This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/h52f1UiF76pKwvCeATvKHcz4j3Q.roa File: h52f1UiF76pKwvCeATvKHcz4j3Q.roa (raw, json) Hash identifier: +XzaN9Aq9gc/GYor1xbMg7KTZ4pSnh5KShGhpdHvvrA= Subject key identifier: 87:9D:9F:D5:48:85:EF:AA:4A:C2:F0:9E:01:3B:CA:1D:CC:F8:8F:74 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA3FE272D630A22F9A917830D61B8C7 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/h52f1UiF76pKwvCeATvKHcz4j3Q.roa Signing time: Thu 01 Jan 2026 22:18:23 +0000 ROA not before: Thu 01 Jan 2026 22:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48891 IP address blocks: 45.133.244.0/24 maxlen: 24 185.105.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:fe:27:2d:63:0a:22:f9:a9:17:83:0d:61:b8:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=879d9fd54885efaa4ac2f09e013bca1dccf88f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7e:59:14:32:9e:34:94:3f:1c:07:b7:36:c9: bc:5e:b2:e1:0c:88:d7:7a:88:3d:6c:10:03:96:f0: 3b:e3:6f:49:f2:f7:89:6d:68:7c:c5:3b:dd:a6:da: a6:07:2c:41:8c:68:82:bb:a7:3b:a5:f0:88:25:44: 5a:d3:bd:e9:9c:74:38:00:c2:67:7b:2c:59:64:eb: fe:be:a7:71:04:43:1d:56:2d:76:52:49:2d:8d:99: 46:fb:95:ea:85:d3:d5:c9:18:5b:0b:9c:91:b0:dd: 71:41:f0:71:94:53:68:c4:9e:11:66:9c:04:18:95: 98:b4:20:82:ec:86:e7:bb:ab:73:7d:d8:0c:84:4f: 2d:4a:bd:da:49:77:12:4e:d1:6d:46:d3:7d:c2:78: 62:2f:82:fd:03:55:f1:04:53:38:d5:b3:a7:b8:94: 11:a3:cb:49:49:c1:7c:1f:7f:7b:e7:73:ad:5e:a8: 42:ce:4e:81:ce:af:6e:f3:bf:03:09:7d:68:b6:b2: 19:65:a6:9b:c7:f1:93:3b:82:03:3f:12:1e:eb:29: cb:b7:92:05:03:94:c1:73:64:a7:c0:d8:82:5e:4d: dd:c8:f4:91:a8:b7:62:84:33:ba:e9:c9:22:0f:61: 11:72:03:6d:d8:33:07:d7:e1:40:11:70:c5:0d:46: eb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9D:9F:D5:48:85:EF:AA:4A:C2:F0:9E:01:3B:CA:1D:CC:F8:8F:74 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/h52f1UiF76pKwvCeATvKHcz4j3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.244.0/24 185.105.119.0/24 Signature Algorithm: sha256WithRSAEncryption 43:52:f8:74:96:4b:e2:a6:11:e1:ae:e9:2d:a9:75:08:ad:2a: f3:fa:5f:27:40:ba:d0:de:fe:63:be:af:ac:d6:e1:20:b4:60: 86:e3:fb:bd:8c:f3:9a:b5:91:5f:8f:1c:d9:8b:fa:21:f6:ae: 9e:ff:b9:c5:21:f2:65:92:db:49:47:54:34:bb:d5:ee:cd:2a: 02:e7:e6:a2:9c:6c:23:c5:55:45:34:98:b2:62:32:de:10:e8: 01:e6:90:d2:5e:8a:b4:dc:19:17:3f:58:d5:cc:8a:39:eb:96: d6:24:fc:ef:f8:55:06:ae:f3:2c:ad:c5:81:fd:fc:56:b8:fe: 63:12:b3:ab:38:f6:5b:2d:b6:e2:69:31:8c:c1:82:df:51:f1: 7b:8b:52:c7:98:7d:14:46:99:f4:50:78:00:b4:34:6e:8f:30: d4:c8:15:04:1d:e7:b6:3f:bb:18:25:5f:2e:eb:c9:61:4d:64: 38:7c:9d:86:65:60:b6:e0:0d:9a:db:4c:70:3d:cb:b7:b6:b0: 61:fc:1c:b2:d0:b9:04:70:34:1b:27:6b:75:ed:b0:88:6b:22: 7a:12:92:13:9a:6f:b4:57:e0:7b:8d:75:76:9f:26:30:46:bf: fb:12:ea:e4:82:a6:00:bb:4a:7d:da:94:d5:d2:c1:33:f0:7a: 3b:6c:9b:69 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o/4nLWMKIvmpF4MNYbjHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzlkOWZkNTQ4ODVlZmFhNGFjMmYwOWUwMTNiY2ExZGNjZjg4Zjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn35ZFDKeNJQ/HAe3Nsm8XrLhDIjX eog9bBADlvA7429J8veJbWh8xTvdptqmByxBjGiCu6c7pfCIJURa073pnHQ4AMJn eyxZZOv+vqdxBEMdVi12UkktjZlG+5XqhdPVyRhbC5yRsN1xQfBxlFNoxJ4RZpwE GJWYtCCC7Ibnu6tzfdgMhE8tSr3aSXcSTtFtRtN9wnhiL4L9A1XxBFM41bOnuJQR o8tJScF8H39753OtXqhCzk6Bzq9u878DCX1otrIZZaabx/GTO4IDPxIe6ynLt5IF A5TBc2SnwNiCXk3dyPSRqLdihDO66ckiD2ERcgNt2DMH1+FAEXDFDUbrrQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIedn9VIhe+qSsLwngE7yh3M+I90MB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvaDUyZjFVaUY3NnBLd3ZDZUFUdktIY3o0ajNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYX0AwQA uWl3MA0GCSqGSIb3DQEBCwUAA4IBAQBDUvh0lkviphHhruktqXUIrSrz+l8nQLrQ 3v5jvq+s1uEgtGCG4/u9jPOatZFfjxzZi/oh9q6e/7nFIfJlkttJR1Q0u9XuzSoC 5+ainGwjxVVFNJiyYjLeEOgB5pDSXoq03BkXP1jVzIo565bWJPzv+FUGrvMsrcWB /fxWuP5jErOrOPZbLbbiaTGMwYLfUfF7i1LHmH0URpn0UHgAtDRujzDUyBUEHee2 P7sYJV8u68lhTWQ4fJ2GZWC24A2a20xwPcu3trBh/Byy0LkEcDQbJ2t17bCIayJ6 EpITmm+0V+B7jXV2nyYwRr/7EurkgqYAu0p92pTV0sEz8Ho7bJtp -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:54 2026 by rpki-client