This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/H5HaxNWVOqxU799AVgPxEXn01qU.roa File: H5HaxNWVOqxU799AVgPxEXn01qU.roa (raw, json) Hash identifier: mWDQsDbJvuwqHmN/2vnE3qUbbfA/iapxxfRizly7drk= Subject key identifier: 1F:91:DA:C4:D5:95:3A:AC:54:EF:DF:40:56:03:F1:11:79:F4:D6:A5 Certificate issuer: /CN=547777acef8c492e5011bddec129af8aec974b77 Certificate serial: 019BF9CB9DDC0CC6AD0DF9997F17A15B9331 Authority key identifier: 54:77:77:AC:EF:8C:49:2E:50:11:BD:DE:C1:29:AF:8A:EC:97:4B:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHd3rO-MSS5QEb3ewSmviuyXS3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/H5HaxNWVOqxU799AVgPxEXn01qU.roa Signing time: Mon 26 Jan 2026 10:13:49 +0000 ROA not before: Mon 26 Jan 2026 10:13:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3209 IP address blocks: 193.97.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.mft rsync://rpki.ripe.net/repository/DEFAULT/VHd3rO-MSS5QEb3ewSmviuyXS3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:cb:9d:dc:0c:c6:ad:0d:f9:99:7f:17:a1:5b:93:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547777acef8c492e5011bddec129af8aec974b77 Validity Not Before: Jan 26 10:13:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f91dac4d5953aac54efdf405603f11179f4d6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:09:d1:0d:59:56:84:55:40:2e:60:56:69:4b: e5:8d:31:85:53:a5:65:7b:b6:5b:44:f3:80:4f:78: 96:52:69:e4:c5:4e:fd:63:3b:70:e5:7f:c2:1d:1c: 68:ba:ac:69:3a:ce:64:dd:24:4d:38:3f:3c:dc:fd: 9e:e3:04:c3:33:f0:25:b3:c9:61:13:5e:7a:1e:1e: 01:71:b8:f7:b5:b9:97:42:17:02:23:fa:18:98:fd: 73:92:4f:4d:a7:9a:88:ca:79:a0:ba:7e:fe:1d:13: 07:8a:a3:a1:d2:c3:f8:69:59:9d:7d:bd:73:63:d0: 1e:89:66:b3:c3:84:d3:e7:15:1a:35:f5:db:65:23: 89:12:93:88:d2:47:2f:95:be:70:ab:bc:00:e0:b1: c8:52:3c:45:18:75:dc:c0:81:00:3e:9c:48:24:e1: eb:24:91:34:7e:a6:f2:81:31:3c:02:7e:73:23:a8: 49:61:81:52:94:93:76:51:33:77:67:24:ab:f0:19: 0c:1d:de:ef:67:fb:d2:1b:13:5a:38:b5:97:21:29: ec:e0:a8:4f:26:ca:f1:e0:02:94:35:1e:09:d0:4d: c6:bd:ff:ec:a8:48:af:8f:af:9b:fe:97:3f:f6:b2: 0d:e1:3b:e8:69:9d:71:67:3b:a1:3c:70:1f:c8:0e: ae:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:91:DA:C4:D5:95:3A:AC:54:EF:DF:40:56:03:F1:11:79:F4:D6:A5 X509v3 Authority Key Identifier: keyid:54:77:77:AC:EF:8C:49:2E:50:11:BD:DE:C1:29:AF:8A:EC:97:4B:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHd3rO-MSS5QEb3ewSmviuyXS3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/H5HaxNWVOqxU799AVgPxEXn01qU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.97.128.