This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/H8ur06ZzMoUo1Gt7mOEKMDQJafY.roa File: H8ur06ZzMoUo1Gt7mOEKMDQJafY.roa (raw, json) Hash identifier: zkR8SvftOg6UL5t5sXessXOzxmjo2b7nS9dxJ1c+yR4= Subject key identifier: 1F:CB:AB:D3:A6:73:32:85:28:D4:6B:7B:98:E1:0A:30:34:09:69:F6 Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae Certificate serial: 019B7AC92FC4D4C4E6C1BD13E21E38722FF5 Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/H8ur06ZzMoUo1Gt7mOEKMDQJafY.roa Signing time: Thu 01 Jan 2026 18:19:23 +0000 ROA not before: Thu 01 Jan 2026 18:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212219 IP address blocks: 2.59.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:2f:c4:d4:c4:e6:c1:bd:13:e2:1e:38:72:2f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae Validity Not Before: Jan 1 18:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fcbabd3a673328528d46b7b98e10a30340969f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:41:d6:c4:20:3d:57:0f:66:79:0e:b0:ad:9d: 82:34:56:ee:cf:23:24:2c:1d:51:45:bf:89:9e:d8: 90:58:97:2a:eb:73:04:6c:aa:e1:49:27:48:11:9f: aa:20:e2:16:87:57:3f:71:b5:b0:74:b4:83:ff:f5: 5a:20:0e:98:4c:82:10:0f:1e:a9:1d:c7:9a:ff:52: b0:5f:a0:44:a2:2a:cc:f8:3d:89:3b:d3:cc:2f:c1: a2:37:e0:56:b1:92:6f:c9:86:eb:e0:a3:22:82:af: 0b:ee:52:f2:3b:88:64:8b:2a:19:26:2a:47:ec:ff: 99:df:46:5d:5b:a9:df:f2:bb:68:51:7e:15:51:5e: d1:88:d2:90:59:d6:d0:5c:07:f2:c7:eb:03:27:3a: 81:08:be:0c:d1:3c:8a:32:db:aa:18:b2:f1:58:5d: 34:c2:dc:dc:d3:3d:50:7a:70:49:fa:b4:6e:22:14: e1:5b:0e:15:0f:43:14:ac:98:37:71:12:a1:ea:05: e0:87:ab:2a:c0:34:57:17:79:ee:e5:ff:97:71:72: 20:9b:2a:3a:6b:73:a6:cb:f6:4d:a4:5c:a9:cc:11: 01:e6:83:c1:92:31:96:14:61:1a:03:fd:20:02:45: dd:8f:fa:af:a0:98:74:d4:4c:22:05:5f:fc:09:7b: 8b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CB:AB:D3:A6:73:32:85:28:D4:6B:7B:98:E1:0A:30:34:09:69:F6 X509v3 Authority Key Identifier: keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/H8ur06ZzMoUo1Gt7mOEKMDQJafY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.119.0/24 Signature Algorithm: sha256WithRSAEncryption c4:04:98:26:a2:dc:47:7a:98:74:9f:40:f9:5c:c3:cf:d3:fb: 0e:88:6b:56:26:57:cb:94:b7:58:a7:49:1d:c0:1b:1a:ec:18: 72:78:32:5d:84:e9:4a:a5:ca:63:0a:6a:6d:0f:d5:b3:44:17: b1:71:11:9d:0a:73:1d:0f:3b:63:d9:77:ae:31:59:66:5e:fa: 23:65:91:ab:4a:a0:ec:c9:33:d2:b2:2b:7f:bc:fe:18:08:21: ee:15:6b:79:86:4c:ab:1b:7b:e4:bf:5d:bd:9e:c3:9a:60:ea: c6:89:e4:19:f4:1b:d4:51:9f:4c:3d:e4:09:83:1b:79:93:32: c2:13:4b:f0:26:b5:3e:76:c8:27:fb:b1:c1:6f:9e:2f:78:a1: 80:0a:d0:b3:59:8f:b6:aa:56:ca:7e:fb:9d:24:cb:3d:83:38: e4:a4:e3:4a:39:e7:d3:b6:e6:c0:58:15:47:8c:62:6c:a9:01: eb:87:41:81:3a:a5:37:4b:a3:22:d5:29:43:b7:e2:65:95:d5: c0:ee:b0:16:3a:96:27:b3:e7:bb:5e:43:66:20:9f:a3:0f:48: 0a:05:8a:cf:42:43:50:4a:19:0f:3c:bd:39:43:74:09:6c:8e: 7b:20:80:69:e2:0a:b9:c3:62:76:5e:51:77:e1:6f:91:76:38: 1e:98:43:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yS/E1MTmwb0T4h44ci/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ZmQ2NmU0M2ExMDQ2MzNiMjdiYWM1MzliOThiZGY4ZWJm YWM5YWUwHhcNMjYwMTAxMTgxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmNiYWJkM2E2NzMzMjg1MjhkNDZiN2I5OGUxMGEzMDM0MDk2OWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0HWxCA9Vw9meQ6wrZ2CNFbuzyMk LB1RRb+JntiQWJcq63MEbKrhSSdIEZ+qIOIWh1c/cbWwdLSD//VaIA6YTIIQDx6p Hcea/1KwX6BEoirM+D2JO9PML8GiN+BWsZJvyYbr4KMigq8L7lLyO4hkiyoZJipH 7P+Z30ZdW6nf8rtoUX4VUV7RiNKQWdbQXAfyx+sDJzqBCL4M0TyKMtuqGLLxWF00 wtzc0z1QenBJ+rRuIhThWw4VD0MUrJg3cRKh6gXgh6sqwDRXF3nu5f+XcXIgmyo6 a3Omy/ZNpFypzBEB5oPBkjGWFGEaA/0gAkXdj/qvoJh01EwiBV/8CXuL+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB/Lq9OmczKFKNRre5jhCjA0CWn2MB8GA1UdIwQY MBaAFCj9ZuQ6EEYzsnusU5uYvfjr+smuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYt MjY3NjY5ZjM1NjQ4LzEvSDh1cjA2WnpNb1VvMUd0N21PRUtNRFFKYWZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYtMjY3NjY5ZjM1NjQ4 LzEvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjt3MA0G CSqGSIb3DQEBCwUAA4IBAQDEBJgmotxHeph0n0D5XMPP0/sOiGtWJlfLlLdYp0kd wBsa7BhyeDJdhOlKpcpjCmptD9WzRBexcRGdCnMdDztj2XeuMVlmXvojZZGrSqDs yTPSsit/vP4YCCHuFWt5hkyrG3vkv129nsOaYOrGieQZ9BvUUZ9MPeQJgxt5kzLC E0vwJrU+dsgn+7HBb54veKGACtCzWY+2qlbKfvudJMs9gzjkpONKOefTtubAWBVH jGJsqQHrh0GBOqU3S6Mi1SlDt+JlldXA7rAWOpYns+e7XkNmIJ+jD0gKBYrPQkNQ ShkPPL05Q3QJbI57IIBp4gq5w2J2XlF34W+RdjgemEMi -----END CERTIFICATE-----Generated at Wed Jan 21 16:15:41 2026 by rpki-client