This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hW4yTbN2vzuTBGPRuZBp4yvs7yY.roa File: hW4yTbN2vzuTBGPRuZBp4yvs7yY.roa (raw, json) Hash identifier: QsQURJPj6mBK0GRwoiv8Xv6g4UnmGkaPukpRu59/7+s= Subject key identifier: 85:6E:32:4D:B3:76:BF:3B:93:04:63:D1:B9:90:69:E3:2B:EC:EF:26 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A32C7177414741A4D4A9A3872BEECE Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hW4yTbN2vzuTBGPRuZBp4yvs7yY.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202911 IP address blocks: 94.156.153.0/24 maxlen: 32 212.73.146.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2c:71:77:41:47:41:a4:d4:a9:a3:87:2b:ee:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=856e324db376bf3b930463d1b99069e32becef26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ea:b1:71:01:01:7d:b2:9b:b1:48:ed:e5:27: 1d:7b:91:a1:78:18:6a:15:da:b7:0b:81:49:00:a2: 56:80:4e:c6:9c:ea:1c:3f:c3:a1:c2:15:81:a1:11: 68:6a:03:08:3b:05:a7:bd:67:fe:14:e8:4a:46:5c: 8a:93:fc:7d:cd:0c:5e:66:92:05:01:93:48:b7:a5: 78:8d:ab:8c:88:cc:0e:4a:c3:8f:7a:7e:9d:4e:d9: 0d:0f:7c:22:b2:b9:ec:d2:32:c0:57:72:00:68:83: 00:a8:8f:b3:b5:bf:ab:ea:3c:b5:e7:aa:9e:bc:a8: c5:79:14:fd:01:97:c3:6b:e2:4b:ec:25:89:90:76: 50:1b:a7:e0:18:91:79:9a:7c:0e:f6:66:d8:0a:95: 23:cd:2a:bb:f5:40:41:2f:55:48:1a:5a:cf:64:6f: 2b:99:a7:79:57:fd:d9:0c:97:3c:da:96:65:83:92: 4b:31:72:d2:d0:d0:38:5c:90:6a:ae:0b:c2:ed:b6: 50:59:42:d6:fb:e7:c8:b1:31:de:19:83:95:f3:0c: 37:7a:f9:27:1d:76:1d:70:af:9e:03:7a:e9:bf:27: 61:4a:47:46:90:08:71:99:dd:da:ca:6c:85:ed:47: 64:ae:26:b7:ba:a9:8c:a0:b8:50:d2:d4:a7:f2:41: 8d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6E:32:4D:B3:76:BF:3B:93:04:63:D1:B9:90:69:E3:2B:EC:EF:26 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hW4yTbN2vzuTBGPRuZBp4yvs7yY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.156.153.0/24 212.73.146.0/24 Signature Algorithm: sha256WithRSAEncryption 82:a3:37:1f:3b:ac:3d:a7:95:75:a7:f7:19:16:85:24:e0:4b: 21:a9:42:ed:b4:29:fd:ec:29:e4:5e:48:3c:ed:93:82:3e:12: ce:3d:71:bd:50:0a:58:16:89:89:11:c3:0d:64:71:72:b9:5d: 6e:d3:21:1b:3d:a1:93:af:c1:29:bc:cc:68:22:b5:19:65:fa: d3:b4:2c:73:9b:96:97:53:19:61:cd:d4:36:bc:0c:16:2d:1c: 34:40:6b:66:92:53:9e:27:56:46:f5:66:79:6d:1c:9a:dd:54: e7:8d:01:98:0c:c3:e2:8a:d8:76:0c:bb:6d:0c:71:42:a4:64: 44:b7:90:92:b2:f6:03:6b:c2:90:7e:a7:04:71:a6:dc:8b:e8: 0c:10:4a:2e:fa:c3:85:5a:2f:ad:75:41:68:76:ce:c0:a8:fc: f1:35:3f:62:74:ec:e6:9f:b8:99:ee:fd:18:b1:28:ce:74:ec: c2:40:78:75:3b:35:29:cf:a4:b8:1b:40:df:51:97:53:33:59: b1:b5:04:4b:5f:99:a1:8b:00:09:82:5c:3c:ac:65:d5:53:f9: bb:bb:8f:24:56:7d:34:64:5e:32:52:aa:a0:61:6b:ae:33:3b: 8c:09:fd:22:c0:bb:bc:f8:e9:46:59:93:52:a8:4b:a4:85:42: f1:89:be:39 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oyxxd0FHQaTUqaOHK+7OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTZlMzI0ZGIzNzZiZjNiOTMwNDYzZDFiOTkwNjllMzJiZWNlZjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteqxcQEBfbKbsUjt5Scde5GheBhq Fdq3C4FJAKJWgE7GnOocP8OhwhWBoRFoagMIOwWnvWf+FOhKRlyKk/x9zQxeZpIF AZNIt6V4jauMiMwOSsOPen6dTtkND3wisrns0jLAV3IAaIMAqI+ztb+r6jy156qe vKjFeRT9AZfDa+JL7CWJkHZQG6fgGJF5mnwO9mbYCpUjzSq79UBBL1VIGlrPZG8r mad5V/3ZDJc82pZlg5JLMXLS0NA4XJBqrgvC7bZQWULW++fIsTHeGYOV8ww3evkn HXYdcK+eA3rpvydhSkdGkAhxmd3aymyF7Udkria3uqmMoLhQ0tSn8kGNcQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIVuMk2zdr87kwRj0bmQaeMr7O8mMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvaFc0eVRiTjJ2enVUQkdQUnVaQnA0eXZzN3lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXpyZAwQA 1EmSMA0GCSqGSIb3DQEBCwUAA4IBAQCCozcfO6w9p5V1p/cZFoUk4EshqULttCn9 7CnkXkg87ZOCPhLOPXG9UApYFomJEcMNZHFyuV1u0yEbPaGTr8EpvMxoIrUZZfrT tCxzm5aXUxlhzdQ2vAwWLRw0QGtmklOeJ1ZG9WZ5bRya3VTnjQGYDMPiith2DLtt DHFCpGREt5CSsvYDa8KQfqcEcabci+gMEEou+sOFWi+tdUFods7AqPzxNT9idOzm n7iZ7v0YsSjOdOzCQHh1OzUpz6S4G0DfUZdTM1mxtQRLX5mhiwAJglw8rGXVU/m7 u48kVn00ZF4yUqqgYWuuMzuMCf0iwLu8+OlGWZNSqEukhULxib45 -----END CERTIFICATE-----Generated at Fri Jan 2 12:06:12 2026 by rpki-client