This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/h3tLHRWk_OmFsZTg_jd5-mdYTds.roa File: h3tLHRWk_OmFsZTg_jd5-mdYTds.roa (raw, json) Hash identifier: xHXqRtgjeuL+vMeMb7Pl+kHYtqxysXcomaAK0drp85s= Subject key identifier: 87:7B:4B:1D:15:A4:FC:E9:85:B1:94:E0:FE:37:79:FA:67:58:4D:DB Certificate issuer: /CN=0253b919d75dc204d9ca38db7b28a174834b3b3d Certificate serial: 019B7D5B163BB993533BAD40053388A7ACFC Authority key identifier: 02:53:B9:19:D7:5D:C2:04:D9:CA:38:DB:7B:28:A1:74:83:4B:3B:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/h3tLHRWk_OmFsZTg_jd5-mdYTds.roa Signing time: Fri 02 Jan 2026 06:18:00 +0000 ROA not before: Fri 02 Jan 2026 06:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203779 IP address blocks: 185.124.52.0/22 maxlen: 24 2a06:b040::/29 maxlen: 32 2a06:b040:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.crl rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:16:3b:b9:93:53:3b:ad:40:05:33:88:a7:ac:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0253b919d75dc204d9ca38db7b28a174834b3b3d Validity Not Before: Jan 2 06:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=877b4b1d15a4fce985b194e0fe3779fa67584ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:23:c6:4c:4e:31:a6:14:b3:e2:17:3d:e2:fd: 44:d5:29:da:c3:3c:d8:98:84:01:36:31:4f:fc:fe: 21:a8:4b:ac:be:5c:3a:e6:d9:27:cc:41:b9:67:83: 1b:ae:69:d1:d8:d7:4c:e4:eb:07:8a:c2:41:ba:6c: 07:56:7c:85:d1:93:38:2f:a4:b6:08:c3:48:32:19: 4d:8e:73:0e:b8:99:21:8f:b0:76:1e:14:1d:da:0b: 4c:38:50:47:ca:01:74:3d:72:25:c3:4e:4b:47:6c: ee:97:ac:ac:65:dd:24:23:2f:9b:e1:c2:12:9b:e5: 07:ba:3a:0d:8d:d7:b8:41:fd:19:73:fd:5d:fe:08: 58:76:e5:5c:4c:be:ef:10:5a:b3:72:80:e2:e6:31: 22:a5:e9:b6:ed:57:fa:ec:29:e0:98:ab:f1:14:83: 92:d5:f3:de:72:fb:0e:0f:6a:e2:78:f5:41:ae:62: 2a:ed:af:d8:32:b2:4c:49:fd:8d:40:76:78:b1:fa: 27:57:5b:92:44:ea:a5:44:70:95:b2:99:02:37:dc: ac:1c:82:2f:76:5d:24:ee:0d:10:37:22:dc:8f:d5: ad:a8:ce:36:85:b2:71:7b:ab:45:c6:96:e7:2d:59: 11:3b:1e:c2:e1:7d:33:9e:30:06:54:0b:01:02:37: 5e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7B:4B:1D:15:A4:FC:E9:85:B1:94:E0:FE:37:79:FA:67:58:4D:DB X509v3 Authority Key Identifier: keyid:02:53:B9:19:D7:5D:C2:04:D9:CA:38:DB:7B:28:A1:74:83:4B:3B:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/h3tLHRWk_OmFsZTg_jd5-mdYTds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.124.52.0/22 IPv6: 2a06:b040::/29 Signature Algorithm: sha256WithRSAEncryption 86:73:c5:f8:00:8b:dd:c0:c9:d9:b1:19:a1:66:77:e1:40:0c: 