This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/H00Omd7RPitereQtVkcKdJ7rvQE.roa File: H00Omd7RPitereQtVkcKdJ7rvQE.roa (raw, json) Hash identifier: P3INZZ+wxZ5iAVG5bG8aZrx0nXJci1wMPc5cl04gndw= Subject key identifier: 1F:4D:0E:99:DE:D1:3E:2B:5E:AD:E4:2D:56:47:0A:74:9E:EB:BD:01 Certificate issuer: /CN=1ad61a52f1082ecf4c97b5122b4611225073451b Certificate serial: 019B7F826859C3634B082AB488ED5B5B3CDC Authority key identifier: 1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/H00Omd7RPitereQtVkcKdJ7rvQE.roa Signing time: Fri 02 Jan 2026 16:20:11 +0000 ROA not before: Fri 02 Jan 2026 16:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25540 IP address blocks: 141.98.172.0/24 maxlen: 24 2a09:28c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:68:59:c3:63:4b:08:2a:b4:88:ed:5b:5b:3c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ad61a52f1082ecf4c97b5122b4611225073451b Validity Not Before: Jan 2 16:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f4d0e99ded13e2b5eade42d56470a749eebbd01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:67:d3:c2:ee:1f:8a:f6:5c:64:0c:a0:70:d6: de:12:a4:e2:e7:96:6b:5f:b0:e9:f8:10:07:31:9a: a8:78:e3:ef:1c:cf:fb:77:43:9a:6c:51:9a:58:e0: 12:c6:14:1e:0e:ff:67:b1:59:c9:19:23:1d:dd:f3: 3a:59:e7:ff:97:9c:e1:0e:8c:77:32:d0:a1:e5:78: ea:89:f0:24:12:78:e1:a4:6b:3c:d0:48:92:b9:49: dd:27:8d:03:b9:a2:4e:dd:50:20:0c:89:7c:b5:e9: fd:af:dd:82:bc:af:b6:24:b6:cf:76:2a:44:8a:fe: f3:61:80:c6:52:27:b9:8a:0a:e3:a5:c8:45:3d:2a: 45:6f:06:75:d0:ea:30:5a:1b:62:7f:87:a3:e2:24: e2:4f:99:60:26:68:f5:23:95:95:48:35:15:d5:6e: f7:66:27:8c:36:16:b2:4a:5c:8d:8d:96:5a:2d:1c: da:64:7a:42:d6:cf:ea:ca:b4:5e:cf:3c:75:e1:bf: 65:77:66:ca:22:b4:6c:8a:a2:3c:d7:90:31:c7:7c: 1a:92:14:73:f1:b3:e9:b3:1f:ed:b0:a2:e2:02:a2: 45:a7:f3:e9:24:54:6d:7a:86:16:c9:23:68:8a:d4: c8:2d:9b:a9:ea:c6:f0:86:b5:ec:c3:24:51:43:fa: ec:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4D:0E:99:DE:D1:3E:2B:5E:AD:E4:2D:56:47:0A:74:9E:EB:BD:01 X509v3 Authority Key Identifier: keyid:1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/H00Omd7RPitereQtVkcKdJ7rvQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.172.0/24 IPv6: 2a09:28c0::/48 Signature Algorithm: sha256WithRSAEncryption da:d0:2e:4b:8f:a9:01:91:85:cd:04:ea:eb:08:4f:7b:e6:29: 36:38:9c:c2:62:b6:a0:0d:89:c3:b4:fa:1b:fe:dd:a5:8d:ef: 4d:0c:1b:5d:6b:f6:e4:4c:e7:ae:f0:ba:85:e0:b0:32:68:a4: 