This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/h-PWIeDfQLuLQns6H59eVXIlTEw.roa File: h-PWIeDfQLuLQns6H59eVXIlTEw.roa (raw, json) Hash identifier: a2RfFAyHbTGC+LHQhF0hKAuxj7Am0hNvyjuE9TNtMKs= Subject key identifier: 87:E3:D6:21:E0:DF:40:BB:8B:42:7B:3A:1F:9F:5E:55:72:25:4C:4C Certificate issuer: /CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6 Certificate serial: 019B7D5B347ED60D7594B37CCEDEF0633AEB Authority key identifier: AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/h-PWIeDfQLuLQns6H59eVXIlTEw.roa Signing time: Fri 02 Jan 2026 06:18:07 +0000 ROA not before: Fri 02 Jan 2026 06:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14297 IP address blocks: 185.147.172.0/23 maxlen: 24 185.147.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:34:7e:d6:0d:75:94:b3:7c:ce:de:f0:63:3a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6 Validity Not Before: Jan 2 06:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87e3d621e0df40bb8b427b3a1f9f5e5572254c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e4:f9:2b:87:77:d9:22:e3:53:ab:eb:99:73: 23:34:c8:cf:2a:8c:81:14:ba:ee:96:24:bb:e1:2b: 71:21:45:62:02:36:2f:19:66:39:ed:80:a4:cc:b6: e7:84:7d:bc:b4:c7:21:e5:e7:0b:f9:ea:13:eb:48: 91:b9:46:d4:8f:1a:82:00:3d:ec:a5:e3:8e:5a:18: 69:f6:2d:e0:2e:93:66:e9:11:e8:d8:99:e9:88:ec: e1:85:59:30:bf:55:1f:34:8f:b8:ef:ab:ed:28:94: ac:c6:02:fb:6c:66:9a:ac:e8:50:48:7b:d3:66:74: f0:8e:09:98:0b:b0:2d:4a:3c:d2:78:65:59:e7:12: 58:d1:29:fb:78:b8:72:cb:1d:fc:11:d6:1c:f0:f1: 17:9d:46:e4:4d:db:59:b6:a7:d0:e7:80:49:71:0b: e0:18:94:6b:9d:6f:e2:db:f5:d1:47:98:ef:95:6d: ee:c3:c6:d5:40:27:6c:01:a2:b2:62:bb:11:43:f4: 7b:c7:7f:33:b5:80:1f:ff:1e:46:2e:db:96:68:8e: 58:40:b1:a4:3c:1c:86:a2:5b:c6:3c:88:7f:84:d0: 9d:01:f2:8f:c9:46:91:83:98:77:90:2a:e5:ba:0e: 0f:43:90:db:09:15:62:92:c5:82:7e:be:f7:49:7f: 70:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E3:D6:21:E0:DF:40:BB:8B:42:7B:3A:1F:9F:5E:55:72:25:4C:4C X509v3 Authority Key Identifier: keyid:AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/h-PWIeDfQLuLQns6H59eVXIlTEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.147.172.0/22 Signature Algorithm: sha256WithRSAEncryption c1:ec:24:9c:d3:61:75:1a:82:c4:9c:fb:8a:6e:47:5b:60:38: 6a:a6:6d:cd:f6:05:a7:1c:8c:fa:ea:6f:22:73:af:76:92:c9: 93:ba:4a:c8:2a:3b:d4:99:e8:09:4a:c8:8a:f0:67:d4:f3:44: 8c:25:a5:10:34:c0:bd:f0:63:77:ba:a3:f7:dc:23:68:de:bf: 63:3e:43:a0:66:e0:7c:56:98:da:e5:d3:cb:10:cd:07:65:33: 88:db:0e:79:1a:f2:8b:e3:db:d3:49:de:fa:2c:c3:fc:77:c6: 4e:b4:3f:81:17:41:d8:91:17:0a:a0:75:8c:94:0c:c9:cf:e6: dd:0e:00:86:fb:e0:8d:57:e1:f4:c1:e5:04:fa:78:04:6a:c3: 57:ee:6c:f0:13:fd:07:c1:23:f2:20:ec:84:69:39:af:3b:2a: b5:c7:b5:b6:fc:72:e0:74:0e:20:d2:0d:6e:71:c4:ba:6e:c6: 03:3c:ca:b3:f4:65:1d:a9:c3:7c:c7:70:c9:0a:af:99:d5:b2: 5c:07:a4:2b:61:99:9b:b7:59:6b:98:fb:5e:85:ba:d8:14:9e: e0:12:2e:e3:96:76:cd:2d:16:59:65:81:8e:9e:cc:41:0a:9a: 6d:07:ef:8f:45:d7:2d:a4:7d:13:2d:48:06:9c:cc:37:26:f0: 4a:2f:e8:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WzR+1g11lLN8zt7wYzrrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMmI2OGYwYzgzYWRkOWEzYTNiODZhYjI0ZmI5MTBhOTYw MjYyYzYwHhcNMjYwMTAyMDYxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2UzZDYyMWUwZGY0MGJiOGI0MjdiM2ExZjlmNWU1NTcyMjU0YzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+T5K4d32SLjU6vrmXMjNMjPKoyB FLruliS74StxIUViAjYvGWY57YCkzLbnhH28tMch5ecL+eoT60iRuUbUjxqCAD3s peOOWhhp9i3gLpNm6RHo2JnpiOzhhVkwv1UfNI+476vtKJSsxgL7bGaarOhQSHvT ZnTwjgmYC7AtSjzSeGVZ5xJY0Sn7eLhyyx38EdYc8PEXnUbkTdtZtqfQ54BJcQvg GJRrnW/i2/XRR5jvlW3uw8bVQCdsAaKyYrsRQ/R7x38ztYAf/x5GLtuWaI5YQLGk PByGolvGPIh/hNCdAfKPyUaRg5h3kCrlug4PQ5DbCRViksWCfr73SX9wGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIfj1iHg30C7i0J7Oh+fXlVyJUxMMB8GA1UdIwQY MBaAFK8raPDIOt2aOjuGqyT7kQqWAmLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnl0bzhNZzYzWm82TzRhckpQdVJDcFlDWXNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83OTNlMDAtMGM1My00OWM0LWE1MWIt ZWRhMzE2YTJhZmI4LzEvaC1QV0llRGZRTHVMUW5zNkg1OWVWWElsVEV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy83OTNlMDAtMGM1My00OWM0LWE1MWItZWRhMzE2YTJhZmI4 LzEvcnl0bzhNZzYzWm82TzRhckpQdVJDcFlDWXNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZOsMA0G CSqGSIb3DQEBCwUAA4IBAQDB7CSc02F1GoLEnPuKbkdbYDhqpm3N9gWnHIz66m8i c692ksmTukrIKjvUmegJSsiK8GfU80SMJaUQNMC98GN3uqP33CNo3r9jPkOgZuB8 Vpja5dPLEM0HZTOI2w55GvKL49vTSd76LMP8d8ZOtD+BF0HYkRcKoHWMlAzJz+bd DgCG++CNV+H0weUE+ngEasNX7mzwE/0HwSPyIOyEaTmvOyq1x7W2/HLgdA4g0g1u ccS6bsYDPMqz9GUdqcN8x3DJCq+Z1bJcB6QrYZmbt1lrmPtehbrYFJ7gEi7jlnbN LRZZZYGOnsxBCpptB++PRdctpH0TLUgGnMw3JvBKL+gb -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:02 2026 by rpki-client