This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/haiqd0uROE9igzZ6U-8DLmT0_wo.roa File: haiqd0uROE9igzZ6U-8DLmT0_wo.roa (raw, json) Hash identifier: zy3b1gRK2HZuT5n0a04wvFSWWQ7+eD23DEYn7FkuZuw= Subject key identifier: 85:A8:AA:77:4B:91:38:4F:62:83:36:7A:53:EF:03:2E:64:F4:FF:0A Certificate issuer: /CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e Certificate serial: 019B7A5ABC3136C53CE38087B804EA9E193F Authority key identifier: 3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/haiqd0uROE9igzZ6U-8DLmT0_wo.roa Signing time: Thu 01 Jan 2026 16:18:45 +0000 ROA not before: Thu 01 Jan 2026 16:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28892 IP address blocks: 195.245.209.0/24 maxlen: 24 2001:67c:28b8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:bc:31:36:c5:3c:e3:80:87:b8:04:ea:9e:19:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e Validity Not Before: Jan 1 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85a8aa774b91384f6283367a53ef032e64f4ff0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d3:24:9a:d3:8a:95:b8:9f:14:7d:87:8c:e9: fe:c6:f6:79:4a:29:7f:d7:3f:07:dc:78:be:80:08: 38:d0:83:e9:a9:0e:97:9b:85:69:6e:67:e0:65:48: ba:11:15:11:5c:d1:71:9f:de:6b:a8:22:b7:cf:3f: 0f:81:20:d0:a1:0c:10:77:5e:6a:17:0c:91:34:31: 95:c5:10:d6:58:26:d5:2e:ab:45:35:18:ac:25:a7: d4:d8:1c:f9:04:4c:8e:bf:ce:d0:73:63:8a:64:33: f2:56:eb:1b:c3:cd:99:ff:b7:92:fe:02:d6:0f:75: 08:84:9c:ad:1a:e2:9c:45:db:f7:e4:cf:79:84:90: 60:e0:ed:f7:da:7f:9d:52:06:7f:dc:9d:01:be:f0: 70:f7:6e:c1:b5:5a:29:0c:7a:a1:95:90:9e:9c:93: 89:07:49:51:02:83:ee:49:56:82:51:18:be:b6:f6: 19:9e:19:b4:60:89:77:6f:72:dd:9b:b9:1f:5b:22: 1a:0f:59:8a:f9:0e:0a:6c:9f:5c:d2:7d:ec:a0:5f: 01:8d:4c:09:50:a0:c4:34:e8:24:48:6d:76:51:f8: cd:fa:21:96:1f:54:cd:56:93:d1:20:8a:3d:e4:20: cc:b6:a6:1b:8a:30:09:60:a8:72:66:49:71:31:e2: 53:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A8:AA:77:4B:91:38:4F:62:83:36:7A:53:EF:03:2E:64:F4:FF:0A X509v3 Authority Key Identifier: keyid:3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/haiqd0uROE9igzZ6U-8DLmT0_wo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.245.209.0/24 IPv6: 2001:67c:28b8::/48 Signature Algorithm: sha256WithRSAEncryption 1a:e9:86:4e:22:02:66:44:6c:f9:6a:f0:ca:ba:c1:d8:19:08: 8a:ac:f4:9d:1d:0c:56:e7:e7:8d:e9:33:53:a1:b5:77:f5:1c: c2:4c:57:d4:2c:88:96:71:e4:e1:d6:75:40:8d:db:26:7d:7e: 94:57:eb:ef:ed:98:3f:2b:79:39:65:58:cc:97:0d:82:39:9b: b2:e2:27:7b:d7:67:a3:fe:b0:e3:79:38:e8:bd:07:98:56:df: 87:ee:be:fe:26:66:9a:35:74:72:7a:fa:d8:6b:9f:fc:bb:06: 74:b7:3b:71:db:3a:dc:cc:b1:f6:90:39:9c:c0:9e:20:08:97: b5:05:76:b5:75:ef:a6:fc:1f:7b:4d:a9:1d:7e:78:9b:4b:5e: 26:fb:15:42:8d:40:09:31:db:3e:31:95:f3:e7:8b:67:e7:58: 51:d1:60:cc:81:e8:74:d3:d2:9e:35:53:4f:21:3c:a8:3c:3d: 9a:b1:c5:70:71:13:17:84:97:5e:5a:0f:b6:1e:3d:72:e1:e1: d1:eb:07:1e:de:cf:d1:36:5d:f0:bf:19:bf:69:31:39:8e:5c: 9a:5d:a7:94:84:7a:24:05:25:10:ef:90:d4:ae:8b:2b:ee:83: 9c:9c:de:f3:9e:cd:72:a4:ed:9c:cd:63:2c:09:b8:86:4f:51: 99:4d:3d:7e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6WrwxNsU844CHuATqnhk/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYmU0NDM1NWUwNmZhYWRiZWIxOTQ1NWFkYzMxNmQ5Yjlm MGYxMGUwHhcNMjYwMTAxMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWE4YWE3NzRiOTEzODRmNjI4MzM2N2E1M2VmMDMyZTY0ZjRmZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9MkmtOKlbifFH2HjOn+xvZ5Sil/ 1z8H3Hi+gAg40IPpqQ6Xm4VpbmfgZUi6ERURXNFxn95rqCK3zz8PgSDQoQwQd15q FwyRNDGVxRDWWCbVLqtFNRisJafU2Bz5BEyOv87Qc2OKZDPyVusbw82Z/7eS/gLW D3UIhJytGuKcRdv35M95hJBg4O332n+dUgZ/3J0BvvBw927BtVopDHqhlZCenJOJ B0lRAoPuSVaCURi+tvYZnhm0YIl3b3Ldm7kfWyIaD1mK+Q4KbJ9c0n3soF8BjUwJ UKDENOgkSG12UfjN+iGWH1TNVpPRIIo95CDMtqYbijAJYKhyZklxMeJT0wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIWoqndLkThPYoM2elPvAy5k9P8KMB8GA1UdIwQY MBaAFDu+RDVeBvqtvrGUVa3DFtm58PEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzc1RU5WNEctcTItc1pSVnJjTVcyYm53OFE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS83MDY4MzctZDU1ZC00MzJkLWIwYTQt YjA4MTQwMDc1MjhmLzEvaGFpcWQwdVJPRTlpZ3paNlUtOERMbVQwX3dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS83MDY4MzctZDU1ZC00MzJkLWIwYTQtYjA4MTQwMDc1Mjhm LzEvTzc1RU5WNEctcTItc1pSVnJjTVcyYm53OFE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw/XRMA8E AgACMAkDBwAgAQZ8KLgwDQYJKoZIhvcNAQELBQADggEBABrphk4iAmZEbPlq8Mq6 wdgZCIqs9J0dDFbn543pM1OhtXf1HMJMV9QsiJZx5OHWdUCN2yZ9fpRX6+/tmD8r eTllWMyXDYI5m7LiJ3vXZ6P+sON5OOi9B5hW34fuvv4mZpo1dHJ6+thrn/y7BnS3 O3HbOtzMsfaQOZzAniAIl7UFdrV176b8H3tNqR1+eJtLXib7FUKNQAkx2z4xlfPn i2fnWFHRYMyB6HTT0p41U08hPKg8PZqxxXBxExeEl15aD7YePXLh4dHrBx7ez9E2 XfC/Gb9pMTmOXJpdp5SEeiQFJRDvkNSuiyvug5yc3vOezXKk7ZzNYywJuIZPUZlN PX4= -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:09 2026 by rpki-client