This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/h1BmnlXgB6ac2TWYQTKQ2ChwBMo.roa File: h1BmnlXgB6ac2TWYQTKQ2ChwBMo.roa (raw, json) Hash identifier: yzd9rByRC5Jsp/Gy055ZEn4rSEyip4EOwsA55gh4BjY= Subject key identifier: 87:50:66:9E:55:E0:07:A6:9C:D9:35:98:41:32:90:D8:28:70:04:CA Certificate issuer: /CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de Certificate serial: 019B7AC870849554588E908D4E34AF4943FF Authority key identifier: F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/h1BmnlXgB6ac2TWYQTKQ2ChwBMo.roa Signing time: Thu 01 Jan 2026 18:18:34 +0000 ROA not before: Thu 01 Jan 2026 18:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207777 IP address blocks: 195.182.24.0/24 maxlen: 24 195.182.27.0/24 maxlen: 24 195.182.29.0/24 maxlen: 24 195.182.37.0/24 maxlen: 24 2a13:7c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:70:84:95:54:58:8e:90:8d:4e:34:af:49:43:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de Validity Not Before: Jan 1 18:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8750669e55e007a69cd93598413290d8287004ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:50:17:3c:cd:57:5b:35:6e:a1:70:9b:f0: 15:e4:c0:da:d9:03:f3:79:09:ac:30:0a:d0:19:d9: 05:8e:87:1e:89:1e:8a:ae:4e:f5:b2:38:3f:4b:3b: e7:52:2c:e4:89:15:99:e6:96:d6:53:1a:5c:5b:ff: 5d:93:d8:bf:22:4b:b7:9f:32:dd:cc:12:c1:76:73: 95:dc:c4:c0:f3:84:a3:a3:6d:69:ff:c0:d1:c7:2c: d8:89:4b:e9:85:21:d9:72:02:9f:30:ce:34:f3:1b: 17:d2:33:81:74:cb:1e:d8:32:93:cc:33:17:00:bd: 1e:1e:b8:0b:cf:d4:5e:a1:05:5a:c7:30:10:82:78: f0:68:a0:cf:be:74:65:bb:90:a0:87:dd:ff:7c:f1: 61:5d:d1:12:df:ea:93:b1:c0:6f:bd:0f:dd:f5:47: 83:e4:9d:80:73:82:07:36:eb:c6:24:be:6a:fa:44: fc:6c:0d:28:67:7b:cb:44:2c:9d:3a:5a:5a:34:51: 0c:96:3a:f3:74:f1:5f:4c:f2:c1:84:b6:e6:11:fd: f4:9d:21:5e:e2:e0:56:3f:ca:fd:c9:d1:13:18:34: 50:87:d2:83:30:6d:c3:8c:39:ac:64:fe:ae:11:e6: 06:86:b8:f1:f6:49:63:7b:7e:85:e9:6f:c1:93:20: 51:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:50:66:9E:55:E0:07:A6:9C:D9:35:98:41:32:90:D8:28:70:04:CA X509v3 Authority Key Identifier: keyid:F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/h1BmnlXgB6ac2TWYQTKQ2ChwBMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.182.24.0/24 195.182.27.0/24 195.182.29.0/24 195.182.37.0/24 IPv6: 2a13:7c0::/29 Signature Algorithm: sha256WithRSAEncryption 0d:9a:24:5c:d0:e8:95:62:d9:86:4d:6e:6a:e8:ee:21:ce:d3: 