This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/h365B8J9B4DFbAHHt2ZmHfhJ99c.roa File: h365B8J9B4DFbAHHt2ZmHfhJ99c.roa (raw, json) Hash identifier: VWLHq5YqZtdAEyTbF2keQuk4CUJ4I0RVEyzvXX4IBXI= Subject key identifier: 87:7E:B9:07:C2:7D:07:80:C5:6C:01:C7:B7:66:66:1D:F8:49:F7:D7 Certificate issuer: /CN=447c52d81edc1249644ad794be028af90e024a16 Certificate serial: 019B78A25CDBBBC2B20CCACD8AF75577FBC4 Authority key identifier: 44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/h365B8J9B4DFbAHHt2ZmHfhJ99c.roa Signing time: Thu 01 Jan 2026 08:17:45 +0000 ROA not before: Thu 01 Jan 2026 08:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57684 IP address blocks: 185.205.212.0/22 maxlen: 24 194.110.156.0/22 maxlen: 24 2001:67c:2674::/48 maxlen: 48 2a0b:a40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:5c:db:bb:c2:b2:0c:ca:cd:8a:f7:55:77:fb:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=447c52d81edc1249644ad794be028af90e024a16 Validity Not Before: Jan 1 08:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=877eb907c27d0780c56c01c7b766661df849f7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b9:07:7c:b2:75:03:29:b4:f4:9d:30:69:aa: c4:10:9d:4c:26:9f:7e:64:8c:af:d8:68:9e:82:b8: 13:29:a9:64:a1:8e:1a:f9:1e:9c:19:23:f3:17:e0: 32:ad:23:d4:6d:c6:09:d6:27:a5:88:62:b2:c2:60: f7:35:9f:c1:24:e2:b0:ae:97:46:70:c0:da:40:dd: e1:0a:2a:01:67:12:ba:6e:51:f9:00:cb:6a:e9:80: 35:4e:cc:29:95:e6:20:8a:05:aa:27:12:54:4f:2a: 65:8e:27:da:d3:61:e1:59:3d:1b:80:5b:19:c4:b5: 51:d8:11:03:5d:d7:f3:05:77:51:ee:c1:2c:09:3f: 7f:f8:3c:ce:b0:23:c6:91:c2:19:aa:9d:46:21:3b: 7f:0f:32:64:b1:ff:0c:4b:3e:0b:1f:f1:2e:ba:02: f7:6b:67:d2:be:e5:25:ba:0b:cf:42:b0:e2:12:75: 47:39:27:bc:c8:ea:ad:23:ef:75:1c:33:c1:12:9b: f3:b8:49:ab:ad:a7:b6:97:8e:c6:16:a3:30:5f:af: 04:46:91:6f:bd:4f:e1:ba:0f:ed:e7:79:8f:32:8d: 38:1f:65:33:50:d7:6b:8b:42:1f:9c:1e:4d:0c:5c: 3c:95:f5:93:60:56:d9:e6:00:35:a7:b3:a9:71:89: b1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7E:B9:07:C2:7D:07:80:C5:6C:01:C7:B7:66:66:1D:F8:49:F7:D7 X509v3 Authority Key Identifier: keyid:44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/h365B8J9B4DFbAHHt2ZmHfhJ99c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.212.0/22 194.110.156.0/22 IPv6: 2001:67c:2674::/48 2a0b:a40::/29 Signature Algorithm: sha256WithRSAEncryption 43:e9:be:eb:71:60:78:a2:59:ec:a5:85:e5:4d:af:ca:3e:15: 57:2b:93:5a:77:2c:29:30:ae:fd:9c:b7:5c:22:e4:3a:bc:13: 