This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/h0P-xzW6uW6T5zneENpD9wSxPCU.roa File: h0P-xzW6uW6T5zneENpD9wSxPCU.roa (raw, json) Hash identifier: fAgW1pLPLUNSrpIpYoWQJx47PcNzgysy/lgYQVVgdbw= Subject key identifier: 87:43:FE:C7:35:BA:B9:6E:93:E7:39:DE:10:DA:43:F7:04:B1:3C:25 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82B25930B46D65F00B87998712028E Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/h0P-xzW6uW6T5zneENpD9wSxPCU.roa Signing time: Fri 02 Jan 2026 16:20:30 +0000 ROA not before: Fri 02 Jan 2026 16:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7759 IP address blocks: 77.83.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:b2:59:30:b4:6d:65:f0:0b:87:99:87:12:02:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8743fec735bab96e93e739de10da43f704b13c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fa:89:c6:25:95:3d:dd:44:a6:03:57:4c:e5: 84:7b:1e:d4:e6:e7:3c:5c:c1:73:1a:ea:11:0b:3e: 2c:82:0d:91:dc:9f:8b:bf:76:a7:85:c9:d4:68:7a: d1:8b:fe:94:05:4d:cd:16:86:59:8a:df:f0:b8:e3: 00:35:ad:04:f4:af:ba:80:fb:49:ab:e1:bd:55:99: bb:3c:a3:51:bf:e7:3b:1c:7c:0a:6c:9c:6c:f1:4f: af:ad:3d:8f:fa:c3:c9:cc:5f:dd:f4:89:36:a2:39: ed:b2:af:06:a0:22:ec:8a:1e:94:22:aa:27:f0:61: 23:1b:37:b3:ca:86:a5:5c:a2:db:84:e8:0e:41:5a: 12:34:a7:71:dd:1c:38:42:2d:db:b1:31:cb:c1:6c: 23:dd:54:a7:9e:95:b9:20:42:88:d0:c8:c0:ce:57: 4a:88:7d:79:57:50:74:6f:ff:fd:9a:05:dc:70:5a: 89:3a:38:2e:fc:6c:9a:ba:7d:32:9d:01:78:a1:d2: b4:20:bd:c3:8b:10:6d:0f:94:bf:34:01:02:6c:95: 63:86:74:02:ca:00:33:fd:8a:84:50:8a:00:54:37: 08:33:28:e4:b6:1a:6c:35:d2:4b:87:e5:bd:1a:8f: 35:70:ad:b9:c9:20:7a:cd:02:e3:fa:2d:f9:d4:30: 28:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:43:FE:C7:35:BA:B9:6E:93:E7:39:DE:10:DA:43:F7:04:B1:3C:25 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/h0P-xzW6uW6T5zneENpD9wSxPCU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.240.0/24 Signature Algorithm: sha256WithRSAEncryption c3:8a:06:7f:f7:e8:35:f4:2e:49:d4:e5:15:af:4a:3f:80:26: 2c:e1:dc:c4:4f:95:61:2e:11:08:bf:f1:82:74:43:23:e5:72: cf:56:72:72:5b:ad:f2:e5:70:91:05:f9:e0:a8:dc:b2:93:cd: 0d:90:03:49:f5:05:2a:6d:a2:26:b6:bc:93:ed:9f:7e:b3:ae: 4b:80:2f:2f:6e:90:c2:22:a0:dd:f2:7d:c6:dc:c1:40:d8:9d: 57:31:9b:cf:4e:21:c4:47:6a:25:7e:aa:0f:9e:91:70:5c:e8: 86:a9:5d:2d:e5:a5:85:9b:e6:0f:43:c7:40:64:1a:4e:73:34: 27:d7:b0:2a:ef:99:ba:07:c4:55:7b:b1:14:68:36:8e:80:46: 99:f1:55:8b:f4:57:72:c1:3b:03:6b:57:df:7b:be:29:c7:e3: cf:cc:71:5d:9c:d6:24:88:73:d2:1e:82:a2:4c:1b:4d:81:65: b9:e8:6a:ae:2a:6d:d7:6b:77:6b:96:94:21:81:ab:cc:4d:55: c4:9e:73:53:af:34:f2:ea:4d:26:dc:f0:8a:67:3d:6b:6b:7a: 49:99:8a:4b:42:ea:e0:bd:52:56:ab:1d:1b:2c:c3:fe:64:1e: a0:f7:45:73:2b:da:0e:59:9d:39:57:1c:ba:b9:61:a9:35:0f: 5c:8b:1c:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/grJZMLRtZfALh5mHEgKOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzQzZmVjNzM1YmFiOTZlOTNlNzM5ZGUxMGRhNDNmNzA0YjEzYzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPqJxiWVPd1EpgNXTOWEex7U5uc8 XMFzGuoRCz4sgg2R3J+Lv3anhcnUaHrRi/6UBU3NFoZZit/wuOMANa0E9K+6gPtJ q+G9VZm7PKNRv+c7HHwKbJxs8U+vrT2P+sPJzF/d9Ik2ojntsq8GoCLsih6UIqon 8GEjGzezyoalXKLbhOgOQVoSNKdx3Rw4Qi3bsTHLwWwj3VSnnpW5IEKI0MjAzldK iH15V1B0b//9mgXccFqJOjgu/Gyaun0ynQF4odK0IL3DixBtD5S/NAECbJVjhnQC ygAz/YqEUIoAVDcIMyjkthpsNdJLh+W9Go81cK25ySB6zQLj+i351DAo1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIdD/sc1urluk+c53hDaQ/cEsTwlMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvaDBQLXh6VzZ1VzZUNXpuZUVOcEQ5d1N4UENVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVPwMA0G CSqGSIb3DQEBCwUAA4IBAQDDigZ/9+g19C5J1OUVr0o/gCYs4dzET5VhLhEIv/GC dEMj5XLPVnJyW63y5XCRBfngqNyyk80NkANJ9QUqbaImtryT7Z9+s65LgC8vbpDC IqDd8n3G3MFA2J1XMZvPTiHER2olfqoPnpFwXOiGqV0t5aWFm+YPQ8dAZBpOczQn 17Aq75m6B8RVe7EUaDaOgEaZ8VWL9FdywTsDa1ffe74px+PPzHFdnNYkiHPSHoKi TBtNgWW56GquKm3Xa3drlpQhgavMTVXEnnNTrzTy6k0m3PCKZz1ra3pJmYpLQurg vVJWqx0bLMP+ZB6g90VzK9oOWZ05Vxy6uWGpNQ9cixxQ -----END CERTIFICATE-----Generated at Tue Jan 20 15:20:21 2026 by rpki-client