65:97:93:db:9b:d2:3f:3f:8b:ad:98:b5:20:fd:b1:b6:fe:3f: 69:37:fd:48:48:6e:05:22:b4:23:20:61:50:46:bc:c1:a1:f2: ac:fd:a2:6a:c1:64:72:c6:fa:88:50:0b:08:4d:23:9e:2b:3e: 36:40:02:d7:76:94:cf:ac:d4:73:ea:44:e3:bc:ef:48:bd:4a: 5d:ab:9c:94:06:c4:7f:2e:3b:af:e8:f9:72:79:7c:a7:df:9e: 15:fa:14:d8:dd:a4:9e:2b:19:3d:17:2f:77:b9:a3:45:39:5d: 85:6c:47:51:bd:8d:55:75:94:56:6c:27:60:d8:d9:41:9e:02: 75:ad:8e:ed:72:23:c5:93:3e:a3:bb:e2:5a:bc:20:c8:05:cd: 82:34:ea:fe:e4:37:96:a6:f7:f9:94:0c:01:4f:3b:15:09:58: b2:96:1d:c9:21:87:02:11:79:fd:29:7f:9a:d0:a7:b3:bc:44: c3:a8:5d:71:45:f7:25:d1:29:60:94:5b:d0:92:c6:df:13:81: 16:3e:01:99 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/gmhZw2NLCCq0iO1bWzzcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZDYxYTUyZjEwODJlY2Y0Yzk3YjUxMjJiNDYxMTIyNTA3 MzQ1MWIwHhcNMjYwMTAyMTYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjRkMGU5OWRlZDEzZTJiNWVhZGU0MmQ1NjQ3MGE3NDllZWJiZDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmfTwu4fivZcZAygcNbeEqTi55Zr X7Dp+BAHMZqoeOPvHM/7d0OabFGaWOASxhQeDv9nsVnJGSMd3fM6Wef/l5zhDox3 MtCh5XjqifAkEnjhpGs80EiSuUndJ40DuaJO3VAgDIl8ten9r92CvK+2JLbPdipE iv7zYYDGUie5igrjpchFPSpFbwZ10OowWhtif4ej4iTiT5lgJmj1I5WVSDUV1W73 ZieMNhaySlyNjZZaLRzaZHpC1s/qyrRezzx14b9ld2bKIrRsiqI815Axx3wakhRz 8bPpsx/tsKLiAqJFp/PpJFRteoYWySNoitTILZup6sbwhrXswyRRQ/rsdQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFB9NDpne0T4rXq3kLVZHCnSe670BMB8GA1UdIwQY MBaAFBrWGlLxCC7PTJe1EitGESJQc0UbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3RZYVV2RUlMczlNbDdVU0swWVJJbEJ6UlJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81OWQ1NTUtMjBiZC00YzQyLTg0YmEt NzJjZTk1YmE5YWZhLzEvSDAwT21kN1JQaXRlcmVRdFZrY0tkSjdydlFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81OWQ1NTUtMjBiZC00YzQyLTg0YmEtNzJjZTk1YmE5YWZh LzEvR3RZYVV2RUlMczlNbDdVU0swWVJJbEJ6UlJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAjWKsMA8E AgACMAkDBwAqCSjAAAAwDQYJKoZIhvcNAQELBQADggEBANrQLkuPqQGRhc0E6usI T3vmKTY4nMJitqANicO0+hv+3aWN700MG11r9uRM567wuoXgsDJopGWXk9ub0j8/ i62YtSD9sbb+P2k3/UhIbgUitCMgYVBGvMGh8qz9omrBZHLG+ohQCwhNI54rPjZA Atd2lM+s1HPqROO870i9Sl2rnJQGxH8uO6/o+XJ5fKffnhX6FNjdpJ4rGT0XL3e5 o0U5XYVsR1G9jVV1lFZsJ2DY2UGeAnWtju1yI8WTPqO74lq8IMgFzYI06v7kN5am 9/mUDAFPOxUJWLKWHckhhwIRef0pf5rQp7O8RMOoXXFF9yXRKWCUW9CSxt8TgRY+ AZk= -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:29 2026 by rpki-client