This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/hGM3IOEdtYvsaQdf8NpLCWgHOrY.roa File: hGM3IOEdtYvsaQdf8NpLCWgHOrY.roa (raw, json) Hash identifier: vntZWOVkcSUsnEymKfN5wS2x8DI+HCyMmnVf/ey0knI= Subject key identifier: 84:63:37:20:E1:1D:B5:8B:EC:69:07:5F:F0:DA:4B:09:68:07:3A:B6 Certificate issuer: /CN=c25d43dcde10b923179d5b1bd74ea43acc221093 Certificate serial: 019B79112E3B60002BDDB69F1264748EA249 Authority key identifier: C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/hGM3IOEdtYvsaQdf8NpLCWgHOrY.roa Signing time: Thu 01 Jan 2026 10:18:47 +0000 ROA not before: Thu 01 Jan 2026 10:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48829 IP address blocks: 195.130.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2e:3b:60:00:2b:dd:b6:9f:12:64:74:8e:a2:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c25d43dcde10b923179d5b1bd74ea43acc221093 Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84633720e11db58bec69075ff0da4b0968073ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5e:0a:35:17:01:be:c1:f0:6d:b4:9e:7d:66: 26:96:8d:3b:95:55:fe:96:98:66:3e:bd:01:e7:a8: af:e1:f8:2e:da:0f:e5:f5:c4:21:18:ba:26:75:b5: b1:83:c5:20:15:b0:0f:57:8b:18:b6:b1:4b:c5:a2: 1b:5a:77:2b:5f:9d:c1:30:0e:d7:8c:31:35:e2:1e: a8:81:50:d6:41:39:32:21:fe:a6:15:c1:91:f2:82: b6:a2:61:b0:28:80:ae:4f:8c:c8:c0:00:ec:fc:28: 37:4d:db:11:88:d6:a4:ad:45:c4:70:f7:af:dc:71: 53:2b:49:76:6d:17:a7:3e:ba:c4:c5:42:6e:db:1e: 80:33:8d:23:9b:b0:d9:3e:e9:46:21:f6:c4:3e:7b: 83:e3:e5:b9:66:86:66:1b:1c:fb:3d:39:22:2c:ab: c1:b6:dd:80:4e:78:14:89:a7:87:56:5e:87:09:80: 9e:e4:f8:41:2b:e7:78:d9:15:66:4b:09:b4:79:81: c6:91:b8:39:af:19:c9:6a:e9:43:11:f9:db:4e:eb: 27:d6:01:9f:b3:c3:9c:d3:d5:f4:0e:8f:5d:0d:d8: 1f:41:f0:ad:e0:11:5c:91:a6:e5:b4:10:55:56:c1: 05:39:0e:40:16:57:b2:81:3b:94:58:bb:97:4e:32: 6d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:63:37:20:E1:1D:B5:8B:EC:69:07:5F:F0:DA:4B:09:68:07:3A:B6 X509v3 Authority Key Identifier: keyid:C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/hGM3IOEdtYvsaQdf8NpLCWgHOrY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.130.203.0/24 Signature Algorithm: sha256WithRSAEncryption 01:14:b6:ff:a2:c9:c8:b8:2d:ad:26:17:8f:90:9e:42:2e:64: 27:32:f8:72:7e:08:fa:ab:27:b8:67:ce:6f:99:98:e6:08:d1: 83:90:cc:fb:10:9e:59:0a:19:b9:bf:fb:98:7f:93:de:2b:44: 22:d9:55:5f:4a:15:38:54:15:f9:f3:f1:eb:94:41:01:36:de: f2:45:5d:40:80:77:27:69:a7:62:17:95:38:42:09:52:82:85: ea:09:50:94:66:23:c4:db:91:75:15:ef:48:ab:e2:8e:93:ac: fe:6e:cf:30:b2:01:69:5c:45:06:f8:62:3a:44:6d:4a:b8:4a: 2b:7d:38:4d:82:05:32:00:fb:ad:1f:41:35:70:80:31:68:65: 86:fe:33:55:77:75:95:03:dc:8a:52:ad:32:0e:d9:e4:c7:fc: 4d:9d:67:6a:e2:83:07:da:a3:4a:c1:64:28:28:5d:17:f3:b7: 7d:66:13:1a:c3:f9:dc:dd:de:81:4f:72:de:1a:eb:a4:d8:e3: 10:c1:24:ca:b2:1f:d6:48:58:a7:4f:82:71:35:3c:df:8e:10: 62:9e:4d:8f:5b:e0:b9:54:6d:6d:27:2e:76:61:4e:ef:17:70: 3c:05:93:fe:30:43:fa:6b:b6:82:37:68:b3:46:b7:20:62:21: c0:f0:11:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ES47YAAr3bafEmR0jqJJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNWQ0M2RjZGUxMGI5MjMxNzlkNWIxYmQ3NGVhNDNhY2My MjEwOTMwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDYzMzcyMGUxMWRiNThiZWM2OTA3NWZmMGRhNGIwOTY4MDczYWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA114KNRcBvsHwbbSefWYmlo07lVX+ lphmPr0B56iv4fgu2g/l9cQhGLomdbWxg8UgFbAPV4sYtrFLxaIbWncrX53BMA7X jDE14h6ogVDWQTkyIf6mFcGR8oK2omGwKICuT4zIwADs/Cg3TdsRiNakrUXEcPev 3HFTK0l2bRenPrrExUJu2x6AM40jm7DZPulGIfbEPnuD4+W5ZoZmGxz7PTkiLKvB tt2ATngUiaeHVl6HCYCe5PhBK+d42RVmSwm0eYHGkbg5rxnJaulDEfnbTusn1gGf s8Oc09X0Do9dDdgfQfCt4BFckabltBBVVsEFOQ5AFleygTuUWLuXTjJtbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIRjNyDhHbWL7GkHX/DaSwloBzq2MB8GA1UdIwQY MBaAFMJdQ9zeELkjF51bG9dOpDrMIhCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2wxRDNONFF1U01YblZzYjEwNmtPc3dpRUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NGU0YmItOWJmNS00NzhiLTg1YTEt NjQ5MzExMTM5ODgzLzEvaEdNM0lPRWR0WXZzYVFkZjhOcExDV2dIT3JZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NGU0YmItOWJmNS00NzhiLTg1YTEtNjQ5MzExMTM5ODgz LzEvd2wxRDNONFF1U01YblZzYjEwNmtPc3dpRUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4LLMA0G CSqGSIb3DQEBCwUAA4IBAQABFLb/osnIuC2tJhePkJ5CLmQnMvhyfgj6qye4Z85v mZjmCNGDkMz7EJ5ZChm5v/uYf5PeK0Qi2VVfShU4VBX58/HrlEEBNt7yRV1AgHcn aadiF5U4QglSgoXqCVCUZiPE25F1Fe9Iq+KOk6z+bs8wsgFpXEUG+GI6RG1KuEor fThNggUyAPutH0E1cIAxaGWG/jNVd3WVA9yKUq0yDtnkx/xNnWdq4oMH2qNKwWQo KF0X87d9ZhMaw/nc3d6BT3LeGuuk2OMQwSTKsh/WSFinT4JxNTzfjhBink2PW+C5 VG1tJy52YU7vF3A8BZP+MEP6a7aCN2izRrcgYiHA8BEp -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:33 2026 by rpki-client