This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/cHu9ZbMPrKX8ZIjRFicqBMQg5dQ.roa File: cHu9ZbMPrKX8ZIjRFicqBMQg5dQ.roa (raw, json) Hash identifier: K/TDSx0Je1BxRBjDUlA95sURJvSjJ3GjsGy0WuwiR/8= Subject key identifier: 70:7B:BD:65:B3:0F:AC:A5:FC:64:88:D1:16:27:2A:04:C4:20:E5:D4 Certificate issuer: /CN=6816171b3f91b1d10b0445987f611428abf13e1a Certificate serial: 019B79114E3CD3D02315F612F382EEAF51CF Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/cHu9ZbMPrKX8ZIjRFicqBMQg5dQ.roa Signing time: Thu 01 Jan 2026 10:18:55 +0000 ROA not before: Thu 01 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 147.172.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:4e:3c:d3:d0:23:15:f6:12:f3:82:ee:af:51:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a Validity Not Before: Jan 1 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=707bbd65b30faca5fc6488d116272a04c420e5d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:00:f4:d3:0c:bb:30:44:6b:9b:02:a5:89:03: 0f:51:f5:36:19:8c:01:19:20:a2:d9:79:95:60:2b: 1e:bb:19:b6:3e:0c:38:e0:7f:ed:7f:4d:42:88:2b: 86:15:dc:61:84:c3:17:79:5f:59:6e:af:e6:c2:ed: 57:ee:2c:83:08:69:b6:01:12:d7:ac:ca:82:4f:aa: 94:18:c2:9a:6e:b3:1b:22:cb:ce:20:fa:9f:00:67: e8:3a:aa:a8:d5:b9:2f:68:91:c1:d6:e6:d1:eb:07: 18:52:ef:37:62:5d:35:af:35:dd:ef:48:10:08:81: 54:b6:83:31:e3:7d:04:1f:03:58:02:e5:9c:77:f3: ae:81:0b:7e:95:44:b2:2e:21:f2:00:66:e0:bc:41: 06:bd:e6:26:25:90:66:06:f3:a1:27:f9:a9:8e:7a: 26:83:4b:c8:46:54:50:69:22:6c:32:ab:5d:bc:81: 80:39:b2:32:42:35:8f:15:da:f0:b4:d0:7e:38:26: ab:d1:2d:8b:da:e1:b9:6b:f6:ee:53:57:cc:36:46: b4:88:b5:31:b2:1b:45:85:4e:37:db:0e:4c:bc:c8: a6:1f:03:92:47:48:cc:dc:eb:1a:43:79:b3:54:f3: a8:dc:f9:64:28:d8:5c:4c:10:04:55:f3:6b:f3:e7: 4f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7B:BD:65:B3:0F:AC:A5:FC:64:88:D1:16:27:2A:04:C4:20:E5:D4 X509v3 Authority Key Identifier: keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/cHu9ZbMPrKX8ZIjRFicqBMQg5dQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.172.0.0/16 Signature Algorithm: sha256WithRSAEncryption 81:21:2f:d4:42:47:66:a1:8e:46:6f:66:5a:8d:02:41:05:1a: d9:bc:fc:dd:9f:bd:e9:c4:2a:9a:83:61:69:02:83:9a:cc:6c: b8:85:c4:92:e6:c6:ec:82:3b:4e:3b:aa:83:aa:93:2b:fe:1e: 9c:a3:f8:69:be:09:1b:58:25:df:ad:9f:c8:b2:fb:29:52:d0: e4:c2:08:1f:d8:9d:9b:77:12:2e:86:8c:19:21:49:25:c7:8e: 93:dc:b3:a3:c4:f1:d8:05:96:9d:0d:3e:bb:1f:b2:5f:cc:a6: fb:6f:29:93:25:d9:7e:11:1a:e4:7e:d0:09:7a:7e:d3:ae:8d: be:b0:50:e5:46:a2:7a:df:50:90:d0:73:70:f0:68:7d:92:e5: 91:c1:7b:a5:7c:b9:5e:e0:86:60:0b:a7:b3:39:25:eb:9f:ef: b3:1d:f4:04:ee:44:ad:ec:77:ce:c3:e1:72:ef:31:e3:d1:4c: c7:9d:df:2c:d3:4a:ff:2c:7e:2e:6f:a0:56:32:9e:d7:3b:59: 27:49:a4:49:31:65:72:7d:2e:9c:a7:6c:c1:e0:76:f9:f9:c7: 30:af:da:e0:60:e2:66:a2:53:1e:0d:52:97:09:2d:df:fb:b0: 50:6c:fa:d3:29:f0:fe:5a:74:ec:63:7a:86:e1:8c:d4:77:33: c4:c7:c4:fd -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt5EU4809AjFfYS84Lur1HPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MTYxNzFiM2Y5MWIxZDEwYjA0NDU5ODdmNjExNDI4YWJm MTNlMWEwHhcNMjYwMTAxMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDdiYmQ2NWIzMGZhY2E1ZmM2NDg4ZDExNjI3MmEwNGM0MjBlNWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAD00wy7MERrmwKliQMPUfU2GYwB GSCi2XmVYCseuxm2Pgw44H/tf01CiCuGFdxhhMMXeV9Zbq/mwu1X7iyDCGm2ARLX rMqCT6qUGMKabrMbIsvOIPqfAGfoOqqo1bkvaJHB1ubR6wcYUu83Yl01rzXd70gQ CIFUtoMx430EHwNYAuWcd/OugQt+lUSyLiHyAGbgvEEGveYmJZBmBvOhJ/mpjnom g0vIRlRQaSJsMqtdvIGAObIyQjWPFdrwtNB+OCar0S2L2uG5a/buU1fMNka0iLUx shtFhU432w5MvMimHwOSR0jM3OsaQ3mzVPOo3PlkKNhcTBAEVfNr8+dPuQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFHB7vWWzD6yl/GSI0RYnKgTEIOXUMB8GA1UdIwQY MBaAFGgWFxs/kbHRCwRFmH9hFCir8T4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUJZWEd6LVJzZEVMQkVXWWYyRVVLS3Z4UGhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yYTUxNTUtMTMzNi00NTA3LTlhM2Yt ZjBhN2UxY2EzYzg1LzEvY0h1OVpiTVByS1g4WklqUkZpY3FCTVFnNWRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8yYTUxNTUtMTMzNi00NTA3LTlhM2YtZjBhN2UxY2EzYzg1 LzEvYUJZWEd6LVJzZEVMQkVXWWYyRVVLS3Z4UGhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk6wwDQYJ KoZIhvcNAQELBQADggEBAIEhL9RCR2ahjkZvZlqNAkEFGtm8/N2fvenEKpqDYWkC g5rMbLiFxJLmxuyCO047qoOqkyv+Hpyj+Gm+CRtYJd+tn8iy+ylS0OTCCB/YnZt3 Ei6GjBkhSSXHjpPcs6PE8dgFlp0NPrsfsl/MpvtvKZMl2X4RGuR+0Al6ftOujb6w UOVGonrfUJDQc3DwaH2S5ZHBe6V8uV7ghmALp7M5Jeuf77Md9ATuRK3sd87D4XLv MePRTMed3yzTSv8sfi5voFYyntc7WSdJpEkxZXJ9LpynbMHgdvn5xzCv2uBg4mai Ux4NUpcJLd/7sFBs+tMp8P5adOxjeobhjNR3M8THxP0= -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:59 2026 by rpki-client