This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/H6mXElUtGqkaAjyOWeq60UIxFTg.roa File: H6mXElUtGqkaAjyOWeq60UIxFTg.roa (raw, json) Hash identifier: w/TMQtz3h82vi+GWHVA7q+rO8Depf0bjlxba/vl6eeg= Subject key identifier: 1F:A9:97:12:55:2D:1A:A9:1A:02:3C:8E:59:EA:BA:D1:42:31:15:38 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 019B7910F2DB89D86EA3A639F889F8E398E8 Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/H6mXElUtGqkaAjyOWeq60UIxFTg.roa Signing time: Thu 01 Jan 2026 10:18:32 +0000 ROA not before: Thu 01 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52468 IP address blocks: 158.172.217.0/24 maxlen: 24 158.172.220.0/23 maxlen: 23 158.172.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f2:db:89:d8:6e:a3:a6:39:f8:89:f8:e3:98:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fa99712552d1aa91a023c8e59eabad142311538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:74:bf:60:cd:71:69:36:fe:2e:1b:dc:92:46: e8:8c:90:b3:c3:01:49:68:db:0c:13:1b:ba:1a:96: 59:64:03:3b:f3:5c:f7:32:0a:dc:b2:86:47:ae:6d: 23:68:49:60:c9:1f:ba:5b:02:ae:83:b2:c3:d3:e8: b9:b0:ee:6d:e5:3d:e1:df:92:8e:88:5f:38:7d:8f: a6:e4:aa:ee:f5:ec:c1:e8:4f:f8:a0:f7:df:ec:57: e4:bd:17:06:86:e9:4d:22:33:0c:8f:47:f8:9c:20: 9c:b6:c0:b7:8b:4a:ca:08:d4:1f:70:c1:1a:f3:69: 59:a7:a6:28:46:8a:fd:f7:a9:f0:0a:b0:d6:a9:0f: 11:a6:2a:83:ab:ef:10:47:28:29:6a:80:b3:95:f3: ee:39:43:e4:c3:19:c1:48:86:63:1c:81:52:3f:f3: b3:ee:c8:0e:31:52:85:51:29:22:b8:cf:d4:dc:1b: bb:e6:aa:57:45:94:d9:f4:4f:9f:ab:f8:48:86:c8: 4f:06:38:16:24:e8:75:ac:ad:1f:0f:10:d6:cc:51: 4c:05:64:bc:43:45:50:c9:4d:19:05:51:b1:59:ba: 20:40:7f:15:22:f7:e9:ab:cd:20:89:e0:79:8e:2c: b3:7a:35:ef:4d:2a:54:9b:76:a1:bf:f4:69:a8:d4: 27:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A9:97:12:55:2D:1A:A9:1A:02:3C:8E:59:EA:BA:D1:42:31:15:38 X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/H6mXElUtGqkaAjyOWeq60UIxFTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.172.217.0/24 158.172.220.0-158.172.222.255 Signature Algorithm: sha256WithRSAEncryption 4e:05:63:11:45:9c:fe:c4:4d:34:6a:34:28:3c:b9:ee:13:b8: 14:c5:ed:e5:ca:29:bb:f5:8d:07:a7:93:57:e8:58:48:a3:9b: 02:26:f1:eb:7f:a3:aa:40:d9:55:75:e4:7b:b6:49:35:53:b0: 3e:2e:95:d2:f6:35:d1:2e:4a:5f:c2:f3:c5:bb:0c:1a:c7:70: aa:21:d1:18:42:19:b6:fe:b8:67:d8:b1:1e:c0:40:32:84:0d: 6e:65:05:de:7f:44:31:36:f4:1b:2b:ce:c3:91:49:07:b7:a7: bb:56:b2:6d:31:23:de:6c:5d:6b:59:67:1b:fe:02:75:b0:a3: 4b:03:6c:98:3f:82:4e:36:09:67:a9:43:eb:f6:8a:50:c5:4d: d6:ab:73:30:28:ec:ce:b7:99:ab:3a:b5:ca:7a:a2:05:57:21: 14:95:14:52:f7:3e:65:a6:48:14:e8:e7:16:cf:f6:b9:3e:ac: d6:5e:3e:8d:9a:44:2f:a8:5e:41:e9:fd:6c:1e:f4:8a:ac:c8: 08:06:1b:84:a8:86:11:2f:e1:98:c6:fb:f8:96:51:78:a3:20: c3:0e:25:0f:10:86:8f:d0:95:6b:1a:33:f8:d4:7a:f8:3e:0e: d9:2a:6d:71:12:17:a5:d8:18:a8:20:b9:db:23:45:cb:af:01: 91:db:a4:f5 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5EPLbidhuo6Y5+In445joMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmE5OTcxMjU1MmQxYWE5MWEwMjNjOGU1OWVhYmFkMTQyMzExNTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XS/YM1xaTb+LhvckkbojJCzwwFJ aNsMExu6GpZZZAM781z3MgrcsoZHrm0jaElgyR+6WwKug7LD0+i5sO5t5T3h35KO iF84fY+m5Kru9ezB6E/4oPff7FfkvRcGhulNIjMMj0f4nCCctsC3i0rKCNQfcMEa 82lZp6YoRor996nwCrDWqQ8RpiqDq+8QRygpaoCzlfPuOUPkwxnBSIZjHIFSP/Oz 7sgOMVKFUSkiuM/U3Bu75qpXRZTZ9E+fq/hIhshPBjgWJOh1rK0fDxDWzFFMBWS8 Q0VQyU0ZBVGxWbogQH8VIvfpq80gieB5jiyzejXvTSpUm3ahv/RpqNQnPQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFB+plxJVLRqpGgI8jlnqutFCMRU4MB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvSDZtWEVsVXRHcWthQWp5T1dlcTYwVUl4RlRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAnqzZMAwD BAKerNwDBACerN4wDQYJKoZIhvcNAQELBQADggEBAE4FYxFFnP7ETTRqNCg8ue4T uBTF7eXKKbv1jQenk1foWEijmwIm8et/o6pA2VV15Hu2STVTsD4uldL2NdEuSl/C 88W7DBrHcKoh0RhCGbb+uGfYsR7AQDKEDW5lBd5/RDE29BsrzsORSQe3p7tWsm0x I95sXWtZZxv+AnWwo0sDbJg/gk42CWepQ+v2ilDFTdarczAo7M63mas6tcp6ogVX IRSVFFL3PmWmSBTo5xbP9rk+rNZePo2aRC+oXkHp/Wwe9IqsyAgGG4SohhEv4ZjG +/iWUXijIMMOJQ8Qho/QlWsaM/jUevg+DtkqbXESF6XYGKggudsjRcuvAZHbpPU= -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:07 2026 by rpki-client