This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/hJRVUfK1kg6uQoiqwZJxzqlaXqs.roa File: hJRVUfK1kg6uQoiqwZJxzqlaXqs.roa (raw, json) Hash identifier: iKpwOj9nTc417SKhdao7QMWeIdAHHJ1ZRWb6QVPeswk= Subject key identifier: 84:94:55:51:F2:B5:92:0E:AE:42:88:AA:C1:92:71:CE:A9:5A:5E:AB Certificate issuer: /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3 Certificate serial: 019B7C13542E8882B5F227446421F53B53AB Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/hJRVUfK1kg6uQoiqwZJxzqlaXqs.roa Signing time: Fri 02 Jan 2026 00:19:59 +0000 ROA not before: Fri 02 Jan 2026 00:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202261 IP address blocks: 194.147.136.0/24 maxlen: 24 194.147.137.0/24 maxlen: 24 2a07:e480::/48 maxlen: 48 2a07:e480:100::/48 maxlen: 48 2a07:e480:aaa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:54:2e:88:82:b5:f2:27:44:64:21:f5:3b:53:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3 Validity Not Before: Jan 2 00:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84945551f2b5920eae4288aac19271cea95a5eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b3:43:ca:d1:cd:4d:9c:af:34:24:92:e1:87: 90:13:4f:fd:88:c7:99:cc:1b:e6:93:89:35:29:cf: 42:74:7c:cc:64:7a:59:df:cf:fd:27:ce:45:92:80: a2:6e:c1:0c:41:9d:44:27:1e:b9:1e:c9:ec:e7:92: 8f:9b:b1:a5:5f:0f:d7:53:da:fd:cc:64:75:48:fd: dc:fd:d5:da:ee:d2:b0:b8:0a:9a:10:e5:a0:f1:b4: e3:9e:e6:cc:e4:6c:70:67:fb:f3:53:89:69:81:65: b0:6b:90:18:e0:8c:da:9b:b9:f4:17:a1:a5:f6:e2: c7:3b:1f:12:48:dd:fd:96:b4:04:f5:71:1c:42:7b: cc:1c:72:3f:71:f1:46:c1:1c:f0:a1:35:42:5e:14: e6:53:6b:83:77:ae:3c:a9:d4:d1:f9:55:6e:a0:7d: 33:43:ec:ef:a0:c5:a1:6a:9c:6d:07:71:ee:db:07: 7e:bc:73:34:6e:55:40:b3:26:04:eb:4e:50:d4:00: 55:5b:5e:59:34:cc:55:a0:a9:ab:e7:81:d5:a2:f4: d4:a1:3a:aa:d6:ef:74:fa:5f:45:b0:84:02:74:17: a5:b7:f4:7a:1a:15:ba:31:eb:d9:11:bc:4d:2c:fa: be:e9:0e:d0:61:ea:ea:70:3f:cc:5b:14:53:03:60: 5a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:94:55:51:F2:B5:92:0E:AE:42:88:AA:C1:92:71:CE:A9:5A:5E:AB X509v3 Authority Key Identifier: keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/hJRVUfK1kg6uQoiqwZJxzqlaXqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.136.0/23 IPv6: 2a07:e480::/48 2a07:e480:100::/48 2a07:e480:aaa::/48 Signature Algorithm: sha256WithRSAEncryption 69:c2:52:e8:c0:08:0a:4d:2c:c2:3d:37:ed:69:f3:79:a8:63: b0:df:5d:d1:90:b6:c0:07:66:1c:18:bf:6e:89:4c:bc:45:79: 2f:5e:de:a6:ae:00:dc:28:c2:f4:03:02:d1:ab:73:18:ab:9f: 6c:8e:4a:b3:b3:d1:37:ac:eb:a5:6c:7a:07:af:c1:5d:7d:d9: 6c:1c:7a:34:12:21:5d:05:7a:a6:ec:31:9a:22:6e:7d:70:95: 6f:76:ad:23:3c:cf:8a:a7:c9:08:a0:cf:f2:cf:b8:8e:0b:68: a8:95:58:b6:e5:f0:21:44:9a:61:f2:b5:56:95:89:e1:56:05: 5c:72:d6:91:be:d5:d0:68:86:51:26:a0:42:a3:c7:f8:ba:9c: 89:c8:9d:e4:10:19:9a:4c:1a:4b:35:d9:0e:38:f3:e2:a6:46: 34:10:b4:03:04:ac:5e:e3:b0:ac:18:a8:05:cc:83:68:2e:01: c7:83:87:2e:96:e1:6c:f3:9f:33:0a:01:f4:c2:8e:0c:e8:46: bf:57:15:40:8c:4d:63:a3:79:70:2c:ef:71:88:ce:45:54:0c: 86:15:82:79:e6:0f:26:3c:76:97:4a:43:9d:cf:28:77:ae:9f: e1:9f:99:c8:e5:24:99:12:09:79:31:ee:69:1a:07:d5:29:7a: 3f:72:59:c3 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt8E1QuiIK18idEZCH1O1OrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZDM2YTIxZTliMzY4ZDc0OGJhYjhjNzdiZWJkZGUyYzIy N2M2YzMwHhcNMjYwMTAyMDAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDk0NTU1MWYyYjU5MjBlYWU0Mjg4YWFjMTkyNzFjZWE5NWE1ZWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLNDytHNTZyvNCSS4YeQE0/9iMeZ zBvmk4k1Kc9CdHzMZHpZ38/9J85FkoCibsEMQZ1EJx65Hsns55KPm7GlXw/XU9r9 zGR1SP3c/dXa7tKwuAqaEOWg8bTjnubM5GxwZ/vzU4lpgWWwa5AY4Izam7n0F6Gl 9uLHOx8SSN39lrQE9XEcQnvMHHI/cfFGwRzwoTVCXhTmU2uDd648qdTR+VVuoH0z Q+zvoMWhapxtB3Hu2wd+vHM0blVAsyYE605Q1ABVW15ZNMxVoKmr54HVovTUoTqq 1u90+l9FsIQCdBelt/R6GhW6MevZEbxNLPq+6Q7QYerqcD/MWxRTA2BaKQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFISUVVHytZIOrkKIqsGScc6pWl6rMB8GA1UdIwQY MBaAFFnTaiHps2jXSLq4x3vr3eLCJ8bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQt NDBlYTgwODkyZjAzLzEvaEpSVlVmSzFrZzZ1UW9pcXdaSnh6cWxhWHFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQtNDBlYTgwODkyZjAz LzEvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQBwpOIMCEE AgACMBsDBwAqB+SAAAADBwAqB+SAAQADBwAqB+SACqowDQYJKoZIhvcNAQELBQAD ggEBAGnCUujACApNLMI9N+1p83moY7DfXdGQtsAHZhwYv26JTLxFeS9e3qauANwo wvQDAtGrcxirn2yOSrOz0Tes66VsegevwV192WwcejQSIV0FeqbsMZoibn1wlW92 rSM8z4qnyQigz/LPuI4LaKiVWLbl8CFEmmHytVaVieFWBVxy1pG+1dBohlEmoEKj x/i6nInIneQQGZpMGks12Q448+KmRjQQtAMErF7jsKwYqAXMg2guAceDhy6W4Wzz nzMKAfTCjgzoRr9XFUCMTWOjeXAs73GIzkVUDIYVgnnmDyY8dpdKQ53PKHeun+Gf mcjlJJkSCXkx7mkaB9Upej9yWcM= -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:56 2026 by rpki-client