This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/h9O4igP1v71WQs5yCKPrkkT1bWs.roa File: h9O4igP1v71WQs5yCKPrkkT1bWs.roa (raw, json) Hash identifier: ZYnqb0lG1tOBYOyzXI9EfEwJk0q43+8tkzFEmRF9emw= Subject key identifier: 87:D3:B8:8A:03:F5:BF:BD:56:42:CE:72:08:A3:EB:92:44:F5:6D:6B Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A252A9F10643FF497166C1F9ECB30A Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/h9O4igP1v71WQs5yCKPrkkT1bWs.roa Signing time: Thu 01 Jan 2026 08:17:42 +0000 ROA not before: Thu 01 Jan 2026 08:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61049 IP address blocks: 212.134.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:52:a9:f1:06:43:ff:49:71:66:c1:f9:ec:b3:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87d3b88a03f5bfbd5642ce7208a3eb9244f56d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d7:f7:db:90:eb:41:08:d3:a6:c1:bd:fa:4b: 99:92:d8:4e:65:a5:58:29:8b:c4:0b:d1:eb:2f:f1: 5a:48:4b:d2:4c:a4:dd:88:1b:a0:7c:48:b1:b5:0e: 54:dd:44:6b:f7:80:4d:ef:52:73:db:d6:5f:85:71: f0:1d:3c:78:27:ef:84:79:53:e0:45:3a:88:ed:93: 11:a0:df:74:d0:ee:23:a2:a4:64:38:1f:89:42:c5: c3:1d:17:d9:1e:b9:24:93:d7:7d:1a:37:c9:1f:a5: bd:6c:37:9f:25:17:fa:ef:5e:34:22:53:f8:d5:7a: 74:95:3d:80:08:fe:9d:b5:e8:1a:44:37:7a:35:42: cb:fb:5f:f1:18:8f:cf:52:3a:8c:b0:ec:eb:ad:8b: 66:85:43:9a:6c:20:ab:d7:f3:58:4b:06:6c:96:85: 4b:5c:a9:44:a3:9e:73:0a:1f:6d:d7:28:66:e2:f9: b5:81:ef:af:91:b6:07:99:ff:17:09:27:44:54:e6: a2:ea:d5:bf:b5:8a:97:80:77:66:5e:98:59:91:2d: e4:60:74:88:ee:1e:b4:ab:34:03:d8:47:a3:79:a6: 0d:ed:ca:51:bb:d3:ae:4c:5c:c7:58:aa:e4:7d:cf: 22:17:6a:d1:45:00:04:b2:dd:1e:65:b7:4e:5d:58: fc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D3:B8:8A:03:F5:BF:BD:56:42:CE:72:08:A3:EB:92:44:F5:6D:6B X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/h9O4igP1v71WQs5yCKPrkkT1bWs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.93.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:6b:63:c6:f9:33:ef:bb:75:3d:9f:7d:a2:8a:a8:8a:75:29: 8c:2a:21:79:d0:6f:cb:0d:43:86:ef:3f:8b:e4:3a:e6:b7:0e: 5a:90:c3:5c:e1:a2:82:be:02:b1:67:fe:04:47:97:07:d2:2a: 32:53:69:eb:35:ff:fc:b3:fa:4e:b5:d4:f5:ce:24:ad:48:0b: 2d:23:37:b9:ff:40:0e:ce:00:26:7a:3c:66:08:1b:52:77:ab: ff:35:45:10:c5:da:76:17:6b:54:68:67:ca:af:9b:3d:8c:a5: 61:a0:89:db:51:e4:ad:30:e4:c9:38:f7:b5:5d:08:fd:2c:2e: 38:02:a3:1f:95:d4:a1:95:13:c2:6b:e0:19:53:d7:bb:41:67: cc:2d:c8:b5:a2:5e:5a:b1:98:94:b0:51:8e:0f:74:5b:c4:13: 0c:48:2f:06:cb:58:b5:0a:d3:d4:d6:6b:a7:52:b2:63:20:28: 10:01:99:1f:b5:12:97:c7:e4:70:f8:6f:a0:82:8b:87:08:40: c4:fc:af:d4:4d:13:3e:10:04:2f:e5:50:9e:5c:e0:af:16:0b: 50:3c:24:ec:2e:32:e4:aa:9b:f0:14:32:bc:c2:e3:bf:12:65: 8a:61:b6:ac:c7:42:55:8e:40:34:70:c5:3a:a5:e3:33:45:69: b1:a4:71:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4olKp8QZD/0lxZsH57LMKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2QzYjg4YTAzZjViZmJkNTY0MmNlNzIwOGEzZWI5MjQ0ZjU2ZDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtf325DrQQjTpsG9+kuZkthOZaVY KYvEC9HrL/FaSEvSTKTdiBugfEixtQ5U3URr94BN71Jz29ZfhXHwHTx4J++EeVPg RTqI7ZMRoN900O4joqRkOB+JQsXDHRfZHrkkk9d9GjfJH6W9bDefJRf67140IlP4 1Xp0lT2ACP6dtegaRDd6NULL+1/xGI/PUjqMsOzrrYtmhUOabCCr1/NYSwZsloVL XKlEo55zCh9t1yhm4vm1ge+vkbYHmf8XCSdEVOai6tW/tYqXgHdmXphZkS3kYHSI 7h60qzQD2EejeaYN7cpRu9OuTFzHWKrkfc8iF2rRRQAEst0eZbdOXVj8swIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIfTuIoD9b+9VkLOcgij65JE9W1rMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvaDlPNGlnUDF2NzFXUXM1eUNLUHJra1QxYldzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IZdMA0G CSqGSIb3DQEBCwUAA4IBAQBNa2PG+TPvu3U9n32iiqiKdSmMKiF50G/LDUOG7z+L 5Drmtw5akMNc4aKCvgKxZ/4ER5cH0ioyU2nrNf/8s/pOtdT1ziStSAstIze5/0AO zgAmejxmCBtSd6v/NUUQxdp2F2tUaGfKr5s9jKVhoInbUeStMOTJOPe1XQj9LC44 AqMfldShlRPCa+AZU9e7QWfMLci1ol5asZiUsFGOD3RbxBMMSC8Gy1i1CtPU1mun UrJjICgQAZkftRKXx+Rw+G+ggouHCEDE/K/UTRM+EAQv5VCeXOCvFgtQPCTsLjLk qpvwFDK8wuO/EmWKYbasx0JVjkA0cMU6peMzRWmxpHFd -----END CERTIFICATE-----Generated at Mon Jan 19 08:15:15 2026 by rpki-client