This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/1-7HFtUN3vZHJP99F9s_042HCi_o.roa File: 1-7HFtUN3vZHJP99F9s_042HCi_o.roa (raw, json) Hash identifier: v3oy8qKtaxYoYTFlbLGcHquGHI0mpb7e1cJJAPr+1KI= Subject key identifier: FB:B1:C5:B5:43:77:BD:91:C9:3F:DF:45:F6:CF:F4:E3:61:C2:8B:FA Certificate issuer: /CN=869ab33046862ab58405e5e927ddf41272dfc714 Certificate serial: 019B79110359AB20913E7A343F3C30EDAE04 Authority key identifier: 86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/1-7HFtUN3vZHJP99F9s_042HCi_o.roa Signing time: Thu 01 Jan 2026 10:18:36 +0000 ROA not before: Thu 01 Jan 2026 10:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42274 IP address blocks: 91.192.12.0/22 maxlen: 22 193.111.44.0/24 maxlen: 24 193.111.56.0/22 maxlen: 22 193.111.56.0/24 maxlen: 24 2001:67c:36c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:03:59:ab:20:91:3e:7a:34:3f:3c:30:ed:ae:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=869ab33046862ab58405e5e927ddf41272dfc714 Validity Not Before: Jan 1 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbb1c5b54377bd91c93fdf45f6cff4e361c28bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:48:07:e4:18:96:8e:fb:46:8c:24:95:9d:bb: 16:2e:42:6c:f4:27:57:30:bb:6d:b8:10:19:29:8e: 80:47:72:95:4e:05:06:c8:2e:ec:30:68:79:49:08: 48:a2:ae:f9:08:3a:59:3c:62:6f:0a:92:86:8c:c5: f1:dd:4f:5a:73:33:1f:fa:55:d3:c6:a4:df:65:e9: c4:17:56:aa:f2:3b:c9:96:2e:15:f0:78:40:12:fd: 14:1b:f8:84:e6:e0:06:18:a8:f2:1b:37:24:4c:e7: ea:4d:38:92:44:f7:fa:08:ff:e4:d6:79:23:a5:a6: fd:2e:27:70:6f:58:26:67:55:0c:39:1a:8c:b7:e2: ae:2d:e5:e4:be:83:3f:de:16:67:e9:51:e7:d1:03: 0e:a5:27:c5:dc:40:3d:98:87:ae:0d:d8:41:b9:b8: 69:54:6d:e9:96:98:1d:f7:3c:57:34:d5:4b:2d:cc: ba:91:4d:fe:2b:4e:2f:65:ba:b3:a9:e4:56:73:85: da:7f:4b:00:c3:40:8e:68:3e:f3:e4:54:c1:04:69: 8e:6c:ad:47:4b:f3:f2:26:f7:14:75:ac:d2:78:46: c1:ca:6d:a6:f9:32:8c:ae:62:26:b3:11:24:89:d2: 2f:cb:57:2c:00:7d:96:a1:c6:32:e3:49:0b:4b:55: 94:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B1:C5:B5:43:77:BD:91:C9:3F:DF:45:F6:CF:F4:E3:61:C2:8B:FA X509v3 Authority Key Identifier: keyid:86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/1-7HFtUN3vZHJP99F9s_042HCi_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.12.0/22 193.111.44.0/24 193.111.56.0/22 IPv6: 2001:67c:36c::/48 Signature Algorithm: sha256WithRSAEncryption 0f:22:92:cc:e9:2d:0a:b5:0d:8f:c5:dd:65:9e:8e:1b:3c:5f: 94:f0:8b:c0:be:7b:ee:ce:a2:8d:f8:8a:73:5b:93:24:fc:5a: 