This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/H0bioT9sTUbmhbBMCEJa7Y2xXtE.roa File: H0bioT9sTUbmhbBMCEJa7Y2xXtE.roa (raw, json) Hash identifier: r97ApaF6RiLlIffqieVuHrnbD6MO9Ow6tAs1USkQaqw= Subject key identifier: 1F:46:E2:A1:3F:6C:4D:46:E6:85:B0:4C:08:42:5A:ED:8D:B1:5E:D1 Certificate issuer: /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390 Certificate serial: 019B7F84832A3C904FB026BCB81B5F807BFB Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/H0bioT9sTUbmhbBMCEJa7Y2xXtE.roa Signing time: Fri 02 Jan 2026 16:22:29 +0000 ROA not before: Fri 02 Jan 2026 16:22:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399471 IP address blocks: 185.28.37.0/24 maxlen: 24 185.28.39.0/24 maxlen: 24 185.126.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 10:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:83:2a:3c:90:4f:b0:26:bc:b8:1b:5f:80:7b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390 Validity Not Before: Jan 2 16:22:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f46e2a13f6c4d46e685b04c08425aed8db15ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e9:2d:d9:d2:1c:36:28:60:f1:8c:90:72:cb: 9d:07:cb:04:26:bf:c8:d5:93:d1:26:59:ac:7f:69: 30:ec:d0:25:30:d8:23:e4:7d:62:6e:a7:2f:1c:f7: 38:34:30:5d:54:a5:55:e4:bc:09:a6:11:68:25:3d: 93:44:fe:6e:6b:c1:bc:87:eb:21:b7:7a:fb:de:1d: 67:03:ba:21:18:e8:8e:17:a5:9b:5b:94:0a:ff:b6: 4c:10:96:0f:d1:57:7a:ed:06:87:8a:bf:42:f7:fe: d7:49:a9:e4:e8:73:3e:cd:7b:30:01:11:07:eb:24: c2:6c:1e:33:e7:0f:88:9f:83:4c:69:4a:31:d2:69: 17:94:ee:f9:81:6b:f1:b4:d8:14:a7:e3:26:a2:58: 2f:ee:0b:ef:d0:ce:a3:df:6f:3a:3e:7e:34:b2:e5: 25:d2:aa:ac:f6:80:ff:f1:52:a8:41:5c:9e:5b:76: ed:09:ee:3d:79:20:4b:bd:4b:99:9e:84:7e:3b:18: 01:20:fb:6f:04:0e:91:ba:8d:d6:0a:53:2d:66:59: 44:7c:ef:bf:ee:21:2b:d5:5d:c9:0a:67:2b:cd:39: e9:88:78:d9:8d:7d:31:40:05:3a:3e:d7:76:48:2b: 37:f3:fd:1e:f8:31:dd:d1:1b:9f:e1:b8:3e:1e:80: 47:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:46:E2:A1:3F:6C:4D:46:E6:85:B0:4C:08:42:5A:ED:8D:B1:5E:D1 X509v3 Authority Key Identifier: keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/H0bioT9sTUbmhbBMCEJa7Y2xXtE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.28.37.0/24 185.28.39.0/24 185.126.34.