This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/hz0DJSmF0-yCjES_RojWcQujD6A.roa File: hz0DJSmF0-yCjES_RojWcQujD6A.roa (raw, json) Hash identifier: SI77n3m4WONBcCck6pT6iAM39sG+rqwRYoK8N7gBMB8= Subject key identifier: 87:3D:03:25:29:85:D3:EC:82:8C:44:BF:46:88:D6:71:0B:A3:0F:A0 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019C2D0C652B3423881CA9F4FA2DF4BACE2F Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/hz0DJSmF0-yCjES_RojWcQujD6A.roa Signing time: Thu 05 Feb 2026 09:05:12 +0000 ROA not before: Thu 05 Feb 2026 09:05:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 37.148.128.0/22 maxlen: 24 93.88.157.0/24 maxlen: 24 93.88.158.0/24 maxlen: 24 95.155.128.0/24 maxlen: 24 95.155.134.0/24 maxlen: 24 95.155.137.0/24 maxlen: 24 95.155.139.0/24 maxlen: 24 95.155.146.0/23 maxlen: 24 95.155.148.0/23 maxlen: 24 95.155.149.0/24 maxlen: 24 95.155.150.0/24 maxlen: 24 95.155.152.0/22 maxlen: 24 95.155.152.0/23 maxlen: 24 95.155.154.0/23 maxlen: 24 95.155.176.0/21 maxlen: 24 152.89.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 09:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2d:0c:65:2b:34:23:88:1c:a9:f4:fa:2d:f4:ba:ce:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Feb 5 09:05:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=873d03252985d3ec828c44bf4688d6710ba30fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f3:3d:15:f5:9c:51:60:65:b8:9b:d4:cb:a1: 87:cb:46:14:bf:d6:95:da:b9:91:76:fb:5e:32:01: e3:32:89:89:96:57:92:e4:a5:87:a8:9a:43:f2:5b: e2:b8:14:67:13:82:e3:d0:f6:20:13:16:2a:df:4c: 1c:0e:50:09:60:6b:3f:40:ca:58:d1:69:39:36:06: 05:04:6f:bd:20:84:58:cf:11:a5:dc:3c:eb:95:ee: 69:1f:44:85:e5:fe:4c:fb:4c:0c:c3:05:28:19:79: 28:70:3b:69:5f:3a:b0:0f:54:b0:45:03:99:12:92: 62:db:3b:6f:b7:5e:64:c7:92:1a:6c:68:7a:53:ad: dc:17:68:06:90:db:08:cc:ab:e6:cc:b4:c9:7f:d0: c9:7f:3b:10:1c:06:a1:73:e9:83:73:6f:a6:be:58: 04:cd:13:6f:33:f9:63:0e:d4:b8:db:79:8f:f6:b3: 35:0b:8a:1d:18:21:5b:23:b3:43:90:29:9d:94:8c: fb:be:f5:5b:fa:39:1c:3d:b4:b9:89:0a:b9:40:41: fe:6a:1d:92:12:00:55:da:62:c0:98:33:6c:1b:98: 64:c8:9c:b8:03:ac:6e:ff:fb:fa:ed:49:57:53:5d: 56:4d:5e:71:90:dd:a1:bf:7c:67:7f:39:06:c4:c5: aa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3D:03:25:29:85:D3:EC:82:8C:44:BF:46:88:D6:71:0B:A3:0F:A0 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/hz0DJSmF0-yCjES_RojWcQujD6A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.148.128.0/22 