This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/h0Ifd57oi9lfBeUdeRd9nSCgSg8.roa File: h0Ifd57oi9lfBeUdeRd9nSCgSg8.roa (raw, json) Hash identifier: kiI/t9Fma+sRPCboiwT26YcfI7j4ilrF6LxmsduO9hU= Subject key identifier: 87:42:1F:77:9E:E8:8B:D9:5F:05:E5:1D:79:17:7D:9D:20:A0:4A:0F Certificate issuer: /CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf Certificate serial: 019B7AC854F3E152BC3AE721E8EF2EA8AAA2 Authority key identifier: 35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/h0Ifd57oi9lfBeUdeRd9nSCgSg8.roa Signing time: Thu 01 Jan 2026 18:18:27 +0000 ROA not before: Thu 01 Jan 2026 18:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206298 IP address blocks: 185.190.76.0/22 maxlen: 22 2a0a:5c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:54:f3:e1:52:bc:3a:e7:21:e8:ef:2e:a8:aa:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf Validity Not Before: Jan 1 18:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87421f779ee88bd95f05e51d79177d9d20a04a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1b:29:d2:87:eb:3b:65:47:c7:91:10:e8:91: 23:11:7e:f5:a0:17:ad:7b:54:60:4e:14:24:5c:4b: bb:20:82:6b:e7:19:49:b5:91:db:5b:bb:86:c3:14: 3f:14:c5:f3:4f:f9:9b:92:7c:c9:50:ee:b9:0b:03: d1:07:6e:2f:2e:69:7a:25:98:80:a0:f1:e3:90:d2: 72:69:d6:28:78:ad:4a:90:12:6b:8b:fd:85:34:fa: 53:c2:b5:dc:c2:9b:e8:33:8e:9f:c9:83:97:b4:92: 23:14:91:1f:e5:8d:21:6b:96:3d:1d:0d:c6:e4:b0: 9f:d5:9c:b5:14:53:c1:b1:32:d2:54:4e:88:a6:f4: ac:52:51:35:5b:81:22:0f:57:5b:03:eb:77:c2:87: 42:f6:2f:43:ce:42:65:ed:8c:87:f1:91:b3:a3:ad: b3:38:8b:dc:74:26:33:31:3a:a3:30:49:57:78:6d: 22:b0:7d:2d:3f:ae:40:14:25:5d:2c:7f:d6:15:92: 18:86:cd:c1:1f:bf:d2:72:60:e8:8f:15:0f:77:08: af:2e:19:a6:da:d6:60:a1:5d:97:7e:21:7e:02:4e: 03:5b:40:b4:93:a0:98:48:72:7b:c6:b3:fc:0c:58: ea:f8:ca:9e:c7:81:da:85:ef:67:9a:5c:f5:05:01: 3c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:42:1F:77:9E:E8:8B:D9:5F:05:E5:1D:79:17:7D:9D:20:A0:4A:0F X509v3 Authority Key Identifier: keyid:35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/h0Ifd57oi9lfBeUdeRd9nSCgSg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.190.76.0/22 IPv6: 2a0a:5c0::/29 Signature Algorithm: sha256WithRSAEncryption 21:81:ec:77:4c:62:27:43:ec:df:5a:1b:d2:02:7c:49:dd:8b: 66:20:e1:4a:93:89:98:78:47:90:06:05:ac:4b:4f:25:ca:03: 58:29:5b:4d:bc:13:5f:d3:9a:63:8e:9c:bf:92:f1:4e:5c:0b: e6:a2:fa:33:f2:a0:5e:df:51:7f:51:ff:2f:a3:97:fc:0b:88: ef:59:8d:d8:11:4b:4a:91:c4:0b:5e:fe:a3:ea:78:2a:15:53: c7:8e:6a:9d:fd:f5:d0:a7:82:92:fe:95:ac:b5:16:29:c6:84: dd:66:37:64:59:20:7f:60:06:a2:14:fc:b8:ee:b0:60:b3:d1: 79:a3:67:76:5c:db:01:33:3c:5c:24:51:89:04:37:01:22:5f: dc:68:bd:ae:6f:35:e4:fb:ea:d2:9b:70:64:2f:4e:be:9e:eb: 5d:5b:89:ca:73:98:f2:99:29:c5:62:76:9c:0d:96:41:34:3e: c6:c8:1b:55:7f:7a:cc:64:90:d2:1f:92:5c:25:5a:c9:33:2f: d6:99:bf:8a:8f:4c:1e:b9:07:98:7c:68:58:b7:c6:96:b2:38: 6c:3d:c5:cf:cf:37:29:4b:76:4e:c1:3b:bf:c4:fc:ac:b8:27: 8a:cd:bd:52:6f:cb:73:15:aa:ef:a5:81:17:3b:f5:3a:e4:b7: c6:04:4d:b2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yFTz4VK8Ouch6O8uqKqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1YjFjY2U0ZDViYWQ4ZDljMmVkY2E0MDBlMmJmYzU0YTI0 MTg1YmYwHhcNMjYwMTAxMTgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzQyMWY3NzllZTg4YmQ5NWYwNWU1MWQ3OTE3N2Q5ZDIwYTA0YTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxsp0ofrO2VHx5EQ6JEjEX71oBet e1RgThQkXEu7IIJr5xlJtZHbW7uGwxQ/FMXzT/mbknzJUO65CwPRB24vLml6JZiA oPHjkNJyadYoeK1KkBJri/2FNPpTwrXcwpvoM46fyYOXtJIjFJEf5Y0ha5Y9HQ3G 5LCf1Zy1FFPBsTLSVE6IpvSsUlE1W4EiD1dbA+t3wodC9i9DzkJl7YyH8ZGzo62z OIvcdCYzMTqjMElXeG0isH0tP65AFCVdLH/WFZIYhs3BH7/ScmDojxUPdwivLhmm 2tZgoV2XfiF+Ak4DW0C0k6CYSHJ7xrP8DFjq+Mqex4Hahe9nmlz1BQE8SQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIdCH3ee6IvZXwXlHXkXfZ0goEoPMB8GA1UdIwQY MBaAFDWxzOTVutjZwu3KQA4r/FSiQYW/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmJITTVOVzYyTm5DN2NwQURpdjhWS0pCaGI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zMDMxODQtOWY3ZS00NTgzLTgwYmEt Y2ZkM2I1M2RjNDU2LzEvaDBJZmQ1N29pOWxmQmVVZGVSZDluU0NnU2c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8zMDMxODQtOWY3ZS00NTgzLTgwYmEtY2ZkM2I1M2RjNDU2 LzEvTmJITTVOVzYyTm5DN2NwQURpdjhWS0pCaGI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCub5MMA0E AgACMAcDBQMqCgXAMA0GCSqGSIb3DQEBCwUAA4IBAQAhgex3TGInQ+zfWhvSAnxJ 3YtmIOFKk4mYeEeQBgWsS08lygNYKVtNvBNf05pjjpy/kvFOXAvmovoz8qBe31F/ Uf8vo5f8C4jvWY3YEUtKkcQLXv6j6ngqFVPHjmqd/fXQp4KS/pWstRYpxoTdZjdk WSB/YAaiFPy47rBgs9F5o2d2XNsBMzxcJFGJBDcBIl/caL2ubzXk++rSm3BkL06+ nutdW4nKc5jymSnFYnacDZZBND7GyBtVf3rMZJDSH5JcJVrJMy/Wmb+Kj0weuQeY fGhYt8aWsjhsPcXPzzcpS3ZOwTu/xPysuCeKzb1Sb8tzFarvpYEXO/U65LfGBE2y -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:26 2026 by rpki-client