This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/h-6Hikp9cHcZOssU1183HN4wp4Y.roa File: h-6Hikp9cHcZOssU1183HN4wp4Y.roa (raw, json) Hash identifier: R00HdvW9D6DfIfs8gclp/aguSIWpcB6sdyY5Ji+wu6I= Subject key identifier: 87:EE:87:8A:4A:7D:70:77:19:3A:CB:14:D7:5F:37:1C:DE:30:A7:86 Certificate issuer: /CN=5420cc313d6913848e00e1ff5782e394c1f60159 Certificate serial: 019C1ED2B169AE32332AB1A710DF0F74362E Authority key identifier: 54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/h-6Hikp9cHcZOssU1183HN4wp4Y.roa Signing time: Mon 02 Feb 2026 14:47:30 +0000 ROA not before: Mon 02 Feb 2026 14:47:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56950 IP address blocks: 185.136.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:d2:b1:69:ae:32:33:2a:b1:a7:10:df:0f:74:36:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5420cc313d6913848e00e1ff5782e394c1f60159 Validity Not Before: Feb 2 14:47:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87ee878a4a7d7077193acb14d75f371cde30a786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cd:10:fd:7c:a0:18:fd:dd:8f:e8:db:a2:7b: 22:62:99:7e:1a:9c:c4:d3:9e:5a:bf:94:fc:8f:ce: e2:04:9a:55:ab:94:67:cf:95:09:e8:32:fa:f4:c3: 94:1e:38:99:3c:f7:f7:ad:d5:00:ff:02:e8:f6:aa: 45:d3:71:c8:fe:b7:31:34:94:b4:af:a1:c0:21:54: f3:60:48:c1:87:dd:8a:5a:a0:50:ea:ea:e5:be:05: 1a:eb:5e:67:b4:ed:d7:29:14:e4:97:12:ff:3f:5d: 8f:27:ec:94:6a:bc:68:dc:f2:ee:d6:b3:99:d2:b7: 47:f8:47:c8:77:3b:ff:43:b3:ee:29:01:fd:ef:a6: e6:bf:ce:97:cd:f5:65:00:b3:93:3b:6b:18:88:8f: d3:04:18:38:6e:c6:37:97:eb:a2:2d:29:f1:4e:71: b6:ce:97:a8:06:c4:0e:fe:c3:bd:e7:b7:ed:7b:0b: b0:fd:b6:2f:dc:a1:d6:70:ae:9d:67:48:86:a3:74: b8:25:43:8c:e9:69:3b:0a:37:71:08:94:19:d8:01: 53:8e:b1:51:d4:5a:08:be:1b:19:e1:ef:4f:10:6a: 3b:e8:f8:d4:fd:54:e5:fa:b1:3d:7c:ef:16:34:15: 02:5b:15:c1:de:e4:f9:86:d2:63:69:b2:72:14:48: 99:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EE:87:8A:4A:7D:70:77:19:3A:CB:14:D7:5F:37:1C:DE:30:A7:86 X509v3 Authority Key Identifier: keyid:54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/h-6Hikp9cHcZOssU1183HN4wp4Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.243.0/24 Signature Algorithm: sha256WithRSAEncryption 40:6b:07:c2:e9:2b:61:c5:5a:ec:f4:90:c0:3b:4c:89:24:37: 5a:82:86:92:02:6c:b8:af:49:6e:b3:49:a0:19:5e:b5:26:49: 98:b1:44:d8:26:38:30:d5:df:5e:0f:29:8a:bc:14:0c:a0:f2: 30:fe:ba:ed:4d:54:3d:37:c9:46:09:58:51:b2:87:b9:ac:fb: 84:2a:6d:c1:e0:9f:31:20:a1:b3:bf:74:d6:4b:e9:30:b4:eb: 7d:7c:21:fb:f6:66:e4:0f:3c:02:53:e6:54:dc:07:cb:cc:c6: 0e:2b:5f:67:77:4b:0e:c1:81:9e:70:03:a8:30:03:74:84:30: cc:b9:d3:01:d7:5d:0f:c6:0e:bf:0b:c7:4a:86:ab:fc:d7:70: 42:fd:0e:02:0b:fa:92:d4:ba:27:a1:72:56:b9:b6:9b:59:64: 58:30:32:29:67:5d:98:d4:89:ee:c0:5a:28:7f:d4:49:8b:e8: 0e:3e:10:08:55:5b:9f:cd:6d:88:c6:e0:5b:b4:a0:23:e9:70: f0:b0:44:50:04:0d:7c:99:b2:ee:10:61:23:5c:05:98:34:cc: f3:ff:16:c4:7d:89:de:e8:ec:f4:f6:f4:f5:c8:1b:ff:bc:dd: 10:7c:a2:df:8b:51:0b:73:8b:60:05:a9:02:63:e6:75:e2:c7: 02:ca:6c:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwe0rFprjIzKrGnEN8PdDYuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MjBjYzMxM2Q2OTEzODQ4ZTAwZTFmZjU3ODJlMzk0YzFm NjAxNTkwHhcNMjYwMjAyMTQ0NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2VlODc4YTRhN2Q3MDc3MTkzYWNiMTRkNzVmMzcxY2RlMzBhNzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg80Q/XygGP3dj+jbonsiYpl+GpzE 055av5T8j87iBJpVq5Rnz5UJ6DL69MOUHjiZPPf3rdUA/wLo9qpF03HI/rcxNJS0 r6HAIVTzYEjBh92KWqBQ6urlvgUa615ntO3XKRTklxL/P12PJ+yUarxo3PLu1rOZ 0rdH+EfIdzv/Q7PuKQH976bmv86XzfVlALOTO2sYiI/TBBg4bsY3l+uiLSnxTnG2 zpeoBsQO/sO957ftewuw/bYv3KHWcK6dZ0iGo3S4JUOM6Wk7CjdxCJQZ2AFTjrFR 1FoIvhsZ4e9PEGo76PjU/VTl+rE9fO8WNBUCWxXB3uT5htJjabJyFEiZ3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIfuh4pKfXB3GTrLFNdfNxzeMKeGMB8GA1UdIwQY MBaAFFQgzDE9aROEjgDh/1eC45TB9gFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNETU1UMXBFNFNPQU9IX1Y0TGpsTUgyQVZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jM2MyNDYtYjg3ZS00MGUwLTkyNDYt ZjBkNWE5YmU3YzJiLzEvaC02SGlrcDljSGNaT3NzVTExODNITjR3cDRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jM2MyNDYtYjg3ZS00MGUwLTkyNDYtZjBkNWE5YmU3YzJi LzEvVkNETU1UMXBFNFNPQU9IX1Y0TGpsTUgyQVZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYjzMA0G CSqGSIb3DQEBCwUAA4IBAQBAawfC6SthxVrs9JDAO0yJJDdagoaSAmy4r0lus0mg GV61JkmYsUTYJjgw1d9eDymKvBQMoPIw/rrtTVQ9N8lGCVhRsoe5rPuEKm3B4J8x IKGzv3TWS+kwtOt9fCH79mbkDzwCU+ZU3AfLzMYOK19nd0sOwYGecAOoMAN0hDDM udMB110Pxg6/C8dKhqv813BC/Q4CC/qS1LonoXJWubabWWRYMDIpZ12Y1InuwFoo f9RJi+gOPhAIVVufzW2IxuBbtKAj6XDwsERQBA18mbLuEGEjXAWYNMzz/xbEfYne 6Oz09vT1yBv/vN0QfKLfi1ELc4tgBakCY+Z14scCymxx -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:42 2026 by rpki-client