This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/h1maASqVvwHRCjWovCTOqltu3Bs.roa File: h1maASqVvwHRCjWovCTOqltu3Bs.roa (raw, json) Hash identifier: MxnEaWZujbI2KvMayxax3u+ehMfet/YZaasyDC4qG4I= Subject key identifier: 87:59:9A:01:2A:95:BF:01:D1:0A:35:A8:BC:24:CE:AA:5B:6E:DC:1B Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D314953A8DF37F17B2BCB9DD6966B Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/h1maASqVvwHRCjWovCTOqltu3Bs.roa Signing time: Fri 02 Jan 2026 06:20:18 +0000 ROA not before: Fri 02 Jan 2026 06:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22168 IP address blocks: 162.249.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:31:49:53:a8:df:37:f1:7b:2b:cb:9d:d6:96:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87599a012a95bf01d10a35a8bc24ceaa5b6edc1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:30:5b:fd:bf:72:ad:2a:60:ef:93:53:a4:ed: 98:0f:3c:3b:0a:65:70:4c:d7:7d:c3:40:fb:74:e5: f4:7b:9e:3b:af:2d:b1:18:02:5d:75:35:a1:a7:00: 88:d0:36:26:a5:51:6e:ec:c8:6f:fb:fc:42:4a:18: bd:3b:a4:af:3b:ee:3e:78:35:d1:3b:42:5c:89:35: c5:03:f8:46:85:b4:b4:dc:22:c2:ce:75:76:46:31: 0e:2c:4d:34:b1:6b:c1:f9:f3:b5:8e:87:4d:8b:f8: b2:32:7f:32:4c:d4:52:04:5f:ab:01:9e:6f:a2:fe: 17:78:2e:20:73:27:1c:98:13:dc:f8:5b:ec:45:35: 7b:79:61:e0:2c:89:1c:49:77:ce:b1:3f:9e:8d:64: 98:81:ec:fb:9c:96:4e:43:ba:b4:e2:41:c0:05:27: be:46:0a:16:e6:bc:12:d6:ca:44:f5:7a:0a:1e:31: 04:12:d3:20:b9:97:2a:8e:0a:03:ac:fb:cf:1c:12: 74:2c:52:22:d9:b9:c9:ca:68:a6:aa:c0:97:3d:64: 7f:2b:e9:14:4e:74:88:59:7c:63:c0:1f:0f:4f:f1: 02:ac:89:88:4e:94:e8:57:45:04:ef:dc:c2:b1:3d: ae:53:53:c3:0d:aa:66:28:a3:3c:35:58:cd:bb:95: 3d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:59:9A:01:2A:95:BF:01:D1:0A:35:A8:BC:24:CE:AA:5B:6E:DC:1B X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/h1maASqVvwHRCjWovCTOqltu3Bs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.249.64.0/21 Signature Algorithm: sha256WithRSAEncryption 86:6d:0f:da:dc:de:56:a5:12:0d:72:4f:b6:89:82:a0:cc:45: 03:96:c5:35:df:57:f0:bf:20:05:eb:6a:8f:06:eb:a2:77:5f: 26:52:a3:e5:44:0c:56:8e:e1:7b:82:32:8b:cf:32:cc:e4:4a: 04:ea:be:5f:c4:39:c9:ad:56:9e:28:59:0f:f3:a8:eb:f3:d2: 89:10:eb:a1:15:d3:99:6b:21:6c:39:1b:db:cf:e0:b0:22:64: 2a:11:12:71:68:50:9d:8d:16:b5:c4:69:7f:a5:8a:9a:01:e6: e4:05:4e:5c:00:a2:d7:02:d9:b0:2f:da:32:82:b3:9c:2b:75: 46:91:a4:9a:ff:52:17:72:b8:51:61:fe:16:df:b2:db:72:13: 1c:bb:4b:44:d1:cb:0a:12:af:3e:16:a3:a5:93:e4:15:bf:ce: dd:8f:89:5b:74:44:c1:f8:fe:9e:ed:18:6d:f1:43:90:bd:e8: e7:6b:11:b2:cc:de:fe:3b:38:42:98:92:a9:e4:13:10:bb:b6: 49:25:08:98:88:45:30:b7:f7:1f:83:bf:59:13:74:8f:44:1c: 85:00:3f:72:bc:f4:37:19:72:8c:2e:61:04:c0:89:50:70:90: 6e:62:35:1d:f4:45:85:50:fc:ec:97:be:e8:f8:a4:02:66:38: 9f:ab:66:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XTFJU6jfN/F7K8ud1pZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzU5OWEwMTJhOTViZjAxZDEwYTM1YThiYzI0Y2VhYTViNmVkYzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzBb/b9yrSpg75NTpO2YDzw7CmVw TNd9w0D7dOX0e547ry2xGAJddTWhpwCI0DYmpVFu7Mhv+/xCShi9O6SvO+4+eDXR O0JciTXFA/hGhbS03CLCznV2RjEOLE00sWvB+fO1jodNi/iyMn8yTNRSBF+rAZ5v ov4XeC4gcyccmBPc+FvsRTV7eWHgLIkcSXfOsT+ejWSYgez7nJZOQ7q04kHABSe+ RgoW5rwS1spE9XoKHjEEEtMguZcqjgoDrPvPHBJ0LFIi2bnJymimqsCXPWR/K+kU TnSIWXxjwB8PT/ECrImITpToV0UE79zCsT2uU1PDDapmKKM8NVjNu5U9RwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIdZmgEqlb8B0Qo1qLwkzqpbbtwbMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvaDFtYUFTcVZ2d0hSQ2pXb3ZDVE9xbHR1M0JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovlAMA0G CSqGSIb3DQEBCwUAA4IBAQCGbQ/a3N5WpRINck+2iYKgzEUDlsU131fwvyAF62qP Buuid18mUqPlRAxWjuF7gjKLzzLM5EoE6r5fxDnJrVaeKFkP86jr89KJEOuhFdOZ ayFsORvbz+CwImQqERJxaFCdjRa1xGl/pYqaAebkBU5cAKLXAtmwL9oygrOcK3VG kaSa/1IXcrhRYf4W37LbchMcu0tE0csKEq8+FqOlk+QVv87dj4lbdETB+P6e7Rht 8UOQvejnaxGyzN7+OzhCmJKp5BMQu7ZJJQiYiEUwt/cfg79ZE3SPRByFAD9yvPQ3 GXKMLmEEwIlQcJBuYjUd9EWFUPzsl77o+KQCZjifq2aD -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:27 2026 by rpki-client