This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/Hj4v62AOdoRZqYCBUDTjMFLo8KI.roa File: Hj4v62AOdoRZqYCBUDTjMFLo8KI.roa (raw, json) Hash identifier: YWbpGzjtAJu7tqoItoovhEd5x36ZXMAx6yUUYU//amY= Subject key identifier: 1E:3E:2F:EB:60:0E:76:84:59:A9:80:81:50:34:E3:30:52:E8:F0:A2 Certificate issuer: /CN=bd900bb9ac6069c513b582d61fd81eccd561a567 Certificate serial: 019B7AC94762D660C634FE71C23F853C5259 Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/Hj4v62AOdoRZqYCBUDTjMFLo8KI.roa Signing time: Thu 01 Jan 2026 18:19:29 +0000 ROA not before: Thu 01 Jan 2026 18:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48152 IP address blocks: 195.230.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:47:62:d6:60:c6:34:fe:71:c2:3f:85:3c:52:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567 Validity Not Before: Jan 1 18:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e3e2feb600e768459a980815034e33052e8f0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4f:41:5f:4d:ef:32:07:a3:9d:d7:99:21:4c: 53:c8:f9:2f:cd:3c:ee:91:5e:3d:87:92:a4:07:58: d5:57:d4:d6:73:81:bf:b7:bd:a9:11:d5:79:0d:37: 15:8f:cf:84:c2:5e:f2:20:13:66:7d:f6:ed:a0:eb: 04:ea:d7:29:cb:bd:ae:88:2a:6d:bd:d9:a0:39:7d: eb:9a:03:53:4c:e2:f6:ab:f8:81:9f:a0:4c:5d:0d: d0:6c:b6:bb:32:35:ef:14:8a:1e:53:3d:68:00:80: 3f:f4:68:72:97:21:c1:83:9a:9b:77:38:0d:99:85: e3:6c:03:00:bd:d8:1a:cd:41:3f:92:ba:a5:e9:cc: 3e:b5:b0:a5:dd:c6:73:47:b9:b5:18:47:fe:09:b1: f6:07:ee:75:32:fe:15:fe:21:d7:97:27:36:72:49: d9:3a:c8:5b:7e:4e:49:eb:16:58:41:68:d5:7f:98: 32:24:55:b8:16:bb:1a:25:a8:56:d7:e2:4d:49:61: 48:98:16:15:2b:b9:49:ca:59:59:c4:85:5d:b7:a9: 57:fe:cd:f7:36:84:a6:5d:e4:71:c1:13:8c:51:16: d5:38:24:49:36:8a:e9:85:15:73:0b:b2:64:d9:68: 59:86:d7:50:7d:13:a1:fb:cc:38:5d:e5:0f:80:ea: 8c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3E:2F:EB:60:0E:76:84:59:A9:80:81:50:34:E3:30:52:E8:F0:A2 X509v3 Authority Key Identifier: keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/Hj4v62AOdoRZqYCBUDTjMFLo8KI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.230.126.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:55:45:de:45:f0:bf:29:90:20:43:b1:a9:01:49:70:33:66: c5:76:62:2e:a3:91:37:e5:08:43:77:21:f0:0a:c6:96:28:40: 5a:e5:f3:50:dd:14:28:f5:47:29:a4:92:13:5e:7f:50:56:91: 1b:d7:4e:b9:9c:a7:ca:68:66:ce:0a:74:33:f2:9b:cc:ff:4c: a7:f4:e3:7a:b5:af:8e:4e:f9:ff:e8:83:66:df:42:f3:1e:49: 11:7e:2a:f5:d9:06:36:8a:0c:46:f7:3a:3b:94:7e:8c:e0:91: b8:47:36:cc:b0:fe:db:f1:a9:6a:d2:80:91:95:10:f8:dc:5f: 0e:e3:10:df:96:71:e4:c9:e8:f5:0d:18:f0:85:07:9a:9c:f1: 00:fb:03:14:e4:4d:27:51:72:68:eb:dd:82:74:2b:e7:16:ed: 94:08:0b:b2:54:7e:a0:f9:3c:ac:d6:d7:a0:fb:c8:7d:f0:8f: 66:6d:e4:e9:e5:6d:31:85:6f:05:4a:64:4d:50:95:e9:7f:25: 73:11:3c:d0:74:c9:09:f9:88:fa:fe:9a:45:16:1c:03:d8:76: 5e:8c:7e:5e:89:e6:68:8e:8b:86:e2:61:7d:24:e0:aa:f6:fc: e5:41:1b:c8:de:0c:3a:31:64:27:21:e5:93:56:04:da:fb:7a: 17:dd:9a:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yUdi1mDGNP5xwj+FPFJZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOTAwYmI5YWM2MDY5YzUxM2I1ODJkNjFmZDgxZWNjZDU2 MWE1NjcwHhcNMjYwMTAxMTgxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTNlMmZlYjYwMGU3Njg0NTlhOTgwODE1MDM0ZTMzMDUyZThmMGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp09BX03vMgejndeZIUxTyPkvzTzu kV49h5KkB1jVV9TWc4G/t72pEdV5DTcVj8+Ewl7yIBNmffbtoOsE6tcpy72uiCpt vdmgOX3rmgNTTOL2q/iBn6BMXQ3QbLa7MjXvFIoeUz1oAIA/9GhylyHBg5qbdzgN mYXjbAMAvdgazUE/krql6cw+tbCl3cZzR7m1GEf+CbH2B+51Mv4V/iHXlyc2cknZ Oshbfk5J6xZYQWjVf5gyJFW4FrsaJahW1+JNSWFImBYVK7lJyllZxIVdt6lX/s33 NoSmXeRxwROMURbVOCRJNorphRVzC7Jk2WhZhtdQfROh+8w4XeUPgOqMNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB4+L+tgDnaEWamAgVA04zBS6PCiMB8GA1UdIwQY MBaAFL2QC7msYGnFE7WC1h/YHszVYaVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlpBTHVheGdhY1VUdFlMV0g5Z2V6TlZocFdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lM2VhNWItZDUzZS00Y2Q3LWJiN2It ZTFiOWY2ZDM1N2MwLzEvSGo0djYyQU9kb1JacVlDQlVEVGpNRkxvOEtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9lM2VhNWItZDUzZS00Y2Q3LWJiN2ItZTFiOWY2ZDM1N2Mw LzEvdlpBTHVheGdhY1VUdFlMV0g5Z2V6TlZocFdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+Z+MA0G CSqGSIb3DQEBCwUAA4IBAQArVUXeRfC/KZAgQ7GpAUlwM2bFdmIuo5E35QhDdyHw CsaWKEBa5fNQ3RQo9UcppJITXn9QVpEb1065nKfKaGbOCnQz8pvM/0yn9ON6ta+O Tvn/6INm30LzHkkRfir12QY2igxG9zo7lH6M4JG4RzbMsP7b8alq0oCRlRD43F8O 4xDflnHkyej1DRjwhQeanPEA+wMU5E0nUXJo692CdCvnFu2UCAuyVH6g+Tys1teg +8h98I9mbeTp5W0xhW8FSmRNUJXpfyVzETzQdMkJ+Yj6/ppFFhwD2HZejH5eieZo jouG4mF9JOCq9vzlQRvI3gw6MWQnIeWTVgTa+3oX3Zq/ -----END CERTIFICATE-----Generated at Mon Jan 26 15:00:43 2026 by rpki-client