75:f0:29:3a:60:b4:46:af:e2:71:a8:7b:cd:7a:db:f0:d7:6e: 65:d8:73:55:a5:d7:42:39:07:63:88:c2:52:a8:a4:76:4f:27: 8f:c5:a3:31:ae:7f:48:a0:85:4a:dd:11:ed:08:dc:3d:77:9c: 57:92:ef:0d:9a:09:3a:61:a5:9e:cd:08:0b:86:81:f8:00:c0: 91:6a:e0:7f:43:8d:24:2d:4f:c6:37:22:70:46:14:50:f6:8d: e4:c8:23:07:9e:99:1d:67:d3:66:0f:40:fd:93:e7:04:b4:cf: 53:75:84:7e:38:c2:fe:23:a0:06:22:bb:03:ff:d1:17:b6:fe: 36:1a:30:46:2d:4a:ae:03:b6:fa:fb:11:a6:c1:7d:58:56:70: 10:ed:e5:12:23:d4:aa:70:31:3a:da:3e:0f:e4:26:0d:47:69: cc:50:04:61:f4:4f:47:2b:cd:23:93:b5:fa:0d:dd:6e:54:44: 88:2c:cd:d0:0b:a9:4e:a7:77:9b:79:b3:d3:0d:20:c9:03:85: 96:1c:65:4a:2a:4a:6d:ed:89:9b:6a:61:78:ec:0c:9b:2c:17: 34:76:aa:68:ad:ef:0a:27:78:1c:d5:c4:8e:ea:bf:d3:b8:62: e7:a5:50:6d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9WxY7uZNTO61ABTOIp6z8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNTNiOTE5ZDc1ZGMyMDRkOWNhMzhkYjdiMjhhMTc0ODM0 YjNiM2QwHhcNMjYwMTAyMDYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzdiNGIxZDE1YTRmY2U5ODViMTk0ZTBmZTM3NzlmYTY3NTg0ZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySPGTE4xphSz4hc94v1E1SnawzzY mIQBNjFP/P4hqEusvlw65tknzEG5Z4MbrmnR2NdM5OsHisJBumwHVnyF0ZM4L6S2 CMNIMhlNjnMOuJkhj7B2HhQd2gtMOFBHygF0PXIlw05LR2zul6ysZd0kIy+b4cIS m+UHujoNjde4Qf0Zc/1d/ghYduVcTL7vEFqzcoDi5jEipem27Vf67CngmKvxFIOS 1fPecvsOD2riePVBrmIq7a/YMrJMSf2NQHZ4sfonV1uSROqlRHCVspkCN9ysHIIv dl0k7g0QNyLcj9WtqM42hbJxe6tFxpbnLVkROx7C4X0znjAGVAsBAjdeYQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFId7Sx0VpPzphbGU4P43efpnWE3bMB8GA1UdIwQY MBaAFAJTuRnXXcIE2co423sooXSDSzs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWxPNUdkZGR3Z1RaeWpqYmV5aWhkSU5MT3owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zYmFmZDgtYzM0ZS00ODkwLWI0Y2Yt NzNkYjBmMjg0MWM5LzEvaDN0TEhSV2tfT21Gc1pUZ19qZDUtbWRZVGRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8zYmFmZDgtYzM0ZS00ODkwLWI0Y2YtNzNkYjBmMjg0MWM5 LzEvQWxPNUdkZGR3Z1RaeWpqYmV5aWhkSU5MT3owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXw0MA0E AgACMAcDBQMqBrBAMA0GCSqGSIb3DQEBCwUAA4IBAQCGc8X4AIvdwMnZsRmhZnfh QAx18Ck6YLRGr+JxqHvNetvw125l2HNVpddCOQdjiMJSqKR2TyePxaMxrn9IoIVK 3RHtCNw9d5xXku8Nmgk6YaWezQgLhoH4AMCRauB/Q40kLU/GNyJwRhRQ9o3kyCMH npkdZ9NmD0D9k+cEtM9TdYR+OML+I6AGIrsD/9EXtv42GjBGLUquA7b6+xGmwX1Y VnAQ7eUSI9SqcDE62j4P5CYNR2nMUARh9E9HK80jk7X6Dd1uVESILM3QC6lOp3eb ebPTDSDJA4WWHGVKKkpt7YmbamF47AybLBc0dqpore8KJ3gc1cSO6r/TuGLnpVBt -----END CERTIFICATE-----Generated at Tue Jan 27 05:42:02 2026 by rpki-client