93.88.157.0-93.88.158.255 95.155.128.0/24 95.155.134.0/24 95.155.137.0/24 95.155.139.0/24 95.155.146.0-95.155.150.255 95.155.152.0/22 95.155.176.0/21 152.89.84.0/24 Signature Algorithm: sha256WithRSAEncryption 89:10:0c:c4:28:8f:95:18:a4:76:d6:42:42:aa:8d:30:6e:a9: 6a:d4:3d:03:c6:90:02:b9:0e:a4:10:f2:c5:86:7d:cb:6f:e4: c7:6b:6d:1a:3b:aa:ce:d3:0c:56:25:a6:1a:fc:ae:a4:12:29: aa:fc:08:2f:11:5e:3d:86:d9:9f:2e:ba:80:e8:1f:7e:87:3d: 82:f0:45:8e:e1:1f:30:fc:1d:da:9f:be:3b:ce:5d:63:a6:f3: 4c:de:34:c0:0b:08:b7:6f:84:dc:65:a6:96:43:84:81:d8:02: 7f:57:99:6a:52:f4:81:40:51:22:1c:f2:f1:33:2c:58:64:e6: d0:26:48:d3:55:a8:f3:b4:3e:bf:ed:91:dc:f2:aa:93:af:96: 3d:c5:f3:7c:8d:de:7d:b4:b6:11:d3:2f:ec:33:16:e6:1d:7a: f9:d6:0f:57:a6:1b:82:2c:ec:d5:82:f1:67:ba:42:c1:60:24: a9:bd:5e:38:65:2a:09:2b:45:aa:96:65:a0:de:02:ea:51:db: 34:29:42:36:50:50:25:0d:94:ff:89:00:62:a9:f0:ff:ce:ec: 99:fb:ef:73:85:44:09:1b:67:be:a4:89:7d:52:43:fe:d7:0a: eb:13:59:a0:5f:bf:05:cc:f0:03:e9:69:e4:fc:d1:b9:7a:0d: 0d:66:a2:20 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZwtDGUrNCOIHKn0+i30us4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjYwMjA1MDkwNTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzNkMDMyNTI5ODVkM2VjODI4YzQ0YmY0Njg4ZDY3MTBiYTMwZmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufM9FfWcUWBluJvUy6GHy0YUv9aV 2rmRdvteMgHjMomJlleS5KWHqJpD8lviuBRnE4Lj0PYgExYq30wcDlAJYGs/QMpY 0Wk5NgYFBG+9IIRYzxGl3Dzrle5pH0SF5f5M+0wMwwUoGXkocDtpXzqwD1SwRQOZ EpJi2ztvt15kx5IabGh6U63cF2gGkNsIzKvmzLTJf9DJfzsQHAahc+mDc2+mvlgE zRNvM/ljDtS423mP9rM1C4odGCFbI7NDkCmdlIz7vvVb+jkcPbS5iQq5QEH+ah2S EgBV2mLAmDNsG5hkyJy4A6xu//v67UlXU11WTV5xkN2hv3xnfzkGxMWqwwIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFIc9AyUphdPsgoxEv0aI1nELow+gMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEvaHowREpTbUYwLXlDakVTX1JvaldjUXVqRDZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQCJZSAMAwD BABdWJ0DBABdWJ4DBABfm4ADBABfm4YDBABfm4kDBABfm4swDAMEAV+bkgMEAF+b lgMEAl+bmAMEA1+bsAMEAJhZVDANBgkqhkiG9w0BAQsFAAOCAQEAiRAMxCiPlRik dtZCQqqNMG6patQ9A8aQArkOpBDyxYZ9y2/kx2ttGjuqztMMViWmGvyupBIpqvwI LxFePYbZny66gOgffoc9gvBFjuEfMPwd2p++O85dY6bzTN40wAsIt2+E3GWmlkOE gdgCf1eZalL0gUBRIhzy8TMsWGTm0CZI01Wo87Q+v+2R3PKqk6+WPcXzfI3efbS2 EdMv7DMW5h16+dYPV6Ybgizs1YLxZ7pCwWAkqb1eOGUqCStFqpZloN4C6lHbNClC NlBQJQ2U/4kAYqnw/87smfvvc4VECRtnvqSJfVJD/tcK6xNZoF+/BczwA+lp5PzR uXoNDWaiIA== -----END CERTIFICATE-----Generated at Thu Feb 5 16:27:24 2026 by rpki-client