:55:6c:97:50:b3: 09:59:bf:72:2a:e5:b7:80:86:01:13:bd:4f:f7:10:b3:ee:f9: 6b:74:d6:64:fe:e3:ab:47:d9:d8:ab:1b:be:31:1d:92:32:02: 01:3c:48:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvbjMj0oZNrWMSSi4/iORAyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxN2I3YWIwNjJiYzgyOGIzNDhkMDUzMDZlNjUzNTQ3NDhi OWQ2ZDYwHhcNMjYwMTIwMTMxNjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGFkNzNjZWU0NzlhNjFiMGZlMzcxZWIzNmU2MTVkMzYyYmMyNjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pDIBxApCEtbYvt+NX0/Zbg/uM5R 1UEEPUoLqKvBJ97OtFUY0tySt2maQxASrh6UL4hgIPu2vhSeN0yjiLFvnQWubSjc 5c8f8iP3IyDNc+ty6+Zs15XxmWPvA2rdNkZnGQ9uwVZDQgfiWhgrQVv0kKOiqN/L ZMMzT7JX25oIVy5BDHn/LTbBF8BSRYcMhaPslKhex9JAFF8Fy1uX62DyBpaZyUjM LLzvNyOPeAhsAs1EGJvPasOhc74osETbCBC+aWnv/Lbzjd2YV0Isfafce69AsosU nvc6X2enhlFHopjQVf7sOyEJozhO5VLb81GckbVuR154CrsGe1w1ZknmKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB2tc87keaYbD+Nx6zbmFdNivCZjMB8GA1UdIwQY MBaAFCF7erBivIKLNI0FMG5lNUdIudbWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYt NTViNjU5Y2Q4MmJiLzEvSGExenp1UjVwaHNQNDNIck51WVYwMks4Sm1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYtNTViNjU5Y2Q4MmJi LzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhM7MA0G CSqGSIb3DQEBCwUAA4IBAQBPFJhgoqt4rhi4XA7Ep0VAyfhAW6Nc7Wd3MbUgpywA umip9BJBWsLeVAHoDCnYxJ5e7rMyrjDrjpuVOGrQGjSrm/Wr96c/U4LoPZUiqlZo T5KCA/X0R1p7c0eM3nCR4TGgdi0dGzL4jNPA9pIJITtziP2IIBnNlEt0vY2V/yBa gHikz3fLtmsJf/wfKAX7XF7i/EP99zPou4iYhaX3WYZnw6Fv6uy63zpj34ceU0P2 FdM8Gj6n8lJyrdqvIP5r7N/skBsV2viAj/XzARlsKQuLOBq9VWyXULMJWb9yKuW3 gIYBE71P9xCz7vlrdNZk/uOrR9nYqxu+MR2SMgIBPEg9 -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:04 2026 by rpki-client