This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/if7HhXNRoDw1TnbTu8jR1pBkTZc.roa File: if7HhXNRoDw1TnbTu8jR1pBkTZc.roa (raw, json) Hash identifier: 8a3JrsC30tF9jpJNG+DBi1BkDJl3zSelO4aQKYLFjnI= Subject key identifier: 89:FE:C7:85:73:51:A0:3C:35:4E:76:D3:BB:C8:D1:D6:90:64:4D:97 Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E388CCB6C4BA4ABDB0EBD740D3FD9FC Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/if7HhXNRoDw1TnbTu8jR1pBkTZc.roa Signing time: Fri 02 Jan 2026 10:19:53 +0000 ROA not before: Fri 02 Jan 2026 10:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3457 IP address blocks: 83.125.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8c:cb:6c:4b:a4:ab:db:0e:bd:74:0d:3f:d9:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89fec7857351a03c354e76d3bbc8d1d690644d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a2:67:2d:9c:a7:2d:56:c9:98:88:56:fa:57: 88:98:3c:92:26:54:80:c6:c1:27:12:1f:02:5c:0c: 49:21:74:00:88:31:5a:f1:ae:b6:c0:5b:2e:42:fc: 2c:45:cb:bb:35:47:9c:c9:1a:e3:39:a7:9f:f2:c5: 8f:76:88:64:96:66:e0:45:9f:9c:08:0a:a4:b8:ab: ef:79:a7:fb:92:7f:60:1c:64:02:73:4e:3d:8e:42: d9:3e:73:cc:66:25:cd:68:72:d5:7b:d1:d5:2f:40: 05:49:1c:52:bd:b4:7e:55:3a:f6:d6:07:5f:22:8b: 8b:87:09:cf:c2:80:be:c5:d6:45:2e:06:77:29:5a: c2:56:11:6d:0c:82:41:a6:cb:1b:15:71:4e:55:7a: 58:fd:ac:1c:9f:51:13:45:66:14:3f:11:5c:a7:2b: ec:13:99:0f:53:5f:ad:18:d5:64:c0:84:eb:a9:3f: 45:cf:88:b4:3b:6a:38:ab:64:f2:08:e6:aa:49:65: 07:17:5e:e4:10:b4:f2:29:28:bc:25:9e:4b:b2:c3: 0b:16:f2:aa:d3:fe:c8:e6:1d:a0:62:95:b9:b3:dd: ad:4d:6c:4f:2a:a6:90:69:44:b0:6b:ea:c4:ec:53: 70:48:d0:d4:90:c1:9e:af:86:63:c2:24:b4:32:52: 80:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FE:C7:85:73:51:A0:3C:35:4E:76:D3:BB:C8:D1:D6:90:64:4D:97 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/if7HhXNRoDw1TnbTu8jR1pBkTZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.125.26.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:21:47:e1:39:2b:50:a7:a7:68:96:74:96:d5:bb:00:3f:5c: 45:2a:7a:3e:42:00:52:92:d0:79:c3:04:82:49:9a:8f:af:b3: 3c:31:5c:e3:53:85:ac:b7:f9:39:20:e7:83:f4:3a:8a:ea:16: ec:30:af:16:fb:49:40:fc:45:f2:b6:3e:47:f2:a2:6a:4f:98: 23:e8:77:9d:18:68:34:55:e8:b9:ed:d8:45:19:56:6c:c9:5c: 0f:61:3f:a9:ed:d7:52:41:db:ea:dc:7d:48:f6:4c:29:9b:00: f9:86:bb:f0:12:f8:67:a5:fb:ca:47:d8:a3:ec:ad:24:e7:b3: 04:8e:52:3e:f2:96:45:c7:c0:e4:5a:32:b3:a9:b7:d1:02:e1: 6c:fc:b4:ec:c5:80:21:41:92:59:22:64:4e:25:37:06:fe:a3: 3e:c0:2c:87:d9:f6:05:ec:40:d5:c2:af:05:dc:75:2d:00:ee: 9f:35:e7:58:5b:dd:b0:a0:c2:9f:7e:30:b3:68:45:2c:3e:a7: 3b:53:23:3c:c7:95:fc:b2:07:cf:6a:32:a5:4c:b9:42:e7:e6: de:57:05:b3:80:82:ac:f5:c4:90:1c:08:13:c5:b5:37:2a:6c: 2a:9e:12:94:9a:d0:ea:92:57:a5:cd:8d:0e:a2:53:7f:52:d8: bd:26:24:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OIzLbEukq9sOvXQNP9n8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWZlYzc4NTczNTFhMDNjMzU0ZTc2ZDNiYmM4ZDFkNjkwNjQ0ZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqJnLZynLVbJmIhW+leImDySJlSA xsEnEh8CXAxJIXQAiDFa8a62wFsuQvwsRcu7NUecyRrjOaef8sWPdohklmbgRZ+c CAqkuKvveaf7kn9gHGQCc049jkLZPnPMZiXNaHLVe9HVL0AFSRxSvbR+VTr21gdf IouLhwnPwoC+xdZFLgZ3KVrCVhFtDIJBpssbFXFOVXpY/awcn1ETRWYUPxFcpyvs E5kPU1+tGNVkwITrqT9Fz4i0O2o4q2TyCOaqSWUHF17kELTyKSi8JZ5LssMLFvKq 0/7I5h2gYpW5s92tTWxPKqaQaUSwa+rE7FNwSNDUkMGer4ZjwiS0MlKAEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIn+x4VzUaA8NU5207vI0daQZE2XMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvaWY3SGhYTlJvRHcxVG5iVHU4alIxcEJrVFpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU30aMA0G CSqGSIb3DQEBCwUAA4IBAQA9IUfhOStQp6dolnSW1bsAP1xFKno+QgBSktB5wwSC SZqPr7M8MVzjU4Wst/k5IOeD9DqK6hbsMK8W+0lA/EXytj5H8qJqT5gj6HedGGg0 Vei57dhFGVZsyVwPYT+p7ddSQdvq3H1I9kwpmwD5hrvwEvhnpfvKR9ij7K0k57ME jlI+8pZFx8DkWjKzqbfRAuFs/LTsxYAhQZJZImROJTcG/qM+wCyH2fYF7EDVwq8F 3HUtAO6fNedYW92woMKffjCzaEUsPqc7UyM8x5X8sgfPajKlTLlC5+beVwWzgIKs 9cSQHAgTxbU3KmwqnhKUmtDqklelzY0OolN/Uti9JiRW -----END CERTIFICATE-----Generated at Thu Feb 5 13:56:10 2026 by rpki-client