92:64:7d:ba:55:ad:44:4e:15:3d:af:59:a7:53:b3:fd:6e:21: ac:d7:94:2e:b3:32:5e:6d:23:e6:14:53:1b:6c:9c:48:f0:e8: e2:cc:a3:65:b9:50:a1:3e:b2:67:d0:e8:ae:8f:9c:5b:b4:68: 53:9b:18:b2:2c:45:7b:83:8f:de:0d:f8:3e:30:30:7b:35:87: e5:0a:7a:dc:cf:2a:be:70:14:fe:16:73:0f:f5:30:4b:73:6d: 24:ea:bb:14:28:07:04:2d:8b:84:9c:a1:eb:c0:bb:66:88:74: ff:d1:b7:d0:e1:09:c3:be:78:44:05:91:12:dc:f4:e6:99:ca: 57:70:df:22:93:f9:26:4e:ba:05:47:ea:8c:16:e6:36:84:63: 8d:47:6a:f8:21:8a:86:01:6b:b8:b5:60:7e:4e:8c:e4:ee:8f: 1d:0d:3f:1c:c6:cb:50:c5:23:04:67:23:e6:c4:42:fe:71:92: 19:80:9f:6b:7f:51:37:2d:29:28:07:b0:de:0b:c8:7a:68:30: f1:51:1c:17:fd:66:ae:ba:c6:81:af:ff:0f:07:39:24:8c:3f: e4:1f:80:53 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt5EQNZqyCRPno0Pzww7a4EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2OWFiMzMwNDY4NjJhYjU4NDA1ZTVlOTI3ZGRmNDEyNzJk ZmM3MTQwHhcNMjYwMTAxMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmIxYzViNTQzNzdiZDkxYzkzZmRmNDVmNmNmZjRlMzYxYzI4YmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUgH5BiWjvtGjCSVnbsWLkJs9CdX MLttuBAZKY6AR3KVTgUGyC7sMGh5SQhIoq75CDpZPGJvCpKGjMXx3U9aczMf+lXT xqTfZenEF1aq8jvJli4V8HhAEv0UG/iE5uAGGKjyGzckTOfqTTiSRPf6CP/k1nkj pab9Lidwb1gmZ1UMORqMt+KuLeXkvoM/3hZn6VHn0QMOpSfF3EA9mIeuDdhBubhp VG3plpgd9zxXNNVLLcy6kU3+K04vZbqzqeRWc4Xaf0sAw0COaD7z5FTBBGmObK1H S/PyJvcUdazSeEbBym2m+TKMrmImsxEkidIvy1csAH2WocYy40kLS1WUkQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFPuxxbVDd72RyT/fRfbP9ONhwov6MB8GA1UdIwQY MBaAFIaaszBGhiq1hAXl6Sfd9BJy38cUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHBxek1FYUdLcldFQmVYcEo5MzBFbkxmeHhRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mOGU4ZTUtNjkyYi00MGE5LWIzMmYt Mzk0YzQ3ZmY0NWFlLzEvMS03SEZ0VU4zdlpISlA5OUY5c18wNDJIQ2lfby5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTcvZjhlOGU1LTY5MmItNDBhOS1iMzJmLTM5NGM0N2ZmNDVh ZS8xL2hwcXpNRWFHS3JXRUJlWHBKOTMwRW5MZnh4US5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA8BggrBgEFBQcBBwEB/wQtMCswGAQCAAEwEgMEAlvADAME AMFvLAMEAsFvODAPBAIAAjAJAwcAIAEGfANsMA0GCSqGSIb3DQEBCwUAA4IBAQAP IpLM6S0KtQ2Pxd1lno4bPF+U8IvAvnvuzqKN+IpzW5Mk/FqSZH26Va1EThU9r1mn U7P9biGs15QuszJebSPmFFMbbJxI8OjizKNluVChPrJn0Oiuj5xbtGhTmxiyLEV7 g4/eDfg+MDB7NYflCnrczyq+cBT+FnMP9TBLc20k6rsUKAcELYuEnKHrwLtmiHT/ 0bfQ4QnDvnhEBZES3PTmmcpXcN8ik/kmTroFR+qMFuY2hGONR2r4IYqGAWu4tWB+ Tozk7o8dDT8cxstQxSMEZyPmxEL+cZIZgJ9rf1E3LSkoB7DeC8h6aDDxURwX/Wau usaBr/8PBzkkjD/kH4BT -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:41 2026 by rpki-client