3c:d1:be:33:ba:c9:43:ed:78:3b:de:d1:c7:46:bd:63:65:85: e8:e6:dd:a8:9a:5a:f4:7d:9f:38:9a:bf:e2:2b:a5:11:d4:49: ef:9f:29:3a:7c:66:2f:d8:65:5b:50:b6:ea:a0:aa:7b:c7:af: 4e:d6:b1:80:a6:64:51:84:16:1c:e0:99:cd:8e:e0:31:88:32: f5:4e:25:3e:51:2d:72:ea:dc:b3:37:5c:10:ac:e5:a5:1b:e8: f0:84:3c:00:ce:4b:13:3c:75:0b:0b:01:00:34:77:df:68:b0: 53:bb:75:fd:5b:26:ff:69:04:fb:9f:29:d5:80:33:54:82:7d: a0:d1:72:d9:c5:c6:bd:ce:26:a9:81:1f:42:c8:8f:b0:ff:16: 02:9d:32:33:11:66:7b:86:0b:9e:ac:45:51:65:ec:84:b9:31: 23:e4:53:40:7e:0f:74:ce:5e:00:33:96:d0:63:b1:8f:86:5f: 24:6e:de:07:d6:e8:a3:aa:7b:55:61:f8:85:af:e3:1c:d2:b1: 89:b6:2b:c6:01:05:1a:b8:ba:b7:78:a1:f3:69:02:46:52:11: f0:41:27:43:c4:fe:4b:84:81:75:8d:e8:4e:7d:7b:a4:dc:2b: 73:ed:2c:b7 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt6yHCElVRYjpCNTjSvSUP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YWVkNmQ1Y2U0MTU3OTdjMTI4NWY3ZWY2ZmQwNDNjNjQ2 NmU3ZGUwHhcNMjYwMTAxMTgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzUwNjY5ZTU1ZTAwN2E2OWNkOTM1OTg0MTMyOTBkODI4NzAwNGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEFQFzzNV1s1bqFwm/AV5MDa2QPz eQmsMArQGdkFjoceiR6Krk71sjg/SzvnUizkiRWZ5pbWUxpcW/9dk9i/Iku3nzLd zBLBdnOV3MTA84Sjo21p/8DRxyzYiUvphSHZcgKfMM408xsX0jOBdMse2DKTzDMX AL0eHrgLz9ReoQVaxzAQgnjwaKDPvnRlu5Cgh93/fPFhXdES3+qTscBvvQ/d9UeD 5J2Ac4IHNuvGJL5q+kT8bA0oZ3vLRCydOlpaNFEMljrzdPFfTPLBhLbmEf30nSFe 4uBWP8r9ydETGDRQh9KDMG3DjDmsZP6uEeYGhrjx9klje36F6W/BkyBRLwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFIdQZp5V4AemnNk1mEEykNgocATKMB8GA1UdIwQY MBaAFPau1tXOQVeXwShffvb9BDxkZufeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83ZmE5ZWQtYjA4Ny00MGNkLWEwMTYt ZDk1N2I4YzU0Yzk0LzEvaDFCbW5sWGdCNmFjMlRXWVFUS1EyQ2h3Qk1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83ZmE5ZWQtYjA4Ny00MGNkLWEwMTYtZDk1N2I4YzU0Yzk0 LzEvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAw7YYAwQA w7YbAwQAw7YdAwQAw7YlMA0EAgACMAcDBQMqEwfAMA0GCSqGSIb3DQEBCwUAA4IB AQANmiRc0OiVYtmGTW5q6O4hztM80b4zuslD7Xg73tHHRr1jZYXo5t2omlr0fZ84 mr/iK6UR1Envnyk6fGYv2GVbULbqoKp7x69O1rGApmRRhBYc4JnNjuAxiDL1TiU+ US1y6tyzN1wQrOWlG+jwhDwAzksTPHULCwEANHffaLBTu3X9Wyb/aQT7nynVgDNU gn2g0XLZxca9ziapgR9CyI+w/xYCnTIzEWZ7hguerEVRZeyEuTEj5FNAfg90zl4A M5bQY7GPhl8kbt4H1uijqntVYfiFr+Mc0rGJtivGAQUauLq3eKHzaQJGUhHwQSdD xP5LhIF1jehOfXuk3Ctz7Sy3 -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:15 2026 by rpki-client