This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/HArTPZiNwcCJbDe9WQcpfZn0uYg.roa File: HArTPZiNwcCJbDe9WQcpfZn0uYg.roa (raw, json) Hash identifier: NwKyuiVaGubfK8gI4r3lHLzGkDH+yjycNzoAMLHdWQo= Subject key identifier: 1C:0A:D3:3D:98:8D:C1:C0:89:6C:37:BD:59:07:29:7D:99:F4:B9:88 Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71 Certificate serial: 019B7E37849B55E06C4B8DBE9CDD3926F9A1 Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/HArTPZiNwcCJbDe9WQcpfZn0uYg.roa Signing time: Fri 02 Jan 2026 10:18:46 +0000 ROA not before: Fri 02 Jan 2026 10:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35819 IP address blocks: 89.40.26.0/24 maxlen: 24 149.126.14.0/24 maxlen: 24 149.126.15.0/24 maxlen: 24 185.133.180.0/24 maxlen: 24 185.133.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 13:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:84:9b:55:e0:6c:4b:8d:be:9c:dd:39:26:f9:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71 Validity Not Before: Jan 2 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c0ad33d988dc1c0896c37bd5907297d99f4b988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fb:10:5f:f3:fb:84:fc:81:a9:5d:88:0f:57: fe:0f:cb:7b:38:98:44:74:39:5d:e0:74:b9:3c:4a: 9b:16:89:e1:8c:3e:bc:e2:7e:7c:ca:b2:9d:e8:f8: fc:b1:18:2a:72:f0:1e:4f:7c:1f:b6:d7:c4:8f:12: 49:5d:da:0f:97:44:38:f9:f8:54:ea:ba:af:b9:58: 74:bb:d3:7e:5e:8f:ea:ab:0c:e9:61:f9:a4:3b:a4: 6f:95:29:83:3a:14:74:7a:95:f6:96:c7:b4:9e:ad: 4c:02:70:89:a0:50:c3:12:2b:b0:ad:74:f2:85:89: c8:be:3e:c8:2c:bd:ad:06:84:52:6c:74:d6:85:aa: 42:90:5f:7b:f4:83:42:25:3f:b8:b4:23:ad:df:06: ab:4d:21:f4:1f:42:9d:7b:54:86:6b:d1:d7:5f:cb: ed:d7:52:bd:21:19:9c:9a:3c:fd:aa:88:87:42:01: ee:1a:2c:68:08:ea:ab:78:55:27:7e:f3:31:25:60: 2b:b1:a7:29:32:9c:09:fa:14:ae:50:e5:c8:77:c0: 97:82:e9:a8:3b:9b:ee:0b:53:13:b9:c0:09:12:a0: 72:a3:ba:fe:40:97:04:30:29:71:cd:09:65:5f:53: af:54:7a:d0:3d:7f:39:6a:0a:54:44:4f:33:06:e1: b2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0A:D3:3D:98:8D:C1:C0:89:6C:37:BD:59:07:29:7D:99:F4:B9:88 X509v3 Authority Key Identifier: keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/HArTPZiNwcCJbDe9WQcpfZn0uYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.40.26.0/24 149.126.14.0/23 185.133.180.0/23 Signature Algorithm: sha256WithRSAEncryption b6:dc:45:17:95:a3:6a:94:5c:ba:c0:eb:58:9c:54:1c:67:95: d7:7f:2a:74:5d:10:de:21:00:35:e4:be:3f:20:fd:ec:4d:7e: 43:52:d7:07:34:8c:f2:04:7d:38:b2:09:32:3b:00:5e:9a:d9: c8:b3:ba:3b:f9:43:aa:53:d6:93:76:bd:97:94:92:1e:c7:52: 7c:73:9f:45:c9:0e:f2:79:9f:90:32:a6:dc:42:d1:ae:32:18: dd:b9:74:12:60:bd:55:88:b3:ba:06:8b:05:25:f2:e4:f2:66: e7:47:d1:4b:3d:c2:d0:85:b6:1f:fd:7a:d8:fb:43:31:22:89: b6:8b:9b:42:b7:b4:80:09:5d:d0:8c:21:77:ba:07:58:2d:12: 12:0b:89:8f:cc:d7:5d:58:ba:b1:8a:d7:89:9f:df:23:d5:96: 11:63:0a:2d:51:cf:0b:3b:ea:90:0c:f4:93:19:b7:30:e7:a9: 7f:0a:75:4f:98:43:b1:de:3f:bd:a2:6e:75:c8:b8:5d:04:09: 36:e5:de:ce:70:8c:eb:56:19:18:b3:ba:b8:ac:0b:82:a2:dd: c3:ee:41:3c:28:4b:96:6d:c3:03:cb:eb:e5:84:58:97:02:73: 8e:17:15:f4:49:5d:c8:57:02:5d:08:41:c4:f6:dc:90:c9:0e: 23:a4:79:0d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+N4SbVeBsS42+nN05JvmhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmODIyNDM3ZjQ5ZWQ1Mzg4NjY4OTAyMmFmZGRkYTU5Zjc5 ZjhhNzEwHhcNMjYwMTAyMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzBhZDMzZDk4OGRjMWMwODk2YzM3YmQ1OTA3Mjk3ZDk5ZjRiOTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/sQX/P7hPyBqV2ID1f+D8t7OJhE dDld4HS5PEqbFonhjD684n58yrKd6Pj8sRgqcvAeT3wfttfEjxJJXdoPl0Q4+fhU 6rqvuVh0u9N+Xo/qqwzpYfmkO6RvlSmDOhR0epX2lse0nq1MAnCJoFDDEiuwrXTy hYnIvj7ILL2tBoRSbHTWhapCkF979INCJT+4tCOt3warTSH0H0Kde1SGa9HXX8vt 11K9IRmcmjz9qoiHQgHuGixoCOqreFUnfvMxJWArsacpMpwJ+hSuUOXId8CXgumo O5vuC1MTucAJEqByo7r+QJcEMClxzQllX1OvVHrQPX85agpURE8zBuGyMQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBwK0z2YjcHAiWw3vVkHKX2Z9LmIMB8GA1UdIwQY MBaAFJ+CJDf0ntU4hmiQIq/d2ln3n4pxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWIt MTRlYzQxZDRjMGE2LzEvSEFyVFBaaU53Y0NKYkRlOVdRY3BmWm4wdVlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWItMTRlYzQxZDRjMGE2 LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWSgaAwQB lX4OAwQBuYW0MA0GCSqGSIb3DQEBCwUAA4IBAQC23EUXlaNqlFy6wOtYnFQcZ5XX fyp0XRDeIQA15L4/IP3sTX5DUtcHNIzyBH04sgkyOwBemtnIs7o7+UOqU9aTdr2X lJIex1J8c59FyQ7yeZ+QMqbcQtGuMhjduXQSYL1ViLO6BosFJfLk8mbnR9FLPcLQ hbYf/XrY+0MxIom2i5tCt7SACV3QjCF3ugdYLRISC4mPzNddWLqxiteJn98j1ZYR YwotUc8LO+qQDPSTGbcw56l/CnVPmEOx3j+9om51yLhdBAk25d7OcIzrVhkYs7q4 rAuCot3D7kE8KEuWbcMDy+vlhFiXAnOOFxX0SV3IVwJdCEHE9tyQyQ4jpHkN -----END CERTIFICATE-----Generated at Fri Jan 30 18:25:30 2026 by rpki-client