This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/hT5gh2FKGh6IG9dmw-QznV50n6I.roa File: hT5gh2FKGh6IG9dmw-QznV50n6I.roa (raw, json) Hash identifier: W5X/W4lZOgN4/2A3moguGVvki8jP+tJhJCN4aT+0thA= Subject key identifier: 85:3E:60:87:61:4A:1A:1E:88:1B:D7:66:C3:E4:33:9D:5E:74:9F:A2 Certificate issuer: /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3 Certificate serial: 019B7C13546D2FD8C93C5589530DB4E736EA Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/hT5gh2FKGh6IG9dmw-QznV50n6I.roa Signing time: Fri 02 Jan 2026 00:20:00 +0000 ROA not before: Fri 02 Jan 2026 00:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207465 IP address blocks: 194.147.139.0/24 maxlen: 24 2a07:e480:2::/48 maxlen: 48 2a07:e480:aaa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:54:6d:2f:d8:c9:3c:55:89:53:0d:b4:e7:36:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3 Validity Not Before: Jan 2 00:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=853e6087614a1a1e881bd766c3e4339d5e749fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4b:85:16:c6:e4:5a:bd:09:76:fa:3f:29:7a: 67:fe:fe:58:53:65:5e:89:f4:da:dc:28:99:88:71: 31:ec:24:cd:46:4b:bf:5c:38:b3:99:eb:e4:1c:1c: 50:06:34:48:1d:41:6b:9a:34:a4:71:dc:80:c9:72: 68:29:ce:59:f1:c5:c7:17:cb:15:04:a4:12:3a:97: e9:a0:d5:a2:74:e8:d1:2b:b0:e7:31:fc:59:ad:fb: 07:93:10:57:2a:d6:2c:ad:4b:82:10:b1:6b:0e:b2: 49:18:6e:9e:83:e7:e6:01:57:3e:c9:33:4f:e0:73: 34:ff:0c:74:8e:3a:86:7c:02:23:d5:f1:14:1f:db: 3e:fa:43:8f:7b:ca:27:66:38:e0:a5:a3:9e:8a:e8: 7d:e6:f2:fa:58:ee:14:d4:a0:72:9a:ec:23:b9:fe: 06:80:e2:e8:72:82:d9:83:ac:54:66:da:ab:60:a4: 6a:f5:1b:8f:92:39:cb:61:ff:25:89:1e:61:8f:85: 3f:1f:18:64:1a:c3:23:fc:0b:68:74:80:a3:9b:46: c2:c9:4a:26:33:e3:16:04:24:59:4f:a8:6d:c9:a5: 0c:58:b0:75:d0:2b:37:d9:d4:a5:52:04:af:ae:60: ba:e8:2f:f8:97:bb:5a:9b:6c:09:1b:b2:c7:3f:0a: d5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3E:60:87:61:4A:1A:1E:88:1B:D7:66:C3:E4:33:9D:5E:74:9F:A2 X509v3 Authority Key Identifier: keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/hT5gh2FKGh6IG9dmw-QznV50n6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.139.0/24 IPv6: 2a07:e480:2::/48 2a07:e480:aaa::/48 Signature Algorithm: sha256WithRSAEncryption 29:19:1c:a6:16:5d:8c:9e:bc:96:06:d9:4c:23:ce:dd:65:b7: 88:a0:e6:32:4c:3c:05:21:1a:e9:53:b8:09:ae:45:1b:f9:6c: c1:2a:da:d5:47:e6:ee:77:dd:a3:5b:8c:4b:7b:36:09:95:5d: 2c:43:f3:d4:8f:da:0c:2d:db:37:16:dc:5b:5c:83:a4:49:1b: b0:3a:83:91:3b:8c:94:c0:59:39:4c:44:7a:01:89:b7:56:13: 63:ea:ae:42:e5:10:54:71:61:1e:29:6c:a9:5c:5e:5a:fe:fe: 19:4a:1d:8e:f6:9d:d1:0c:1d:0f:74:58:95:3c:d4:36:c9:d6: 65:03:c5:ea:ac:fc:00:db:c6:a0:1f:90:35:03:db:ec:cb:31: a7:1b:f3:2f:3a:0e:3a:4d:6d:12:4b:49:0c:96:ec:e1:de:cb: e8:89:d7:f6:c6:59:0b:cc:46:de:26:5a:20:7b:aa:79:85:e2: 71:1d:34:87:70:da:13:50:0a:36:82:9b:3c:ee:7f:b8:6d:b9: 55:12:69:d6:2f:0c:43:00:1c:c5:06:c1:80:cb:29:ca:ba:59: cd:fa:ab:32:4b:13:26:5e:40:d2:22:44:64:e8:b9:14:a4:15: 8c:dc:8a:5f:c2:c7:62:31:25:80:83:38:3b:2e:07:04:ac:fa: 49:52:61:d8 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt8E1RtL9jJPFWJUw205zbqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZDM2YTIxZTliMzY4ZDc0OGJhYjhjNzdiZWJkZGUyYzIy N2M2YzMwHhcNMjYwMTAyMDAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTNlNjA4NzYxNGExYTFlODgxYmQ3NjZjM2U0MzM5ZDVlNzQ5ZmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kuFFsbkWr0Jdvo/KXpn/v5YU2Ve ifTa3CiZiHEx7CTNRku/XDizmevkHBxQBjRIHUFrmjSkcdyAyXJoKc5Z8cXHF8sV BKQSOpfpoNWidOjRK7DnMfxZrfsHkxBXKtYsrUuCELFrDrJJGG6eg+fmAVc+yTNP 4HM0/wx0jjqGfAIj1fEUH9s++kOPe8onZjjgpaOeiuh95vL6WO4U1KBymuwjuf4G gOLocoLZg6xUZtqrYKRq9RuPkjnLYf8liR5hj4U/HxhkGsMj/AtodICjm0bCyUom M+MWBCRZT6htyaUMWLB10Cs32dSlUgSvrmC66C/4l7tam2wJG7LHPwrVCQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFIU+YIdhShoeiBvXZsPkM51edJ+iMB8GA1UdIwQY MBaAFFnTaiHps2jXSLq4x3vr3eLCJ8bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQt NDBlYTgwODkyZjAzLzEvaFQ1Z2gyRktHaDZJRzlkbXctUXpuVjUwbjZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQtNDBlYTgwODkyZjAz LzEvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAwpOLMBgE AgACMBIDBwAqB+SAAAIDBwAqB+SACqowDQYJKoZIhvcNAQELBQADggEBACkZHKYW XYyevJYG2Uwjzt1lt4ig5jJMPAUhGulTuAmuRRv5bMEq2tVH5u533aNbjEt7NgmV XSxD89SP2gwt2zcW3Ftcg6RJG7A6g5E7jJTAWTlMRHoBibdWE2PqrkLlEFRxYR4p bKlcXlr+/hlKHY72ndEMHQ90WJU81DbJ1mUDxeqs/ADbxqAfkDUD2+zLMacb8y86 DjpNbRJLSQyW7OHey+iJ1/bGWQvMRt4mWiB7qnmF4nEdNIdw2hNQCjaCmzzuf7ht uVUSadYvDEMAHMUGwYDLKcq6Wc36qzJLEyZeQNIiRGTouRSkFYzcil/Cx2IxJYCD ODsuBwSs+klSYdg= -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:16 2026 by rpki-client