This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/h4nqpbIkmeuudIuqfgF5BDf1Aws.roa File: h4nqpbIkmeuudIuqfgF5BDf1Aws.roa (raw, json) Hash identifier: C3W4ffqhbf/up+IDOjAUBbpXdwcaUQU3jCZAzrCA6Sc= Subject key identifier: 87:89:EA:A5:B2:24:99:EB:AE:74:8B:AA:7E:01:79:04:37:F5:03:0B Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B3551C8390EA0011DE622974189C327 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/h4nqpbIkmeuudIuqfgF5BDf1Aws.roa Signing time: Thu 01 Jan 2026 20:17:30 +0000 ROA not before: Thu 01 Jan 2026 20:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 80.97.54.0/24 maxlen: 24 81.180.173.0/24 maxlen: 24 81.181.175.0/24 maxlen: 24 81.181.236.0/22 maxlen: 22 194.102.122.0/23 maxlen: 23 194.102.217.0/24 maxlen: 24 217.156.29.0/24 maxlen: 24 217.156.57.0/24 maxlen: 24 217.156.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:51:c8:39:0e:a0:01:1d:e6:22:97:41:89:c3:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8789eaa5b22499ebae748baa7e01790437f5030b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cb:4b:3d:61:56:64:c8:74:12:8f:74:12:03: 21:f2:d4:67:2c:c9:64:c1:33:b3:8a:e5:0f:1a:6f: 5a:74:59:1f:83:eb:75:8a:29:48:c9:bf:0a:8f:6e: d9:40:5b:a6:a9:90:c6:dd:a1:c4:64:a2:8d:c6:74: 60:3e:01:bc:4d:d3:e8:ae:7b:88:9e:a3:30:19:36: 3f:53:38:e5:d1:52:96:d1:04:4c:bb:7f:89:d8:ed: 2c:94:c1:b3:9b:3b:fb:ed:f2:b2:75:f8:20:f3:7a: e4:74:cc:b2:17:dc:31:08:4e:4b:b3:51:34:6b:23: 78:01:aa:27:e0:ad:d3:43:7d:44:db:9a:c2:38:42: 25:91:fc:a6:a9:36:1b:d5:04:d3:3d:8b:56:c9:f3: 83:3e:93:06:ae:e0:aa:9c:52:f1:3b:8c:43:e1:1f: 46:fe:29:13:6d:6b:4f:84:8a:2c:77:f8:70:9e:6a: f8:67:52:e3:70:8c:92:5b:bb:7c:c2:02:66:5e:67: 3c:af:42:57:a1:26:35:6d:9a:75:90:f9:61:8e:60: 80:21:11:ed:a0:ce:7d:69:01:df:b2:35:80:da:61: 2b:3e:a2:ed:5b:2b:65:da:7f:fe:84:c6:a4:b0:8c: eb:0e:45:50:1b:b1:73:f4:3c:83:db:da:91:2d:99: 68:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:89:EA:A5:B2:24:99:EB:AE:74:8B:AA:7E:01:79:04:37:F5:03:0B X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/h4nqpbIkmeuudIuqfgF5BDf1Aws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.97.54.0/24 81.180.173.0/24 81.181.175.0/24 81.181.236.0/22 194.102.122.0/23 194.102.217.0/24 217.156.29.0/24 217.156.57.0/24 217.156.112.0/22 Signature Algorithm: sha256WithRSAEncryption 50:b5:57:ef:4e:2b:b5:2f:72:eb:7e:1f:d4:ca:bc:b5:d2:09: f6:bf:9a:d3:04:d3:6f:d8:46:33:46:83:0c:40:f7:fa:14:6f: b4:1e:65:9e:78:97:ee:88:c5:d4:62:ef:f0:c2:14:0e:53:07: 13:a6:dd:10:00:9f:de:fe:6a:4d:a9:57:ff:a4:0f:f4:04:3a: 35:2b:a5:3b:0d:a1:2e:02:9c:a8:e5:05:6d:ff:48:87:4d:30: 3f:da:02:db:0c:88:4d:1c:fb:f0:77:5b:14:bf:e3:ce:17:25: 5b:a2:02:88:6f:d1:d7:34:73:1b:bb:6f:c4:eb:82:3b:bc:74: e5:c1:5d:89:01:36:f9:6e:d7:c3:03:b8:18:38:dc:39:e0:0d: 09:10:6f:2b:a9:81:a5:d0:8d:f2:83:90:f7:41:95:f9:a5:99: 10:f3:4d:67:b5:9e:93:78:60:8d:46:d1:3c:02:45:41:20:4f: 53:34:f7:ad:28:18:ee:82:b6:01:9a:bf:5e:68:b4:bc:8e:48: ee:6d:54:65:3e:da:cf:fc:4c:69:09:5b:0a:65:53:62:dc:ce: 7a:e7:9c:24:4e:75:1f:1f:52:b3:80:be:26:ee:09:50:af:c8: a5:01:80:d8:2f:36:28:ce:3b:06:f0:c9:b5:44:91:c9:0b:7b: 1e:be:40:ba -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt7NVHIOQ6gAR3mIpdBicMnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Nzg5ZWFhNWIyMjQ5OWViYWU3NDhiYWE3ZTAxNzkwNDM3ZjUwMzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsstLPWFWZMh0Eo90EgMh8tRnLMlk wTOziuUPGm9adFkfg+t1iilIyb8Kj27ZQFumqZDG3aHEZKKNxnRgPgG8TdPornuI nqMwGTY/Uzjl0VKW0QRMu3+J2O0slMGzmzv77fKydfgg83rkdMyyF9wxCE5Ls1E0 ayN4Aaon4K3TQ31E25rCOEIlkfymqTYb1QTTPYtWyfODPpMGruCqnFLxO4xD4R9G /ikTbWtPhIosd/hwnmr4Z1LjcIySW7t8wgJmXmc8r0JXoSY1bZp1kPlhjmCAIRHt oM59aQHfsjWA2mErPqLtWytl2n/+hMaksIzrDkVQG7Fz9DyD29qRLZlouQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFIeJ6qWyJJnrrnSLqn4BeQQ39QMLMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvaDRucXBiSWttZXV1ZEl1cWZnRjVCRGYxQXdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAUGE2AwQA UbStAwQAUbWvAwQCUbXsAwQBwmZ6AwQAwmbZAwQA2ZwdAwQA2Zw5AwQC2ZxwMA0G CSqGSIb3DQEBCwUAA4IBAQBQtVfvTiu1L3Lrfh/Uyry10gn2v5rTBNNv2EYzRoMM QPf6FG+0HmWeeJfuiMXUYu/wwhQOUwcTpt0QAJ/e/mpNqVf/pA/0BDo1K6U7DaEu Apyo5QVt/0iHTTA/2gLbDIhNHPvwd1sUv+POFyVbogKIb9HXNHMbu2/E64I7vHTl wV2JATb5btfDA7gYONw54A0JEG8rqYGl0I3yg5D3QZX5pZkQ801ntZ6TeGCNRtE8 AkVBIE9TNPetKBjugrYBmr9eaLS8jkjubVRlPtrP/ExpCVsKZVNi3M5655wkTnUf H1KzgL4m7glQr8ilAYDYLzYozjsG8Mm1RJHJC3sevkC6 -----END CERTIFICATE-----Generated at Thu Jan 8 00:11:48 2026 by rpki-client