3a:2e:ec:a7:51:ea:c1:74:90:16:45:62:a6:ba:06:c3:ab:47: 58:90:1d:ce:d5:86:10:70:3f:78:1f:70:6c:21:f7:8b:93:83: d2:7f:42:7a:c5:c7:78:fd:2b:f4:82:cc:19:00:9f:4a:f8:25: a6:17:d9:ef:24:ef:5e:37:b7:08:74:05:29:e1:5d:5d:d5:f9: 36:7d:21:f2:5e:1b:2f:f2:dc:21:ac:16:95:7e:5d:de:92:ac: 44:e3:e1:b9:e2:62:b5:90:be:cb:d8:b5:5a:7d:11:0f:a4:e9: 59:f4:4d:4f:2f:eb:39:6f:eb:90:33:c2:c6:d4:37:e5:c6:a9: 17:6a:cf:cd:4e:9b:04:de:71:65:7a:cb:12:33:ff:0f:ef:4f: 85:91:c1:90:bf:17:c1:a8:dd:a7:61:01:26:9b:62:d3:f5:d9: 0d:74:2d:24:38:69:1b:fd:7e:7c:db:73:bc:f7:02:0d:0d:5d: 5c:72:43:4a:0d:22:c7:02:d8:8d:ca:32:2a:21:98:e2:16:ee: 12:1a:25:e6:c3:c5:f0:5a:73:0b:b4:19:7c:8f:83:47:56:4f: 2b:95:7d:34 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt4olzbu8KyDMrNivdVd/vEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0N2M1MmQ4MWVkYzEyNDk2NDRhZDc5NGJlMDI4YWY5MGUw MjRhMTYwHhcNMjYwMTAxMDgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzdlYjkwN2MyN2QwNzgwYzU2YzAxYzdiNzY2NjYxZGY4NDlmN2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrkHfLJ1Aym09J0waarEEJ1MJp9+ ZIyv2GiegrgTKalkoY4a+R6cGSPzF+AyrSPUbcYJ1ieliGKywmD3NZ/BJOKwrpdG cMDaQN3hCioBZxK6blH5AMtq6YA1TswpleYgigWqJxJUTypljifa02HhWT0bgFsZ xLVR2BEDXdfzBXdR7sEsCT9/+DzOsCPGkcIZqp1GITt/DzJksf8MSz4LH/EuugL3 a2fSvuUlugvPQrDiEnVHOSe8yOqtI+91HDPBEpvzuEmrrae2l47GFqMwX68ERpFv vU/hug/t53mPMo04H2UzUNdri0IfnB5NDFw8lfWTYFbZ5gA1p7OpcYmxRQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFId+uQfCfQeAxWwBx7dmZh34SffXMB8GA1UdIwQY MBaAFER8Utge3BJJZErXlL4CivkOAkoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkh4UzJCN2NFa2xrU3RlVXZnS0stUTRDU2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83NjFiMTctNmNiNS00N2ZkLThjNGYt ZWZhNjc4OWZkOTcyLzEvaDM2NUI4SjlCNERGYkFISHQyWm1IZmhKOTljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC83NjFiMTctNmNiNS00N2ZkLThjNGYtZWZhNjc4OWZkOTcy LzEvUkh4UzJCN2NFa2xrU3RlVXZnS0stUTRDU2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCuc3UAwQC wm6cMBYEAgACMBADBwAgAQZ8JnQDBQMqCwpAMA0GCSqGSIb3DQEBCwUAA4IBAQBD 6b7rcWB4olnspYXlTa/KPhVXK5NadywpMK79nLdcIuQ6vBM6LuynUerBdJAWRWKm ugbDq0dYkB3O1YYQcD94H3BsIfeLk4PSf0J6xcd4/Sv0gswZAJ9K+CWmF9nvJO9e N7cIdAUp4V1d1fk2fSHyXhsv8twhrBaVfl3ekqxE4+G54mK1kL7L2LVafREPpOlZ 9E1PL+s5b+uQM8LG1DflxqkXas/NTpsE3nFlessSM/8P70+FkcGQvxfBqN2nYQEm m2LT9dkNdC0kOGkb/X5823O89wINDV1cckNKDSLHAtiNyjIqIZjiFu4SGiXmw8Xw WnMLtBl8j4NHVk8rlX00 -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:26 2026 by rpki-client