This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/RHL3XX7_eL5Sd7PtgFRm8c0mqx8.roa File: RHL3XX7_eL5Sd7PtgFRm8c0mqx8.roa (raw, json) Hash identifier: iXzaXbJN/wQTFbRM2yp/OOeZq8dsLS6ERqyx8upKLQk= Subject key identifier: 44:72:F7:5D:7E:FF:78:BE:52:77:B3:ED:80:54:66:F1:CD:26:AB:1F Certificate issuer: /CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203 Certificate serial: 019B76EB94301F4C1E4080899F80777627DB Authority key identifier: 3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/RHL3XX7_eL5Sd7PtgFRm8c0mqx8.roa Signing time: Thu 01 Jan 2026 00:18:28 +0000 ROA not before: Thu 01 Jan 2026 00:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9022 IP address blocks: 193.21.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:94:30:1f:4c:1e:40:80:89:9f:80:77:76:27:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203 Validity Not Before: Jan 1 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4472f75d7eff78be5277b3ed805466f1cd26ab1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:68:70:d8:0a:0c:2e:b4:c5:75:9b:53:20:be: c1:69:9e:16:ba:09:4a:02:71:0a:82:77:0f:ab:50: fb:11:be:df:ef:88:1f:2e:dd:57:0e:fb:ba:5d:e5: c3:30:8d:5d:5f:63:8d:bd:af:11:10:cd:8e:f9:3e: 31:c1:65:27:e2:a8:a2:1f:61:01:01:0e:57:a6:e2: e4:26:bf:54:aa:30:7d:08:92:c2:f3:ad:f5:7f:73: c8:d6:31:50:0a:0c:f8:d8:6a:d2:ee:82:8c:ca:16: ba:5b:c3:43:1f:3c:a7:65:02:96:d2:3c:27:87:fa: 01:fb:82:39:7f:5e:24:bc:8c:0a:ad:8c:7f:6b:72: d5:f9:d5:2c:a7:7d:09:fa:20:b1:17:fc:37:e4:e3: bd:78:73:8b:d4:82:f6:d2:a6:a4:77:56:6e:b9:5c: 01:e0:5e:4a:6f:7f:64:54:da:d5:32:34:be:40:78: 6f:cd:99:23:23:23:d6:04:7e:4a:de:9a:17:a6:a9: 13:34:24:ed:23:de:e4:9b:b4:22:44:42:46:22:4e: 14:29:f4:88:5c:3b:36:2c:b2:ea:a8:b5:d8:95:3c: e4:a3:7d:5c:fa:97:f8:f9:05:7d:d4:0c:fd:89:35: 5b:3f:50:95:d7:1e:0e:4e:27:17:3d:49:dd:17:bf: e1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:72:F7:5D:7E:FF:78:BE:52:77:B3:ED:80:54:66:F1:CD:26:AB:1F X509v3 Authority Key Identifier: keyid:3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/RHL3XX7_eL5Sd7PtgFRm8c0mqx8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.21.251.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:0f:f9:a3:a6:01:65:96:ac:d9:37:34:c7:f5:18:ad:e0:e7: 78:92:60:f6:6a:f4:fb:b9:a8:70:0c:83:96:38:f6:4f:2c:64: f6:24:28:ca:5a:33:f7:97:23:d6:3d:24:2d:7b:ac:d8:f0:71: 57:9c:ea:d8:d9:77:8a:e9:6d:10:bf:a3:f6:41:c9:b2:bf:4e: 07:25:7b:b8:34:3e:14:e8:43:8a:bc:ae:43:47:1b:24:c9:9b: 52:1e:e1:06:54:dd:29:36:b1:e8:2e:50:11:5b:3f:d3:87:5e: a6:63:e2:9c:4f:f9:9d:7a:a9:f0:14:7c:2b:55:90:12:e4:e7: bc:7c:4c:39:cd:73:4f:65:50:54:e9:bc:85:7f:95:87:d9:f5: 48:9c:b0:5e:30:f0:f9:72:56:68:6d:e1:a4:71:69:b0:49:df: 2e:01:be:08:4f:23:45:4b:97:bf:87:04:1e:bd:64:d3:45:6f: 48:12:8f:f3:6d:9a:fc:8c:9f:24:db:ed:ac:97:79:39:9c:df: f2:5c:73:2e:68:45:63:ea:1e:41:10:45:d1:e0:20:04:ac:e3: 40:51:2b:11:3c:78:10:5f:2c:e1:99:13:32:cb:46:d3:98:6c: 3a:13:c8:c8:7a:5a:7c:16:99:37:61:e8:41:df:54:08:65:9a: b6:65:de:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt265QwH0weQICJn4B3difbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOThhM2I2MmQ1YWJiMWRjYWY2OGFlMjNmNTMxZWU4MjI0 MGYyMDMwHhcNMjYwMTAxMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDcyZjc1ZDdlZmY3OGJlNTI3N2IzZWQ4MDU0NjZmMWNkMjZhYjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ghw2AoMLrTFdZtTIL7BaZ4WuglK AnEKgncPq1D7Eb7f74gfLt1XDvu6XeXDMI1dX2ONva8REM2O+T4xwWUn4qiiH2EB AQ5XpuLkJr9UqjB9CJLC8631f3PI1jFQCgz42GrS7oKMyha6W8NDHzynZQKW0jwn h/oB+4I5f14kvIwKrYx/a3LV+dUsp30J+iCxF/w35OO9eHOL1IL20qakd1ZuuVwB 4F5Kb39kVNrVMjS+QHhvzZkjIyPWBH5K3poXpqkTNCTtI97km7QiREJGIk4UKfSI XDs2LLLqqLXYlTzko31c+pf4+QV91Az9iTVbP1CV1x4OTicXPUndF7/hqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFERy911+/3i+Unez7YBUZvHNJqsfMB8GA1UdIwQY MBaAFD2Yo7YtWrsdyvaK4j9THugiQPIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFppanRpMWF1eDNLOW9yaVAxTWU2Q0pBOGdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hYzVmZGYtNWI2Ni00ODUwLTk2M2Et ZjliNzNiM2UzZWVlLzEvUkhMM1hYN19lTDVTZDdQdGdGUm04YzBtcXg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9hYzVmZGYtNWI2Ni00ODUwLTk2M2EtZjliNzNiM2UzZWVl LzEvUFppanRpMWF1eDNLOW9yaVAxTWU2Q0pBOGdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRX7MA0G CSqGSIb3DQEBCwUAA4IBAQAMD/mjpgFllqzZNzTH9Rit4Od4kmD2avT7uahwDIOW OPZPLGT2JCjKWjP3lyPWPSQte6zY8HFXnOrY2XeK6W0Qv6P2Qcmyv04HJXu4ND4U 6EOKvK5DRxskyZtSHuEGVN0pNrHoLlARWz/Th16mY+KcT/mdeqnwFHwrVZAS5Oe8 fEw5zXNPZVBU6byFf5WH2fVInLBeMPD5clZobeGkcWmwSd8uAb4ITyNFS5e/hwQe vWTTRW9IEo/zbZr8jJ8k2+2sl3k5nN/yXHMuaEVj6h5BEEXR4CAErONAUSsRPHgQ XyzhmRMyy0bTmGw6E8jIelp8Fpk3YehB31QIZZq2Zd62 -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:08 2026 by rpki-client