This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/H6apiE0r9rOHvwzUANUDplSJSTM.roa File: H6apiE0r9rOHvwzUANUDplSJSTM.roa (raw, json) Hash identifier: cqjpgcUWiCJ8i4KpFtLhuI6KYkP0u+mdUggey1II1u8= Subject key identifier: 1F:A6:A9:88:4D:2B:F6:B3:87:BF:0C:D4:00:D5:03:A6:54:89:49:33 Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Certificate serial: 019B7FF17A11605AA8A422FBF14D1AAFB3E5 Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/H6apiE0r9rOHvwzUANUDplSJSTM.roa Signing time: Fri 02 Jan 2026 18:21:30 +0000 ROA not before: Fri 02 Jan 2026 18:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 62.164.195.0/24 maxlen: 24 194.76.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:7a:11:60:5a:a8:a4:22:fb:f1:4d:1a:af:b3:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Validity Not Before: Jan 2 18:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fa6a9884d2bf6b387bf0cd400d503a654894933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:28:bb:66:13:db:41:d9:c1:64:f0:aa:e0:0d: ca:2d:b5:7d:b4:c5:48:45:02:72:52:ac:a8:41:9f: 01:b7:a6:4c:fd:eb:ee:87:ed:98:f4:bc:f0:3e:e6: 0b:cc:1d:4e:80:7f:1d:a3:27:d9:3c:56:f7:a8:79: 0e:25:32:85:44:e3:84:55:11:46:42:df:49:56:48: 71:7e:19:91:08:d5:d9:f5:4a:95:53:45:e2:b9:72: 44:d0:2e:c5:6a:43:fb:c5:4e:30:5d:2c:a1:97:d1: 85:fb:c2:83:a4:c9:48:41:36:4f:57:71:61:2f:94: b6:c4:3f:85:f1:e0:f8:40:1c:7c:cf:85:34:77:eb: b9:d3:d3:60:d5:31:7a:0a:32:9b:2d:cc:3c:77:a1: 5b:20:88:4b:d2:32:1f:fc:f2:85:39:b4:b5:dc:18: 1d:55:11:cb:49:a5:41:5c:82:62:b9:6d:2b:fd:ea: 6d:58:3a:47:31:21:a1:f7:93:15:18:81:2b:cc:ae: 0d:d2:77:f7:5f:c8:36:c0:e1:0c:70:fa:aa:95:1d: a9:f4:d3:7a:e4:70:cc:fb:44:08:aa:ed:f3:35:c8: 5c:a6:b2:ef:2e:18:8f:e3:4d:3c:ff:4d:63:7b:48: 1a:67:c8:6c:6f:d3:d6:69:13:a6:4e:65:dd:f5:7d: 3c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A6:A9:88:4D:2B:F6:B3:87:BF:0C:D4:00:D5:03:A6:54:89:49:33 X509v3 Authority Key Identifier: keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/H6apiE0r9rOHvwzUANUDplSJSTM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.164.195.0/24 194.76.114.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:7f:32:29:fb:63:82:20:97:8f:f0:06:b5:af:8e:94:e2:27: d4:3d:9a:a7:68:4d:bb:2d:61:fe:6e:b2:30:56:69:e4:81:88: 5a:11:8f:2a:7a:a0:60:71:3d:8b:1e:89:da:bd:2c:8d:04:e2: 0b:46:dc:73:cd:6a:90:60:91:77:f0:02:78:60:59:f6:1c:8d: 58:98:89:40:70:f2:ce:38:77:ae:09:e4:97:a5:fa:0b:e9:71: a7:ac:20:f2:9c:f1:08:5b:07:6c:1b:1b:d4:3e:31:c3:9f:c8: 62:72:b7:8f:bf:9a:53:e8:a4:fa:01:b8:43:4e:60:c4:ce:db: 40:8d:32:5d:f6:ba:74:d4:64:fe:ed:e9:2a:b4:5c:a0:43:e4: 60:bf:17:63:2a:73:3a:35:33:3b:8c:b9:08:9e:83:0e:50:ce: 7f:51:d5:f1:c8:2a:8d:da:49:33:46:00:5a:f0:00:99:ce:ab: b9:93:d4:72:7d:b2:59:56:72:e1:ee:1d:f7:34:c4:bd:e8:c4: 42:0d:73:8b:7d:c0:ac:e3:57:ba:f4:1c:c8:13:40:be:c4:b8: a6:ae:a6:d7:8c:fc:70:39:5d:49:99:80:ba:15:9d:c0:3b:5b: 07:d0:43:92:1e:1b:2f:09:45:22:6b:fc:b6:19:0a:66:bd:f7: 32:da:16:bd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8XoRYFqopCL78U0ar7PlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk MmRkNTIwHhcNMjYwMTAyMTgyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmE2YTk4ODRkMmJmNmIzODdiZjBjZDQwMGQ1MDNhNjU0ODk0OTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSi7ZhPbQdnBZPCq4A3KLbV9tMVI RQJyUqyoQZ8Bt6ZM/evuh+2Y9LzwPuYLzB1OgH8doyfZPFb3qHkOJTKFROOEVRFG Qt9JVkhxfhmRCNXZ9UqVU0XiuXJE0C7FakP7xU4wXSyhl9GF+8KDpMlIQTZPV3Fh L5S2xD+F8eD4QBx8z4U0d+u509Ng1TF6CjKbLcw8d6FbIIhL0jIf/PKFObS13Bgd VRHLSaVBXIJiuW0r/eptWDpHMSGh95MVGIErzK4N0nf3X8g2wOEMcPqqlR2p9NN6 5HDM+0QIqu3zNchcprLvLhiP4008/01je0gaZ8hsb9PWaROmTmXd9X08eQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB+mqYhNK/azh78M1ADVA6ZUiUkzMB8GA1UdIwQY MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt YWRlZDFjNDY5ZWFmLzEvSDZhcGlFMHI5ck9Idnd6VUFOVURwbFNKU1RNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPqTDAwQB wkxyMA0GCSqGSIb3DQEBCwUAA4IBAQA/fzIp+2OCIJeP8Aa1r46U4ifUPZqnaE27 LWH+brIwVmnkgYhaEY8qeqBgcT2LHonavSyNBOILRtxzzWqQYJF38AJ4YFn2HI1Y mIlAcPLOOHeuCeSXpfoL6XGnrCDynPEIWwdsGxvUPjHDn8hicrePv5pT6KT6AbhD TmDEzttAjTJd9rp01GT+7ekqtFygQ+RgvxdjKnM6NTM7jLkInoMOUM5/UdXxyCqN 2kkzRgBa8ACZzqu5k9RyfbJZVnLh7h33NMS96MRCDXOLfcCs41e69BzIE0C+xLim rqbXjPxwOV1JmYC6FZ3AO1sH0EOSHhsvCUUia/y2GQpmvfcy2ha9 -----END CERTIFICATE-----Generated at Thu Jan 8 12:59:33 2026 by rpki-client