This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/F-HaW_xvZre_0uYFdAKqHD7Xf04.roa File: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (raw, json) Hash identifier: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs= Subject key identifier: 17:E1:DA:5B:FC:6F:66:B7:BF:D2:E6:05:74:02:AA:1C:3E:D7:7F:4E Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019B78A37403364E00407BA969AE9BDD1684 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/F-HaW_xvZre_0uYFdAKqHD7Xf04.roa Signing time: Thu 01 Jan 2026 08:18:56 +0000 ROA not before: Thu 01 Jan 2026 08:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56630 IP address blocks: 213.183.54.0/24 maxlen: 24 213.183.56.0/24 maxlen: 24 213.183.57.0/24 maxlen: 24 2a03:f80:7::/48 maxlen: 48 2a03:f80:70::/48 maxlen: 48 2a03:f80:359::/48 maxlen: 48 2a03:f80:370::/48 maxlen: 48 2a03:f80:371::/48 maxlen: 48 2a03:f80:3991::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:74:03:36:4e:00:40:7b:a9:69:ae:9b:dd:16:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17e1da5bfc6f66b7bfd2e6057402aa1c3ed77f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:89:f1:81:54:80:a4:6d:44:0f:8b:f6:11:1b: b7:8b:f8:be:3f:f1:d5:a9:4e:9a:ec:4c:df:df:40: 7a:95:a4:b4:29:29:6e:e6:bf:06:1f:d1:2e:3c:85: 03:5d:ea:d9:4b:af:7e:54:ce:2e:33:e3:dd:8f:8e: 8f:ba:df:1d:87:be:60:7f:bf:c5:9c:f8:fc:9f:69: 48:89:06:b0:53:24:49:63:fa:47:bd:8a:c0:ee:33: 5f:be:7b:fe:f4:e9:96:3c:eb:a3:11:6c:7e:8c:6c: f8:ca:04:6a:21:a7:5f:9c:f4:ef:fd:77:dd:8d:c1: ed:c1:c2:cf:68:73:ff:71:56:4d:0e:2d:f3:2b:60: 92:17:4f:21:6d:7a:5d:36:92:e7:b3:a2:16:77:2d: 5c:6f:cd:d9:82:87:61:d7:bb:78:ee:cf:f6:38:44: c2:4d:a2:8d:3f:9a:11:ad:34:fc:3c:8d:ce:3b:fc: 0f:7e:d9:8c:50:3b:09:04:fd:89:25:da:80:7f:69: f0:e6:0d:3c:b2:fa:f5:15:5b:09:bc:7e:8a:30:29: cd:61:d4:d7:d0:db:b4:68:e9:92:2b:c3:45:ae:17: 8c:a7:53:ce:0f:a1:89:ae:5d:9c:a9:8b:0b:9e:38: 6d:9a:82:a0:e9:81:ca:1e:32:d2:a3:af:ea:27:b1: 90:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E1:DA:5B:FC:6F:66:B7:BF:D2:E6:05:74:02:AA:1C:3E:D7:7F:4E X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/F-HaW_xvZre_0uYFdAKqHD7Xf04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.183.54.0/24 213.183.56.0/23 IPv6: 2a03:f80:7::/48 2a03:f80:70::/48 2a03:f80:359::/48 2a03:f80:370::/47 2a03:f80:3991::/48 Signature Algorithm: sha256WithRSAEncryption 92:7b:db:f8:2f:2a:9c:d0:0d:10:23:19:ea:45:c1:7a:8b:1d: 13:98:29:3f:b3:f9:c4:a5:be:f0:49:3f:6d:49:7b:a0:ea:f5: 20:ef:d8:1e:77:ee:33:3c:ab:cf:ce:a2:87:a9:ff:54:ab:3a: 36:c9:67:db:c7:71:9e:f5:ba:8f:60:dd:8e:57:19:1d:5d:5b: 26:9b:7b:38:d0:c4:e6:02:96:1e:36:dd:b9:5e:b7:9d:82:93: 06:f7:dd:17:e5:26:85:15:21:99:03:71:f1:bc:d8:d1:29:8a: 24:73:70:08:de:0c:85:73:87:c9:10:8c:82:2c:a4:1c:9f:a6: 52:71:94:9b:80:54:d6:fc:fd:fe:c0:2a:b8:2f:21:f2:1c:6d: 3f:e6:4c:a5:52:e2:0c:59:5c:0b:63:de:e5:d4:81:16:d2:ae: dd:87:50:87:67:79:9b:60:6a:0a:7c:be:4d:ec:d4:30:e5:17: 79:51:59:39:72:aa:24:0c:32:89:c1:0c:b6:f7:7b:73:c9:32: 26:f4:f1:3f:34:e3:ce:11:f9:10:8b:22:6f:14:61:c2:ef:53: b3:4c:51:bb:c2:61:6d:1a:a0:54:25:04:63:d9:fc:10:c0:f5: 37:8f:77:33:70:03:a4:c8:a1:73:e1:62:bd:c5:3a:ff:fb:16: 68:62:6b:1e -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt4o3QDNk4AQHupaa6b3RaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2UxZGE1YmZjNmY2NmI3YmZkMmU2MDU3NDAyYWExYzNlZDc3ZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4nxgVSApG1ED4v2ERu3i/i+P/HV qU6a7Ezf30B6laS0KSlu5r8GH9EuPIUDXerZS69+VM4uM+Pdj46Put8dh75gf7/F nPj8n2lIiQawUyRJY/pHvYrA7jNfvnv+9OmWPOujEWx+jGz4ygRqIadfnPTv/Xfd jcHtwcLPaHP/cVZNDi3zK2CSF08hbXpdNpLns6IWdy1cb83Zgodh17t47s/2OETC TaKNP5oRrTT8PI3OO/wPftmMUDsJBP2JJdqAf2nw5g08svr1FVsJvH6KMCnNYdTX 0Nu0aOmSK8NFrheMp1POD6GJrl2cqYsLnjhtmoKg6YHKHjLSo6/qJ7GQRwIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFBfh2lv8b2a3v9LmBXQCqhw+139OMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvRi1IYVdfeHZacmVfMHVZRmRBS3FIRDdYZjA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTASBAIAATAMAwQA1bc2AwQB 1bc4MDMEAgACMC0DBwAqAw+AAAcDBwAqAw+AAHADBwAqAw+AA1kDBwEqAw+AA3AD BwAqAw+AOZEwDQYJKoZIhvcNAQELBQADggEBAJJ72/gvKpzQDRAjGepFwXqLHROY KT+z+cSlvvBJP21Je6Dq9SDv2B537jM8q8/Oooep/1SrOjbJZ9vHcZ71uo9g3Y5X GR1dWyabezjQxOYClh423blet52Ckwb33RflJoUVIZkDcfG82NEpiiRzcAjeDIVz h8kQjIIspByfplJxlJuAVNb8/f7AKrgvIfIcbT/mTKVS4gxZXAtj3uXUgRbSrt2H UIdneZtgagp8vk3s1DDlF3lRWTlyqiQMMonBDLb3e3PJMib08T80484R+RCLIm8U YcLvU7NMUbvCYW0aoFQlBGPZ/BDA9TePdzNwA6TIoXPhYr3FOv/7Fmhiax4= -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:48 2026 by rpki-client