This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/H5rz4CYgzmbUmnfGasi4U65AvKk.roa File: H5rz4CYgzmbUmnfGasi4U65AvKk.roa (raw, json) Hash identifier: TO3cNYf9xWtPGa2S3JS5FwJuRn8xpuHQxouafZFM9ao= Subject key identifier: 1F:9A:F3:E0:26:20:CE:66:D4:9A:77:C6:6A:C8:B8:53:AE:40:BC:A9 Certificate issuer: /CN=d8a56e2d63ac5da9bed35da01cbfad225f04beb0 Certificate serial: 019B7C7F3C9284263C017EED366DB0DE49D4 Authority key identifier: D8:A5:6E:2D:63:AC:5D:A9:BE:D3:5D:A0:1C:BF:AD:22:5F:04:BE:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/H5rz4CYgzmbUmnfGasi4U65AvKk.roa Signing time: Fri 02 Jan 2026 02:17:51 +0000 ROA not before: Fri 02 Jan 2026 02:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5608 IP address blocks: 193.16.32.0/22 maxlen: 22 2a00:9b40:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.crl rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.mft rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:3c:92:84:26:3c:01:7e:ed:36:6d:b0:de:49:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8a56e2d63ac5da9bed35da01cbfad225f04beb0 Validity Not Before: Jan 2 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f9af3e02620ce66d49a77c66ac8b853ae40bca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:20:f6:b0:68:38:9d:52:8c:d2:3d:fe:fe:17: 3f:80:d6:6b:5d:bf:d9:68:c0:2e:94:2d:76:69:bb: f1:fd:e3:84:87:bf:e8:d3:fd:88:a4:b6:ed:14:28: 06:3f:87:9a:b3:af:b2:85:e4:fa:64:14:40:7e:5d: 72:d5:38:f8:35:68:aa:39:c2:93:90:62:0e:dd:f2: f7:50:36:6e:e7:e1:28:a3:de:e4:4b:de:5c:b0:2b: ab:a0:14:a9:1a:34:9f:0b:91:4c:2f:54:2e:e5:d5: af:3a:fd:64:e1:38:18:2a:6a:ce:a9:e4:75:63:98: 70:b0:46:5f:b6:2d:19:37:fd:25:d4:4d:89:62:51: ef:71:6c:22:a7:b0:72:a1:33:af:da:8e:f5:4d:3d: 25:5b:68:d7:d9:88:dc:6e:ac:99:65:4e:b1:f4:7d: 91:c8:7f:42:8e:84:e7:88:d0:d3:b3:29:84:af:66: f5:9f:57:49:56:b3:9e:fa:fc:75:10:26:15:11:70: 67:0f:e2:7d:b2:49:47:fc:a3:91:31:f2:55:5d:79: b1:ea:b4:16:70:3e:d2:c3:6b:5f:3e:29:83:11:c6: b4:28:0c:d0:b2:bf:98:43:85:04:7f:fa:30:85:1f: c0:64:51:8a:53:6c:76:47:6e:62:21:94:f7:85:a2: 83:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9A:F3:E0:26:20:CE:66:D4:9A:77:C6:6A:C8:B8:53:AE:40:BC:A9 X509v3 Authority Key Identifier: keyid:D8:A5:6E:2D:63:AC:5D:A9:BE:D3:5D:A0:1C:BF:AD:22:5F:04:BE:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/H5rz4CYgzmbUmnfGasi4U65AvKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.16.32.0/22 IPv6: 2a00:9b40:200::/40 Signature Algorithm: sha256WithRSAEncryption