This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/h0udnEUnZF4CgPhVM04ofBmSvzQ.roa File: h0udnEUnZF4CgPhVM04ofBmSvzQ.roa (raw, json) Hash identifier: 86Ue2QRslfOBTNicHKV9wxjZDnUc41ToAUPvqZQH7cs= Subject key identifier: 87:4B:9D:9C:45:27:64:5E:02:80:F8:55:33:4E:28:7C:19:92:BF:34 Certificate issuer: /CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6 Certificate serial: 019B7A5A0CDB792F97251E3634B81E18C0D0 Authority key identifier: C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/h0udnEUnZF4CgPhVM04ofBmSvzQ.roa Signing time: Thu 01 Jan 2026 16:18:00 +0000 ROA not before: Thu 01 Jan 2026 16:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47788 IP address blocks: 91.208.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:0c:db:79:2f:97:25:1e:36:34:b8:1e:18:c0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6 Validity Not Before: Jan 1 16:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=874b9d9c4527645e0280f855334e287c1992bf34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b3:f5:f9:6b:5e:a8:1b:5e:b5:38:93:89:fd: f2:d4:98:c7:80:c9:f8:54:53:bc:14:d3:29:c7:80: cc:e0:db:f4:55:26:be:97:b3:45:db:11:d6:5e:2d: c1:6f:fe:5b:65:ca:73:ff:8b:0c:25:04:e1:8b:9d: 43:de:57:85:a7:0c:70:64:69:ba:ae:6c:f8:81:18: d7:b5:59:03:7f:28:b4:3e:d9:79:2a:74:75:04:a2: b6:08:e5:38:20:dc:cc:42:4c:c5:50:0b:f4:e3:82: f4:98:e5:99:87:db:29:6a:da:77:ec:7c:86:62:f5: 34:ae:88:a1:59:09:72:b7:fd:d2:ab:52:49:6c:9b: a6:98:1e:18:ae:2b:df:60:f3:62:c1:98:ef:cd:59: b9:29:58:81:e6:09:9a:db:46:63:f5:91:b8:38:11: 13:60:65:b5:1d:2e:44:c0:f7:35:71:00:08:cf:e6: 27:7b:8f:9f:33:12:c5:dd:b8:41:31:43:4f:30:90: ea:fc:2c:b2:bb:c4:0e:b3:2a:ef:05:50:12:1f:4f: 3d:91:a1:44:6e:29:03:1b:5e:92:d5:9e:1d:8e:f5: 91:dd:00:ad:40:98:fd:ab:0e:a0:74:6c:f7:b4:e4: 6b:eb:2c:54:17:7b:3d:39:9d:59:e1:50:8c:95:ef: af:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4B:9D:9C:45:27:64:5E:02:80:F8:55:33:4E:28:7C:19:92:BF:34 X509v3 Authority Key Identifier: keyid:C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/h0udnEUnZF4CgPhVM04ofBmSvzQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.153.0/24 Signature Algorithm: sha256WithRSAEncryption c0:68:3a:b4:16:ae:62:84:10:89:95:01:36:32:ce:43:a3:27: 3a:b7:6c:9f:c4:40:d3:45:98:82:7d:25:a7:f9:15:41:11:5a: a0:20:17:6c:d2:7d:02:e2:fe:4a:9d:66:b7:59:47:2a:42:3c: 25:0d:4f:44:d3:2d:2f:f8:99:ee:4f:b0:a3:b3:5f:42:68:a5: 8c:70:cb:08:39:e5:92:9e:a5:65:e2:f3:01:6c:7b:c0:89:cc: 13:22:82:ae:01:c7:a5:c4:1b:a2:bc:73:8e:45:48:75:b5:aa: 32:0f:91:db:e7:f2:12:4c:50:31:92:65:94:ca:f1:5a:20:36: 71:e0:6c:77:c7:09:c2:02:15:11:06:e8:0d:f8:80:42:08:cd: 34:b4:ba:64:59:60:7c:9a:57:f8:34:e6:fd:e4:91:de:fe:3e: 0d:bc:1e:9f:f5:fb:26:ed:bc:97:9a:b7:d1:48:c3:e9:91:b8: 89:17:b8:83:30:b3:bd:76:67:99:3b:e8:c4:1b:87:e0:ae:13: 52:9f:79:d1:2c:9c:0b:6a:d7:42:71:a0:67:f8:0a:54:0e:8b: 95:bf:e0:e3:77:8c:16:6d:de:1d:e3:2c:71:24:e4:bf:8a:40: 91:73:33:a6:05:37:ac:23:1e:85:26:91:f4:0b:ff:7f:a3:af: 7c:0b:8e:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WgzbeS+XJR42NLgeGMDQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNGY3ZmM4ODNjOWQ1ZTAyMzFhNTg1YjBhZTEzOWU3ODY1 NDNiYjYwHhcNMjYwMTAxMTYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzRiOWQ5YzQ1Mjc2NDVlMDI4MGY4NTUzMzRlMjg3YzE5OTJiZjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrP1+WteqBtetTiTif3y1JjHgMn4 VFO8FNMpx4DM4Nv0VSa+l7NF2xHWXi3Bb/5bZcpz/4sMJQThi51D3leFpwxwZGm6 rmz4gRjXtVkDfyi0Ptl5KnR1BKK2COU4INzMQkzFUAv044L0mOWZh9spatp37HyG YvU0roihWQlyt/3Sq1JJbJummB4YrivfYPNiwZjvzVm5KViB5gma20Zj9ZG4OBET YGW1HS5EwPc1cQAIz+Yne4+fMxLF3bhBMUNPMJDq/Cyyu8QOsyrvBVASH089kaFE bikDG16S1Z4djvWR3QCtQJj9qw6gdGz3tORr6yxUF3s9OZ1Z4VCMle+vOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIdLnZxFJ2ReAoD4VTNOKHwZkr80MB8GA1UdIwQY MBaAFMBPf8iDydXgIxpYWwrhOeeGVDu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0U5X3lJUEoxZUFqR2xoYkN1RTU1NFpVTzdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMWI4YzQtZGVlNy00ZWVlLWEwZTAt OTg0ZTgyZDRiODA2LzEvaDB1ZG5FVW5aRjRDZ1BoVk0wNG9mQm1TdnpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8zMWI4YzQtZGVlNy00ZWVlLWEwZTAtOTg0ZTgyZDRiODA2 LzEvd0U5X3lJUEoxZUFqR2xoYkN1RTU1NFpVTzdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9CZMA0G CSqGSIb3DQEBCwUAA4IBAQDAaDq0Fq5ihBCJlQE2Ms5Doyc6t2yfxEDTRZiCfSWn +RVBEVqgIBds0n0C4v5KnWa3WUcqQjwlDU9E0y0v+JnuT7Cjs19CaKWMcMsIOeWS nqVl4vMBbHvAicwTIoKuAcelxBuivHOORUh1taoyD5Hb5/ISTFAxkmWUyvFaIDZx 4Gx3xwnCAhURBugN+IBCCM00tLpkWWB8mlf4NOb95JHe/j4NvB6f9fsm7byXmrfR SMPpkbiJF7iDMLO9dmeZO+jEG4fgrhNSn3nRLJwLatdCcaBn+ApUDouVv+Djd4wW bd4d4yxxJOS/ikCRczOmBTesIx6FJpH0C/9/o698C454 -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:41 2026 by rpki-client