This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/h_4gmGFAdBbCBD4uG-WTGKZV_TU.roa File: h_4gmGFAdBbCBD4uG-WTGKZV_TU.roa (raw, json) Hash identifier: P8a4xHG+/TWjE2YM8N7yyLhJbWdTBUAy0FVC8WDBUFg= Subject key identifier: 87:FE:20:98:61:40:74:16:C2:04:3E:2E:1B:E5:93:18:A6:55:FD:35 Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056 Certificate serial: 019B7EA6138BACE1379B55ACEA86369CEB41 Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/h_4gmGFAdBbCBD4uG-WTGKZV_TU.roa Signing time: Fri 02 Jan 2026 12:19:31 +0000 ROA not before: Fri 02 Jan 2026 12:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206471 IP address blocks: 194.127.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:13:8b:ac:e1:37:9b:55:ac:ea:86:36:9c:eb:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056 Validity Not Before: Jan 2 12:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87fe209861407416c2043e2e1be59318a655fd35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:22:15:d9:e0:6c:12:b0:78:68:8f:c5:59:51: 71:6e:56:a7:c4:fb:32:28:ab:ba:57:67:ee:16:6f: b7:d8:20:81:e3:3b:2c:e0:ea:d7:17:7e:6a:96:8b: 0e:93:b0:0b:62:5f:82:b3:22:bb:b8:dd:16:ab:f8: bb:4e:7b:0f:dc:35:2f:73:4c:56:09:ae:8b:45:7b: d9:bd:9b:67:94:46:b5:77:5e:19:43:94:ff:f5:e4: 8a:fb:60:8b:50:cc:41:33:f0:a3:ea:e8:ac:92:dd: 7d:4e:5c:e3:14:d0:ba:85:7d:1a:8e:25:5f:69:84: da:9d:c1:d4:a5:48:a3:c0:50:e9:d5:a2:94:69:1e: fc:f4:7a:78:f4:49:fa:bf:a1:1b:45:4d:41:28:05: d3:62:14:38:39:45:19:af:8b:41:48:78:94:80:a1: b7:74:22:c1:1f:05:9b:2a:0c:2a:37:8d:f5:1f:e0: 48:cc:c3:55:55:63:4b:f9:87:7a:33:76:48:bc:fb: 26:d2:40:cd:64:69:bd:09:f4:72:cd:91:5f:e3:f4: f9:48:14:f6:87:10:91:83:d3:93:ba:37:61:c3:a3: b0:7f:0d:c9:e2:0a:cd:8c:24:38:61:dd:fb:d3:a8: 62:0a:67:56:5a:b3:da:56:f6:15:84:aa:51:bc:a6: 4c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FE:20:98:61:40:74:16:C2:04:3E:2E:1B:E5:93:18:A6:55:FD:35 X509v3 Authority Key Identifier: keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/h_4gmGFAdBbCBD4uG-WTGKZV_TU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.127.109.0/24 Signature Algorithm: sha256WithRSAEncryption 77:6d:10:b2:4a:da:6d:3e:a3:3a:ce:aa:f7:a0:8e:8e:3e:a4: 85:5c:59:84:f4:cd:fa:41:2f:f3:10:b3:39:ba:2a:de:b4:0e: 6d:19:7d:19:ca:30:d5:d6:cd:31:8e:cd:bf:73:ba:7b:00:af: 5d:9a:d9:9a:20:8d:f3:bb:07:b4:9f:3a:c9:37:49:a0:a0:21: e1:8b:ab:0b:f9:ce:0e:f5:97:1f:7d:56:91:cb:34:e9:9c:c5: 03:6b:7c:5b:12:63:42:f4:10:63:52:17:79:13:2b:bc:62:d2: e3:85:7d:a2:b4:1f:e5:76:f8:f3:35:29:79:d1:93:96:1f:61: fa:05:fb:2e:4c:ca:7b:ab:de:1b:16:bd:86:52:82:fd:35:3f: a9:1c:4b:2a:2e:61:0f:4d:d7:02:63:10:ce:5f:e3:ed:19:a5: 2c:ad:45:17:22:53:73:bc:82:0c:8f:cd:4e:3a:28:2a:49:c5: bb:db:5d:a4:32:c0:88:0e:80:58:93:b4:aa:bf:f2:47:75:2e: 3b:e8:a3:b9:22:71:c0:38:1b:0d:f0:29:95:bf:ec:3a:87:67: 48:4a:b9:ce:c5:e5:ac:81:8b:8c:c1:2d:a3:9c:55:ee:b3:04: bf:75:42:21:02:ae:5e:c7:14:2e:cf:23:ce:1c:e6:38:88:33: 4f:c6:14:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+phOLrOE3m1Ws6oY2nOtBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZTYyM2UyYWZmN2IwM2FmZWI5NDI2MDM0OGMxNjMzYjU0 ZDkwNTYwHhcNMjYwMTAyMTIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2ZlMjA5ODYxNDA3NDE2YzIwNDNlMmUxYmU1OTMxOGE2NTVmZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCIV2eBsErB4aI/FWVFxblanxPsy KKu6V2fuFm+32CCB4zss4OrXF35qlosOk7ALYl+CsyK7uN0Wq/i7TnsP3DUvc0xW Ca6LRXvZvZtnlEa1d14ZQ5T/9eSK+2CLUMxBM/Cj6uiskt19TlzjFNC6hX0ajiVf aYTancHUpUijwFDp1aKUaR789Hp49En6v6EbRU1BKAXTYhQ4OUUZr4tBSHiUgKG3 dCLBHwWbKgwqN431H+BIzMNVVWNL+Yd6M3ZIvPsm0kDNZGm9CfRyzZFf4/T5SBT2 hxCRg9OTujdhw6Owfw3J4grNjCQ4Yd3706hiCmdWWrPaVvYVhKpRvKZMNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIf+IJhhQHQWwgQ+LhvlkximVf01MB8GA1UdIwQY MBaAFN7mI+Kv97A6/rlCYDSMFjO1TZBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQt NmNjMWQzZWE4MzJlLzEvaF80Z21HRkFkQmJDQkQ0dUctV1RHS1pWX1RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQtNmNjMWQzZWE4MzJl LzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn9tMA0G CSqGSIb3DQEBCwUAA4IBAQB3bRCyStptPqM6zqr3oI6OPqSFXFmE9M36QS/zELM5 uiretA5tGX0ZyjDV1s0xjs2/c7p7AK9dmtmaII3zuwe0nzrJN0mgoCHhi6sL+c4O 9ZcffVaRyzTpnMUDa3xbEmNC9BBjUhd5Eyu8YtLjhX2itB/ldvjzNSl50ZOWH2H6 BfsuTMp7q94bFr2GUoL9NT+pHEsqLmEPTdcCYxDOX+PtGaUsrUUXIlNzvIIMj81O OigqScW7212kMsCIDoBYk7Sqv/JHdS476KO5InHAOBsN8CmVv+w6h2dISrnOxeWs gYuMwS2jnFXuswS/dUIhAq5exxQuzyPOHOY4iDNPxhRY -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:47 2026 by rpki-client