This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/sFH6tWzzYMXYUh7zqttZsCWMvMI.roa File: sFH6tWzzYMXYUh7zqttZsCWMvMI.roa (raw, json) Hash identifier: rMgpOgG2cc64wCq+Cnj2ujaXEIMlsqr7PQwXm/GHr1g= Subject key identifier: B0:51:FA:B5:6C:F3:60:C5:D8:52:1E:F3:AA:DB:59:B0:25:8C:BC:C2 Certificate issuer: /CN=af09871cfd616800677ab2329ecba61de77757e6 Certificate serial: 019B77C704A4E0960A26C3FFB7277046528E Authority key identifier: AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/sFH6tWzzYMXYUh7zqttZsCWMvMI.roa Signing time: Thu 01 Jan 2026 04:18:10 +0000 ROA not before: Thu 01 Jan 2026 04:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204058 IP address blocks: 185.254.248.0/22 maxlen: 23 193.3.242.0/24 maxlen: 24 2a0c:b3c0::/29 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:04:a4:e0:96:0a:26:c3:ff:b7:27:70:46:52:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af09871cfd616800677ab2329ecba61de77757e6 Validity Not Before: Jan 1 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b051fab56cf360c5d8521ef3aadb59b0258cbcc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d0:f0:be:76:fb:8c:4e:cc:de:18:1f:d0:d9: d1:6b:93:2b:97:eb:aa:5f:05:50:c1:49:e7:a1:76: 42:07:7e:e4:57:fd:85:b8:7a:80:92:b9:44:27:a8: 04:b7:0f:48:78:61:a8:cb:c9:5e:4e:cc:7f:73:d7: 0e:91:5c:dc:58:7f:fb:fd:52:89:9f:47:17:03:97: 95:dc:0b:08:4a:31:ef:c6:e9:b9:f7:6e:a3:60:88: 48:17:c3:a3:09:e1:d1:b0:9f:0d:56:dd:d2:a4:40: eb:df:ac:28:f7:5c:fc:a0:54:be:fb:d0:26:50:79: 5f:da:5b:66:0d:bc:00:26:88:c1:db:d3:bc:fc:1a: e0:6b:c1:a3:80:96:c9:34:50:35:1c:6d:c2:54:db: fd:3a:0e:4c:23:04:d9:66:50:b2:ae:a2:d7:bc:16: f7:73:ea:23:42:30:14:98:99:91:1a:a6:4a:6e:48: ce:5c:3a:03:60:5b:80:4f:17:4e:d7:a0:3f:34:33: b4:31:87:5e:46:cc:37:41:b2:55:29:ad:d5:2e:0e: 73:87:e7:4a:e7:3b:96:c7:44:40:a4:4c:c0:3e:cd: 91:f2:9f:f0:62:87:d4:0e:8a:b7:4d:cb:3b:f6:e2: a3:6a:ee:d6:ae:3b:8c:e8:eb:b8:e1:2f:f3:da:f0: 96:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:51:FA:B5:6C:F3:60:C5:D8:52:1E:F3:AA:DB:59:B0:25:8C:BC:C2 X509v3 Authority Key Identifier: keyid:AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/sFH6tWzzYMXYUh7zqttZsCWMvMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.248.0/22 193.3.242.0/24 IPv6: 2a0c:b3c0::/29 Signature Algorithm: sha256WithRSAEncryption 16:ba:b4:83:5e:23:d2:42:7d:bd:8f:4a:bf:21:c9:34:29:9a: 73:87:e6:43:fa:1c:5f:1f:3d:01:16:04:73:99:65:94:cd:ac: