This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/h7aUOqQIAGVx29wKcHsmI73SdWI.roa File: h7aUOqQIAGVx29wKcHsmI73SdWI.roa (raw, json) Hash identifier: nXej1/AfJF2/TdKlqz14CbVM6VY7sIDvsNtbQhZWQmc= Subject key identifier: 87:B6:94:3A:A4:08:00:65:71:DB:DC:0A:70:7B:26:23:BD:D2:75:62 Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068 Certificate serial: 019B79ED3C836DB68619F7A6544CB5609584 Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/h7aUOqQIAGVx29wKcHsmI73SdWI.roa Signing time: Thu 01 Jan 2026 14:19:09 +0000 ROA not before: Thu 01 Jan 2026 14:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202658 IP address blocks: 45.14.248.0/22 maxlen: 22 185.157.184.0/22 maxlen: 22 2a01:ff40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3c:83:6d:b6:86:19:f7:a6:54:4c:b5:60:95:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068 Validity Not Before: Jan 1 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87b6943aa408006571dbdc0a707b2623bdd27562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:57:37:96:a7:ba:c9:34:83:01:cf:d2:66:40: 90:42:b0:7c:49:32:b1:45:85:69:14:9e:26:f2:ba: 8b:25:a8:d5:a6:38:43:93:17:05:e4:13:16:2a:83: 74:38:51:a7:61:30:d0:8d:3b:cb:d0:5a:ff:f2:ff: 75:11:91:e0:14:3a:e6:86:67:17:1b:46:01:53:ec: 31:a7:96:cd:db:23:0e:d2:c7:66:ea:aa:48:cb:b6: 0b:b6:04:9e:87:92:5f:0e:ae:f8:31:cd:17:61:0d: a5:38:a2:7f:b4:d1:da:9b:4d:81:96:d5:9c:06:01: 70:8a:30:28:8d:93:ed:d7:af:36:ea:ba:ce:4f:5b: 9a:50:27:fb:bc:36:cb:d3:77:94:e3:82:ce:35:e8: 94:b5:03:cc:49:6e:51:47:87:4c:54:da:d0:59:2e: a8:90:f3:8a:c6:d0:ef:6c:63:db:8a:71:31:bc:25: f6:43:be:d4:cc:3b:c8:ac:1a:9c:14:5b:80:56:8a: 26:42:0b:9d:f1:38:90:c1:ba:94:6b:63:70:0a:94: dc:53:c9:6e:d6:ea:84:da:fc:1a:53:99:ac:38:09: b8:f2:9a:68:cf:30:28:ff:e2:14:8b:ac:36:8e:fe: 77:23:39:95:86:3d:f8:e4:36:93:bd:0f:0b:f8:b9: 5e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B6:94:3A:A4:08:00:65:71:DB:DC:0A:70:7B:26:23:BD:D2:75:62 X509v3 Authority Key Identifier: keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/h7aUOqQIAGVx29wKcHsmI73SdWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.248.0/22 185.157.184.0/22 IPv6: 2a01:ff40::/29 Signature Algorithm: sha256WithRSAEncryption 72:a3:47:8d:d4:e9:4d:e3:b1:f9:1e:12:de:a4:69:d9:c0:1c: 02:37:1f:99:a7:c9:7e:e0:85:14:4e:24:58:b8:a8:79:3d:ae: 57:93:67:4c:89:35:1a:4c:5e:1e:dc:45:50:3d:80:47:d7:95: 12:a2:ff:f8:2b:a7:c2:f2:ad:96:72:60:8f:8a:36:10:18:8c: 58:b1:b3:c2:df:26:d6:39:7c:23:82:f1:6f:de:0c:4c:ad:1d: 34:27:63:c5:57:44:57:00:34:c6:5c:e3:66:93:f3:c1:4d:f3: 2c:fe:9d:44:6d:a0:c5:aa:f0:1b:60:3e:ba:bc:eb:6d:1e:d9: ad:bb:4c:64:63:5d:e4:63:a1:70:c8:9e:80:0f:80:21:8a:7b: e5:79:db:c2:f9:38:4b:14:36:80:df:69:ff:0c:d6:62:97:9c: 67:20:34:df:0a:a6:ba:9b:be:e2:61:cc:ee:9b:d0:63:a0:35: 8a:5c:51:ca:56:28:44:85:ab:a3:2a:1a:3e:e3:dd:29:aa:5a: 03:79:74:13:e8:ac:cb:11:19:68:c2:66:11:be:a7:00:eb:02: df:54:dc:2b:09:de:4c:50:57:d1:2f:d6:4b:d1:ff:3a:20:25: f6:7b:d6:c0:54:84:a3:b1:48:de:8b:7c:d8:5c:fe:58:96:c3: 08:31:39:95 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57TyDbbaGGfemVEy1YJWEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjRmMmRkMGI5ODdhYjc1ZTM3OWY4MTc3YTQxNzZhMzA4 NjAwNjgwHhcNMjYwMTAxMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2I2OTQzYWE0MDgwMDY1NzFkYmRjMGE3MDdiMjYyM2JkZDI3NTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Fc3lqe6yTSDAc/SZkCQQrB8STKx RYVpFJ4m8rqLJajVpjhDkxcF5BMWKoN0OFGnYTDQjTvL0Fr/8v91EZHgFDrmhmcX G0YBU+wxp5bN2yMO0sdm6qpIy7YLtgSeh5JfDq74Mc0XYQ2lOKJ/tNHam02BltWc BgFwijAojZPt16826rrOT1uaUCf7vDbL03eU44LONeiUtQPMSW5RR4dMVNrQWS6o kPOKxtDvbGPbinExvCX2Q77UzDvIrBqcFFuAVoomQgud8TiQwbqUa2NwCpTcU8lu 1uqE2vwaU5msOAm48ppozzAo/+IUi6w2jv53IzmVhj345DaTvQ8L+LlewwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIe2lDqkCABlcdvcCnB7JiO90nViMB8GA1UdIwQY MBaAFFJk8t0LmHq3XjefgXekF2owhgBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81YzEwZWYtNmQzYy00NWU0LThlZjkt OWQ3OTRlZTE0ZGQwLzEvaDdhVU9xUUlBR1Z4Mjl3S2NIc21JNzNTZFdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS81YzEwZWYtNmQzYy00NWU0LThlZjktOWQ3OTRlZTE0ZGQw LzEvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLQ74AwQC uZ24MA0EAgACMAcDBQMqAf9AMA0GCSqGSIb3DQEBCwUAA4IBAQByo0eN1OlN47H5 HhLepGnZwBwCNx+Zp8l+4IUUTiRYuKh5Pa5Xk2dMiTUaTF4e3EVQPYBH15USov/4 K6fC8q2WcmCPijYQGIxYsbPC3ybWOXwjgvFv3gxMrR00J2PFV0RXADTGXONmk/PB TfMs/p1EbaDFqvAbYD66vOttHtmtu0xkY13kY6FwyJ6AD4AhinvledvC+ThLFDaA 32n/DNZil5xnIDTfCqa6m77iYczum9BjoDWKXFHKVihEhaujKho+490pqloDeXQT 6KzLERlowmYRvqcA6wLfVNwrCd5MUFfRL9ZL0f86ICX2e9bAVISjsUjei3zYXP5Y lsMIMTmV -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:44 2026 by rpki-client