This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/H-uoOSiMGjBQOAHM_ceJ0tXNYjs.roa File: H-uoOSiMGjBQOAHM_ceJ0tXNYjs.roa (raw, json) Hash identifier: 4RLr0mwIamLqALdKWzxjbvmFLm3nS/9Kw+yNIrAwZaw= Subject key identifier: 1F:EB:A8:39:28:8C:1A:30:50:38:01:CC:FD:C7:89:D2:D5:CD:62:3B Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A30AFE252DE1B6FA0C8489A2F3FE84 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/H-uoOSiMGjBQOAHM_ceJ0tXNYjs.roa Signing time: Thu 01 Jan 2026 08:18:29 +0000 ROA not before: Thu 01 Jan 2026 08:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 45.12.255.0/24 maxlen: 24 79.110.50.0/24 maxlen: 24 87.121.58.0/24 maxlen: 24 94.103.127.0/24 maxlen: 24 94.156.79.0/24 maxlen: 24 141.98.4.0/24 maxlen: 24 147.78.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0a:fe:25:2d:e1:b6:fa:0c:84:89:a2:f3:fe:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1feba839288c1a30503801ccfdc789d2d5cd623b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e0:1b:b1:31:60:56:44:f0:6b:13:53:84:1f: 9b:ac:d1:85:7e:7f:ed:3e:d6:60:d2:4d:3a:8a:86: e6:1a:f5:02:73:78:54:cd:da:93:32:2a:e9:f9:a1: 27:1c:26:7b:73:a9:50:c1:0f:3e:01:14:19:e6:d5: f9:83:7f:95:15:0c:66:e0:ec:d4:0e:da:00:6c:88: f1:8b:23:fd:79:15:ee:48:28:62:fe:20:85:51:d2: 05:1c:b9:69:f0:89:46:fe:84:d1:57:44:be:60:3a: 9d:46:f3:18:12:fa:9e:92:6d:03:e3:7d:a5:42:c5: 4e:ce:71:2a:3a:6b:87:0b:b0:1c:56:c9:41:34:91: 89:ad:18:e6:b0:7f:7e:49:32:2d:90:85:aa:7b:b3: 46:23:b8:da:b6:16:63:2c:aa:ea:5c:09:d8:08:09: a9:53:48:d6:bf:65:7e:18:3e:a5:09:da:37:10:7c: 78:42:4e:0b:db:e7:e9:68:30:ca:ec:a8:14:93:48: 91:1c:7d:cf:3c:05:80:3f:dd:fc:f3:5b:12:1e:cb: ae:12:6b:04:ee:fe:c5:e0:bf:98:4f:7f:cd:b9:34: 75:7c:91:fe:8a:02:db:c4:91:77:55:88:db:93:93: 89:27:b8:a1:49:11:91:13:62:7a:7b:1e:fb:e7:6d: 2d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:EB:A8:39:28:8C:1A:30:50:38:01:CC:FD:C7:89:D2:D5:CD:62:3B X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/H-uoOSiMGjBQOAHM_ceJ0tXNYjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.255.0/24 79.110.50.0/24 87.121.58.0/24 94.103.127.0/24 94.156.79.0/24 141.98.4.0/24 147.78.100.0/24 Signature Algorithm: sha256WithRSAEncryption 88:48:c3:db:b9:91:17:b9:81:97:7b:38:3d:8e:aa:28:d7:8d: da:ab:08:5a:07:16:e5:92:0b:b9:5e:a5:bb:c9:94:0c:a6:96: 9d:fb:ea:6c:d2:10:6e:b1:4e:30:d6:41:d8:de:b7:b7:d2:1a: 99:49:55:22:67:f1:f2:0a:c6:a9:f9:8c:15:10:0f:0b:eb:f0: 5c:a9:ab:32:5e:1a:b1:1b:2c:fa:b2:8c:cc:a4:04:59:21:18: 8a:55:17:ee:75:d1:9d:42:8a:3e:48:cd:04:18:04:f3:a5:ca: 6f:5a:e3:d5:40:2e:b6:07:77:97:8d:9f:7f:91:8d:d7:9c:6d: 89:b9:55:13:bb:17:b5:cc:2f:78:29:a4:9b:cf:17:ad:97:c2: a8:80:87:1c:8f:f3:ec:25:77:ff:7a:78:e2:d2:56:68:8a:ca: 03:70:16:52:35:b2:03:44:35:b2:b8:4a:1c:36:a8:2b:c5:ee: 2d:03:f7:00:a2:42:fe:2a:b8:0b:c8:ca:1e:ad:e7:9a:54:1e: 2a:42:3b:7b:9c:37:45:1b:7f:3b:df:b3:5c:0e:de:7c:88:fc: d9:bf:a2:8b:e8:e7:64:80:fa:04:ba:b9:14:f5:db:af:03:1f: 35:b6:3e:0c:ff:30:cb:04:58:97:c2:0a:cc:60:e3:2c:71:90: a4:fc:35:e2 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt4owr+JS3htvoMhImi8/6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmViYTgzOTI4OGMxYTMwNTAzODAxY2NmZGM3ODlkMmQ1Y2Q2MjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuAbsTFgVkTwaxNThB+brNGFfn/t PtZg0k06iobmGvUCc3hUzdqTMirp+aEnHCZ7c6lQwQ8+ARQZ5tX5g3+VFQxm4OzU DtoAbIjxiyP9eRXuSChi/iCFUdIFHLlp8IlG/oTRV0S+YDqdRvMYEvqekm0D432l QsVOznEqOmuHC7AcVslBNJGJrRjmsH9+STItkIWqe7NGI7jathZjLKrqXAnYCAmp U0jWv2V+GD6lCdo3EHx4Qk4L2+fpaDDK7KgUk0iRHH3PPAWAP93881sSHsuuEmsE 7v7F4L+YT3/NuTR1fJH+igLbxJF3VYjbk5OJJ7ihSRGRE2J6ex77520t1QIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFB/rqDkojBowUDgBzP3HidLVzWI7MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvSC11b09TaU1HakJRT0FITV9jZUowdFhOWWpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALQz/AwQA T24yAwQAV3k6AwQAXmd/AwQAXpxPAwQAjWIEAwQAk05kMA0GCSqGSIb3DQEBCwUA A4IBAQCISMPbuZEXuYGXezg9jqoo143aqwhaBxblkgu5XqW7yZQMppad++ps0hBu sU4w1kHY3re30hqZSVUiZ/HyCsap+YwVEA8L6/BcqasyXhqxGyz6sozMpARZIRiK VRfuddGdQoo+SM0EGATzpcpvWuPVQC62B3eXjZ9/kY3XnG2JuVUTuxe1zC94KaSb zxetl8KogIccj/PsJXf/enji0lZoisoDcBZSNbIDRDWyuEocNqgrxe4tA/cAokL+ KrgLyMoereeaVB4qQjt7nDdFG38737NcDt58iPzZv6KL6OdkgPoEurkU9duvAx81 tj4M/zDLBFiXwgrMYOMscZCk/DXi -----END CERTIFICATE-----Generated at Fri Jan 2 12:06:12 2026 by rpki-client