This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/h-DdB5q6o6vGcwUvYQjItuQoHSo.roa File: h-DdB5q6o6vGcwUvYQjItuQoHSo.roa (raw, json) Hash identifier: R0KxdO/E8HjCSvDapDPgguWBk+j+4g//kGxl/YMu2PE= Subject key identifier: 87:E0:DD:07:9A:BA:A3:AB:C6:73:05:2F:61:08:C8:B6:E4:28:1D:2A Certificate issuer: /CN=644ca1f90518d4253f325947d7f32db78721647c Certificate serial: 019B7F1535A1E1C898D2A63228AC9145F5DB Authority key identifier: 64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/h-DdB5q6o6vGcwUvYQjItuQoHSo.roa Signing time: Fri 02 Jan 2026 14:20:55 +0000 ROA not before: Fri 02 Jan 2026 14:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47292 IP address blocks: 185.245.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:35:a1:e1:c8:98:d2:a6:32:28:ac:91:45:f5:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644ca1f90518d4253f325947d7f32db78721647c Validity Not Before: Jan 2 14:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87e0dd079abaa3abc673052f6108c8b6e4281d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0f:a1:14:ac:f4:46:23:7a:a0:d3:87:8c:74: 2b:98:1a:cd:d8:d7:a6:bc:8f:65:0d:ab:fb:57:10: 90:b8:59:6d:f6:4b:c8:d4:b2:db:76:8f:d7:81:0d: 5a:0b:97:28:24:4c:ec:07:82:00:07:47:5f:32:f1: a7:e9:c4:89:e6:e1:ed:17:fa:0c:8c:a3:47:45:a2: e7:5c:88:f5:b6:d9:fe:8c:fc:a1:c8:dc:9f:e4:ec: 3d:62:0f:4d:d7:fd:47:3a:9f:9c:2d:77:fc:29:8a: 86:38:07:6c:9a:0f:4d:13:32:53:23:5a:9d:ab:e0: de:30:5c:44:f7:9d:f6:7a:d4:94:71:e8:dc:4c:da: 58:97:0b:ae:62:de:35:a5:f6:dd:13:d6:44:40:84: 75:35:e7:f5:52:6a:d4:34:fa:59:cc:f1:b1:d3:8d: f7:39:62:a0:22:55:e7:bd:c1:ee:3b:8e:13:0e:75: 3b:f2:1d:d0:e2:bf:fa:48:40:6f:3a:a4:25:b4:01: 8a:16:99:90:1c:3c:83:aa:f6:3f:23:2b:ce:2c:c0: 1f:10:38:a3:1c:9d:a5:e7:bd:34:23:b8:2e:a6:27: 9c:cd:33:0d:32:a9:c3:b6:18:fa:b0:16:5e:9a:78: f6:9a:34:ce:b3:4c:a6:cd:96:41:18:f1:7b:2a:4a: 60:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E0:DD:07:9A:BA:A3:AB:C6:73:05:2F:61:08:C8:B6:E4:28:1D:2A X509v3 Authority Key Identifier: keyid:64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/h-DdB5q6o6vGcwUvYQjItuQoHSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.48.0/22 Signature Algorithm: sha256WithRSAEncryption 08:40:e8:c0:12:09:c2:7e:7b:91:81:87:46:83:89:b9:be:38: 07:ce:81:7f:c9:29:7f:ce:ee:3b:05:6c:c6:5c:fe:2d:f2:c1: 14:91:ed:dc:e0:9e:71:e5:02:46:cd:b7:db:b0:70:9f:43:cc: 50:cb:d8:ad:7d:cb:ca:cf:d6:cd:00:09:ea:d9:23:e8:69:70: 24:24:b7:2d:ba:34:50:88:83:8a:58:48:a1:b9:60:c3:64:17: bd:16:5e:f4:36:d0:6f:f6:c9:5a:c6:95:a8:b0:82:f3:fd:5d: 67:1b:35:eb:40:cc:48:10:f6:e0:e2:b3:8e:cc:86:33:06:f9: 05:4e:65:aa:1b:f1:6f:3b:c3:47:07:1c:02:f1:ff:19:4f:ab: 11:05:94:f5:96:c1:b7:77:60:2d:b1:cd:46:3d:ce:af:a8:cc: 92:e6:5d:6e:c9:40:02:59:cd:8b:f4:d5:d2:c6:ec:be:01:9b: 24:fb:44:fe:60:80:7a:f4:a2:c1:3d:19:d4:1c:b8:ca:e4:2b: ed:42:ea:11:d8:46:c9:a4:f9:63:bd:e4:93:fc:e9:22:6f:53: 44:88:1f:1a:4f:83:ee:69:ba:ac:b5:df:ed:81:3f:22:0b:10: d6:27:ec:46:2a:2f:39:c0:b4:9d:db:ce:ad:6d:90:66:54:f6: 95:1e:d5:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FTWh4ciY0qYyKKyRRfXbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NGNhMWY5MDUxOGQ0MjUzZjMyNTk0N2Q3ZjMyZGI3ODcy MTY0N2MwHhcNMjYwMTAyMTQyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2UwZGQwNzlhYmFhM2FiYzY3MzA1MmY2MTA4YzhiNmU0MjgxZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw+hFKz0RiN6oNOHjHQrmBrN2Nem vI9lDav7VxCQuFlt9kvI1LLbdo/XgQ1aC5coJEzsB4IAB0dfMvGn6cSJ5uHtF/oM jKNHRaLnXIj1ttn+jPyhyNyf5Ow9Yg9N1/1HOp+cLXf8KYqGOAdsmg9NEzJTI1qd q+DeMFxE9532etSUcejcTNpYlwuuYt41pfbdE9ZEQIR1Nef1UmrUNPpZzPGx0433 OWKgIlXnvcHuO44TDnU78h3Q4r/6SEBvOqQltAGKFpmQHDyDqvY/IyvOLMAfEDij HJ2l5700I7gupieczTMNMqnDthj6sBZemnj2mjTOs0ymzZZBGPF7KkpgjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIfg3QeauqOrxnMFL2EIyLbkKB0qMB8GA1UdIwQY MBaAFGRMofkFGNQlPzJZR9fzLbeHIWR8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkV5aC1RVVkxQ1VfTWxsSDFfTXR0NGNoWkh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE1NjQtMzQ2Ni00NzMyLTgzYmQt YjkwZDk3NGU1ZmI1LzEvaC1EZEI1cTZvNnZHY3dVdllRakl0dVFvSFNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83YTE1NjQtMzQ2Ni00NzMyLTgzYmQtYjkwZDk3NGU1ZmI1 LzEvWkV5aC1RVVkxQ1VfTWxsSDFfTXR0NGNoWkh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufUwMA0G CSqGSIb3DQEBCwUAA4IBAQAIQOjAEgnCfnuRgYdGg4m5vjgHzoF/ySl/zu47BWzG XP4t8sEUke3c4J5x5QJGzbfbsHCfQ8xQy9itfcvKz9bNAAnq2SPoaXAkJLctujRQ iIOKWEihuWDDZBe9Fl70NtBv9slaxpWosILz/V1nGzXrQMxIEPbg4rOOzIYzBvkF TmWqG/FvO8NHBxwC8f8ZT6sRBZT1lsG3d2Atsc1GPc6vqMyS5l1uyUACWc2L9NXS xuy+AZsk+0T+YIB69KLBPRnUHLjK5CvtQuoR2EbJpPljveST/Okib1NEiB8aT4Pu abqstd/tgT8iCxDWJ+xGKi85wLSd286tbZBmVPaVHtVw -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:31 2026 by rpki-client