This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/H0pm5nRm7rZf-XNfTL4WUT-TmS0.roa File: H0pm5nRm7rZf-XNfTL4WUT-TmS0.roa (raw, json) Hash identifier: iUjioUBVoEzH96c/q4TBCiakeu8zjGr+CpQ/f6uz5RE= Subject key identifier: 1F:4A:66:E6:74:66:EE:B6:5F:F9:73:5F:4C:BE:16:51:3F:93:99:2D Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Certificate serial: 019B76EB1655E8E0BB5263E4295004C49F50 Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/H0pm5nRm7rZf-XNfTL4WUT-TmS0.roa Signing time: Thu 01 Jan 2026 00:17:56 +0000 ROA not before: Thu 01 Jan 2026 00:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29208 IP address blocks: 91.108.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:16:55:e8:e0:bb:52:63:e4:29:50:04:c4:9f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Validity Not Before: Jan 1 00:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f4a66e67466eeb65ff9735f4cbe16513f93992d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e8:06:0d:6b:ed:53:ad:34:5d:5d:bd:47:ae: b2:11:45:4e:4f:89:1a:b7:6c:6a:99:27:e8:13:5a: c5:da:ab:20:d6:4a:75:f6:16:e8:0a:3c:13:89:51: 11:ba:6d:06:00:e2:51:e5:4c:cd:38:4e:91:86:f0: 97:2f:06:9e:30:4a:d0:31:4d:0d:56:27:a8:8d:38: 02:67:72:d8:81:d3:8f:15:57:59:f7:01:1b:de:29: db:c8:82:52:b8:89:23:61:f1:26:12:25:91:50:81: 2e:f6:9c:9a:bb:68:6e:b7:60:0e:1c:d2:85:49:37: ef:c7:f1:41:87:6b:0d:83:eb:72:a7:2d:41:c7:1d: 52:be:a7:91:25:97:80:39:0d:c2:03:ac:04:2a:f7: 0f:65:3a:5e:bb:32:a5:bd:eb:06:71:f7:ee:a6:3a: 57:0b:0b:d5:ed:e1:c1:e2:b1:dc:1f:84:7a:f3:c8: 35:1f:e6:19:5c:3f:f2:20:92:c0:ee:34:7d:0d:5a: fb:fa:c8:63:87:bf:65:f1:d1:a7:11:95:88:34:fe: ea:08:75:c0:61:22:d2:80:d5:66:eb:c2:b8:12:51: e6:bb:ea:37:1f:2f:d7:f9:49:ec:35:fc:e1:77:07: cf:f6:c2:66:21:3a:b9:c1:01:d8:a5:8f:eb:00:dc: 49:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4A:66:E6:74:66:EE:B6:5F:F9:73:5F:4C:BE:16:51:3F:93:99:2D X509v3 Authority Key Identifier: keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/H0pm5nRm7rZf-XNfTL4WUT-TmS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.239.0/24 Signature Algorithm: sha256WithRSAEncryption 42:c2:5b:93:39:c3:3b:25:fe:29:7d:a7:26:07:f7:c3:19:88: 7f:29:7c:ab:84:ea:54:c9:e3:ab:17:13:7e:d7:e3:e4:7c:34: d5:f7:82:ab:5b:85:b1:08:a5:81:d7:85:bb:ad:6d:97:f2:ad: 92:a6:ff:0b:53:c1:e3:9e:f1:73:aa:0a:87:c0:f8:4a:6c:5d: 1f:db:e0:3c:1e:64:f6:f5:c5:82:ee:12:59:30:02:a3:52:c2: b3:2a:6c:3e:e5:e4:fc:83:d1:67:ca:db:1a:2c:f4:da:5a:91: a9:6e:4b:b1:8c:d7:48:f1:83:82:ef:68:55:65:b6:7f:8f:9d: 78:6b:df:86:26:f2:e8:c5:d2:7d:97:d2:8b:de:f6:98:94:1d: 2f:5f:8a:9b:e3:ae:dd:4e:28:af:1a:92:02:b8:da:b2:17:b9: 5c:45:50:44:3c:34:bc:76:01:b6:02:5d:0c:bd:4b:74:6c:58: 35:ee:03:d7:27:ae:be:29:bf:7c:37:dc:ad:bb:b0:5e:77:1b: 36:f0:03:cd:07:55:df:e1:e9:b2:00:a0:fb:ff:c8:a8:b5:c5: f8:fe:b3:b4:c7:d6:73:a5:c6:11:1e:b6:58:a1:71:a2:d5:ea: 53:16:20:4c:82:9b:fe:44:ed:55:7b:7b:50:22:49:1c:3c:85: 7d:99:98:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xZV6OC7UmPkKVAExJ9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm NzMzMzkwHhcNMjYwMTAxMDAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjRhNjZlNjc0NjZlZWI2NWZmOTczNWY0Y2JlMTY1MTNmOTM5OTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+gGDWvtU600XV29R66yEUVOT4ka t2xqmSfoE1rF2qsg1kp19hboCjwTiVERum0GAOJR5UzNOE6RhvCXLwaeMErQMU0N VieojTgCZ3LYgdOPFVdZ9wEb3inbyIJSuIkjYfEmEiWRUIEu9pyau2hut2AOHNKF STfvx/FBh2sNg+typy1Bxx1SvqeRJZeAOQ3CA6wEKvcPZTpeuzKlvesGcffupjpX CwvV7eHB4rHcH4R688g1H+YZXD/yIJLA7jR9DVr7+shjh79l8dGnEZWINP7qCHXA YSLSgNVm68K4ElHmu+o3Hy/X+UnsNfzhdwfP9sJmITq5wQHYpY/rANxJpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB9KZuZ0Zu62X/lzX0y+FlE/k5ktMB8GA1UdIwQY MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt ZGE3NTQzMGIxNmY2LzEvSDBwbTVuUm03clpmLVhOZlRMNFdVVC1UbVMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2 LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2zvMA0G CSqGSIb3DQEBCwUAA4IBAQBCwluTOcM7Jf4pfacmB/fDGYh/KXyrhOpUyeOrFxN+ 1+PkfDTV94KrW4WxCKWB14W7rW2X8q2Spv8LU8HjnvFzqgqHwPhKbF0f2+A8HmT2 9cWC7hJZMAKjUsKzKmw+5eT8g9FnytsaLPTaWpGpbkuxjNdI8YOC72hVZbZ/j514 a9+GJvLoxdJ9l9KL3vaYlB0vX4qb467dTiivGpICuNqyF7lcRVBEPDS8dgG2Al0M vUt0bFg17gPXJ66+Kb98N9ytu7Bedxs28APNB1Xf4emyAKD7/8iotcX4/rO0x9Zz pcYRHrZYoXGi1epTFiBMgpv+RO1Ve3tQIkkcPIV9mZhh -----END CERTIFICATE-----Generated at Tue Jan 20 15:46:37 2026 by rpki-client