This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/id0hsh7Fe_lQMhmcqJsF6Rp-H7I.roa File: id0hsh7Fe_lQMhmcqJsF6Rp-H7I.roa (raw, json) Hash identifier: Ur6WDVA8huE6AW7GlAX8It7rlAORYbu2UH0XMkA+NT0= Subject key identifier: 89:DD:21:B2:1E:C5:7B:F9:50:32:19:9C:A8:9B:05:E9:1A:7E:1F:B2 Certificate issuer: /CN=78b04fbafaa36b71fcd36eca50b5fe0e88dd3551 Certificate serial: 019B79113E21B3704A389E529F4E38E39C57 Authority key identifier: 78:B0:4F:BA:FA:A3:6B:71:FC:D3:6E:CA:50:B5:FE:0E:88:DD:35:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/id0hsh7Fe_lQMhmcqJsF6Rp-H7I.roa Signing time: Thu 01 Jan 2026 10:18:51 +0000 ROA not before: Thu 01 Jan 2026 10:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201997 IP address blocks: 185.59.184.0/22 maxlen: 22 185.59.184.0/24 maxlen: 24 185.59.185.0/24 maxlen: 24 185.59.186.0/23 maxlen: 23 185.59.186.0/24 maxlen: 24 185.59.187.0/24 maxlen: 24 2a02:6ca0::/32 maxlen: 32 2a02:6ca0::/48 maxlen: 48 2a02:6ca1::/32 maxlen: 32 2a02:6ca2::/32 maxlen: 32 2a02:6ca4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3e:21:b3:70:4a:38:9e:52:9f:4e:38:e3:9c:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78b04fbafaa36b71fcd36eca50b5fe0e88dd3551 Validity Not Before: Jan 1 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89dd21b21ec57bf95032199ca89b05e91a7e1fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f4:48:86:db:ab:e3:7a:59:bc:13:5f:e9:aa: 0b:af:d9:aa:6f:b8:be:37:63:a5:4d:cb:c5:81:7b: 51:79:ec:99:2c:6c:2c:15:80:18:43:0e:9b:d4:f3: 6e:2d:1e:09:1a:c3:1c:93:70:f9:b1:b0:31:6f:f7: 4e:81:8a:a2:f7:12:b5:58:0c:07:7e:00:39:4d:df: 34:2c:f3:30:1d:18:53:10:f6:7b:83:50:e5:f5:7d: 09:59:98:97:c6:99:2f:4f:24:36:c5:4f:3a:8c:cc: 61:9f:63:91:18:8e:f9:03:3f:7f:97:1b:87:b0:55: 8f:59:65:05:e1:3b:f7:b8:2a:bd:2d:22:22:ab:6a: a2:ee:53:02:d4:43:d9:01:f0:ce:7f:da:6c:95:d0: 07:69:f4:18:32:90:ae:7b:a4:be:ca:c4:24:24:4e: 5a:c7:38:14:d2:90:15:ac:31:da:a5:f8:30:75:20: fe:a8:89:fb:f4:91:18:03:64:71:82:fd:08:54:71: ea:38:33:35:97:46:e4:02:b7:8c:dc:a3:fd:f1:91: 5a:4d:a7:63:e4:d9:a0:b4:af:e5:bb:12:bd:5c:ff: dc:26:7c:2e:b1:6b:a8:ff:f4:fa:32:e9:8c:eb:bd: 48:9e:89:14:c5:fd:48:b8:40:dd:c4:57:de:47:6c: 6e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DD:21:B2:1E:C5:7B:F9:50:32:19:9C:A8:9B:05:E9:1A:7E:1F:B2 X509v3 Authority Key Identifier: keyid:78:B0:4F:BA:FA:A3:6B:71:FC:D3:6E:CA:50:B5:FE:0E:88:DD:35:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/id0hsh7Fe_lQMhmcqJsF6Rp-H7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.59.184.0/22 IPv6: 2a02:6ca0::-2a02:6ca2:ffff:ffff:ffff:ffff:ffff:ffff 2a02:6ca4::/32 