This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/H9OemdXyC7tAgnmNPQ8cKr4kXek.roa File: H9OemdXyC7tAgnmNPQ8cKr4kXek.roa (raw, json) Hash identifier: Y6oksDUVORVjfAcT/DowbWJFqVZVzW3cfm1/KNkAcoU= Subject key identifier: 1F:D3:9E:99:D5:F2:0B:BB:40:82:79:8D:3D:0F:1C:2A:BE:24:5D:E9 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019B7AC7CE60AFE6E01EAE77DB2677B41C84 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/H9OemdXyC7tAgnmNPQ8cKr4kXek.roa Signing time: Thu 01 Jan 2026 18:17:53 +0000 ROA not before: Thu 01 Jan 2026 18:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200017 IP address blocks: 45.152.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ce:60:af:e6:e0:1e:ae:77:db:26:77:b4:1c:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Jan 1 18:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fd39e99d5f20bbb4082798d3d0f1c2abe245de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:12:45:09:c6:0f:df:53:eb:41:b1:57:1b:04: d3:15:13:c0:da:30:0d:82:eb:8b:94:c8:64:b8:83: 49:4c:d6:71:f6:05:8b:bf:51:5d:56:dd:f6:ac:c0: 16:c8:cb:ea:34:06:a1:bc:7a:ee:7e:6b:c3:eb:0e: bf:ac:6a:c5:92:fb:81:9a:f7:5a:90:bb:37:41:e3: 6f:49:f6:ff:0e:a6:69:73:76:fd:ea:a6:2c:06:58: 19:ca:23:ef:50:27:88:99:6e:4c:18:b2:70:18:a7: 1f:92:f5:9d:33:12:26:d2:bb:ce:e6:46:eb:82:23: a5:cc:55:cb:fb:20:11:2f:11:13:f7:1d:ab:00:34: 1f:ee:e3:37:90:2c:af:9b:74:78:64:f1:bd:4f:0b: 79:6b:a1:e3:ef:4a:cd:0c:06:3e:37:95:2d:14:9d: 5c:39:e2:e6:9d:53:ed:83:30:6c:69:36:a8:b3:2d: d3:86:39:b9:ec:55:bd:12:f6:b6:d6:a9:89:62:7b: 74:fa:1f:11:c6:5d:d7:17:f8:73:c4:24:66:9e:ce: a9:b6:48:e6:07:0e:6c:59:2f:77:45:21:a1:8f:1d: 6d:a9:52:06:06:af:d2:93:69:d0:10:51:37:a5:d5: 0d:38:12:46:11:c8:8a:f2:3d:79:33:f2:9f:92:46: a0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D3:9E:99:D5:F2:0B:BB:40:82:79:8D:3D:0F:1C:2A:BE:24:5D:E9 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/H9OemdXyC7tAgnmNPQ8cKr4kXek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.176.0/24 Signature Algorithm: sha256WithRSAEncryption 50:5e:37:3f:89:1e:2e:f6:1c:a4:2e:67:f3:c7:09:03:66:97: 0d:69:3f:3d:0a:32:54:9b:04:fa:ac:cd:09:c0:be:54:d7:2d: 0d:e0:37:b6:a7:da:e6:d3:77:b5:fc:de:69:81:48:b7:50:74: 88:44:af:a2:11:b3:50:66:15:78:d5:e7:87:03:a1:f2:ca:b6: 25:3e:71:a5:c2:16:45:72:12:4d:1b:3e:12:f1:ad:3f:16:9a: 7e:c4:a4:a3:61:d4:42:3b:b6:8d:a7:7c:9d:3f:60:aa:fc:76: bf:91:91:9f:61:92:99:c5:5e:77:f2:b8:ab:1a:8a:72:da:35: 9a:46:f3:a6:16:9f:e2:10:91:f0:ac:97:69:77:46:a3:86:68: e9:29:8e:b4:99:8b:4c:71:6e:27:56:40:b6:5d:c8:11:3a:c5: 04:77:bf:af:75:6d:4c:42:95:1d:68:29:8c:d6:c0:54:59:97: 7d:55:62:84:8c:a1:0c:ab:e7:3a:fd:07:92:c8:35:9d:c2:15: 0c:8d:76:d6:91:bb:eb:41:fe:2b:a7:7a:28:90:ca:75:73:a0: de:74:07:a6:83:95:ec:66:6a:50:7a:31:f6:31:d3:56:65:4a: 6b:88:11:78:e4:c5:9a:1b:26:e8:7d:5f:fb:b5:67:9b:60:8b: 04:6c:fe:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x85gr+bgHq532yZ3tByEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjYwMTAxMTgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmQzOWU5OWQ1ZjIwYmJiNDA4Mjc5OGQzZDBmMWMyYWJlMjQ1ZGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBJFCcYP31PrQbFXGwTTFRPA2jAN guuLlMhkuINJTNZx9gWLv1FdVt32rMAWyMvqNAahvHrufmvD6w6/rGrFkvuBmvda kLs3QeNvSfb/DqZpc3b96qYsBlgZyiPvUCeImW5MGLJwGKcfkvWdMxIm0rvO5kbr giOlzFXL+yARLxET9x2rADQf7uM3kCyvm3R4ZPG9Twt5a6Hj70rNDAY+N5UtFJ1c OeLmnVPtgzBsaTaosy3Thjm57FW9Eva21qmJYnt0+h8Rxl3XF/hzxCRmns6ptkjm Bw5sWS93RSGhjx1tqVIGBq/Sk2nQEFE3pdUNOBJGEciK8j15M/KfkkagmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB/TnpnV8gu7QIJ5jT0PHCq+JF3pMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvSDlPZW1kWHlDN3RBZ25tTlBROGNLcjRrWGVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZiwMA0G CSqGSIb3DQEBCwUAA4IBAQBQXjc/iR4u9hykLmfzxwkDZpcNaT89CjJUmwT6rM0J wL5U1y0N4De2p9rm03e1/N5pgUi3UHSIRK+iEbNQZhV41eeHA6HyyrYlPnGlwhZF chJNGz4S8a0/Fpp+xKSjYdRCO7aNp3ydP2Cq/Ha/kZGfYZKZxV538rirGopy2jWa RvOmFp/iEJHwrJdpd0ajhmjpKY60mYtMcW4nVkC2XcgROsUEd7+vdW1MQpUdaCmM 1sBUWZd9VWKEjKEMq+c6/QeSyDWdwhUMjXbWkbvrQf4rp3ookMp1c6DedAemg5Xs ZmpQejH2MdNWZUpriBF45MWaGybofV/7tWebYIsEbP7n -----END CERTIFICATE-----Generated at Tue Jan 20 00:56:02 2026 by rpki-client