This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/Haim4aY9ShmCS1epcJRa3-rRRmM.roa File: Haim4aY9ShmCS1epcJRa3-rRRmM.roa (raw, json) Hash identifier: AQeMZQUR+w1eyhT+kYpVEnNYoo0tXgoBt1LUUZT+/W4= Subject key identifier: 1D:A8:A6:E1:A6:3D:4A:19:82:4B:57:A9:70:94:5A:DF:EA:D1:46:63 Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 019B7D5C33821943EC5305AEDA79094C3D12 Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/Haim4aY9ShmCS1epcJRa3-rRRmM.roa Signing time: Fri 02 Jan 2026 06:19:13 +0000 ROA not before: Fri 02 Jan 2026 06:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60695 IP address blocks: 155.133.33.0/24 maxlen: 24 155.133.60.0/23 maxlen: 23 185.225.100.0/22 maxlen: 22 185.228.108.0/22 maxlen: 22 2a06:1e00::/48 maxlen: 48 2a06:1e00:5::/48 maxlen: 48 2a06:1e00:14::/48 maxlen: 48 2a06:1e00:18::/48 maxlen: 48 2a06:1e00:1e::/48 maxlen: 48 2a06:1e00:30::/48 maxlen: 48 2a06:1e00:40::/48 maxlen: 48 2a06:1e00:50::/48 maxlen: 48 2a06:1e00:60::/48 maxlen: 48 2a0d:a00::/29 maxlen: 29 2a0d:b400::/29 maxlen: 48 2a0e:4d00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:33:82:19:43:ec:53:05:ae:da:79:09:4c:3d:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Jan 2 06:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1da8a6e1a63d4a19824b57a970945adfead14663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:db:1e:25:26:f3:59:55:20:c6:59:f4:9b:4c: 67:19:ab:83:ae:c9:bc:56:67:c1:82:25:f5:b6:fc: 4a:80:9e:b4:4b:69:56:b7:34:83:e8:cd:98:1b:cc: 9a:65:76:a3:ea:fa:c1:b5:b2:4c:2f:ed:0b:ad:47: 1a:56:d0:fa:d4:88:47:48:50:fa:cc:a3:14:cf:fb: 3f:08:50:4b:46:18:9f:59:13:01:34:0c:35:e8:f9: 9b:d5:15:3d:f5:61:79:84:ae:3e:f9:89:87:25:c8: 09:55:97:82:38:53:d0:f2:1f:ce:eb:be:7c:ee:ab: 55:21:61:e6:b8:33:e1:b2:33:65:7b:10:ef:ab:70: e3:5f:ef:e5:01:b3:d0:55:0c:bc:dc:af:b1:e7:60: 7d:b8:46:c3:d5:14:6e:b7:ef:fa:f7:81:35:96:46: 15:23:d0:e7:9a:19:e1:19:aa:2e:ef:d1:41:79:4c: 0b:57:99:54:e4:7e:14:0a:44:ad:31:ce:4e:72:2a: cf:60:53:fb:e9:1f:50:17:81:78:00:4a:b2:47:11: f6:79:ff:bc:00:3e:51:f1:1c:20:33:66:cd:32:6c: 19:de:c6:ef:0d:8f:1c:35:61:47:44:18:d1:30:ed: ee:0f:4e:4d:65:75:45:8f:6f:d1:69:3d:18:8f:b4: f5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A8:A6:E1:A6:3D:4A:19:82:4B:57:A9:70:94:5A:DF:EA:D1:46:63 X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/Haim4aY9ShmCS1epcJRa3-rRRmM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.133.33.0/24 155.133.60.0/23 185.225.100.0/22 185.228.108.0/22 IPv6: 2a06:1e00::/48 2a06:1e00:5::/48 2a06:1e00:14::/48 