This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/rh3h4DSUZf09eS3PD7_xT0pSUtw.roa File: rh3h4DSUZf09eS3PD7_xT0pSUtw.roa (raw, json) Hash identifier: AOUMEPrwbSgS3JJ+7BtVEwM9p+VQ+160OntQ7q3cUso= Subject key identifier: AE:1D:E1:E0:34:94:65:FD:3D:79:2D:CF:0F:BF:F1:4F:4A:52:52:DC Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43 Certificate serial: 019B7F844CAFA2AC65107013BF67F2F1AC7E Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/rh3h4DSUZf09eS3PD7_xT0pSUtw.roa Signing time: Fri 02 Jan 2026 16:22:15 +0000 ROA not before: Fri 02 Jan 2026 16:22:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 91.208.28.0/24 maxlen: 24 193.105.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4c:af:a2:ac:65:10:70:13:bf:67:f2:f1:ac:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43 Validity Not Before: Jan 2 16:22:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae1de1e0349465fd3d792dcf0fbff14f4a5252dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:9a:c8:47:7b:27:d9:54:1a:19:e3:ae:13: 42:71:c3:95:d6:66:ee:10:5e:fa:f3:74:0d:f4:61: 04:29:6d:42:63:b7:44:c9:3f:c2:dd:e9:83:d7:f2: 46:29:19:3a:8e:97:5f:15:8d:0a:f2:e1:a1:70:36: df:71:86:bf:35:1f:7e:20:1d:b1:0d:68:a6:47:77: c3:51:12:7c:e9:69:c2:f0:7a:67:35:b2:b5:05:23: f5:e4:89:83:be:06:b0:56:c0:ad:74:72:72:36:54: f5:32:97:94:87:49:a6:7c:30:ef:c3:77:e6:1b:5f: 51:34:c6:40:7c:4a:2d:a0:d6:9d:1f:00:d2:17:f2: 8f:1f:b6:f9:66:78:26:d2:de:0d:ac:48:3c:c6:81: 09:bf:8c:bb:94:57:0a:ab:d2:9b:59:f4:a4:e5:59: b9:30:6b:21:74:89:a1:f2:ea:59:89:c3:c4:3b:20: 3c:39:cd:fd:c8:09:01:d3:a5:6f:a9:f0:a7:73:d5: 8a:97:15:2a:d1:e0:b3:96:f0:5c:ac:dc:7d:e7:eb: 4c:56:2d:4d:15:bc:e4:52:2b:bc:14:89:7b:a5:df: b7:1a:80:de:04:d3:c6:c9:16:a9:af:1d:b3:5c:75: ba:d2:cf:be:1d:a8:d0:05:46:0b:4a:8c:bd:a9:68: 95:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1D:E1:E0:34:94:65:FD:3D:79:2D:CF:0F:BF:F1:4F:4A:52:52:DC X509v3 Authority Key Identifier: keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/rh3h4DSUZf09eS3PD7_xT0pSUtw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.28.0/24 193.105.47.0/24 Signature Algorithm: sha256WithRSAEncryption be:51:ff:c1:f0:8e:1e:7f:fb:73:c7:56:ad:90:30:a0:82:9c: d3:2e:a1:f2:7d:56:cd:6b:cd:96:8d:cb:a4:34:1d:f2:87:e0: ad:74:ce:10:48:a4:e5:bb:e1:8c:13:a3:b4:a6:24:03:8e:bd: 33:e0:e7:72:10:cc:77:b1:dc:0a:f9:88:5d:41:33:85:fb:89: 54:d1:99:99:4f:c7:0b:86:38:97:c5:f7:8e:37:62:58:f3:78: 13:0e:6c:6e:86:4a:28:68:12:1d:e4:9a:7c:c7:98:58:a4:59: ed:1d:1e:d3:5f:eb:f8:a4:0e:5a:cf:6d:bf:32:6a:90:6a:22: 8d:01:b5:75:42:92:81:c8:04:1a:be:0d:71:7b:82:36:27:5e: eb:9f:53:c8:07:53:4d:43:c5:5c:7c:63:a8:7f:8d:cd:a4:4c: 18:53:91:8a:31:09:1a:a8:84:14:9d:a8:3a:a4:71:e4:f4:20: 2e:f8:fb:bb:87:2d:50:27:2e:82:1f:91:47:2f:c3:8b:1e:f3: 00:e0:c2:7e:8e:ae:f9:81:0c:9c:83:f9:6d:db:13:17:93:4c: f9:d6:db:6d:c3:ec:39:f9:7c:a6:91:be:93:0f:25:23:cf:26: 6d:65:e4:c6:a6:ee:6b:6e:1b:68:66:f1:ef:86:cb:9a:e9:86: 3e:c7:71:5e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hEyvoqxlEHATv2fy8ax+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYjNlOTY1Yzg3NDdlMmZhNWRkZDEyODU3NjczZjA2MDQy ZWZhNDMwHhcNMjYwMTAyMTYyMjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTFkZTFlMDM0OTQ2NWZkM2Q3OTJkY2YwZmJmZjE0ZjRhNTI1MmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPKayEd7J9lUGhnjrhNCccOV1mbu EF7683QN9GEEKW1CY7dEyT/C3emD1/JGKRk6jpdfFY0K8uGhcDbfcYa/NR9+IB2x DWimR3fDURJ86WnC8HpnNbK1BSP15ImDvgawVsCtdHJyNlT1MpeUh0mmfDDvw3fm G19RNMZAfEotoNadHwDSF/KPH7b5Zngm0t4NrEg8xoEJv4y7lFcKq9KbWfSk5Vm5 MGshdImh8upZicPEOyA8Oc39yAkB06VvqfCnc9WKlxUq0eCzlvBcrNx95+tMVi1N FbzkUiu8FIl7pd+3GoDeBNPGyRaprx2zXHW60s++HajQBUYLSoy9qWiVvQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK4d4eA0lGX9PXktzw+/8U9KUlLcMB8GA1UdIwQY MBaAFIqz6WXIdH4vpd3RKFdnPwYELvpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzIt MDQ0MjdhOTlmMWM1LzEvcmgzaDREU1VaZjA5ZVMzUEQ3X3hUMHBTVXR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzItMDQ0MjdhOTlmMWM1 LzEvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9AcAwQA wWkvMA0GCSqGSIb3DQEBCwUAA4IBAQC+Uf/B8I4ef/tzx1atkDCggpzTLqHyfVbN a82WjcukNB3yh+CtdM4QSKTlu+GME6O0piQDjr0z4OdyEMx3sdwK+YhdQTOF+4lU 0ZmZT8cLhjiXxfeON2JY83gTDmxuhkooaBId5Jp8x5hYpFntHR7TX+v4pA5az22/ MmqQaiKNAbV1QpKByAQavg1xe4I2J17rn1PIB1NNQ8VcfGOof43NpEwYU5GKMQka qIQUnag6pHHk9CAu+Pu7hy1QJy6CH5FHL8OLHvMA4MJ+jq75gQycg/lt2xMXk0z5 1tttw+w5+Xymkb6TDyUjzyZtZeTGpu5rbhtoZvHvhsua6YY+x3Fe -----END CERTIFICATE-----Generated at Sat Jan 17 08:24:51 2026 by rpki-client