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:90:6c:5d:22:e5:65:83:a9:e0:c1:23:b1:17:0a:b3:17:10: 5b:27:2d:ae:53:73:c3:e9:62:2d:56:8e:a1:16:1b:7e:fb:02: 5c:9e:26:cd:fa:ea:69:40:eb:b6:51:8c:1b:68:a7:0a:4e:c2: 59:31:d0:9f:07:e5:63:ff:4f:3f:e5:89:59:6e:cc:4e:6c:c7: 4e:32:3d:c0:3a:d5:09:d5:d0:c4:bc:dd:08:ae:8a:a8:77:9a: 39:06:c1:00:d0:14:5f:e6:51:7a:eb:dc:d1:cc:90:fb:c9:70: 93:e5:3d:10:5d:a2:39:83:3c:1d:d5:31:b1:f0:53:88:37:51: dc:ce:a1:e1:a1:2e:af:b2:d5:13:a2:67:2e:72:cf:a9:cf:af: 9c:05:e3:8b:42:4d:69:36:72:8d:09:d1:84:ca:4c:34:5b:90: 0e:eb:9e:6b:0b:e5:1a:5e:90:cb:d6:cf:bb:a7:75:26:c5:86: b4:c9:f6:83:f3:ed:be:48:71:eb:bd:f0:75:58:9a:c2:d1:74: 60:6d:e3:f0:0b:f0:fb:3f:14:a4:1f:1f:04:04:f0:7a:59:81: e4:95:90:e4:f7:f8:6f:24:68:34:c2:8f:52:3b:d5:93:8d:d4: f0:ff:bf:e8:5b:7a:7c:0e:b4:c6:84:2d:0c:e4:9d:a0:bc:50: 99:af:b0:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv5y53cDMatDfmZfxehW5MxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Nzc3N2FjZWY4YzQ5MmU1MDExYmRkZWMxMjlhZjhhZWM5 NzRiNzcwHhcNMjYwMTI2MTAxMzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjkxZGFjNGQ1OTUzYWFjNTRlZmRmNDA1NjAzZjExMTc5ZjRkNmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQnRDVlWhFVALmBWaUvljTGFU6Vl e7ZbRPOAT3iWUmnkxU79Yztw5X/CHRxouqxpOs5k3SRNOD883P2e4wTDM/Als8lh E156Hh4Bcbj3tbmXQhcCI/oYmP1zkk9Np5qIynmgun7+HRMHiqOh0sP4aVmdfb1z Y9AeiWazw4TT5xUaNfXbZSOJEpOI0kcvlb5wq7wA4LHIUjxFGHXcwIEAPpxIJOHr JJE0fqbygTE8An5zI6hJYYFSlJN2UTN3ZySr8BkMHd7vZ/vSGxNaOLWXISns4KhP Jsrx4AKUNR4J0E3Gvf/sqEivj6+b/pc/9rIN4TvoaZ1xZzuhPHAfyA6utQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB+R2sTVlTqsVO/fQFYD8RF59NalMB8GA1UdIwQY MBaAFFR3d6zvjEkuUBG93sEpr4rsl0t3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhkM3JPLU1TUzVRRWIzZXdTbXZpdXlYUzNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy83MGIxMWEtNGY5Zi00MmU2LTgwOWIt ZTU4OTIzZWEzMmJlLzEvSDVIYXhOV1ZPcXhVNzk5QVZnUHhFWG4wMXFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy83MGIxMWEtNGY5Zi00MmU2LTgwOWItZTU4OTIzZWEzMmJl LzEvVkhkM3JPLU1TUzVRRWIzZXdTbXZpdXlYUzNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWGAMA0G CSqGSIb3DQEBCwUAA4IBAQCakGxdIuVlg6ngwSOxFwqzFxBbJy2uU3PD6WItVo6h Fht++wJcnibN+uppQOu2UYwbaKcKTsJZMdCfB+Vj/08/5YlZbsxObMdOMj3AOtUJ 1dDEvN0Iroqod5o5BsEA0BRf5lF669zRzJD7yXCT5T0QXaI5gzwd1TGx8FOIN1Hc zqHhoS6vstUTomcucs+pz6+cBeOLQk1pNnKNCdGEykw0W5AO655rC+UaXpDL1s+7 p3UmxYa0yfaD8+2+SHHrvfB1WJrC0XRgbePwC/D7PxSkHx8EBPB6WYHklZDk9/hv JGg0wo9SO9WTjdTw/7/oW3p8DrTGhC0M5J2gvFCZr7CW -----END CERTIFICATE-----Generated at Mon Jan 26 21:31:31 2026 by rpki-client