This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/H3tBAn476s18gPJKTSL87Rv5Hfw.roa File: H3tBAn476s18gPJKTSL87Rv5Hfw.roa (raw, json) Hash identifier: K4eLaR9vBqA4AN5CoJGHX6K3zIZNHj23kEJNlCUBq5o= Subject key identifier: 1F:7B:41:02:7E:3B:EA:CD:7C:80:F2:4A:4D:22:FC:ED:1B:F9:1D:FC Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019B76EB305C5EB26A8FEE542F9F054803D2 Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/H3tBAn476s18gPJKTSL87Rv5Hfw.roa Signing time: Thu 01 Jan 2026 00:18:03 +0000 ROA not before: Thu 01 Jan 2026 00:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 193.43.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:30:5c:5e:b2:6a:8f:ee:54:2f:9f:05:48:03:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Jan 1 00:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f7b41027e3beacd7c80f24a4d22fced1bf91dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f8:d6:9e:d6:43:51:71:9d:e1:48:46:d0:90: 14:68:16:d0:5c:2c:2e:d8:df:d9:ad:33:21:03:20: d5:b4:98:12:db:bd:27:fd:28:c5:ec:3f:4b:2d:e3: 13:a5:db:21:b5:ce:c6:98:8a:55:03:16:ea:9a:1b: dc:62:01:87:87:49:ba:03:ab:43:aa:46:85:48:8e: 8c:17:d7:e7:01:a2:5b:65:36:39:4c:86:c9:38:c2: ca:8f:b1:9c:df:7e:6a:e2:ee:fb:96:06:af:6e:97: da:e8:8a:a1:83:35:7d:61:99:b6:da:0f:4d:1a:1c: 4c:78:7f:e4:64:66:91:59:79:4a:33:b2:63:e1:af: f4:77:41:5a:4e:65:be:ac:20:39:94:60:77:59:b3: 64:29:fe:6d:18:c4:85:ec:3c:ac:37:7c:e6:4b:ea: 1e:82:c2:b3:e8:09:ef:8b:5c:97:44:90:6b:84:f7: d2:bd:dc:a9:95:47:47:23:db:db:d6:5c:a2:17:da: a1:2c:ac:40:96:e8:bf:e0:18:08:11:d6:b9:84:ce: 6d:f2:6a:9e:a9:9c:b8:77:5f:a2:b6:7c:c6:2b:35: ff:de:d6:a3:4a:35:ce:70:e3:00:cc:de:b6:2e:0e: 1f:8b:ff:14:50:c0:37:43:53:43:48:0e:39:4e:3f: 92:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7B:41:02:7E:3B:EA:CD:7C:80:F2:4A:4D:22:FC:ED:1B:F9:1D:FC X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/H3tBAn476s18gPJKTSL87Rv5Hfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.249.0/24 Signature Algorithm: sha256WithRSAEncryption 39:3d:49:50:c4:1a:2d:74:6b:7b:ea:8a:8d:31:13:1f:e9:40: fd:2c:ae:32:da:b2:91:8f:da:34:96:04:c5:68:72:ec:84:a7: e0:68:1c:24:e4:31:08:85:17:fa:e7:a3:fe:bd:2d:45:8c:04: d6:e1:77:4c:1a:45:6d:e6:31:c4:18:a3:5e:81:f3:c5:80:15: a5:bb:af:a6:4e:05:fd:3e:38:e7:12:5b:42:94:ee:d4:a1:3d: fb:51:bf:f9:12:15:62:90:a7:e9:4b:07:3c:33:db:88:25:52: 2b:78:26:7a:0b:93:8b:a9:1b:bc:f4:09:8b:1d:de:b6:1d:f5: 30:e1:12:c9:a3:12:b0:a0:a6:fc:5c:ea:86:18:71:e5:4e:91: 02:30:55:2a:eb:af:37:ef:5c:5e:f6:b3:56:ad:06:98:37:98: 73:39:34:a9:33:57:f4:ee:38:93:45:ca:9f:95:73:5b:fd:65: 9d:88:e1:86:c2:8e:36:f7:21:bf:6a:ca:9e:aa:0f:0a:ab:0e: ec:74:6c:54:5f:50:2b:2d:e3:16:8a:f9:db:33:2b:7f:0f:92: 6d:8d:9a:ef:28:0d:f5:92:49:41:95:00:63:18:3e:b7:b9:4b: 19:2c:d4:9e:93:7e:55:a8:e0:cc:68:64:ea:a2:82:28:ea:22: 8d:52:c0:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26zBcXrJqj+5UL58FSAPSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjYwMTAxMDAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjdiNDEwMjdlM2JlYWNkN2M4MGYyNGE0ZDIyZmNlZDFiZjkxZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPjWntZDUXGd4UhG0JAUaBbQXCwu 2N/ZrTMhAyDVtJgS270n/SjF7D9LLeMTpdshtc7GmIpVAxbqmhvcYgGHh0m6A6tD qkaFSI6MF9fnAaJbZTY5TIbJOMLKj7Gc335q4u77lgavbpfa6IqhgzV9YZm22g9N GhxMeH/kZGaRWXlKM7Jj4a/0d0FaTmW+rCA5lGB3WbNkKf5tGMSF7DysN3zmS+oe gsKz6Anvi1yXRJBrhPfSvdyplUdHI9vb1lyiF9qhLKxAlui/4BgIEda5hM5t8mqe qZy4d1+itnzGKzX/3tajSjXOcOMAzN62Lg4fi/8UUMA3Q1NDSA45Tj+SlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB97QQJ+O+rNfIDySk0i/O0b+R38MB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvSDN0QkFuNDc2czE4Z1BKS1RTTDg3UnY1SGZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSv5MA0G CSqGSIb3DQEBCwUAA4IBAQA5PUlQxBotdGt76oqNMRMf6UD9LK4y2rKRj9o0lgTF aHLshKfgaBwk5DEIhRf656P+vS1FjATW4XdMGkVt5jHEGKNegfPFgBWlu6+mTgX9 PjjnEltClO7UoT37Ub/5EhVikKfpSwc8M9uIJVIreCZ6C5OLqRu89AmLHd62HfUw 4RLJoxKwoKb8XOqGGHHlTpECMFUq668371xe9rNWrQaYN5hzOTSpM1f07jiTRcqf lXNb/WWdiOGGwo429yG/asqeqg8Kqw7sdGxUX1ArLeMWivnbMyt/D5JtjZrvKA31 kklBlQBjGD63uUsZLNSek35VqODMaGTqooIo6iKNUsA4 -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:01 2026 by rpki-client