This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/mHoBt9PDNYSmvIbOtBMkSD1EeQc.roa File: mHoBt9PDNYSmvIbOtBMkSD1EeQc.roa (raw, json) Hash identifier: NyFP79wSko1G5ztyYBa7m1r2+XgRX6VCVkCRadeTppY= Subject key identifier: 98:7A:01:B7:D3:C3:35:84:A6:BC:86:CE:B4:13:24:48:3D:44:79:07 Certificate issuer: /CN=10759c6a62e278da8311afec8f7677c41363d1f8 Certificate serial: 019B7D5CEDFFAFB7970A4FA15802B69F49D4 Authority key identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/mHoBt9PDNYSmvIbOtBMkSD1EeQc.roa Signing time: Fri 02 Jan 2026 06:20:00 +0000 ROA not before: Fri 02 Jan 2026 06:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 193.39.100.0/24 maxlen: 24 193.39.101.0/24 maxlen: 24 193.39.102.0/24 maxlen: 24 193.39.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ed:ff:af:b7:97:0a:4f:a1:58:02:b6:9f:49:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10759c6a62e278da8311afec8f7677c41363d1f8 Validity Not Before: Jan 2 06:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=987a01b7d3c33584a6bc86ceb41324483d447907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:69:af:d0:8b:fd:d3:40:cf:15:5d:60:3b:55: 22:a0:bd:dd:72:d3:4b:63:12:f4:95:82:86:96:7a: cb:b1:50:d5:69:40:51:13:45:32:bb:39:9c:69:eb: 24:68:cb:1c:18:b9:80:86:31:6c:69:62:d6:31:51: ae:f1:5e:61:94:d0:0c:2c:01:f4:98:aa:67:ad:7d: 1f:b5:85:a0:c8:3a:fd:d9:2f:52:34:4f:7b:66:dd: cf:d7:55:b1:ce:fe:0e:6c:a8:13:fa:dc:55:52:65: ee:d5:d8:cb:0f:0f:09:2e:c3:28:92:09:44:32:04: 16:4c:c2:61:e4:ca:2c:a9:7f:28:85:86:ae:38:e3: 43:02:a7:9e:36:7e:a3:2c:d6:2c:a7:ed:06:3a:b1: bf:2d:09:01:be:df:14:42:8d:48:7a:95:a6:1b:87: 97:d9:6e:0e:26:68:a9:85:52:c2:fd:b9:ab:b2:15: fd:48:d0:1b:27:f1:03:24:76:bf:ca:19:a5:25:a2: 03:80:03:89:32:22:45:8f:c3:e2:83:d8:f1:ee:6e: 33:01:88:f1:cc:67:81:fd:ae:04:22:71:90:33:e0: f7:e6:85:aa:72:6e:40:21:c6:44:b4:91:6c:c9:9f: 1b:d4:dd:71:ee:83:d4:ec:5f:73:3f:5a:15:2d:7c: 93:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7A:01:B7:D3:C3:35:84:A6:BC:86:CE:B4:13:24:48:3D:44:79:07 X509v3 Authority Key Identifier: keyid:10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/mHoBt9PDNYSmvIbOtBMkSD1EeQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.39.100.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:f5:36:7e:23:cc:31:c5:53:20:2e:0d:a0:00:65:e3:58:dd: 65:1c:db:90:64:39:f5:ce:ff:1a:6d:03:61:3d:6a:b5:9a:c9: 86:07:78:97:12:4d:3f:59:89:5e:06:47:56:c8:02:de:5f:31: 33:83:d3:cc:35:93:85:15:33:3b:85:e5:05:b2:f5:a9:e2:a7: 25:ba:d5:18:2b:72:2a:5e:96:93:0a:99:6e:86:b2:3a:a2:16: f1:16:a7:66:c0:6c:50:e0:f6:ab:35:fb:bf:e0:f5:31:d9:76: 8d:4e:4b:32:2f:7d:a7:9b:9b:78:a3:c5:17:6f:89:54:cf:33: 1a:8d:db:49:14:56:ec:de:d0:c5:4a:d0:83:93:8e:7e:51:32: 41:29:91:63:09:3b:73:b1:dc:8a:d4:68:2b:ae:86:4e:c8:d1: 5e:0b:53:bf:c9:f2:35:69:e8:1d:55:4a:38:cd:69:1a:62:17: fd:fc:a5:48:59:0d:f9:c6:d1:81:e7:2a:91:21:40:f7:ee:53: 7c:9a:cb:86:39:36:0a:03:e9:8e:f3:be:2d:85:a6:76:39:72: db:3b:4a:39:7c:02:ea:40:91:8b:bd:44:7d:08:c0:b2:4b:20: 22:11:b9:cf:17:9b:9a:91:eb:8e:ad:9a:33:4f:14:01:fd:d7: da:20:c4:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XO3/r7eXCk+hWAK2n0nUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzU5YzZhNjJlMjc4ZGE4MzExYWZlYzhmNzY3N2M0MTM2 M2QxZjgwHhcNMjYwMTAyMDYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODdhMDFiN2QzYzMzNTg0YTZiYzg2Y2ViNDEzMjQ0ODNkNDQ3OTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGmv0Iv900DPFV1gO1UioL3dctNL YxL0lYKGlnrLsVDVaUBRE0UyuzmcaeskaMscGLmAhjFsaWLWMVGu8V5hlNAMLAH0 mKpnrX0ftYWgyDr92S9SNE97Zt3P11Wxzv4ObKgT+txVUmXu1djLDw8JLsMokglE MgQWTMJh5MosqX8ohYauOONDAqeeNn6jLNYsp+0GOrG/LQkBvt8UQo1IepWmG4eX 2W4OJmiphVLC/bmrshX9SNAbJ/EDJHa/yhmlJaIDgAOJMiJFj8Pig9jx7m4zAYjx zGeB/a4EInGQM+D35oWqcm5AIcZEtJFsyZ8b1N1x7oPU7F9zP1oVLXyTEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJh6AbfTwzWEpryGzrQTJEg9RHkHMB8GA1UdIwQY MBaAFBB1nGpi4njagxGv7I92d8QTY9H4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhXY2FtTGllTnFERWFfc2ozWjN4Qk5qMGZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hN2U1NWEtMjY3Mi00ZDc2LTk4Nzkt MmVlNGZmOGIwYTgwLzEvbUhvQnQ5UEROWVNtdkliT3RCTWtTRDFFZVFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hN2U1NWEtMjY3Mi00ZDc2LTk4NzktMmVlNGZmOGIwYTgw LzEvRUhXY2FtTGllTnFERWFfc2ozWjN4Qk5qMGZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSdkMA0G CSqGSIb3DQEBCwUAA4IBAQBr9TZ+I8wxxVMgLg2gAGXjWN1lHNuQZDn1zv8abQNh PWq1msmGB3iXEk0/WYleBkdWyALeXzEzg9PMNZOFFTM7heUFsvWp4qclutUYK3Iq XpaTCpluhrI6ohbxFqdmwGxQ4ParNfu/4PUx2XaNTksyL32nm5t4o8UXb4lUzzMa jdtJFFbs3tDFStCDk45+UTJBKZFjCTtzsdyK1GgrroZOyNFeC1O/yfI1aegdVUo4 zWkaYhf9/KVIWQ35xtGB5yqRIUD37lN8msuGOTYKA+mO874thaZ2OXLbO0o5fALq QJGLvUR9CMCySyAiEbnPF5uakeuOrZozTxQB/dfaIMSV -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:46 2026 by rpki-client