This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/h9KbqLk4l9OdFUryCLxx3sI2isA.roa File: h9KbqLk4l9OdFUryCLxx3sI2isA.roa (raw, json) Hash identifier: fZEOu/cTrhQZAFPdCAE4MFKCzUOwnwenGIyGoQIgw98= Subject key identifier: 87:D2:9B:A8:B9:38:97:D3:9D:15:4A:F2:08:BC:71:DE:C2:36:8A:C0 Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24 Certificate serial: 019B7E3758D05BE17D45C78D6BDE631FE36C Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/h9KbqLk4l9OdFUryCLxx3sI2isA.roa Signing time: Fri 02 Jan 2026 10:18:35 +0000 ROA not before: Fri 02 Jan 2026 10:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 178.236.32.0/24 maxlen: 24 178.236.35.0/24 maxlen: 24 185.49.104.0/24 maxlen: 24 185.49.105.0/24 maxlen: 24 185.118.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:58:d0:5b:e1:7d:45:c7:8d:6b:de:63:1f:e3:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24 Validity Not Before: Jan 2 10:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87d29ba8b93897d39d154af208bc71dec2368ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2a:7a:08:4d:45:b7:b8:ed:fd:97:63:07:d5: 09:63:25:bf:f4:b4:b7:07:fd:ff:0e:58:36:a1:7a: ac:f6:6a:c8:27:49:9b:bc:cf:85:8b:08:f9:a5:5f: 91:bd:d5:c3:c4:0d:5d:15:4a:5a:03:e2:a2:2f:b1: 58:fe:81:33:59:43:a2:46:63:b8:a2:bc:f7:5f:77: 74:d4:96:a9:2c:d3:91:be:8a:f5:03:d0:d3:a9:c9: 49:2a:8e:af:a1:d8:8d:0a:50:d6:f7:1c:37:2b:9b: 45:2f:16:2f:01:bd:71:76:ce:9c:ee:2d:c7:c3:87: 6e:88:fc:61:15:76:11:04:38:26:fa:a7:a2:ab:2b: c3:8f:82:24:51:29:58:c5:73:d1:1c:33:e4:c1:f7: c3:08:66:e6:11:25:1c:cb:6d:18:03:c3:8b:93:42: 59:9e:ce:6c:04:74:ce:51:18:57:10:6b:4b:b4:02: a0:17:e2:81:f7:ba:29:d2:31:e2:38:b4:31:93:27: c7:b0:dd:4c:25:dd:d7:31:f5:ea:55:2a:8f:2b:b8: bc:b4:98:22:d9:2c:1b:fa:69:93:91:8d:62:f4:92: c1:61:26:d7:be:5b:b0:03:32:29:a4:2d:40:ed:b5: e3:3c:c0:39:5b:0a:92:d2:cb:96:82:12:3f:47:d4: f0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D2:9B:A8:B9:38:97:D3:9D:15:4A:F2:08:BC:71:DE:C2:36:8A:C0 X509v3 Authority Key Identifier: keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/h9KbqLk4l9OdFUryCLxx3sI2isA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.236.32.0/24 178.236.35.0/24 185.49.104.0/23 185.118.12.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:59:6c:ba:44:04:cf:bd:48:2a:37:e8:8b:83:74:db:97:ad: 2a:7d:e0:a4:5e:46:75:56:70:2d:32:4d:54:46:3b:e3:cb:1e: ed:fd:f9:96:c6:b9:e8:5d:27:74:57:74:97:59:24:61:82:15: 6e:51:0a:c0:c5:b5:cf:c2:31:c6:db:20:e9:b0:0b:1d:ad:2f: 8d:89:f9:38:99:df:97:d2:27:93:7e:75:33:a9:13:8e:ff:de: 7b:7e:83:82:a2:c7:68:1b:28:3a:af:f3:14:d6:86:03:74:28: c7:94:0b:63:34:4d:74:c1:ac:10:e8:5a:ce:92:5e:84:4d:ab: 5f:e0:82:02:1c:d9:26:1b:c6:28:dd:bd:70:ea:02:5a:07:19: b3:95:e1:b6:d7:de:04:09:df:e9:83:b1:72:60:57:87:10:b8: 5a:e1:6d:3e:f7:38:b3:e0:f8:56:a3:72:8f:a7:a1:fe:35:e7: f7:98:4b:b7:7b:9c:1e:11:f9:e3:01:55:09:fc:06:98:5a:e1: 54:ac:f1:96:25:a6:cb:2a:f2:55:3f:0c:35:a2:3e:8d:b2:60: ef:b4:de:f6:90:b9:85:f1:b0:3a:91:b0:69:83:3c:aa:d9:65: ce:3a:ec:80:ee:33:60:46:21:e6:66:81:d3:b0:10:f4:d8:ff: 50:e2:c9:5d -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+N1jQW+F9RceNa95jH+NsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhM2QwYmMxMWIyOWRhNDRhZDU3MzA0YzNmODU2ODg3MGEw MTljMjQwHhcNMjYwMTAyMTAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2QyOWJhOGI5Mzg5N2QzOWQxNTRhZjIwOGJjNzFkZWMyMzY4YWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSp6CE1Ft7jt/ZdjB9UJYyW/9LS3 B/3/Dlg2oXqs9mrIJ0mbvM+Fiwj5pV+RvdXDxA1dFUpaA+KiL7FY/oEzWUOiRmO4 orz3X3d01JapLNORvor1A9DTqclJKo6vodiNClDW9xw3K5tFLxYvAb1xds6c7i3H w4duiPxhFXYRBDgm+qeiqyvDj4IkUSlYxXPRHDPkwffDCGbmESUcy20YA8OLk0JZ ns5sBHTOURhXEGtLtAKgF+KB97op0jHiOLQxkyfHsN1MJd3XMfXqVSqPK7i8tJgi 2Swb+mmTkY1i9JLBYSbXvluwAzIppC1A7bXjPMA5WwqS0suWghI/R9TwuQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFIfSm6i5OJfTnRVK8gi8cd7CNorAMB8GA1UdIwQY MBaAFPo9C8EbKdpErVcwTD+FaIcKAZwkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qMEx3UnNwMmtTdFZ6Qk1QNFZvaHdvQm5DUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1 LWQyMTA3MWVmNzM1Yi8xL2g5S2JxTGs0bDlPZEZVcnlDTHh4M3NJMmlzQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1LWQyMTA3MWVmNzM1 Yi8xLzEtajBMd1JzcDJrU3RWekJNUDRWb2h3b0JuQ1EuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBACy7CAD BACy7CMDBAG5MWgDBAC5dgwwDQYJKoZIhvcNAQELBQADggEBAAxZbLpEBM+9SCo3 6IuDdNuXrSp94KReRnVWcC0yTVRGO+PLHu39+ZbGuehdJ3RXdJdZJGGCFW5RCsDF tc/CMcbbIOmwCx2tL42J+TiZ35fSJ5N+dTOpE47/3nt+g4Kix2gbKDqv8xTWhgN0 KMeUC2M0TXTBrBDoWs6SXoRNq1/gggIc2SYbxijdvXDqAloHGbOV4bbX3gQJ3+mD sXJgV4cQuFrhbT73OLPg+Fajco+nof415/eYS7d7nB4R+eMBVQn8Bpha4VSs8ZYl pssq8lU/DDWiPo2yYO+03vaQuYXxsDqRsGmDPKrZZc467IDuM2BGIeZmgdOwEPTY /1DiyV0= -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:10 2026 by rpki-client