This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/hG2m9zhj2oAi1CZYuqKEfm2OJwE.roa File: hG2m9zhj2oAi1CZYuqKEfm2OJwE.roa (raw, json) Hash identifier: IvuSOBxaQjHsxy41UzNEtvNVsu+Q1Fkvr9KK8SxpSjQ= Subject key identifier: 84:6D:A6:F7:38:63:DA:80:22:D4:26:58:BA:A2:84:7E:6D:8E:27:01 Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B7F160958104F6760CD00284A3BDB8C48 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/hG2m9zhj2oAi1CZYuqKEfm2OJwE.roa Signing time: Fri 02 Jan 2026 14:21:49 +0000 ROA not before: Fri 02 Jan 2026 14:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135402 IP address blocks: 92.62.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:09:58:10:4f:67:60:cd:00:28:4a:3b:db:8c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Jan 2 14:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=846da6f73863da8022d42658baa2847e6d8e2701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:62:76:b2:c1:8d:29:f7:66:c6:07:3a:8c:30: 75:90:be:4b:85:41:5c:9c:7a:00:fb:02:46:6e:9e: b5:21:f4:86:df:b2:32:86:30:4c:46:9d:ee:53:7a: 7f:84:09:90:7b:f5:bd:c8:dd:ca:d4:3e:ba:a6:e6: bd:5d:c8:e3:e0:ad:d7:fb:62:3b:2c:96:c1:40:72: e5:07:81:ac:ae:f4:93:2d:69:ee:84:fd:f2:7c:c3: f5:28:7d:ba:ce:15:29:e7:e0:a0:8b:68:a6:4d:37: a3:4c:83:fc:33:ce:35:82:5b:99:ae:96:bc:71:2a: d3:6b:8c:18:12:4a:82:ff:50:f8:bb:4f:40:55:d5: 25:81:0a:e6:4d:ee:73:0e:e8:f5:f6:9e:0d:b1:b0: a7:7e:c7:d8:bd:68:03:8e:23:77:f8:c4:3c:5c:f0: dd:e2:bd:5a:76:d8:88:0e:b6:f7:5b:eb:9b:c6:53: fb:17:fe:aa:8f:a0:1c:64:1c:11:84:f5:35:fa:86: c3:e8:41:ae:8a:39:0f:eb:ea:11:2a:b6:d5:35:cc: 75:2f:ed:bd:cc:6e:55:e6:c1:76:c8:09:2a:aa:51: 14:31:b1:e4:a0:1b:13:4f:15:c4:62:21:cf:63:3d: 24:20:11:b1:9b:5b:8e:b2:83:9e:d1:ee:36:76:b4: 7e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6D:A6:F7:38:63:DA:80:22:D4:26:58:BA:A2:84:7E:6D:8E:27:01 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/hG2m9zhj2oAi1CZYuqKEfm2OJwE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.62.241.0/24 Signature Algorithm: sha256WithRSAEncryption 53:0c:d6:7f:95:e7:74:b2:cc:ec:fd:dd:72:10:93:bd:10:56: 7e:e9:72:8c:d2:f6:a1:e5:d3:8c:5d:d7:4c:2d:0b:0e:17:3d: 13:f7:44:f2:56:4b:0f:2a:79:71:dc:91:af:30:84:3f:6c:60: 9d:53:64:ec:22:97:c9:c9:e1:b6:15:4c:d5:9a:1c:99:07:c2: 95:44:6a:3d:7d:b2:ef:ac:99:37:c8:3d:28:c7:44:25:ea:06: 7e:15:c9:9a:6c:b3:33:b8:cb:71:dc:42:c6:d4:a9:e8:ad:28: 2a:dd:97:82:f7:80:c3:b4:ee:16:d1:e8:2a:57:91:a9:74:6c: 92:f2:c9:93:ba:7b:bd:16:b9:09:d4:bf:33:c3:28:84:72:07: b3:24:fe:fc:77:a0:7b:74:14:3c:52:e7:39:26:00:f5:c4:dd: 65:6c:16:05:f2:97:f6:b8:30:02:6a:61:2b:af:73:58:82:c7: 17:af:e8:c3:9f:c7:94:a6:95:9e:93:39:9c:11:9e:1e:a6:83: cc:7f:d3:62:b0:85:db:e1:56:2d:05:50:7a:c4:cd:39:fb:23: ea:42:7c:e0:eb:68:b7:78:47:74:26:36:7c:e9:f3:b0:58:16: f6:17:5e:fe:6e:67:42:13:c9:f2:e1:dc:ae:42:90:28:38:98: a6:6d:d3:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FglYEE9nYM0AKEo724xIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjYwMTAyMTQyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDZkYTZmNzM4NjNkYTgwMjJkNDI2NThiYWEyODQ3ZTZkOGUyNzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2J2ssGNKfdmxgc6jDB1kL5LhUFc nHoA+wJGbp61IfSG37IyhjBMRp3uU3p/hAmQe/W9yN3K1D66pua9Xcjj4K3X+2I7 LJbBQHLlB4GsrvSTLWnuhP3yfMP1KH26zhUp5+Cgi2imTTejTIP8M841gluZrpa8 cSrTa4wYEkqC/1D4u09AVdUlgQrmTe5zDuj19p4NsbCnfsfYvWgDjiN3+MQ8XPDd 4r1adtiIDrb3W+ubxlP7F/6qj6AcZBwRhPU1+obD6EGuijkP6+oRKrbVNcx1L+29 zG5V5sF2yAkqqlEUMbHkoBsTTxXEYiHPYz0kIBGxm1uOsoOe0e42drR+AwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIRtpvc4Y9qAItQmWLqihH5tjicBMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvaEcybTl6aGoyb0FpMUNaWXVxS0VmbTJPSndFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD7xMA0G CSqGSIb3DQEBCwUAA4IBAQBTDNZ/led0sszs/d1yEJO9EFZ+6XKM0vah5dOMXddM LQsOFz0T90TyVksPKnlx3JGvMIQ/bGCdU2TsIpfJyeG2FUzVmhyZB8KVRGo9fbLv rJk3yD0ox0Ql6gZ+FcmabLMzuMtx3ELG1KnorSgq3ZeC94DDtO4W0egqV5GpdGyS 8smTunu9FrkJ1L8zwyiEcgezJP78d6B7dBQ8Uuc5JgD1xN1lbBYF8pf2uDACamEr r3NYgscXr+jDn8eUppWekzmcEZ4epoPMf9NisIXb4VYtBVB6xM05+yPqQnzg62i3 eEd0JjZ86fOwWBb2F17+bmdCE8ny4dyuQpAoOJimbdO8 -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:59 2026 by rpki-client