This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/0hNitkHNxqHDc_18OnXBaZgItKQ.roa File: 0hNitkHNxqHDc_18OnXBaZgItKQ.roa (raw, json) Hash identifier: NObu/X6pwO5Ig/Stu2qJfJzgTwRgKUDuC69hOBPSYtc= Subject key identifier: D2:13:62:B6:41:CD:C6:A1:C3:73:FD:7C:3A:75:C1:69:98:08:B4:A4 Certificate issuer: /CN=b61b7974e97ab93791240734a19fb9ae7445cbd9 Certificate serial: 019B7F159553A3927C3337BA5461229BFFF4 Authority key identifier: B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/0hNitkHNxqHDc_18OnXBaZgItKQ.roa Signing time: Fri 02 Jan 2026 14:21:19 +0000 ROA not before: Fri 02 Jan 2026 14:21:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203041 IP address blocks: 185.147.1.0/24 maxlen: 24 185.147.2.0/24 maxlen: 24 185.147.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:95:53:a3:92:7c:33:37:ba:54:61:22:9b:ff:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b61b7974e97ab93791240734a19fb9ae7445cbd9 Validity Not Before: Jan 2 14:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d21362b641cdc6a1c373fd7c3a75c1699808b4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d9:a8:0e:ca:cf:00:5b:1e:eb:0f:4c:87:31: fd:ab:6a:a4:7b:78:3b:b0:55:53:20:73:a3:0f:ca: 7b:9c:06:f6:d6:9e:b7:94:ef:43:da:cd:3b:1f:e5: d0:58:54:5d:45:53:f0:94:b1:d9:24:72:a3:54:bb: 1e:b7:83:20:f5:f1:65:32:6b:b0:a0:d9:56:5b:5a: dc:f4:5b:fe:3d:23:3e:d3:aa:e9:69:fd:d8:16:7d: 90:ee:ca:c2:b0:3d:ca:75:a3:04:b0:69:48:a8:e5: 9d:ae:ed:df:e7:2e:ab:ad:ef:b0:f1:53:ab:45:5b: 6c:f0:63:9a:78:01:6d:75:04:43:8b:ab:f0:43:eb: 15:86:82:8a:0a:2d:79:7b:74:16:7e:73:e0:48:e4: 53:f2:db:2a:e6:7b:39:0c:1d:aa:13:28:a8:03:1c: e7:90:72:72:07:79:77:c7:d4:8b:56:1a:64:11:e3: 79:46:ee:61:87:a1:ca:a7:3b:15:c4:72:4c:a7:f0: f7:5f:22:69:d2:d3:88:6a:98:52:57:cc:5b:f2:e5: 22:11:c3:c1:1f:cc:8f:dd:e6:d4:5b:ec:4e:ef:6e: 9a:22:3d:ed:fc:d5:71:a4:fb:92:fd:0e:3b:51:99: bf:27:65:ce:96:f7:76:6e:74:05:9a:47:26:81:1f: fa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:13:62:B6:41:CD:C6:A1:C3:73:FD:7C:3A:75:C1:69:98:08:B4:A4 X509v3 Authority Key Identifier: keyid:B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/0hNitkHNxqHDc_18OnXBaZgItKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.147.1.0-185.147.3.255 Signature Algorithm: sha256WithRSAEncryption 6b:af:e4:ba:21:e7:fb:29:29:87:ae:e8:25:55:69:a6:db:b6: 01:0f:e3:8a:f6:a9:7e:e3:0e:40:4e:85:a0:6d:e7:f6:22:36: 