This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/H9vdOoMnNvcj9O3pGR64p1cw7mI.roa File: H9vdOoMnNvcj9O3pGR64p1cw7mI.roa (raw, json) Hash identifier: IwVpFDPCmKPKuO6vfa3AZGtMLLchqRt7QtT34xytDoc= Subject key identifier: 1F:DB:DD:3A:83:27:36:F7:23:F4:ED:E9:19:1E:B8:A7:57:30:EE:62 Certificate issuer: /CN=427ce5719caa681adbd493a8d9a38a675d6bd639 Certificate serial: 019B7C7F1394FE28075E13654A8ED864B738 Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/H9vdOoMnNvcj9O3pGR64p1cw7mI.roa Signing time: Fri 02 Jan 2026 02:17:41 +0000 ROA not before: Fri 02 Jan 2026 02:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 176.52.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:13:94:fe:28:07:5e:13:65:4a:8e:d8:64:b7:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639 Validity Not Before: Jan 2 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fdbdd3a832736f723f4ede9191eb8a75730ee62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f0:da:29:39:e9:e3:6a:3a:b3:92:ad:66:51: e9:54:a1:1c:7a:77:c2:00:d0:b8:82:39:4b:bf:9d: 77:33:c3:64:87:cb:6e:44:87:75:f0:c5:b0:77:cd: e4:0f:e9:f8:73:4d:09:e9:0e:c9:52:99:92:f0:84: 02:e3:8a:3d:27:90:4a:59:1b:eb:92:ae:1f:d1:89: 93:df:b9:d9:94:d4:b0:a2:b5:36:07:2c:46:0a:75: ad:30:f8:f5:41:b9:11:8b:a8:8d:e1:a4:90:73:9c: c5:27:f8:d7:99:f4:5f:32:51:bb:18:13:55:92:5f: af:b7:5b:78:91:81:91:df:07:e7:ad:96:66:8a:6c: d9:ad:3a:ef:a9:53:73:2a:72:3e:9d:14:f1:11:15: 2c:f6:d5:d6:b2:0d:11:d3:5d:07:3f:e3:30:58:33: 9e:69:81:ea:71:74:76:2e:86:f8:6d:b2:52:26:bb: 10:76:d6:c4:84:d3:d6:03:52:d4:ca:c6:ad:50:fc: 54:2d:88:e1:5e:e6:6c:75:9a:f2:a6:41:bb:74:b2: 7f:66:f2:76:91:1e:80:bf:81:97:48:94:72:a6:ab: 95:0e:f9:5b:69:dc:bb:65:2b:b1:61:af:8d:cf:2f: 59:7c:fc:b6:ad:4b:11:b8:55:f8:e5:5d:22:77:7b: cc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DB:DD:3A:83:27:36:F7:23:F4:ED:E9:19:1E:B8:A7:57:30:EE:62 X509v3 Authority Key Identifier: keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/H9vdOoMnNvcj9O3pGR64p1cw7mI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.52.187.0/24 Signature Algorithm: sha256WithRSAEncryption 92:9a:f8:27:83:21:d2:26:f8:75:73:77:13:de:fd:c3:60:dc: 8f:ba:67:8d:0b:3a:9a:da:82:40:12:2c:7d:c9:4b:d9:b8:a0: a0:d1:75:80:7c:28:6f:0a:4b:b4:ab:5a:89:c8:ef:6c:ac:d9: 99:75:e5:8c:69:78:63:fd:4c:46:96:9f:17:9d:53:4f:c1:12: f8:70:8a:78:14:d4:ab:2c:43:21:b8:d2:78:97:55:ca:37:f6: 9d:84:05:a1:11:14:20:05:bc:ee:af:66:0e:90:7f:fc:63:eb: c9:4e:09:ba:68:cb:f5:22:96:9f:5a:4d:a0:81:6a:da:d6:18: 4b:92:f8:b0:2b:0e:ba:d8:e6:97:52:91:75:06:12:48:76:c6: 58:aa:7a:83:65:4c:89:04:6e:ac:44:ff:37:1c:1c:f7:72:16: 36:04:09:9c:29:0d:24:36:bc:ce:21:c1:d0:48:d6:63:12:92: 1e:07:a1:b0:bf:70:cc:7d:4e:c1:d8:8d:64:99:10:1b:f2:01: 9f:03:20:26:a2:09:7a:7e:95:5c:bb:c8:09:5f:1c:d5:78:c3: ce:4e:3e:59:4a:f1:a5:17:0d:9b:79:ba:d7:06:85:29:7f:46: d6:c1:40:d4:94:3e:3b:71:eb:08:6f:19:10:7a:c7:65:02:f3: f5:f0:94:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fxOU/igHXhNlSo7YZLc4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyN2NlNTcxOWNhYTY4MWFkYmQ0OTNhOGQ5YTM4YTY3NWQ2 YmQ2MzkwHhcNMjYwMTAyMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmRiZGQzYTgzMjczNmY3MjNmNGVkZTkxOTFlYjhhNzU3MzBlZTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/DaKTnp42o6s5KtZlHpVKEcenfC ANC4gjlLv513M8Nkh8tuRId18MWwd83kD+n4c00J6Q7JUpmS8IQC44o9J5BKWRvr kq4f0YmT37nZlNSworU2ByxGCnWtMPj1QbkRi6iN4aSQc5zFJ/jXmfRfMlG7GBNV kl+vt1t4kYGR3wfnrZZmimzZrTrvqVNzKnI+nRTxERUs9tXWsg0R010HP+MwWDOe aYHqcXR2Lob4bbJSJrsQdtbEhNPWA1LUysatUPxULYjhXuZsdZrypkG7dLJ/ZvJ2 kR6Av4GXSJRypquVDvlbady7ZSuxYa+Nzy9ZfPy2rUsRuFX45V0id3vMfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB/b3TqDJzb3I/Tt6RkeuKdXMO5iMB8GA1UdIwQY MBaAFEJ85XGcqmga29STqNmjimdda9Y5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zZTM1NDgtZmRiNS00ZGVkLWJhNTkt MDkxYzJkMzAzZmU4LzEvSDl2ZE9vTW5OdmNqOU8zcEdSNjRwMWN3N21JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8zZTM1NDgtZmRiNS00ZGVkLWJhNTktMDkxYzJkMzAzZmU4 LzEvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDS7MA0G CSqGSIb3DQEBCwUAA4IBAQCSmvgngyHSJvh1c3cT3v3DYNyPumeNCzqa2oJAEix9 yUvZuKCg0XWAfChvCku0q1qJyO9srNmZdeWMaXhj/UxGlp8XnVNPwRL4cIp4FNSr LEMhuNJ4l1XKN/adhAWhERQgBbzur2YOkH/8Y+vJTgm6aMv1IpafWk2ggWra1hhL kviwKw662OaXUpF1BhJIdsZYqnqDZUyJBG6sRP83HBz3chY2BAmcKQ0kNrzOIcHQ SNZjEpIeB6Gwv3DMfU7B2I1kmRAb8gGfAyAmogl6fpVcu8gJXxzVeMPOTj5ZSvGl Fw2bebrXBoUpf0bWwUDUlD47cesIbxkQesdlAvP18JSu -----END CERTIFICATE-----Generated at Sat Jan 3 01:34:18 2026 by rpki-client