This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/h2q8wo4cN2FI5p7fbNyfArb0N5U.roa File: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (raw, json) Hash identifier: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE= Subject key identifier: 87:6A:BC:C2:8E:1C:37:61:48:E6:9E:DF:6C:DC:9F:02:B6:F4:37:95 Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Certificate serial: 019B7758E9BB12E5BE2A387834470B3740E0 Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/h2q8wo4cN2FI5p7fbNyfArb0N5U.roa Signing time: Thu 01 Jan 2026 02:17:54 +0000 ROA not before: Thu 01 Jan 2026 02:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197653 IP address blocks: 94.185.64.0/23 maxlen: 23 94.185.66.0/23 maxlen: 23 94.185.68.0/23 maxlen: 23 94.185.70.0/23 maxlen: 23 185.118.16.0/23 maxlen: 23 185.118.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 20:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e9:bb:12:e5:be:2a:38:78:34:47:0b:37:40:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Validity Not Before: Jan 1 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=876abcc28e1c376148e69edf6cdc9f02b6f43795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:35:83:46:16:5e:43:3a:ee:fc:39:fe:d4:43: e1:be:84:b1:d4:8d:88:6c:4d:21:d9:af:34:5c:e7: 97:27:5b:5e:08:57:3f:da:e2:3c:e1:51:87:31:9f: 0e:bf:fe:3f:95:d9:61:6b:67:44:95:26:11:b6:d6: 45:d8:9e:65:73:e3:2a:f6:b9:ec:14:b5:ff:9c:71: 28:17:1d:a5:1b:0d:54:63:fa:51:67:b1:30:eb:f6: f7:64:5e:6e:b1:6d:6a:db:5b:da:34:a2:a3:90:8c: 13:7a:9b:7e:f3:16:5c:48:a2:8e:bc:f7:ee:ce:3a: 6a:c6:32:28:2e:32:8b:05:0c:6f:cd:83:a3:cb:c7: 54:76:26:49:53:f9:78:45:b1:fd:90:c8:ec:e8:56: 0c:cc:5f:54:b3:8f:cc:7e:40:46:2a:0e:fa:14:92: 07:84:22:f1:cb:5e:d2:14:4a:8a:89:87:7e:1a:18: 9b:dc:38:c3:ff:97:a7:9d:3b:31:45:8c:8d:b3:fe: 18:3b:c5:f6:69:37:05:ed:e1:a3:73:31:db:5d:98: c7:fa:bc:38:55:97:7a:f2:f9:01:4c:ab:c0:f4:f6: de:bd:ce:9c:77:67:f0:4a:fd:2f:58:a7:5f:aa:69: 5e:fb:25:2d:fa:11:87:8e:34:55:ed:97:3b:8a:d7: 66:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6A:BC:C2:8E:1C:37:61:48:E6:9E:DF:6C:DC:9F:02:B6:F4:37:95 X509v3 Authority Key Identifier: keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/h2q8wo4cN2FI5p7fbNyfArb0N5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.185.64.0/21 185.118.16.0/22 Signature Algorithm: sha256WithRSAEncryption 87:52:21:58:e8:48:16:32:71:78:d3:4d:ba:a0:1b:6e:73:8e: b6:f8:9b:53:25:0f:5a:21:a4:0a:eb:b0:e1:00:e7:b1:be:55: e8:e9:e9:72:b3:dd:6f:ad:78:e9:81:56:9c:57:f5:b7:cd:67: c5:53:ae:ed:f4:0f:88:bd:67:b0:28:1d:ec:e3:8a:9e:bc:57: db:7c:27:5c:75:31:c7:46:c2:66:b5:cf:4e:40:21:7e:b2:37: 69:8d:06:b3:da:34:c5:fb:2c:60:c2:79:ff:85:7a:2e:d6:9c: 6b:2b:0f:d4:a6:e2:f7:c9:40:89:2b:6e:45:81:a5:9e:18:67: 6e:bb:f6:aa:30:4c:20:13:cb:97:94:ab:c8:3d:f6:4e:88:e0: 04:dd:fa:7d:ab:d7:34:d3:02:1b:20:20:d8:58:b0:20:b4:b2: 42:7d:66:66:e8:03:3d:f5:07:ad:de:e9:5a:78:f1:51:45:6d: f0:fa:c3:51:8b:1c:11:22:75:4c:6a:d9:87:d3:6d:3b:05:d2: 02:99:af:c3:7e:71:af:bb:ff:7c:f3:70:eb:eb:e4:3b:c0:f1: 1f:80:c2:b9:4f:12:fa:6e:1d:e8:94:cb:74:4a:61:ce:fa:3f: 66:39:1d:c4:f3:1f:4a:e9:cd:2e:99:d5:36:2f:a4:26:80:60: 1f:4a:80:a0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WOm7EuW+Kjh4NEcLN0DgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2 ZjcxNWEwHhcNMjYwMTAxMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzZhYmNjMjhlMWMzNzYxNDhlNjllZGY2Y2RjOWYwMmI2ZjQzNzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzWDRhZeQzru/Dn+1EPhvoSx1I2I bE0h2a80XOeXJ1teCFc/2uI84VGHMZ8Ov/4/ldlha2dElSYRttZF2J5lc+Mq9rns FLX/nHEoFx2lGw1UY/pRZ7Ew6/b3ZF5usW1q21vaNKKjkIwTept+8xZcSKKOvPfu zjpqxjIoLjKLBQxvzYOjy8dUdiZJU/l4RbH9kMjs6FYMzF9Us4/MfkBGKg76FJIH hCLxy17SFEqKiYd+Ghib3DjD/5ennTsxRYyNs/4YO8X2aTcF7eGjczHbXZjH+rw4 VZd68vkBTKvA9Pbevc6cd2fwSv0vWKdfqmle+yUt+hGHjjRV7Zc7itdmqwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIdqvMKOHDdhSOae32zcnwK29DeVMB8GA1UdIwQY MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt NmMzMDVhNmRiYWI5LzEvaDJxOHdvNGNOMkZJNXA3ZmJOeWZBcmIwTjVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5 LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDXrlAAwQC uXYQMA0GCSqGSIb3DQEBCwUAA4IBAQCHUiFY6EgWMnF40026oBtuc462+JtTJQ9a IaQK67DhAOexvlXo6elys91vrXjpgVacV/W3zWfFU67t9A+IvWewKB3s44qevFfb fCdcdTHHRsJmtc9OQCF+sjdpjQaz2jTF+yxgwnn/hXou1pxrKw/UpuL3yUCJK25F gaWeGGduu/aqMEwgE8uXlKvIPfZOiOAE3fp9q9c00wIbICDYWLAgtLJCfWZm6AM9 9Qet3ulaePFRRW3w+sNRixwRInVMatmH0207BdICma/DfnGvu/9883Dr6+Q7wPEf gMK5TxL6bh3olMt0SmHO+j9mOR3E8x9K6c0umdU2L6QmgGAfSoCg -----END CERTIFICATE-----Generated at Sun Jan 11 06:33:19 2026 by rpki-client