This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/h_XgV1aRoMpZvWJtCwYBgjRTK64.roa File: h_XgV1aRoMpZvWJtCwYBgjRTK64.roa (raw, json) Hash identifier: TZ4/azhdoFnrVap0lCr61zAjx/E/hkClsU7RA6suysw= Subject key identifier: 87:F5:E0:57:56:91:A0:CA:59:BD:62:6D:0B:06:01:82:34:53:2B:AE Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B3577192D84D1A02FDE314EE031513A Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/h_XgV1aRoMpZvWJtCwYBgjRTK64.roa Signing time: Thu 01 Jan 2026 20:17:40 +0000 ROA not before: Thu 01 Jan 2026 20:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48753 IP address blocks: 80.97.160.0/24 maxlen: 24 80.97.161.0/24 maxlen: 24 85.121.148.0/24 maxlen: 24 85.122.129.0/24 maxlen: 24 194.102.104.0/24 maxlen: 24 217.156.62.0/24 maxlen: 24 217.156.66.0/24 maxlen: 24 217.156.67.0/24 maxlen: 24 217.156.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:77:19:2d:84:d1:a0:2f:de:31:4e:e0:31:51:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87f5e0575691a0ca59bd626d0b06018234532bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3c:5f:91:d7:4d:ea:03:75:57:41:4c:91:a0: 32:3b:ed:7e:aa:fa:00:15:73:6b:ca:72:d4:e5:c9: 9d:2a:34:48:76:e2:92:5c:9c:a8:af:1f:05:83:91: b3:80:be:4d:55:0e:7b:f5:81:29:87:03:07:37:74: e6:63:cb:64:3f:b5:13:e8:c4:41:fb:5a:8c:c7:f4: 4a:d0:43:98:c7:d0:97:fd:ce:71:e9:bf:28:65:cf: 01:6b:70:b1:7e:0f:5a:cc:c2:74:dd:37:7e:ab:22: ea:20:9b:5e:16:b9:7d:88:ea:77:53:26:44:fb:67: d9:7b:df:0b:dc:83:3c:93:f6:55:7d:ff:82:99:18: 91:bf:f5:a2:66:0a:99:9e:ba:f5:bd:c7:66:25:85: b7:16:f7:9f:5a:01:9f:46:58:8c:3e:9d:63:61:0d: 35:12:28:6f:15:36:fe:00:c7:61:c2:7d:66:ba:dc: 61:3a:ce:e1:61:5b:d9:4d:0f:7a:f4:c6:6f:30:67: 49:31:a5:44:29:a3:8b:74:ed:60:a7:15:57:1a:2c: fa:ee:26:63:ab:1a:b2:26:95:97:37:7b:3b:a4:a5: e7:3b:26:72:c7:02:4b:84:9f:cb:9b:b8:df:65:f2: 57:a6:cc:06:56:32:68:c9:cd:1c:a7:96:d9:6a:8d: ab:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F5:E0:57:56:91:A0:CA:59:BD:62:6D:0B:06:01:82:34:53:2B:AE X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/h_XgV1aRoMpZvWJtCwYBgjRTK64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.97.160.0/23 85.121.148.0/24 85.122.129.0/24 194.102.104.0/24 217.156.62.0/24 217.156.66.0/23 217.156.122.0/24 Signature Algorithm: sha256WithRSAEncryption 90:5a:18:69:8f:c9:fa:5d:1c:cc:f2:69:50:f2:bd:3f:8a:d7: 1a:18:fb:81:27:f7:32:4b:5e:77:f1:d2:a0:ba:e9:5f:0e:68: 25:0b:4e:4b:ea:a1:e6:fe:e7:9d:6c:ba:b9:f1:e7:ee:34:96: c0:0f:b2:f7:03:90:da:bf:52:4d:35:97:11:ab:04:68:b2:36: 3b:c1:a4:d8:59:c8:8d:e3:f8:8e:a6:10:17:71:ee:9d:0c:86: 1b:c3:87:28:28:20:fd:fd:ef:bd:d4:9c:4e:9e:da:80:ba:67: b8:77:d9:80:78:db:20:c9:cd:5c:3e:e2:e0:43:56:04:76:27: b1:25:31:5d:3d:26:52:8b:e8:1a:ce:13:3a:18:81:6a:c9:88: 05:bb:d4:c1:71:b1:d6:d9:3b:9a:2c:a2:05:2d:f4:5b:28:99: e1:8e:b6:43:7c:a3:e4:50:12:6b:a4:63:45:18:61:63:fd:42: 1f:9a:22:47:59:92:15:8b:fc:71:ef:a6:ee:58:6a:c7:80:a2: af:9e:77:94:93:3b:a4:6a:ac:e7:ac:6e:db:e5:6f:d5:c4:89: 7e:f1:04:d6:2f:ac:f7:35:af:a8:85:25:29:66:5a:c9:a7:07: ba:6d:e1:5c:54:61:f1:24:3d:ee:25:5b:34:8e:ca:af:53:2c: 6c:c2:88:77 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt7NXcZLYTRoC/eMU7gMVE6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2Y1ZTA1NzU2OTFhMGNhNTliZDYyNmQwYjA2MDE4MjM0NTMyYmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zxfkddN6gN1V0FMkaAyO+1+qvoA FXNrynLU5cmdKjRIduKSXJyorx8Fg5GzgL5NVQ579YEphwMHN3TmY8tkP7UT6MRB +1qMx/RK0EOYx9CX/c5x6b8oZc8Ba3Cxfg9azMJ03Td+qyLqIJteFrl9iOp3UyZE +2fZe98L3IM8k/ZVff+CmRiRv/WiZgqZnrr1vcdmJYW3FvefWgGfRliMPp1jYQ01 EihvFTb+AMdhwn1mutxhOs7hYVvZTQ969MZvMGdJMaVEKaOLdO1gpxVXGiz67iZj qxqyJpWXN3s7pKXnOyZyxwJLhJ/Lm7jfZfJXpswGVjJoyc0cp5bZao2rzwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFIf14FdWkaDKWb1ibQsGAYI0UyuuMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvaF9YZ1YxYVJvTXBadldKdEN3WUJnalJUSzY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBUGGgAwQA VXmUAwQAVXqBAwQAwmZoAwQA2Zw+AwQB2ZxCAwQA2Zx6MA0GCSqGSIb3DQEBCwUA A4IBAQCQWhhpj8n6XRzM8mlQ8r0/itcaGPuBJ/cyS1538dKguulfDmglC05L6qHm /uedbLq58efuNJbAD7L3A5Dav1JNNZcRqwRosjY7waTYWciN4/iOphAXce6dDIYb w4coKCD9/e+91JxOntqAume4d9mAeNsgyc1cPuLgQ1YEdiexJTFdPSZSi+gazhM6 GIFqyYgFu9TBcbHW2TuaLKIFLfRbKJnhjrZDfKPkUBJrpGNFGGFj/UIfmiJHWZIV i/xx76buWGrHgKKvnneUkzukaqznrG7b5W/VxIl+8QTWL6z3Na+ohSUpZlrJpwe6 beFcVGHxJD3uJVs0jsqvUyxswoh3 -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:12 2026 by rpki-client