fd:c9:09:4e:54:69:94:81:29:c1:b6:89:89:35:14:79:13:67: 9f:e9:53:73:12:da:5b:62:9d:b0:e9:f7:d9:ab:82:29:30:39: a5:ca:41:01:0a:98:19:12:7c:0e:f0:31:62:6a:10:b7:ff:85: b4:c0:fd:cf:3f:48:74:27:8f:76:ce:e5:43:e4:85:ab:20:8e: 9e:df:c7:e5:37:b2:6b:91:43:39:41:33:a5:cf:74:53:73:21: 94:75:f6:4d:96:ac:99:32:41:bc:d2:3b:21:68:08:df:9e:fc: 04:3a:ed:4a:1d:42:1a:66:9e:3a:60:e5:a4:f3:c9:0b:f4:05: 8c:79:c8:4d:d2:d2:8e:f4:cf:24:b6:1d:e7:1b:96:3c:4d:df: 55:6c:ea:87:2a:4c:5c:b6:a4:5f:17:6a:8e:41:f2:a7:5a:ec: 9f:08:1f:15:4a:31:b1:66:e8:67:96:a7:19:a1:db:9f:c8:86: 73:e5:eb:b7:5b:7b:b6:2d:f7:32:1c:c8:d0:5c:5b:ba:e7:1e: 17:d5:b8:f1:e9:1f:98:c7:c9:a6:ef:50:fb:c3:04:c9:c5:f7: 0e:0c:c0:a5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3xwSk4JYKJsP/tydwRlKOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMDk4NzFjZmQ2MTY4MDA2NzdhYjIzMjllY2JhNjFkZTc3 NzU3ZTYwHhcNMjYwMTAxMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDUxZmFiNTZjZjM2MGM1ZDg1MjFlZjNhYWRiNTliMDI1OGNiY2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttDwvnb7jE7M3hgf0NnRa5Mrl+uq XwVQwUnnoXZCB37kV/2FuHqAkrlEJ6gEtw9IeGGoy8leTsx/c9cOkVzcWH/7/VKJ n0cXA5eV3AsISjHvxum5926jYIhIF8OjCeHRsJ8NVt3SpEDr36wo91z8oFS++9Am UHlf2ltmDbwAJojB29O8/Brga8GjgJbJNFA1HG3CVNv9Og5MIwTZZlCyrqLXvBb3 c+ojQjAUmJmRGqZKbkjOXDoDYFuATxdO16A/NDO0MYdeRsw3QbJVKa3VLg5zh+dK 5zuWx0RApEzAPs2R8p/wYofUDoq3Tcs79uKjau7WrjuM6Ou44S/z2vCWFwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLBR+rVs82DF2FIe86rbWbAljLzCMB8GA1UdIwQY MBaAFK8Jhxz9YWgAZ3qyMp7Lph3nd1fmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcndtSEhQMWhhQUJuZXJJeW5zdW1IZWQzVi1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84YWQ5YjMtMGI5Zi00MjI0LTkwOWIt YjQzZGJmODk1Y2ZlLzEvc0ZINnRXenpZTVhZVWg3enF0dFpzQ1dNdk1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84YWQ5YjMtMGI5Zi00MjI0LTkwOWItYjQzZGJmODk1Y2Zl LzEvcndtSEhQMWhhQUJuZXJJeW5zdW1IZWQzVi1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuf74AwQA wQPyMA0EAgACMAcDBQMqDLPAMA0GCSqGSIb3DQEBCwUAA4IBAQAWurSDXiPSQn29 j0q/Ick0KZpzh+ZD+hxfHz0BFgRzmWWUzaz9yQlOVGmUgSnBtomJNRR5E2ef6VNz EtpbYp2w6ffZq4IpMDmlykEBCpgZEnwO8DFiahC3/4W0wP3PP0h0J492zuVD5IWr II6e38flN7JrkUM5QTOlz3RTcyGUdfZNlqyZMkG80jshaAjfnvwEOu1KHUIaZp46 YOWk88kL9AWMechN0tKO9M8kth3nG5Y8Td9VbOqHKkxctqRfF2qOQfKnWuyfCB8V SjGxZuhnlqcZodufyIZz5eu3W3u2LfcyHMjQXFu65x4X1bjx6R+Yx8mm71D7wwTJ xfcODMCl -----END CERTIFICATE-----Generated at Tue Feb 10 02:22:40 2026 by rpki-client