This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/rH2xQm1yZYhZ2-CQbPVxR42hkEY.roa File: rH2xQm1yZYhZ2-CQbPVxR42hkEY.roa (raw, json) Hash identifier: tRmw4GuuOtR3fTCdBAPG+ooWgyE/tLfoP6z+CynsJ88= Subject key identifier: AC:7D:B1:42:6D:72:65:88:59:DB:E0:90:6C:F5:71:47:8D:A1:90:46 Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62 Certificate serial: 019B797E987EC7B6EE427D9D6B38E8A5EB19 Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/rH2xQm1yZYhZ2-CQbPVxR42hkEY.roa Signing time: Thu 01 Jan 2026 12:18:18 +0000 ROA not before: Thu 01 Jan 2026 12:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142146 IP address blocks: 185.157.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:98:7e:c7:b6:ee:42:7d:9d:6b:38:e8:a5:eb:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62 Validity Not Before: Jan 1 12:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac7db1426d72658859dbe0906cf571478da19046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ff:82:5e:5b:84:38:22:fc:c7:f6:f9:06:a2: 1c:a8:f3:1e:76:92:e1:1e:24:d4:85:36:69:f0:f6: 54:2e:34:94:a2:bf:cd:85:2c:3f:f7:1c:12:1b:fa: 1d:d1:6e:3d:b0:62:36:9a:c5:37:04:bf:27:56:46: 38:dd:6d:ff:92:84:66:75:37:85:4f:40:88:d3:86: 4e:7e:da:9d:7f:03:8d:c5:aa:0b:85:a8:bc:89:c4: e0:3c:f6:e0:89:52:69:fb:d0:ad:af:5a:2b:f8:7d: 95:c1:27:cb:eb:49:92:d5:0b:60:c2:3d:b4:f3:d0: ff:b2:17:b5:10:41:83:7c:a2:d9:8a:1e:12:a5:fb: b1:9a:86:a1:06:80:db:09:7a:2e:cf:ef:67:5d:76: 2b:26:4a:0e:47:a2:89:90:43:a6:da:16:5b:fc:76: 4c:4d:4e:4e:dd:de:31:a2:bd:02:c2:31:7b:21:95: e7:d4:47:79:9e:6c:29:40:5e:f2:03:37:ac:85:98: f2:4d:e3:08:63:ef:83:ea:45:e0:c4:e3:b9:c3:b6: c3:54:c4:81:ed:9d:69:c9:b0:07:3f:8b:36:6a:46: cc:6e:87:80:10:d8:2a:d7:f5:80:4f:52:56:40:38: a3:82:86:01:4b:f4:85:6d:35:aa:66:4d:99:29:51: d5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7D:B1:42:6D:72:65:88:59:DB:E0:90:6C:F5:71:47:8D:A1:90:46 X509v3 Authority Key Identifier: keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/rH2xQm1yZYhZ2-CQbPVxR42hkEY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.50.0/24 Signature Algorithm: sha256WithRSAEncryption 08:c6:5e:8e:a3:50:7e:de:92:e6:da:0b:17:40:cf:80:7d:1c: ac:31:53:d7:61:57:54:0a:14:4c:ba:6c:98:6c:68:ab:68:b6: 1c:9e:94:99:69:5a:89:c7:49:32:4e:49:5c:01:88:1e:b0:66: 13:57:03:40:37:f1:cd:aa:b8:30:53:d8:29:5f:78:e5:8f:d9: b9:04:bc:b8:b2:9b:80:61:4d:5e:14:83:ac:23:7f:2c:3c:cb: 89:84:02:a8:10:6e:8e:4d:55:ad:6f:bf:03:b1:f1:c2:9a:38: e0:50:7d:a2:20:a6:33:5a:aa:bc:d2:11:5c:fd:9c:21:9c:ce: 6f:db:a0:28:17:8f:9e:fc:0a:d9:27:75:da:c6:7c:14:e6:87: 26:1b:f1:a0:81:b4:8f:da:6a:14:cd:10:42:1a:80:c0:f3:fd: 7b:da:81:67:da:c6:45:c8:77:ba:9d:45:fb:6f:d1:3f:07:dd: 85:50:48:c1:87:b2:c5:f2:4e:d0:35:65:76:2c:b6:ca:c0:ce: 9c:59:cf:da:f0:69:8a:d9:32:dc:a7:e5:a3:de:08:21:35:14: 38:b6:aa:07:05:a7:d5:4d:03:c7:b2:0d:21:f0:66:08:e9:0b: 37:3a:f8:ca:9c:04:56:bc:83:b5:b1:a2:23:26:91:64:13:15: 94:8e:f0:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fph+x7buQn2dazjopesZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MWEyYTJkYjRkNzQxOGU5YmY0ZjkzYzhjMDQ2YTAxNjE2 NjNjNjIwHhcNMjYwMTAxMTIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzdkYjE0MjZkNzI2NTg4NTlkYmUwOTA2Y2Y1NzE0NzhkYTE5MDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP+CXluEOCL8x/b5BqIcqPMedpLh HiTUhTZp8PZULjSUor/NhSw/9xwSG/od0W49sGI2msU3BL8nVkY43W3/koRmdTeF T0CI04ZOftqdfwONxaoLhai8icTgPPbgiVJp+9Ctr1or+H2VwSfL60mS1Qtgwj20 89D/she1EEGDfKLZih4SpfuxmoahBoDbCXouz+9nXXYrJkoOR6KJkEOm2hZb/HZM TU5O3d4xor0CwjF7IZXn1Ed5nmwpQF7yAzeshZjyTeMIY++D6kXgxOO5w7bDVMSB 7Z1pybAHP4s2akbMboeAENgq1/WAT1JWQDijgoYBS/SFbTWqZk2ZKVHVMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKx9sUJtcmWIWdvgkGz1cUeNoZBGMB8GA1UdIwQY MBaAFKcaKi2010GOm/T5PIwEagFhZjxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2Ut ZjFmMGI5NTk4ZjMyLzEvckgyeFFtMXlaWWhaMi1DUWJQVnhSNDJoa0VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2UtZjFmMGI5NTk4ZjMy LzEvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ0yMA0G CSqGSIb3DQEBCwUAA4IBAQAIxl6Oo1B+3pLm2gsXQM+AfRysMVPXYVdUChRMumyY bGiraLYcnpSZaVqJx0kyTklcAYgesGYTVwNAN/HNqrgwU9gpX3jlj9m5BLy4spuA YU1eFIOsI38sPMuJhAKoEG6OTVWtb78DsfHCmjjgUH2iIKYzWqq80hFc/ZwhnM5v 26AoF4+e/ArZJ3XaxnwU5ocmG/GggbSP2moUzRBCGoDA8/172oFn2sZFyHe6nUX7 b9E/B92FUEjBh7LF8k7QNWV2LLbKwM6cWc/a8GmK2TLcp+Wj3gghNRQ4tqoHBafV TQPHsg0h8GYI6Qs3OvjKnARWvIO1saIjJpFkExWUjvBf -----END CERTIFICATE-----Generated at Wed Jan 21 21:32:02 2026 by rpki-client