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:fb:14:12:76:5b:4d:24:3a:18:2c:d1:9c:37:a3:ba:f8:d7: 70:36:9b:84:47:7a:c7:e2:a5:55:c3:5b:71:a4:88:85:34:f1: ce:9d:5f:a0:29:e8:b1:e6:aa:4b:b0:e3:3d:c4:9d:6e:c8:83: e9:97:6f:5c:a9:45:ed:01:b7:2e:63:29:7e:f6:b0:8e:94:b0: 58:ff:c8:f5:cf:0a:ff:ee:bd:1f:07:bd:45:9a:77:c3:ef:49: 19:f1:3c:b3:95:52:22:f2:dc:90:de:fb:24:e4:26:9f:a3:b6: 03:0e:32:e4:82:07:d7:f6:d4:32:6f:01:63:da:b2:03:50:99: b8:2f:64:5e:96:27:15:8f:4a:91:00:ec:d1:78:39:58:77:4c: 0f:15:62:1f:4f:18:ec:5b:70:12:d7:c4:26:ad:d5:17:13:ed: 55:25:88:94:35:c1:74:fa:56:a1:0d:b0:fb:77:21:d4:24:de: 6a:e4:c5:26:d3:7f:df:bd:60:56:c6:87:d7:be:dd:8f:bf:8d: b6:73:87:38:6c:cc:67:ea:ea:9e:d5:2e:64:54:27:b1:f1:fe: 5c:5e:1d:b9:e0:43:85:c6:d3:b5:59:23:65:e7:4a:b1:a7:85: 23:f3:f6:5d:f5:e0:01:44:24:13:61:04:ac:e8:25:56:bb:0d: a5:c3:b9:ce -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hIMqPJBPsCa8uBtfgHv7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliOTdjMjJkMGIzMzhhOGE0NWFhMTM0NWIwOTE3YmEwZGM5 NzMzOTAwHhcNMjYwMTAyMTYyMjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjQ2ZTJhMTNmNmM0ZDQ2ZTY4NWIwNGMwODQyNWFlZDhkYjE1ZWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+kt2dIcNihg8YyQcsudB8sEJr/I 1ZPRJlmsf2kw7NAlMNgj5H1ibqcvHPc4NDBdVKVV5LwJphFoJT2TRP5ua8G8h+sh t3r73h1nA7ohGOiOF6WbW5QK/7ZMEJYP0Vd67QaHir9C9/7XSank6HM+zXswAREH 6yTCbB4z5w+In4NMaUox0mkXlO75gWvxtNgUp+Mmolgv7gvv0M6j3286Pn40suUl 0qqs9oD/8VKoQVyeW3btCe49eSBLvUuZnoR+OxgBIPtvBA6Ruo3WClMtZllEfO+/ 7iEr1V3JCmcrzTnpiHjZjX0xQAU6Ptd2SCs38/0e+DHd0Ruf4bg+HoBHOQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFB9G4qE/bE1G5oWwTAhCWu2NsV7RMB8GA1UdIwQY MBaAFJuXwi0LM4qKRaoTRbCRe6DclzOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTVmQ0xRc3ppb3BGcWhORnNKRjdvTnlYTTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lMjI1OGQtOGJjNS00NGVkLTgwNzMt YWU5OTllZDdjNWQ0LzEvSDBiaW9UOXNUVWJtaGJCTUNFSmE3WTJ4WHRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9lMjI1OGQtOGJjNS00NGVkLTgwNzMtYWU5OTllZDdjNWQ0 LzEvbTVmQ0xRc3ppb3BGcWhORnNKRjdvTnlYTTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuRwlAwQA uRwnAwQAuX4iMA0GCSqGSIb3DQEBCwUAA4IBAQCa+xQSdltNJDoYLNGcN6O6+Ndw NpuER3rH4qVVw1txpIiFNPHOnV+gKeix5qpLsOM9xJ1uyIPpl29cqUXtAbcuYyl+ 9rCOlLBY/8j1zwr/7r0fB71FmnfD70kZ8TyzlVIi8tyQ3vsk5Cafo7YDDjLkggfX 9tQybwFj2rIDUJm4L2RelicVj0qRAOzReDlYd0wPFWIfTxjsW3AS18QmrdUXE+1V JYiUNcF0+lahDbD7dyHUJN5q5MUm03/fvWBWxofXvt2Pv422c4c4bMxn6uqe1S5k VCex8f5cXh254EOFxtO1WSNl50qxp4Uj8/Zd9eABRCQTYQSs6CVWuw2lw7nO -----END CERTIFICATE-----Generated at Sat Jan 24 20:08:58 2026 by rpki-client