This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/h5TBAsD0PIrK8ZbXvXzmuZYvjfc.roa File: h5TBAsD0PIrK8ZbXvXzmuZYvjfc.roa (raw, json) Hash identifier: vh2mYfpn9jYyEFKZRDPA3enKaVdAJO56xPGBRHR7x4E= Subject key identifier: 87:94:C1:02:C0:F4:3C:8A:CA:F1:96:D7:BD:7C:E6:B9:96:2F:8D:F7 Certificate issuer: /CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25 Certificate serial: 019B7C7FE594C4068FDB93F743AFFADA9677 Authority key identifier: B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/h5TBAsD0PIrK8ZbXvXzmuZYvjfc.roa Signing time: Fri 02 Jan 2026 02:18:35 +0000 ROA not before: Fri 02 Jan 2026 02:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207502 IP address blocks: 193.38.33.0/24 maxlen: 24 2a12:9e40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:e5:94:c4:06:8f:db:93:f7:43:af:fa:da:96:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25 Validity Not Before: Jan 2 02:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8794c102c0f43c8acaf196d7bd7ce6b9962f8df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:5f:2b:98:f5:a9:ad:6b:54:76:f1:8e:a1: 63:a5:ac:54:5c:5c:53:55:d7:32:01:f6:2e:92:39: e7:c4:ed:e7:a6:cc:33:c3:ba:85:58:fb:6f:4e:18: 03:30:f6:54:bc:d4:e9:a0:2f:50:a9:65:3e:f9:45: 15:30:6c:fd:cc:18:d2:b0:fd:05:f1:6d:93:8a:08: 1b:e7:ef:69:86:43:e0:83:19:d4:84:91:3c:35:25: d3:3b:c3:90:46:35:d9:86:d6:70:1e:52:a8:92:5f: 08:b2:f8:42:3b:68:e7:bb:10:ed:71:f6:32:a2:66: d9:9b:72:21:4e:2e:4f:45:8d:9b:9b:46:32:d1:2d: 3e:14:7d:79:e4:d3:c4:1b:b6:d7:31:5e:09:58:98: 22:91:10:39:f1:bb:72:6d:9c:e9:c1:2e:7e:9c:1a: 8a:18:f2:42:01:db:45:c1:66:d1:38:bf:50:8b:6c: bc:7d:5f:94:10:59:55:df:5e:08:64:ec:62:3f:7e: d9:91:38:cd:ca:34:00:7a:07:94:ad:52:e3:f7:1f: 57:f5:c7:ad:11:a2:cf:90:b2:ee:9a:24:53:b9:4c: 61:fe:51:6b:2f:70:9e:84:04:44:96:7a:92:37:0a: 55:fa:ad:82:e8:4c:bd:60:96:c2:de:c9:ce:9e:ed: e0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:94:C1:02:C0:F4:3C:8A:CA:F1:96:D7:BD:7C:E6:B9:96:2F:8D:F7 X509v3 Authority Key Identifier: keyid:B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/h5TBAsD0PIrK8ZbXvXzmuZYvjfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.38.33.0/24 IPv6: 2a12:9e40::/29 Signature Algorithm: sha256WithRSAEncryption bb:1c:8d:40:55:ca:a7:14:cf:5f:74:7b:7d:15:f2:0c:b1:1a: 64:4b:18:3d:69:c1:9a:71:3c:8f:0d:79:9d:c9:2d:62:ec:03: 97:e6:b2:84:b2:1b:31:28:62:de:a9:1a:15:b5:a7:48:27:46: 7b:44:35:48:79:d9:b8:8b:77:ea:af:31:00:f3:51:e2:0f:c4: 4b:d7:db:77:ba:78:c8:ab:42:03:ad:5a:1e:d4:61:3e:7f:2d: 3b:bc:71:99:54:b9:5d:51:f2:a3:b4:25:54:6e:0e:de:59:a7: 34:6d:cc:a5:cf:83:22:ea:8f:78:55:47:8f:c7:39:44:f1:9e: b2:70:9f:94:2b:ee:0f:e4:c5:7f:72:fe:9e:01:eb:76:6e:ef: 01:c0:71:db:a6:bb:f4:a1:28:8e:05:3d:99:0d:29:2d:76:e6: b7:cb:a4:22:26:76:97:47:77:3b:b9:f6:0c:95:48:40:b9:5d: d4:38:30:ed:36:96:77:af:de:02:6b:65:99:3a:02:13:82:22: ea:83:4a:f5:ae:54:f5:54:f0:fb:5f:37:92:a6:6a:12:0a:4a: 31:f3:62:86:dc:39:55:1a:11:31:36:44:e1:e9:c4:60:98:6d: e1:00:11:ab:ca:22:c9:53:ae:6b:03:b7:5a:f9:c8:48:3c:74: 62:c4:78:1c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f+WUxAaP25P3Q6/62pZ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYjVkMmI0M2FjYzBkOWYwN2FhMDBhYTkwZjAyNWM5NmQ1 Y2VjMjUwHhcNMjYwMTAyMDIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Nzk0YzEwMmMwZjQzYzhhY2FmMTk2ZDdiZDdjZTZiOTk2MmY4ZGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcZfK5j1qa1rVHbxjqFjpaxUXFxT VdcyAfYukjnnxO3npswzw7qFWPtvThgDMPZUvNTpoC9QqWU++UUVMGz9zBjSsP0F 8W2Tiggb5+9phkPggxnUhJE8NSXTO8OQRjXZhtZwHlKokl8IsvhCO2jnuxDtcfYy ombZm3IhTi5PRY2bm0Yy0S0+FH155NPEG7bXMV4JWJgikRA58btybZzpwS5+nBqK GPJCAdtFwWbROL9Qi2y8fV+UEFlV314IZOxiP37ZkTjNyjQAegeUrVLj9x9X9cet EaLPkLLumiRTuUxh/lFrL3CehARElnqSNwpV+q2C6Ey9YJbC3snOnu3g5QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIeUwQLA9DyKyvGW17185rmWL433MB8GA1UdIwQY MBaAFLO10rQ6zA2fB6oAqpDwJcltXOwlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczdYU3REck1EWjhIcWdDcWtQQWx5VzFjN0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wYTkyZGYtYzUwOS00ZTkyLThlMmIt MjRiOGMwMmZhODJhLzEvaDVUQkFzRDBQSXJLOFpiWHZYem11Wll2amZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8wYTkyZGYtYzUwOS00ZTkyLThlMmItMjRiOGMwMmZhODJh LzEvczdYU3REck1EWjhIcWdDcWtQQWx5VzFjN0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwSYhMA0E AgACMAcDBQMqEp5AMA0GCSqGSIb3DQEBCwUAA4IBAQC7HI1AVcqnFM9fdHt9FfIM sRpkSxg9acGacTyPDXmdyS1i7AOX5rKEshsxKGLeqRoVtadIJ0Z7RDVIedm4i3fq rzEA81HiD8RL19t3unjIq0IDrVoe1GE+fy07vHGZVLldUfKjtCVUbg7eWac0bcyl z4Mi6o94VUePxzlE8Z6ycJ+UK+4P5MV/cv6eAet2bu8BwHHbprv0oSiOBT2ZDSkt dua3y6QiJnaXR3c7ufYMlUhAuV3UODDtNpZ3r94Ca2WZOgITgiLqg0r1rlT1VPD7 XzeSpmoSCkox82KG3DlVGhExNkTh6cRgmG3hABGryiLJU65rA7da+chIPHRixHgc -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:40 2026 by rpki-client