This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/H-2qY4a7c8MlesaJzQyd4k8aP5w.roa File: H-2qY4a7c8MlesaJzQyd4k8aP5w.roa (raw, json) Hash identifier: zxe6qu6AhRtbkeK3hWiyERWLP3LHCnSy6HKCWXJfa78= Subject key identifier: 1F:ED:AA:63:86:BB:73:C3:25:7A:C6:89:CD:0C:9D:E2:4F:1A:3F:9C Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E38A30CE3AFE1E09ED3F3D4F87E6DB4 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/H-2qY4a7c8MlesaJzQyd4k8aP5w.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202553 IP address blocks: 147.181.4.0/22 maxlen: 24 147.181.8.0/22 maxlen: 24 147.181.12.0/22 maxlen: 24 147.181.16.0/23 maxlen: 24 147.181.32.0/22 maxlen: 24 147.181.36.0/22 maxlen: 24 147.181.44.0/22 maxlen: 24 147.181.48.0/22 maxlen: 22 147.181.52.0/22 maxlen: 22 147.181.128.0/20 maxlen: 24 2a04:9a00:1001::/48 maxlen: 48 2a04:9a00:1002::/48 maxlen: 48 2a04:9a00:1003::/48 maxlen: 48 2a04:9a00:1005::/48 maxlen: 48 2a04:9a00:1006::/48 maxlen: 48 2a04:9a00:1007::/48 maxlen: 48 2a04:9a00:100e::/48 maxlen: 48 2a04:9a05:1000::/36 maxlen: 36 2a04:9a05:1000::/47 maxlen: 48 2a04:9a05:1010::/44 maxlen: 48 2a04:9a05:1020::/44 maxlen: 48 2a04:9a05:1030::/44 maxlen: 48 2a04:9a05:1040::/44 maxlen: 48 2a04:9a05:1050::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a3:0c:e3:af:e1:e0:9e:d3:f3:d4:f8:7e:6d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fedaa6386bb73c3257ac689cd0c9de24f1a3f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:23:78:8e:ac:ef:b8:97:5f:d6:9d:4e:88:e8: 39:40:67:ba:0b:b4:4f:c1:12:55:8a:4d:10:fb:8f: a7:17:10:d6:b1:69:82:1f:16:3e:50:c4:a0:a6:34: da:b8:57:b4:77:4a:0f:6c:43:83:b7:e6:b7:19:a5: e1:bb:42:b6:4b:ef:82:89:53:89:59:1d:29:a0:ec: 84:ed:b0:41:a6:9e:dd:a1:3d:17:37:7e:ac:e3:77: dc:15:5a:25:2c:bf:a8:80:b0:25:84:e2:aa:6e:4f: 4c:f5:c0:15:d3:1a:33:db:4d:16:cf:5a:7f:60:42: c8:14:5b:81:09:6a:f2:28:1e:64:4f:cb:2f:d3:65: 77:1a:cf:2e:f8:26:1b:ac:6b:03:2b:4e:8a:94:dc: 96:7b:cf:10:bb:75:8e:f0:10:b4:44:95:b0:cd:22: 73:23:9a:be:5b:9f:31:6a:84:65:c1:87:9b:87:c2: ec:01:58:45:17:49:a9:31:c5:af:94:dd:96:72:ab: df:7e:79:bf:55:46:20:df:5c:25:fc:31:5d:59:cc: 65:c4:51:35:72:87:e3:01:99:d3:32:29:ec:d1:02: 06:53:94:db:4b:b5:d8:eb:4f:20:17:5b:5b:88:96: 67:6a:cd:86:70:20:40:02:31:2d:46:e6:dc:24:c2: 36:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:ED:AA:63:86:BB:73:C3:25:7A:C6:89:CD:0C:9D:E2:4F:1A:3F:9C X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/H-2qY4a7c8MlesaJzQyd4k8aP5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.181.4.0-147.181.17.255 