Signature Algorithm: sha256WithRSAEncryption 1d:6d:2a:92:4e:a9:d4:b5:a7:45:a1:26:ca:80:07:44:43:b0: 51:fa:20:5c:dc:dc:a1:94:b4:c8:23:e2:43:1c:5d:49:7f:14: 04:56:1f:75:ba:70:2d:a5:7a:99:0a:70:f4:ff:d2:32:e5:56: dd:22:56:03:c4:05:82:e7:03:77:74:f6:e1:c9:9a:0a:8a:35: ac:81:a0:45:90:11:71:41:c3:2e:3c:24:96:df:5e:88:b2:fb: 8a:cd:73:b5:cd:13:b2:e5:75:87:d3:29:88:c9:2f:08:5c:84: 61:9b:c8:c7:19:f5:fa:9d:c6:ba:e3:c0:93:f1:52:c4:ef:33: 17:05:d0:33:5a:b5:1a:6b:fd:85:53:2d:fe:77:f3:fa:a4:06: 8a:2c:40:b9:dc:9c:72:6b:4a:3d:89:0b:31:7f:1f:43:d3:37: 16:be:e0:62:31:e8:be:08:51:49:39:7f:61:8f:e3:ee:b2:21: 51:fb:65:f3:83:27:ba:8a:19:e8:18:be:4f:c6:70:b9:90:6c: af:4b:1d:b5:74:c9:0f:bd:d1:06:63:39:ab:45:ff:46:ab:3a: 10:50:4d:1d:f1:d0:b7:49:12:a0:6e:b6:3c:a4:2b:47:52:59: 47:87:44:a9:05:1c:3f:66:be:c1:24:6f:43:36:6f:d6:a9:1e: ad:d7:f1:05 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt5ET4hs3BKOJ5Sn04445xXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4YjA0ZmJhZmFhMzZiNzFmY2QzNmVjYTUwYjVmZTBlODhk ZDM1NTEwHhcNMjYwMTAxMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWRkMjFiMjFlYzU3YmY5NTAzMjE5OWNhODliMDVlOTFhN2UxZmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPRIhtur43pZvBNf6aoLr9mqb7i+ N2OlTcvFgXtReeyZLGwsFYAYQw6b1PNuLR4JGsMck3D5sbAxb/dOgYqi9xK1WAwH fgA5Td80LPMwHRhTEPZ7g1Dl9X0JWZiXxpkvTyQ2xU86jMxhn2ORGI75Az9/lxuH sFWPWWUF4Tv3uCq9LSIiq2qi7lMC1EPZAfDOf9psldAHafQYMpCue6S+ysQkJE5a xzgU0pAVrDHapfgwdSD+qIn79JEYA2Rxgv0IVHHqODM1l0bkAreM3KP98ZFaTadj 5NmgtK/luxK9XP/cJnwusWuo//T6MumM671InokUxf1IuEDdxFfeR2xuBwIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFIndIbIexXv5UDIZnKibBekafh+yMB8GA1UdIwQY MBaAFHiwT7r6o2tx/NNuylC1/g6I3TVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUxCUHV2cWphM0g4MDI3S1VMWC1Eb2pkTlZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9jNDFjNzQtMGI4Mi00MGU3LWEwYmYt MGFhZTFjY2Q4NzRiLzEvaWQwaHNoN0ZlX2xRTWhtY3FKc0Y2UnAtSDdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9jNDFjNzQtMGI4Mi00MGU3LWEwYmYtMGFhZTFjY2Q4NzRi LzEvZUxCUHV2cWphM0g4MDI3S1VMWC1Eb2pkTlZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAMBAIAATAGAwQCuTu4MB0E AgACMBcwDgMFBSoCbKADBQAqAmyiAwUAKgJspDANBgkqhkiG9w0BAQsFAAOCAQEA HW0qkk6p1LWnRaEmyoAHREOwUfogXNzcoZS0yCPiQxxdSX8UBFYfdbpwLaV6mQpw 9P/SMuVW3SJWA8QFgucDd3T24cmaCoo1rIGgRZARcUHDLjwklt9eiLL7is1ztc0T suV1h9MpiMkvCFyEYZvIxxn1+p3GuuPAk/FSxO8zFwXQM1q1Gmv9hVMt/nfz+qQG iixAudyccmtKPYkLMX8fQ9M3Fr7gYjHovghRSTl/YY/j7rIhUftl84MnuooZ6Bi+ T8ZwuZBsr0sdtXTJD73RBmM5q0X/Rqs6EFBNHfHQt0kSoG62PKQrR1JZR4dEqQUc P2a+wSRvQzZv1qkerdfxBQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:02:02 2026 by rpki-client