This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/h1AkFWiuF4C5x1jcp2idszcxtwU.roa File: h1AkFWiuF4C5x1jcp2idszcxtwU.roa (raw, json) Hash identifier: RmjmZFo+6GsCEI0vzQijS30wCaveF6IUR5KU8O6+YJY= Subject key identifier: 87:50:24:15:68:AE:17:80:B9:C7:58:DC:A7:68:9D:B3:37:31:B7:05 Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019B7E38075C22CCF4D1D9AE0CC292F79F39 Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/h1AkFWiuF4C5x1jcp2idszcxtwU.roa Signing time: Fri 02 Jan 2026 10:19:19 +0000 ROA not before: Fri 02 Jan 2026 10:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48282 IP address blocks: 193.38.235.0/24 maxlen: 24 193.188.22.0/24 maxlen: 24 194.113.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:07:5c:22:cc:f4:d1:d9:ae:0c:c2:92:f7:9f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Jan 2 10:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8750241568ae1780b9c758dca7689db33731b705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8a:01:72:a9:88:f2:f5:55:f6:47:2c:13:74: 67:6a:14:c4:ca:1d:f1:f4:b4:f9:9f:9f:b6:84:ad: fd:e9:75:3c:11:5f:ee:c9:62:67:e7:79:4a:7d:c9: 80:29:97:02:db:b6:32:08:91:95:04:41:01:7d:b4: 0c:12:aa:3b:b6:5c:9b:16:16:99:bc:8b:4c:3c:37: db:29:ab:80:2f:b4:ea:06:9c:8a:3e:77:e5:48:08: 4c:71:89:54:7a:ff:c0:86:60:00:dd:b6:b5:54:ff: 73:5f:db:06:62:e2:5e:1c:6b:3c:f3:f7:96:17:01: 8f:b3:ab:75:32:3f:85:eb:36:b6:bc:e8:88:b1:66: 84:3a:eb:f3:a5:76:e3:1f:5c:58:66:70:e1:51:e7: 26:d6:e2:f7:00:e9:40:74:07:b4:bc:85:94:1e:d4: 58:94:27:58:07:b9:b1:3d:b7:f6:d1:35:a8:a3:d5: 3c:09:07:4d:17:c4:ab:87:08:9f:0d:36:fb:45:34: 96:bd:6c:4d:d0:e8:44:56:cf:0e:ee:43:c5:9a:06: d7:b6:38:9e:67:51:c8:ae:fd:9d:78:84:55:87:02: b9:1b:cf:f1:4f:7d:74:1c:fa:70:50:ef:dd:75:33: 45:6b:82:9a:30:c3:b6:54:41:29:92:6a:95:ad:b8: cd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:50:24:15:68:AE:17:80:B9:C7:58:DC:A7:68:9D:B3:37:31:B7:05 X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/h1AkFWiuF4C5x1jcp2idszcxtwU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.38.235.0/24 193.188.22.0/24 194.113.106.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:16:a5:d3:d7:74:78:7d:18:c0:ea:34:91:9d:cc:b2:3a:51: 30:91:27:d7:b7:79:d6:83:26:1d:e7:01:9f:9e:f6:aa:e1:c2: 53:f1:8b:42:6b:40:2e:a7:15:d4:f3:60:f4:67:9c:ca:6c:94: 0f:6a:22:fe:65:3b:d8:e4:5c:00:a9:d1:8b:24:7c:2c:84:3f: 51:ce:e6:54:29:5d:6a:b9:97:da:32:d1:2d:ee:94:20:c7:f6: 83:4e:00:e7:dc:e0:ee:54:9e:2b:7a:6c:f9:d6:74:59:b0:16: 07:aa:9e:91:15:fb:19:a8:53:fc:12:7f:6d:57:ca:c5:3e:76: ca:db:bc:a6:c2:53:97:5a:01:ca:26:96:78:75:97:73:24:19: 29:77:8e:26:6e:bf:9f:2d:bb:17:6a:3d:e4:d4:a3:37:4c:72: d7:ac:1f:b6:22:c3:3a:fc:99:f2:13:1c:3e:f7:07:f3:4e:7c: c9:76:29:01:5e:38:82:ff:81:e1:4c:23:f5:73:7e:60:1b:0c: 1e:5e:3b:9e:ce:23:46:be:e7:79:13:71:d7:98:bb:1e:bb:11: 10:9a:dd:4a:27:85:48:a4:c0:d2:93:13:52:19:ff:e8:93:a9: bf:34:2a:80:e2:c7:e1:38:77:72:a0:9a:82:46:68:4a:fa:2a: 6a:6f:dc:76 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OAdcIsz00dmuDMKS9585MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjYwMTAyMTAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzUwMjQxNTY4YWUxNzgwYjljNzU4ZGNhNzY4OWRiMzM3MzFiNzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ooBcqmI8vVV9kcsE3RnahTEyh3x 9LT5n5+2hK396XU8EV/uyWJn53lKfcmAKZcC27YyCJGVBEEBfbQMEqo7tlybFhaZ vItMPDfbKauAL7TqBpyKPnflSAhMcYlUev/AhmAA3ba1VP9zX9sGYuJeHGs88/eW FwGPs6t1Mj+F6za2vOiIsWaEOuvzpXbjH1xYZnDhUecm1uL3AOlAdAe0vIWUHtRY lCdYB7mxPbf20TWoo9U8CQdNF8SrhwifDTb7RTSWvWxN0OhEVs8O7kPFmgbXtjie Z1HIrv2deIRVhwK5G8/xT310HPpwUO/ddTNFa4KaMMO2VEEpkmqVrbjN+wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIdQJBVorheAucdY3KdonbM3MbcFMB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvaDFBa0ZXaXVGNEM1eDFqY3AyaWRzemN4dHdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwSbrAwQA wbwWAwQAwnFqMA0GCSqGSIb3DQEBCwUAA4IBAQBOFqXT13R4fRjA6jSRncyyOlEw kSfXt3nWgyYd5wGfnvaq4cJT8YtCa0AupxXU82D0Z5zKbJQPaiL+ZTvY5FwAqdGL JHwshD9RzuZUKV1quZfaMtEt7pQgx/aDTgDn3ODuVJ4remz51nRZsBYHqp6RFfsZ qFP8En9tV8rFPnbK27ymwlOXWgHKJpZ4dZdzJBkpd44mbr+fLbsXaj3k1KM3THLX rB+2IsM6/JnyExw+9wfzTnzJdikBXjiC/4HhTCP1c35gGwweXjueziNGvud5E3HX mLseuxEQmt1KJ4VIpMDSkxNSGf/ok6m/NCqA4sfhOHdyoJqCRmhK+ipqb9x2 -----END CERTIFICATE-----Generated at Tue Jan 20 17:06:31 2026 by rpki-client