This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/h2Pj0fup6PmGgboIXfm183EEF9c.roa File: h2Pj0fup6PmGgboIXfm183EEF9c.roa (raw, json) Hash identifier: eferMGwRa6YXz1Q8h3PiGClbC5vOEBn3msIVlW/jo08= Subject key identifier: 87:63:E3:D1:FB:A9:E8:F9:86:81:BA:08:5D:F9:B5:F3:71:04:17:D7 Certificate issuer: /CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193 Certificate serial: 019B7D5D2EF8A8FF2CA6B3F6F893237519F2 Authority key identifier: 1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/h2Pj0fup6PmGgboIXfm183EEF9c.roa Signing time: Fri 02 Jan 2026 06:20:17 +0000 ROA not before: Fri 02 Jan 2026 06:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 148.196.0.0/16 maxlen: 16 157.26.0.0/16 maxlen: 16 192.135.150.0/23 maxlen: 24 192.135.151.0/24 maxlen: 24 192.135.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2e:f8:a8:ff:2c:a6:b3:f6:f8:93:23:75:19:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193 Validity Not Before: Jan 2 06:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8763e3d1fba9e8f98681ba085df9b5f3710417d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:66:ed:96:40:d8:70:fc:02:e8:78:b7:15:03: 90:ad:53:1b:45:a0:09:4c:49:79:f6:d6:27:24:e0: ad:4a:7e:32:c5:d1:d7:85:e0:77:cd:17:66:2a:d0: d6:4d:b1:97:df:4f:73:f0:99:bf:4f:a9:d3:83:b0: 01:70:c8:b3:49:2f:67:19:ce:0f:af:ed:3b:45:48: 7e:d9:a0:89:ef:31:77:90:82:e7:40:89:9e:2d:be: 58:50:05:eb:70:53:a9:b1:5b:33:68:06:d0:51:f1: e2:14:3f:e4:6b:4f:a4:3c:ad:5e:d8:d4:f6:f8:85: 90:39:dd:2c:64:c2:9c:41:c8:9f:36:84:a8:b1:60: dc:11:5c:3a:2b:79:11:82:c7:82:f8:76:d8:ca:eb: 85:ae:f6:95:f4:94:26:de:b1:9e:9c:a0:a6:e4:18: 78:e7:e2:ad:93:0d:95:65:ae:73:70:31:05:64:24: 28:cf:a7:3f:30:41:e7:89:94:09:48:d8:7a:ce:47: 87:6e:2a:0d:ea:2b:1a:cf:4a:16:21:03:aa:d6:e6: 9e:22:01:63:a8:df:40:a7:00:4b:1b:0a:c3:ee:63: 6d:14:1f:cc:26:75:77:d1:e0:91:8b:86:6b:b9:4e: 67:f0:07:65:40:5b:37:0a:61:87:43:b5:6b:af:9c: 20:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:63:E3:D1:FB:A9:E8:F9:86:81:BA:08:5D:F9:B5:F3:71:04:17:D7 X509v3 Authority Key Identifier: keyid:1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/h2Pj0fup6PmGgboIXfm183EEF9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.196.0.0/16 157.26.0.0/16 192.135.150.0-192.135.159.255 Signature Algorithm: sha256WithRSAEncryption 56:5a:94:00:46:99:37:5e:bf:ce:fc:55:af:8b:9d:5f:7e:ad: 68:89:a5:53:29:f3:e5:f3:91:d4:67:00:46:53:24:12:6f:79: 9c:20:e1:de:16:e3:ff:2b:71:05:1c:1b:3c:ba:ac:ae:98:bb: 3f:43:f1:e2:e7:9f:6c:0b:e8:45:07:41:f0:f8:b8:df:44:64: 3e:d9:fd:27:43:1c:9d:20:bb:1b:96:d5:61:af:ba:84:a0:f0: 35:3c:d4:42:68:90:f5:41:31:4a:7e:6c:8b:6a:a0:96:36:47: bf:39:59:d4:ef:cf:38:06:77:95:fd:7e:7a:93:5e:ae:f6:ff: 48:0f:e1:2e:4f:82:57:b9:4e:54:18:e2:0c:5f:29:2b:c2:c1: 3d:40:b8:a5:0f:11:a3:39:e3:7f:50:ba:39:09:7e:a1:f9:22: c5:53:1f:d3:91:ef:e7:17:9b:df:be:45:12:70:e0:d5:ae:2e: 0b:8d:2e:07:8d:57:65:bd:d8:0f:6f:8e:8e:6a:a0:b6:ed:10: 59:be:94:1e:3a:5b:2a:37:96:94:6c:01:a2:8a:0b:c6:89:f8: b7:ee:c9:1a:ae:ca:f5:b0:09:54:87:7f:c6:76:10:60:b3:5b: 87:41:f6:80:e4:e4:5c:d8:1b:08:ac:7f:e2:ca:14:f6:90:03: 1d:33:58:25 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9XS74qP8sprP2+JMjdRnyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYTU1OWQ4YmY2YWMyZDg2OGQwNjY1YWQ1N2QyYzZhYzE0 NzIxOTMwHhcNMjYwMTAyMDYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzYzZTNkMWZiYTllOGY5ODY4MWJhMDg1ZGY5YjVmMzcxMDQxN2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGbtlkDYcPwC6Hi3FQOQrVMbRaAJ TEl59tYnJOCtSn4yxdHXheB3zRdmKtDWTbGX309z8Jm/T6nTg7ABcMizSS9nGc4P r+07RUh+2aCJ7zF3kILnQImeLb5YUAXrcFOpsVszaAbQUfHiFD/ka0+kPK1e2NT2 +IWQOd0sZMKcQcifNoSosWDcEVw6K3kRgseC+HbYyuuFrvaV9JQm3rGenKCm5Bh4 5+Ktkw2VZa5zcDEFZCQoz6c/MEHniZQJSNh6zkeHbioN6isaz0oWIQOq1uaeIgFj qN9ApwBLGwrD7mNtFB/MJnV30eCRi4ZruU5n8AdlQFs3CmGHQ7Vrr5wgBQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIdj49H7qej5hoG6CF35tfNxBBfXMB8GA1UdIwQY MBaAFB6lWdi/asLYaNBmWtV9LGrBRyGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEt NWZmY2M0NmFlN2I1LzEvaDJQajBmdXA2UG1HZ2JvSVhmbTE4M0VFRjljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEtNWZmY2M0NmFlN2I1 LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwMAlMQDAwCd GjAMAwQBwIeWAwQFwIeAMA0GCSqGSIb3DQEBCwUAA4IBAQBWWpQARpk3Xr/O/FWv i51ffq1oiaVTKfPl85HUZwBGUyQSb3mcIOHeFuP/K3EFHBs8uqyumLs/Q/Hi559s C+hFB0Hw+LjfRGQ+2f0nQxydILsbltVhr7qEoPA1PNRCaJD1QTFKfmyLaqCWNke/ OVnU7884BneV/X56k16u9v9ID+EuT4JXuU5UGOIMXykrwsE9QLilDxGjOeN/ULo5 CX6h+SLFUx/Tke/nF5vfvkUScODVri4LjS4HjVdlvdgPb46OaqC27RBZvpQeOlsq N5aUbAGiigvGifi37skarsr1sAlUh3/GdhBgs1uHQfaA5ORc2BsIrH/iyhT2kAMd M1gl -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:12 2026 by rpki-client