This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hEp788L17pdaSb6pFasieR0Or-Q.roa File: hEp788L17pdaSb6pFasieR0Or-Q.roa (raw, json) Hash identifier: 0lTGfF+G3ZqTu74ZWZVmfws1g7HwZcAjXr+8F0Vhm3A= Subject key identifier: 84:4A:7B:F3:C2:F5:EE:97:5A:49:BE:A9:15:AB:22:79:1D:0E:AF:E4 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834909BC87842BD707E97263CCA68A0 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hEp788L17pdaSb6pFasieR0Or-Q.roa Signing time: Thu 01 Jan 2026 06:17:49 +0000 ROA not before: Thu 01 Jan 2026 06:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210140 IP address blocks: 193.235.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:90:9b:c8:78:42:bd:70:7e:97:26:3c:ca:68:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=844a7bf3c2f5ee975a49bea915ab22791d0eafe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8f:06:05:43:c4:09:aa:ca:da:72:03:ae:0d: 6b:5d:8f:cc:e0:f4:d0:e8:f4:13:85:56:92:30:4b: 07:7c:94:90:ac:2d:cc:b6:fd:c8:d4:8f:f8:6b:22: 8e:1d:13:21:a1:19:6c:be:06:03:2e:ae:53:69:96: 36:99:ee:8b:2b:83:52:12:51:29:c2:1b:93:19:1c: b8:d0:e7:85:e2:ed:97:a9:55:0e:f6:2b:e7:da:13: ca:fb:e4:4a:2f:38:70:51:7a:a2:96:a8:2b:f7:68: e6:39:56:d4:ce:03:66:1f:b7:2c:7b:a8:02:cf:a8: f8:f4:50:ef:f6:9f:94:be:d5:d0:6e:ec:70:dc:6d: 6a:39:09:e1:e6:27:25:16:39:df:24:cf:99:d6:ac: ee:22:4d:1c:4f:f4:d6:c6:b9:67:77:f4:41:90:e8: d3:3a:5c:61:d1:d8:2f:1c:65:b5:7a:be:86:5a:03: d8:a4:0f:c1:a3:be:8c:b3:2a:2f:8d:c3:da:ec:e5: 49:23:56:93:e5:ee:c3:d5:51:53:d0:81:82:1d:a8: 07:1d:56:a9:6d:07:fb:6e:6a:62:a3:6a:c6:57:bf: 7c:3c:ee:9b:d4:a1:82:5b:c5:9b:f8:39:f6:6e:86: 12:23:75:19:e3:42:5b:f4:e7:f1:52:28:ce:6d:72: ed:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4A:7B:F3:C2:F5:EE:97:5A:49:BE:A9:15:AB:22:79:1D:0E:AF:E4 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hEp788L17pdaSb6pFasieR0Or-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.235.160.0/19 Signature Algorithm: sha256WithRSAEncryption 3c:c8:bd:f7:87:7d:35:37:ba:11:29:23:31:eb:95:5c:2b:37: 19:db:43:57:f9:77:ab:d8:8b:68:4d:c2:1f:20:09:f1:78:d1: a7:0a:e8:d8:15:f2:cf:ce:bc:c7:91:56:49:3f:87:e7:c5:a5: f9:b8:8e:6f:a6:25:bc:8b:34:66:6d:ac:70:a0:cf:ef:bc:cb: 90:6f:89:b7:0e:f6:5e:42:df:12:39:18:e6:29:63:63:6c:2c: bb:4c:eb:02:cd:30:db:5e:0e:29:69:08:26:90:94:c6:95:0c: e4:35:ce:99:a8:b5:d8:3b:8b:d5:f4:37:bb:25:cd:8c:a1:9e: 2d:ad:0a:92:0e:5f:f0:f8:53:ac:21:22:36:b9:7b:23:34:1a: 18:1b:e6:95:67:7a:bc:8c:c1:ad:09:3b:2f:e2:f6:08:4a:58: 1e:c7:0d:fa:33:82:9e:99:3e:31:1a:c4:1f:3d:d8:df:97:a8: fd:8a:c2:de:32:0e:68:48:c2:7b:4d:1b:73:8e:30:64:1a:99: 9d:83:31:5f:9d:a6:52:53:b0:ce:ae:98:b2:37:9a:fe:51:b5: da:08:bb:8b:27:d6:4b:f6:8a:5a:8f:23:69:1a:e1:ea:06:80: b1:a4:07:8e:e2:2c:d0:4a:5c:8c:d1:36:98:68:c9:33:90:c9: c1:b5:3b:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NJCbyHhCvXB+lyY8ymigMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDRhN2JmM2MyZjVlZTk3NWE0OWJlYTkxNWFiMjI3OTFkMGVhZmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4o8GBUPECarK2nIDrg1rXY/M4PTQ 6PQThVaSMEsHfJSQrC3Mtv3I1I/4ayKOHRMhoRlsvgYDLq5TaZY2me6LK4NSElEp whuTGRy40OeF4u2XqVUO9ivn2hPK++RKLzhwUXqilqgr92jmOVbUzgNmH7cse6gC z6j49FDv9p+UvtXQbuxw3G1qOQnh5iclFjnfJM+Z1qzuIk0cT/TWxrlnd/RBkOjT Olxh0dgvHGW1er6GWgPYpA/Bo76MsyovjcPa7OVJI1aT5e7D1VFT0IGCHagHHVap bQf7bmpio2rGV798PO6b1KGCW8Wb+Dn2boYSI3UZ40Jb9OfxUijObXLt/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIRKe/PC9e6XWkm+qRWrInkdDq/kMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvaEVwNzg4TDE3cGRhU2I2cEZhc2llUjBPci1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFweugMA0G CSqGSIb3DQEBCwUAA4IBAQA8yL33h301N7oRKSMx65VcKzcZ20NX+Xer2ItoTcIf IAnxeNGnCujYFfLPzrzHkVZJP4fnxaX5uI5vpiW8izRmbaxwoM/vvMuQb4m3DvZe Qt8SORjmKWNjbCy7TOsCzTDbXg4paQgmkJTGlQzkNc6ZqLXYO4vV9De7Jc2MoZ4t rQqSDl/w+FOsISI2uXsjNBoYG+aVZ3q8jMGtCTsv4vYISlgexw36M4KemT4xGsQf Pdjfl6j9isLeMg5oSMJ7TRtzjjBkGpmdgzFfnaZSU7DOrpiyN5r+UbXaCLuLJ9ZL 9opajyNpGuHqBoCxpAeO4izQSlyM0TaYaMkzkMnBtTtX -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:34 2026 by rpki-client