This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/Hd3ojefiZSO4EQV3qaL7pExW__U.roa File: Hd3ojefiZSO4EQV3qaL7pExW__U.roa (raw, json) Hash identifier: gRRtQEbW2/M2MaLd+m10UeRJYblia3Rho50OsDCy5PY= Subject key identifier: 1D:DD:E8:8D:E7:E2:65:23:B8:11:05:77:A9:A2:FB:A4:4C:56:FF:F5 Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9 Certificate serial: 019B7DCA0D8C30462636D15288AF6974CE65 Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/Hd3ojefiZSO4EQV3qaL7pExW__U.roa Signing time: Fri 02 Jan 2026 08:19:12 +0000 ROA not before: Fri 02 Jan 2026 08:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 84.22.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:0d:8c:30:46:26:36:d1:52:88:af:69:74:ce:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9 Validity Not Before: Jan 2 08:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ddde88de7e26523b8110577a9a2fba44c56fff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:11:86:29:fe:29:8e:cd:43:a4:a9:af:e3:50: 25:6d:c1:21:2b:63:80:2f:ea:94:30:9d:9e:4d:b0: e5:08:ce:ab:90:20:9a:6f:60:3c:7c:57:e7:25:a7: c7:b5:d3:ce:ca:60:97:82:6e:31:eb:29:87:12:d1: a0:e4:d9:c8:af:2b:f3:20:8a:3e:e8:05:38:e7:4c: 70:bc:2a:98:57:a4:a0:93:7f:5d:de:29:db:c7:3c: e0:d0:d7:61:f0:91:c4:d8:c9:d2:f8:82:15:dc:5f: a4:0f:d4:0c:c7:67:75:ab:c7:69:42:f2:4b:00:e7: 15:4c:83:e4:df:0e:70:48:9c:c8:84:68:42:6f:7c: 6a:9c:f7:20:94:9d:a8:51:c4:11:55:51:b3:50:b8: e2:82:76:60:26:9d:d1:51:d4:e7:a3:5c:37:ba:5a: de:bf:b1:f3:52:92:c5:7a:98:17:1c:df:f5:bf:eb: ef:38:9a:76:c3:09:8f:95:2e:89:9f:13:e5:07:74: fa:68:66:fd:b0:76:ff:da:ab:21:ca:27:1d:3a:eb: be:24:6a:72:a6:d9:e7:36:d2:a0:a0:32:1c:69:60: 6c:05:20:0a:d3:c6:6c:b8:eb:25:79:25:64:2f:a7: 01:f2:63:18:00:d3:a3:0b:bf:57:f7:c5:97:d9:87: d2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DD:E8:8D:E7:E2:65:23:B8:11:05:77:A9:A2:FB:A4:4C:56:FF:F5 X509v3 Authority Key Identifier: keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/Hd3ojefiZSO4EQV3qaL7pExW__U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.22.148.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:5a:c7:a5:ff:e9:1a:01:21:cd:72:34:90:bb:00:83:ee:b7: b0:b5:69:64:00:b9:32:d7:12:fa:28:c5:bf:5b:ea:67:ea:cc: ce:e6:75:18:7e:2d:10:2f:9f:8d:f9:37:52:a8:52:45:a9:54: 48:dc:76:f9:27:41:90:71:44:3a:1d:cc:a4:c0:89:76:51:44: 0c:4e:9a:d8:1f:f3:15:4e:86:d1:75:79:7a:c6:37:c1:19:53: 53:68:65:97:52:02:aa:33:5c:4e:b7:68:bc:98:a7:49:83:ff: 9d:e7:1c:eb:20:c5:8b:37:e6:64:ca:e1:a8:48:7b:d6:e3:4a: 7f:3d:b6:34:09:aa:2c:d0:2d:b9:bc:c5:28:16:cf:f4:6a:98: bf:6d:1c:30:c2:5b:03:23:be:3e:67:0c:13:fd:37:39:f6:1a: df:8e:3b:16:10:20:de:21:5b:dd:be:2a:57:74:69:09:f4:da: e2:35:69:28:17:95:ac:c9:ce:c1:37:cc:51:4b:7b:e7:47:d2: ae:53:e2:5a:59:c0:fc:ea:8a:59:e7:02:3f:16:ea:9b:65:6f: 3f:a3:37:d5:24:3e:20:b2:1b:e3:02:e1:67:a5:0b:ce:fb:99: c7:9b:10:6a:de:b0:9a:7e:4a:89:66:ae:75:fe:8d:52:b5:53: b4:5b:14:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yg2MMEYmNtFSiK9pdM5lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTgwZmI2YWRlODU4ZjI2NTJlNzM2OTkzMTI2Yzg1NzU5 ZjA2ZDkwHhcNMjYwMTAyMDgxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGRkZTg4ZGU3ZTI2NTIzYjgxMTA1NzdhOWEyZmJhNDRjNTZmZmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphGGKf4pjs1DpKmv41AlbcEhK2OA L+qUMJ2eTbDlCM6rkCCab2A8fFfnJafHtdPOymCXgm4x6ymHEtGg5NnIryvzIIo+ 6AU450xwvCqYV6Sgk39d3inbxzzg0Ndh8JHE2MnS+IIV3F+kD9QMx2d1q8dpQvJL AOcVTIPk3w5wSJzIhGhCb3xqnPcglJ2oUcQRVVGzULjignZgJp3RUdTno1w3ulre v7HzUpLFepgXHN/1v+vvOJp2wwmPlS6JnxPlB3T6aGb9sHb/2qshyicdOuu+JGpy ptnnNtKgoDIcaWBsBSAK08ZsuOsleSVkL6cB8mMYANOjC79X98WX2YfS9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB3d6I3n4mUjuBEFd6mi+6RMVv/1MB8GA1UdIwQY MBaAFFCYD7at6FjyZS5zaZMSbIV1nwbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt Y2NhNzlhNjk4MjBhLzEvSGQzb2plZmlaU080RVFWM3FhTDdwRXhXX19VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh LzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVBaUMA0G CSqGSIb3DQEBCwUAA4IBAQA6Wsel/+kaASHNcjSQuwCD7rewtWlkALky1xL6KMW/ W+pn6szO5nUYfi0QL5+N+TdSqFJFqVRI3Hb5J0GQcUQ6HcykwIl2UUQMTprYH/MV TobRdXl6xjfBGVNTaGWXUgKqM1xOt2i8mKdJg/+d5xzrIMWLN+ZkyuGoSHvW40p/ PbY0Caos0C25vMUoFs/0api/bRwwwlsDI74+ZwwT/Tc59hrfjjsWECDeIVvdvipX dGkJ9NriNWkoF5Wsyc7BN8xRS3vnR9KuU+JaWcD86opZ5wI/FuqbZW8/ozfVJD4g shvjAuFnpQvO+5nHmxBq3rCafkqJZq51/o1StVO0WxTX -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:46 2026 by rpki-client