bb:3c:0f:eb:fa:6e:50:3f:c0:14:51:40:5e:5d:f8:23:cd:0a: 56:74:19:85:a0:cf:5e:83:eb:19:fe:58:d6:a9:6d:f5:cd:68: 4c:34:f4:87:3c:29:f0:34:21:cb:a6:5a:74:5f:80:7e:f2:3d: 12:07:d7:a2:f1:a2:ec:1f:f0:02:65:9b:09:89:0e:07:45:4d: 81:63:2c:a0:77:2b:07:3d:ea:af:f3:9a:45:5c:fe:fe:55:4c: 65:bb:81:2f:d1:45:c7:c7:4a:24:a1:67:4d:23:0b:c0:1f:1c: d6:9b:aa:a5:28:92:27:84:01:6c:82:07:d4:62:c3:30:75:fb: 8e:40:52:d2:76:f1:be:8c:4f:f6:cf:47:04:c8:18:db:b6:3e: aa:64:9d:1d:a6:60:89:e6:43:31:00:87:e0:e9:4b:59:3d:35: b8:f1:32:98:24:4c:08:28:ba:55:61:ac:94:11:1e:72:7e:fd: 92:5b:a4:a2:ad:79:d8:0c:c8:d3:2d:ff:59:d0:98:63:85:b7: fc:7b:c4:db:03:06:84:6e:02:c7:27:fe:2e:26:9c:45:3b:b1: 44:10:59:29:11:7b:65:5e:c3:8f:c7:9e:4a:34:92:fa:b9:6a: 1d:ff:3e:3d:ea:6e:09:03:c6:b0:d8:fd:54:01:c6:45:f3:0f: 0d:1d:0d:86 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt8fzyShCY8AX7tNm2w3knUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YTU2ZTJkNjNhYzVkYTliZWQzNWRhMDFjYmZhZDIyNWYw NGJlYjAwHhcNMjYwMTAyMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjlhZjNlMDI2MjBjZTY2ZDQ5YTc3YzY2YWM4Yjg1M2FlNDBiY2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSD2sGg4nVKM0j3+/hc/gNZrXb/Z aMAulC12abvx/eOEh7/o0/2IpLbtFCgGP4eas6+yheT6ZBRAfl1y1Tj4NWiqOcKT kGIO3fL3UDZu5+Eoo97kS95csCuroBSpGjSfC5FML1Qu5dWvOv1k4TgYKmrOqeR1 Y5hwsEZfti0ZN/0l1E2JYlHvcWwip7ByoTOv2o71TT0lW2jX2YjcbqyZZU6x9H2R yH9CjoTniNDTsymEr2b1n1dJVrOe+vx1ECYVEXBnD+J9sklH/KORMfJVXXmx6rQW cD7Sw2tfPimDEca0KAzQsr+YQ4UEf/owhR/AZFGKU2x2R25iIZT3haKDcwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFB+a8+AmIM5m1Jp3xmrIuFOuQLypMB8GA1UdIwQY MBaAFNilbi1jrF2pvtNdoBy/rSJfBL6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMktWdUxXT3NYYW0tMDEyZ0hMLXRJbDhFdnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NDE3N2MtNWUzYi00ODM2LTg4Njct ZThkNDdiYmEyNWJmLzEvSDVyejRDWWd6bWJVbW5mR2FzaTRVNjVBdktrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC83NDE3N2MtNWUzYi00ODM2LTg4NjctZThkNDdiYmEyNWJm LzEvMktWdUxXT3NYYW0tMDEyZ0hMLXRJbDhFdnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCwRAgMA4E AgACMAgDBgAqAJtAAjANBgkqhkiG9w0BAQsFAAOCAQEAuzwP6/puUD/AFFFAXl34 I80KVnQZhaDPXoPrGf5Y1qlt9c1oTDT0hzwp8DQhy6ZadF+AfvI9EgfXovGi7B/w AmWbCYkOB0VNgWMsoHcrBz3qr/OaRVz+/lVMZbuBL9FFx8dKJKFnTSMLwB8c1puq pSiSJ4QBbIIH1GLDMHX7jkBS0nbxvoxP9s9HBMgY27Y+qmSdHaZgieZDMQCH4OlL WT01uPEymCRMCCi6VWGslBEecn79klukoq152AzI0y3/WdCYY4W3/HvE2wMGhG4C xyf+LiacRTuxRBBZKRF7ZV7Dj8eeSjSS+rlqHf8+PepuCQPGsNj9VAHGRfMPDR0N hg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:58:04 2026 by rpki-client