This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/hHhTehEBjNf1KtA383HryRHP5GU.roa File: hHhTehEBjNf1KtA383HryRHP5GU.roa (raw, json) Hash identifier: 553Jp1J+2Jv+MXIIihnE80X01/4/KUBqAe/MNZh5Kwc= Subject key identifier: 84:78:53:7A:11:01:8C:D7:F5:2A:D0:37:F3:71:EB:C9:11:CF:E4:65 Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26 Certificate serial: 019B7CEE0A6F6AB2A4C3CA485C7CF2813D2B Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/hHhTehEBjNf1KtA383HryRHP5GU.roa Signing time: Fri 02 Jan 2026 04:18:53 +0000 ROA not before: Fri 02 Jan 2026 04:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8540 IP address blocks: 37.186.5.0/24 maxlen: 24 81.94.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0a:6f:6a:b2:a4:c3:ca:48:5c:7c:f2:81:3d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26 Validity Not Before: Jan 2 04:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8478537a11018cd7f52ad037f371ebc911cfe465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:56:ce:dc:fa:53:f6:32:14:f2:a4:bc:5d:06: 3a:09:01:56:59:22:a6:34:77:9c:89:a5:93:39:b4: 17:20:ed:fc:5f:00:01:68:0c:31:c8:20:a0:22:0a: 45:94:e0:d0:1d:dc:33:82:74:98:d4:8e:c9:14:81: f0:48:a1:70:a5:90:90:65:f3:1e:54:c9:67:fc:a9: d1:2c:9b:6d:3c:67:f4:fd:00:bc:38:e5:ee:b1:7d: 0b:f8:32:77:b4:ea:f5:65:f9:de:a3:fa:2e:e3:a2: 76:02:17:cd:0e:fc:be:ef:fb:a9:c2:db:02:db:81: fd:1e:1f:7d:82:b3:b7:fb:a8:66:22:e2:65:fd:ed: b0:fc:b0:5d:cc:d3:dc:8b:c6:a0:1b:3f:87:5b:2c: ec:ca:74:69:89:81:74:7d:69:0a:24:3a:12:0e:26: f6:bc:e5:bc:3a:2f:14:f8:81:3f:3b:ee:40:f8:57: b2:8c:2a:a1:1a:40:58:12:f0:3f:60:ba:4e:f1:ba: d2:72:2e:ae:ba:54:cf:a2:38:3a:08:e2:22:a4:76: b7:f3:ad:4c:82:28:9d:6e:14:d6:7d:df:03:47:28: 2a:1c:04:e1:e8:aa:6a:9b:f1:bd:8e:94:4b:f5:7a: 48:b4:66:39:2e:f6:19:d2:84:59:08:10:04:63:71: 09:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:78:53:7A:11:01:8C:D7:F5:2A:D0:37:F3:71:EB:C9:11:CF:E4:65 X509v3 Authority Key Identifier: keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/hHhTehEBjNf1KtA383HryRHP5GU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.186.5.0/24 81.94.55.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:f2:f8:32:7e:4c:c0:ab:a0:f3:98:c9:33:b6:a9:74:b9:d5: 7f:04:57:df:40:47:f0:ad:08:8a:77:95:11:3a:a3:a6:ea:3b: d3:4a:49:d2:af:17:83:f6:09:39:a2:66:6c:8e:be:f4:14:29: 45:37:39:c7:25:44:51:9a:91:bc:2a:a6:a8:ba:5f:8e:7f:e2: 6e:db:b3:60:0b:c7:25:66:bf:f3:7e:43:11:f5:af:f2:5e:d1: 49:75:51:87:ad:35:9d:7c:f4:55:41:51:4a:b4:cf:d3:b9:a0: aa:cb:94:4e:48:81:8a:aa:e5:1d:d1:51:de:eb:54:21:9b:92: 52:bd:84:33:ff:21:d6:4f:47:26:a2:94:11:7f:d1:cc:69:25: 8e:b1:20:33:7d:df:cc:f3:93:04:9d:41:23:13:fb:ab:10:1b: c2:d0:0b:c2:ca:a4:c9:69:9f:75:d6:cd:ab:77:6b:ca:e3:c8: ee:21:9d:8b:ca:a5:d7:76:08:be:70:33:8f:40:9f:48:09:d4: e4:38:1f:62:10:fb:c6:e0:3f:5a:8c:24:1f:17:67:36:cb:18: 42:49:03:01:fc:e4:b6:ab:db:16:24:2b:68:6a:ac:c8:b9:6e: 07:e0:3e:0f:27:36:23:41:80:65:d3:f7:13:87:08:4e:7f:8b: 07:6d:49:dc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87gpvarKkw8pIXHzygT0rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDY1MjE2ODEyZWQyNGZkMWM3MTk4NzFhNTlhOTcxZGVj MzBhMjYwHhcNMjYwMTAyMDQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDc4NTM3YTExMDE4Y2Q3ZjUyYWQwMzdmMzcxZWJjOTExY2ZlNDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVbO3PpT9jIU8qS8XQY6CQFWWSKm NHeciaWTObQXIO38XwABaAwxyCCgIgpFlODQHdwzgnSY1I7JFIHwSKFwpZCQZfMe VMln/KnRLJttPGf0/QC8OOXusX0L+DJ3tOr1Zfneo/ou46J2AhfNDvy+7/upwtsC 24H9Hh99grO3+6hmIuJl/e2w/LBdzNPci8agGz+HWyzsynRpiYF0fWkKJDoSDib2 vOW8Oi8U+IE/O+5A+FeyjCqhGkBYEvA/YLpO8brSci6uulTPojg6COIipHa3861M giidbhTWfd8DRygqHATh6Kpqm/G9jpRL9XpItGY5LvYZ0oRZCBAEY3EJMwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIR4U3oRAYzX9SrQN/Nx68kRz+RlMB8GA1UdIwQY MBaAFDrWUhaBLtJP0ccZhxpZqXHewwomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTct NDY1MzhjYTUzODNjLzEvaEhoVGVoRUJqTmYxS3RBMzgzSHJ5UkhQNUdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTctNDY1MzhjYTUzODNj LzEvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJboFAwQA UV43MA0GCSqGSIb3DQEBCwUAA4IBAQBN8vgyfkzAq6DzmMkztql0udV/BFffQEfw rQiKd5UROqOm6jvTSknSrxeD9gk5omZsjr70FClFNznHJURRmpG8Kqaoul+Of+Ju 27NgC8clZr/zfkMR9a/yXtFJdVGHrTWdfPRVQVFKtM/TuaCqy5ROSIGKquUd0VHe 61Qhm5JSvYQz/yHWT0cmopQRf9HMaSWOsSAzfd/M85MEnUEjE/urEBvC0AvCyqTJ aZ911s2rd2vK48juIZ2LyqXXdgi+cDOPQJ9ICdTkOB9iEPvG4D9ajCQfF2c2yxhC SQMB/OS2q9sWJCtoaqzIuW4H4D4PJzYjQYBl0/cThwhOf4sHbUnc -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:16 2026 by rpki-client