2a06:1e00:18::/48 2a06:1e00:1e::/48 2a06:1e00:30::/48 2a06:1e00:40::/48 2a06:1e00:50::/48 2a06:1e00:60::/48 2a0d:a00::/29 2a0d:b400::/29 2a0e:4d00::/29 Signature Algorithm: sha256WithRSAEncryption 0a:89:d3:1c:3d:02:5a:0a:40:9b:f1:c8:e0:74:61:0c:a1:f9: 58:55:7b:e9:57:a2:aa:e2:45:30:83:f5:9e:f6:f0:4a:f8:ee: b0:50:f2:35:d2:11:ae:72:aa:c8:df:df:5d:2f:73:39:c5:5b: 9b:8d:f7:58:ca:15:d2:c8:cb:94:ed:c7:ab:f5:0e:ab:3d:87: f3:4a:83:ab:5b:f1:5a:82:bd:84:1b:f1:ec:9d:fa:41:90:fd: f4:53:ee:3d:17:2e:ea:fa:63:54:97:01:3a:54:c1:cd:22:4a: 81:7a:76:3d:02:a6:ed:af:99:ba:f0:68:87:0d:b8:59:47:88: 52:fb:c7:1f:31:8d:09:cc:66:97:a0:de:92:85:f9:3c:9d:d0: 7c:2f:a4:e6:08:30:42:ed:5a:93:74:51:9a:46:e8:16:2d:6a: c0:3f:94:26:4e:c8:d9:a8:fc:48:cc:ef:9c:64:1c:a6:e5:d9: 8b:c3:65:bb:60:4f:e3:2a:5a:9b:16:0e:f4:09:15:47:6a:39: 21:35:3e:ae:c3:46:20:79:12:10:c9:94:ef:46:93:9d:a8:d8: 14:9a:fb:85:39:76:06:89:dd:1d:d3:77:7d:7d:7a:df:34:5b: c9:e4:e7:91:0a:3a:7b:db:46:b9:2e:ab:ce:04:3d:33:76:b6: ae:b3:44:fe -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt9XDOCGUPsUwWu2nkJTD0SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjYwMTAyMDYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGE4YTZlMWE2M2Q0YTE5ODI0YjU3YTk3MDk0NWFkZmVhZDE0NjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89seJSbzWVUgxln0m0xnGauDrsm8 VmfBgiX1tvxKgJ60S2lWtzSD6M2YG8yaZXaj6vrBtbJML+0LrUcaVtD61IhHSFD6 zKMUz/s/CFBLRhifWRMBNAw16Pmb1RU99WF5hK4++YmHJcgJVZeCOFPQ8h/O6758 7qtVIWHmuDPhsjNlexDvq3DjX+/lAbPQVQy83K+x52B9uEbD1RRut+/694E1lkYV I9DnmhnhGaou79FBeUwLV5lU5H4UCkStMc5OcirPYFP76R9QF4F4AEqyRxH2ef+8 AD5R8RwgM2bNMmwZ3sbvDY8cNWFHRBjRMO3uD05NZXVFj2/RaT0Yj7T1QwIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFB2opuGmPUoZgktXqXCUWt/q0UZjMB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvSGFpbTRhWTlTaG1DUzFlcGNKUmEzLXJSUm1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjAeBAIAATAYAwQAm4Uh AwQBm4U8AwQCueFkAwQCueRsMGwEAgACMGYDBwAqBh4AAAADBwAqBh4AAAUDBwAq Bh4AABQDBwAqBh4AABgDBwAqBh4AAB4DBwAqBh4AADADBwAqBh4AAEADBwAqBh4A AFADBwAqBh4AAGADBQMqDQoAAwUDKg20AAMFAyoOTQAwDQYJKoZIhvcNAQELBQAD ggEBAAqJ0xw9AloKQJvxyOB0YQyh+VhVe+lXoqriRTCD9Z728Er47rBQ8jXSEa5y qsjf310vcznFW5uN91jKFdLIy5Ttx6v1Dqs9h/NKg6tb8VqCvYQb8eyd+kGQ/fRT 7j0XLur6Y1SXATpUwc0iSoF6dj0Cpu2vmbrwaIcNuFlHiFL7xx8xjQnMZpeg3pKF +Tyd0HwvpOYIMELtWpN0UZpG6BYtasA/lCZOyNmo/EjM75xkHKbl2YvDZbtgT+Mq WpsWDvQJFUdqOSE1Pq7DRiB5EhDJlO9Gk52o2BSa+4U5dgaJ3R3Td319et80W8nk 55EKOnvbRrkuq84EPTN2tq6zRP4= -----END CERTIFICATE-----Generated at Sun Jan 25 17:33:43 2026 by rpki-client