This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/H6uqUGEMkw_GDxczJD1M696P_zE.roa File: H6uqUGEMkw_GDxczJD1M696P_zE.roa (raw, json) Hash identifier: nWnw8H8sn82+YCkD2O0kI6uMQ5WeKNqhPpnI/ZrVopY= Subject key identifier: 1F:AB:AA:50:61:0C:93:0F:C6:0F:17:33:24:3D:4C:EB:DE:8F:FF:31 Certificate issuer: /CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364 Certificate serial: 019B7F15999AA40D9AD47D0A19B77B5B71D0 Authority key identifier: 87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/H6uqUGEMkw_GDxczJD1M696P_zE.roa Signing time: Fri 02 Jan 2026 14:21:20 +0000 ROA not before: Fri 02 Jan 2026 14:21:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 194.99.52.0/24 maxlen: 24 2a0d:2d80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:99:9a:a4:0d:9a:d4:7d:0a:19:b7:7b:5b:71:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364 Validity Not Before: Jan 2 14:21:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fabaa50610c930fc60f1733243d4cebde8fff31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:16:6c:8e:c2:4c:2b:34:7e:dd:08:ea:50:e3: 2d:f3:d5:6a:e7:1f:79:eb:f2:30:fe:51:c0:b6:65: ca:19:9c:ed:eb:ba:bc:29:ad:2b:9b:b6:c5:54:d8: 50:9f:81:fa:e3:29:97:3e:ac:59:25:57:f0:51:fc: ba:02:ca:39:b8:a1:2f:41:2a:8e:8c:6a:82:47:fa: cb:e2:ab:cf:98:95:81:75:67:53:15:b7:9c:01:5b: 88:c7:d0:68:c7:0d:de:57:65:2d:c6:9a:75:e1:19: e3:6b:9d:ee:f3:b0:3e:2e:4c:ed:fd:c8:84:5d:ca: 15:cb:a1:c9:e2:41:c9:8f:51:0e:7c:87:94:99:dd: 2f:e8:37:c6:2c:aa:ed:96:c9:ee:de:b0:1e:1c:ca: e9:0f:28:90:36:b9:90:32:01:3e:44:59:4a:5c:45: 2e:40:d6:1d:0e:25:d0:07:83:e5:f3:83:9e:0f:a5: 52:cc:b6:29:38:4f:59:94:4d:d9:70:e5:25:78:ba: 5b:12:93:58:da:89:74:05:e0:1b:08:c1:b8:5d:c5: c5:30:e3:d8:4e:36:fb:d6:e8:d1:ef:05:b9:ff:17: f3:bc:6c:2d:a0:15:31:3d:6b:ee:12:67:5e:b4:74: 58:6b:0d:51:dd:39:fb:64:9e:f8:a5:3d:19:f9:09: e8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AB:AA:50:61:0C:93:0F:C6:0F:17:33:24:3D:4C:EB:DE:8F:FF:31 X509v3 Authority Key Identifier: keyid:87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/H6uqUGEMkw_GDxczJD1M696P_zE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.99.52.0/24 IPv6: 2a0d:2d80::/32 Signature Algorithm: sha256WithRSAEncryption ce:73:76:d0:ba:ed:41:fe:3f:cb:1b:9a:66:ea:dc:d3:ae:0f: 2d:1b:e4:a1:94:19:1a:7a:76:2d:f7:e1:a6:b9:1a:5d:b2:52: 12:0a:a5:41:f9:e4:4d:cf:7a:9d:5d:a4:36:30:aa:23:33:52: de:c6:ea:3e:4a:20:61:65:7f:75:c9:83:79:c9:94:d5:28:77: fa:6c:b3:71:88:d8:2a:65:04:fe:05:b2:9e:c9:55:fb:c9:80: 95:31:35:43:d2:de:63:86:47:6a:06:d5:2a:99:cd:41:bb:96: 46:37:84:46:60:b8:ed:cc:fe:64:e5:13:f4:73:ec:3f:53:f0: 25:d6:98:cf:f9:8d:fc:8e:cb:8f:26:55:58:80:c6:db:95:e9: b6:d5:97:11:d1:1d:30:64:cc:6c:fa:80:99:7d:65:6a:bf:f8: d1:9e:79:ac:43:9b:25:6c:b2:e4:d6:3a:94:ab:e0:cb:8f:62: 52:6e:71:50:82:7d:45:18:b5:39:36:99:ae:af:46:63:1b:99: 8b:5f:94:1e:9d:95:24:7d:18:c7:85:dd:92:ee:d8:5a:f1:16: 1c:26:4e:8a:1b:bb:dd:56:dc:39:e9:71:7e:5a:cd:9a:3f:79: 7f:c6:75:94:68:48:be:74:aa:08:39:e7:d6:99:17:47:88:bf: 63:e9:a9:33 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FZmapA2a1H0KGbd7W3HQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NTEwNTRkZmJmZGFkMjJjNDllNmJiYWRhYjNhMThmNDJh MWMzNjQwHhcNMjYwMTAyMTQyMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmFiYWE1MDYxMGM5MzBmYzYwZjE3MzMyNDNkNGNlYmRlOGZmZjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBZsjsJMKzR+3QjqUOMt89Vq5x95 6/Iw/lHAtmXKGZzt67q8Ka0rm7bFVNhQn4H64ymXPqxZJVfwUfy6Aso5uKEvQSqO jGqCR/rL4qvPmJWBdWdTFbecAVuIx9Boxw3eV2Utxpp14Rnja53u87A+Lkzt/ciE XcoVy6HJ4kHJj1EOfIeUmd0v6DfGLKrtlsnu3rAeHMrpDyiQNrmQMgE+RFlKXEUu QNYdDiXQB4Pl84OeD6VSzLYpOE9ZlE3ZcOUleLpbEpNY2ol0BeAbCMG4XcXFMOPY Tjb71ujR7wW5/xfzvGwtoBUxPWvuEmdetHRYaw1R3Tn7ZJ74pT0Z+QnodQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFB+rqlBhDJMPxg8XMyQ9TOvej/8xMB8GA1UdIwQY MBaAFIdRBU37/a0ixJ5rutqzoY9CocNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDFFRlRmdjlyU0xFbm11NjJyT2hqMEtodzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xZGE3ZWMtMWMzNC00NjQ3LTllODMt NzU3OWU4NWExYTQ5LzEvSDZ1cVVHRU1rd19HRHhjekpEMU02OTZQX3pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xZGE3ZWMtMWMzNC00NjQ3LTllODMtNzU3OWU4NWExYTQ5 LzEvaDFFRlRmdjlyU0xFbm11NjJyT2hqMEtodzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwmM0MA0E AgACMAcDBQAqDS2AMA0GCSqGSIb3DQEBCwUAA4IBAQDOc3bQuu1B/j/LG5pm6tzT rg8tG+ShlBkaenYt9+GmuRpdslISCqVB+eRNz3qdXaQ2MKojM1Lexuo+SiBhZX91 yYN5yZTVKHf6bLNxiNgqZQT+BbKeyVX7yYCVMTVD0t5jhkdqBtUqmc1Bu5ZGN4RG YLjtzP5k5RP0c+w/U/Al1pjP+Y38jsuPJlVYgMbblem21ZcR0R0wZMxs+oCZfWVq v/jRnnmsQ5slbLLk1jqUq+DLj2JSbnFQgn1FGLU5Npmur0ZjG5mLX5QenZUkfRjH hd2S7tha8RYcJk6KG7vdVtw56XF+Ws2aP3l/xnWUaEi+dKoIOefWmRdHiL9j6akz -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:37 2026 by rpki-client