This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4HGQfhRFXtXiNjECIwsNkwV6iSU.roa File: 4HGQfhRFXtXiNjECIwsNkwV6iSU.roa (raw, json) Hash identifier: VqOP6ZFnHRhbCPL58ASYy5WFZVmS03v0a71Wuk4yS6E= Subject key identifier: E0:71:90:7E:14:45:5E:D5:E2:36:31:02:23:0B:0D:93:05:7A:89:25 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12F894A23D5695F77FBC75A5F58091 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4HGQfhRFXtXiNjECIwsNkwV6iSU.roa Signing time: Fri 02 Jan 2026 00:19:36 +0000 ROA not before: Fri 02 Jan 2026 00:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50476 IP address blocks: 195.65.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f8:94:a2:3d:56:95:f7:7f:bc:75:a5:f5:80:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e071907e14455ed5e2363102230b0d93057a8925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:15:ef:b6:18:c2:67:1c:76:03:e9:fd:c9:ff: 70:a8:a6:35:70:c5:b8:0f:6f:3d:91:2d:a7:c3:a4: 19:5e:1f:5a:4a:0f:f4:11:d9:df:a5:07:e2:46:cc: ca:06:26:f3:ca:20:39:b6:79:8e:72:49:48:5c:17: 53:60:b6:a5:9e:35:87:08:e7:a3:40:d4:26:87:67: 95:dc:6a:dd:1c:8f:5b:8c:54:08:ca:18:f9:44:9d: 6c:5b:57:d2:cc:fe:40:12:9a:b8:29:3e:30:9e:bb: 45:5b:e7:ed:b0:b6:e3:a9:ae:43:f5:5f:86:21:d7: 0e:d4:5b:cd:9b:01:22:5d:4c:0b:07:92:7a:39:e1: 28:e8:e2:a1:9a:d7:7d:c7:91:76:11:a6:27:08:dc: 3a:50:e0:be:32:76:55:6d:03:2f:23:c0:8e:ff:7f: 5d:4e:1c:ad:cb:0e:7d:3e:ab:5b:1e:f6:b9:ab:41: 9c:0a:88:c2:3a:d4:fc:d3:b3:0f:b7:38:13:67:97: 65:aa:f3:45:3c:9e:71:78:7a:70:fe:89:bf:95:83: ac:3f:04:40:22:60:2e:c9:86:9d:4d:00:a1:11:81: 9a:fd:09:91:f2:a5:9e:80:5a:02:fa:13:90:23:b7: 0d:67:6a:a6:4f:ba:ea:f5:e5:30:0d:56:44:0b:74: 45:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:71:90:7E:14:45:5E:D5:E2:36:31:02:23:0B:0D:93:05:7A:89:25 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4HGQfhRFXtXiNjECIwsNkwV6iSU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.65.93.0/24 Signature Algorithm: sha256WithRSAEncryption 60:79:a5:0c:c3:a5:43:3e:f7:a7:36:21:25:3f:c4:ca:80:93: 77:fd:c4:94:4f:19:54:ef:68:b9:35:eb:6c:49:95:9f:81:8c: aa:0f:d5:8d:96:b5:99:06:65:ed:0e:1c:7a:04:ba:62:92:74: 84:7d:b0:25:01:3c:b3:3e:05:57:45:92:92:4a:8d:e6:10:c6: 4c:63:be:13:1e:3f:1f:ae:28:68:a4:0f:6d:3d:93:11:cb:07: ab:89:81:0b:61:55:8f:8f:3f:0b:77:d9:c7:2e:6e:33:42:a0: 44:3f:be:46:6b:11:f2:76:a0:3b:dd:3d:e2:e8:97:94:83:73: 8f:e0:67:7c:b2:0d:fe:0e:46:a5:22:8a:1f:6f:e6:f6:47:fb: d0:e9:96:fb:5f:71:69:81:dd:44:d3:b0:a0:e3:99:30:0f:83: 22:15:6e:50:ec:c9:2f:7d:30:2a:5a:04:69:67:e5:11:f6:38: 5b:c9:fd:c7:f8:51:2f:f5:9f:69:8f:f9:ad:52:14:31:72:2a: 72:11:0e:0f:fa:c1:e9:cb:7c:ec:d4:1e:19:51:b0:37:cf:b9: 2e:17:45:b2:ca:e7:af:89:04:d0:b0:86:e2:08:3b:22:06:16: c4:26:8c:5d:25:c2:c9:21:fd:01:7b:d1:08:0b:7c:d8:15:d7: f8:5a:82:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EviUoj1Wlfd/vHWl9YCRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDcxOTA3ZTE0NDU1ZWQ1ZTIzNjMxMDIyMzBiMGQ5MzA1N2E4OTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphXvthjCZxx2A+n9yf9wqKY1cMW4 D289kS2nw6QZXh9aSg/0EdnfpQfiRszKBibzyiA5tnmOcklIXBdTYLalnjWHCOej QNQmh2eV3GrdHI9bjFQIyhj5RJ1sW1fSzP5AEpq4KT4wnrtFW+ftsLbjqa5D9V+G IdcO1FvNmwEiXUwLB5J6OeEo6OKhmtd9x5F2EaYnCNw6UOC+MnZVbQMvI8CO/39d Thytyw59PqtbHva5q0GcCojCOtT807MPtzgTZ5dlqvNFPJ5xeHpw/om/lYOsPwRA ImAuyYadTQChEYGa/QmR8qWegFoC+hOQI7cNZ2qmT7rq9eUwDVZEC3RFywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOBxkH4URV7V4jYxAiMLDZMFeoklMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvNEhHUWZoUkZYdFhpTmpFQ0l3c05rd1Y2aVNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0FdMA0G CSqGSIb3DQEBCwUAA4IBAQBgeaUMw6VDPvenNiElP8TKgJN3/cSUTxlU72i5Nets SZWfgYyqD9WNlrWZBmXtDhx6BLpiknSEfbAlATyzPgVXRZKSSo3mEMZMY74THj8f rihopA9tPZMRyweriYELYVWPjz8Ld9nHLm4zQqBEP75GaxHydqA73T3i6JeUg3OP 4Gd8sg3+DkalIoofb+b2R/vQ6Zb7X3Fpgd1E07Cg45kwD4MiFW5Q7MkvfTAqWgRp Z+UR9jhbyf3H+FEv9Z9pj/mtUhQxcipyEQ4P+sHpy3zs1B4ZUbA3z7kuF0Wyyuev iQTQsIbiCDsiBhbEJoxdJcLJIf0Be9EIC3zYFdf4WoKM -----END CERTIFICATE-----Generated at Mon Jan 26 17:45:38 2026 by rpki-client