83:0c:2f:b3:3c:dd:68:21:44:19:fc:8c:9f:c4:cf:50:e1:4e: 3f:43:65:cd:ef:66:d9:2d:56:3c:bb:b7:56:17:8a:fb:a8:f6: 33:f4:e4:c8:b4:13:a0:50:0e:2b:e1:47:ef:7f:ee:49:4b:33: d5:f8:85:e4:64:1e:26:13:ef:f2:fc:1c:24:c2:f3:51:0b:9b: ae:ac:9b:01:25:11:ad:e4:e5:8e:51:66:12:1b:f5:e4:cc:ba: 48:ad:9c:e3:4c:8c:4c:65:27:63:9e:78:c6:19:db:8d:0e:08: 70:3c:5c:51:68:a9:27:2b:96:56:e3:ad:83:b1:9f:f4:5c:70: d8:e2:be:40:63:de:74:80:b0:3f:9d:b9:f8:b9:7f:d5:82:c3: af:c2:32:72:ac:59:93:26:13:56:85:29:63:08:52:87:52:ff: 23:9c:a3:2a:da:0a:8a:f1:3e:15:2c:e2:a3:a4:82:00:9f:5f: 1f:4b:5e:13:9c:72:a3:a6:35:8f:8a:74:26:af:ba:d9:7b:76: 40:45:78:96:42:fc:d6:f0:9b:fa:ab:1d:53:99:78:20:40:74: f0:cc:5a:ef -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/FZVTo5J8Mze6VGEim//0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MWI3OTc0ZTk3YWI5Mzc5MTI0MDczNGExOWZiOWFlNzQ0 NWNiZDkwHhcNMjYwMTAyMTQyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjEzNjJiNjQxY2RjNmExYzM3M2ZkN2MzYTc1YzE2OTk4MDhiNGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktmoDsrPAFse6w9MhzH9q2qke3g7 sFVTIHOjD8p7nAb21p63lO9D2s07H+XQWFRdRVPwlLHZJHKjVLset4Mg9fFlMmuw oNlWW1rc9Fv+PSM+06rpaf3YFn2Q7srCsD3KdaMEsGlIqOWdru3f5y6rre+w8VOr RVts8GOaeAFtdQRDi6vwQ+sVhoKKCi15e3QWfnPgSORT8tsq5ns5DB2qEyioAxzn kHJyB3l3x9SLVhpkEeN5Ru5hh6HKpzsVxHJMp/D3XyJp0tOIaphSV8xb8uUiEcPB H8yP3ebUW+xO726aIj3t/NVxpPuS/Q47UZm/J2XOlvd2bnQFmkcmgR/6+wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNITYrZBzcahw3P9fDp1wWmYCLSkMB8GA1UdIwQY MBaAFLYbeXTperk3kSQHNKGfua50RcvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGh0NWRPbDZ1VGVSSkFjMG9aLTVyblJGeTlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MWQyMTMtMmEwZi00MzQ4LTg5M2Mt ZTcyNjM3NDMzMGNlLzEvMGhOaXRrSE54cUhEY18xOE9uWEJhWmdJdEtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi82MWQyMTMtMmEwZi00MzQ4LTg5M2MtZTcyNjM3NDMzMGNl LzEvdGh0NWRPbDZ1VGVSSkFjMG9aLTVyblJGeTlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5kwED BAK5kwAwDQYJKoZIhvcNAQELBQADggEBAGuv5Loh5/spKYeu6CVVaabbtgEP44r2 qX7jDkBOhaBt5/YiNoMML7M83WghRBn8jJ/Ez1DhTj9DZc3vZtktVjy7t1YXivuo 9jP05Mi0E6BQDivhR+9/7klLM9X4heRkHiYT7/L8HCTC81ELm66smwElEa3k5Y5R ZhIb9eTMukitnONMjExlJ2OeeMYZ240OCHA8XFFoqScrllbjrYOxn/RccNjivkBj 3nSAsD+dufi5f9WCw6/CMnKsWZMmE1aFKWMIUodS/yOcoyraCorxPhUs4qOkggCf Xx9LXhOccqOmNY+KdCavutl7dkBFeJZC/Nbwm/qrHVOZeCBAdPDMWu8= -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:35 2026 by rpki-client