147.181.32.0/21 147.181.44.0-147.181.55.255 147.181.128.0/20 IPv6: 2a04:9a00:1001::-2a04:9a00:1003:ffff:ffff:ffff:ffff:ffff 2a04:9a00:1005::-2a04:9a00:1007:ffff:ffff:ffff:ffff:ffff 2a04:9a00:100e::/48 2a04:9a05:1000::/36 Signature Algorithm: sha256WithRSAEncryption 00:3f:04:6d:4b:6a:b9:cf:7a:c6:8f:94:0a:78:2b:f6:16:30: 05:ed:e9:be:1e:a7:30:20:0b:fd:84:b8:bd:04:21:75:c1:de: 30:e4:b8:de:48:6f:a0:3c:4f:d5:01:d3:fc:10:41:1d:2e:4a: 6f:67:cb:58:0e:12:5b:ac:01:5e:90:c6:a0:08:23:28:b9:06: ef:03:9d:71:be:b2:4d:5e:90:04:f6:a0:e6:0f:10:e7:10:d1: 5c:f7:a0:35:59:8e:55:6b:df:e8:14:81:0b:b2:0b:18:40:03: 96:28:42:9f:e6:21:5c:57:92:4b:49:e6:67:e2:b8:aa:5b:8f: 87:50:f2:ca:08:10:62:01:31:8a:cc:3a:83:53:a6:70:b3:49: 38:26:c6:e8:2f:e0:5a:34:92:52:16:9e:0f:ef:37:b2:be:00: e8:ec:eb:1f:0d:88:d3:69:25:cd:91:a4:b9:ac:a9:be:87:e4: aa:25:60:c9:f5:39:e0:7b:02:b1:b1:86:be:be:6c:1a:30:bc: 01:d6:23:ba:cc:fd:38:b5:44:d9:46:c5:2d:ec:a4:28:74:10: ea:69:b2:8c:8b:f6:2a:45:03:9d:0d:86:3f:0b:1a:3f:e6:2f: d2:ee:27:c1:2f:df:de:b0:25:b1:86:9d:d4:fa:cc:81:8d:27: a4:dc:00:a9 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZt+OKMM46/h4J7T89T4fm20MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmVkYWE2Mzg2YmI3M2MzMjU3YWM2ODljZDBjOWRlMjRmMWEzZjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSN4jqzvuJdf1p1OiOg5QGe6C7RP wRJVik0Q+4+nFxDWsWmCHxY+UMSgpjTauFe0d0oPbEODt+a3GaXhu0K2S++CiVOJ WR0poOyE7bBBpp7doT0XN36s43fcFVolLL+ogLAlhOKqbk9M9cAV0xoz200Wz1p/ YELIFFuBCWryKB5kT8sv02V3Gs8u+CYbrGsDK06KlNyWe88Qu3WO8BC0RJWwzSJz I5q+W58xaoRlwYebh8LsAVhFF0mpMcWvlN2Wcqvffnm/VUYg31wl/DFdWcxlxFE1 cofjAZnTMins0QIGU5TbS7XY608gF1tbiJZnas2GcCBAAjEtRubcJMI22wIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFB/tqmOGu3PDJXrGic0MneJPGj+cMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvSC0ycVk0YTdjOE1sZXNhSnpReWQ0azhhUDV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwLgQCAAEwKDAMAwQCk7UE AwQBk7UQAwQDk7UgMAwDBAKTtSwDBAOTtTADBASTtYAwPwQCAAIwOTASAwcAKgSa ABABAwcCKgSaABAAMBIDBwAqBJoAEAUDBwMqBJoAEAADBwAqBJoAEA4DBgQqBJoF EDANBgkqhkiG9w0BAQsFAAOCAQEAAD8EbUtquc96xo+UCngr9hYwBe3pvh6nMCAL /YS4vQQhdcHeMOS43khvoDxP1QHT/BBBHS5Kb2fLWA4SW6wBXpDGoAgjKLkG7wOd cb6yTV6QBPag5g8Q5xDRXPegNVmOVWvf6BSBC7ILGEADlihCn+YhXFeSS0nmZ+K4 qluPh1DyyggQYgExisw6g1OmcLNJOCbG6C/gWjSSUhaeD+83sr4A6OzrHw2I02kl zZGkuaypvofkqiVgyfU54HsCsbGGvr5sGjC8AdYjusz9OLVE2UbFLeykKHQQ6mmy jIv2KkUDnQ2GPwsaP+Yv0u4nwS/f3rAlsYad1PrMgY0npNwAqQ== -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:36 2026 by rpki-client