This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/H1XFtGY48S7NyteGq9ocooB_ktM.roa File: H1XFtGY48S7NyteGq9ocooB_ktM.roa (raw, json) Hash identifier: G8R1I1DIiHdtoDh1kdx5LxjS3FgXMSW8e+KxtmIhmMk= Subject key identifier: 1F:55:C5:B4:66:38:F1:2E:CD:CA:D7:86:AB:DA:1C:A2:80:7F:92:D3 Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b Certificate serial: 019B7D5B34659C20A42805F1D5686BE898EA Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/H1XFtGY48S7NyteGq9ocooB_ktM.roa Signing time: Fri 02 Jan 2026 06:18:07 +0000 ROA not before: Fri 02 Jan 2026 06:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51956 IP address blocks: 92.53.236.0/22 maxlen: 22 92.53.236.0/24 maxlen: 24 92.53.237.0/24 maxlen: 24 92.53.238.0/24 maxlen: 24 92.53.239.0/24 maxlen: 24 185.144.132.0/22 maxlen: 22 185.144.132.0/23 maxlen: 23 185.144.132.0/24 maxlen: 24 185.144.133.0/24 maxlen: 24 185.144.134.0/24 maxlen: 24 185.144.135.0/24 maxlen: 24 185.201.172.0/22 maxlen: 22 2a00:b8c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:34:65:9c:20:a4:28:05:f1:d5:68:6b:e8:98:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b Validity Not Before: Jan 2 06:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f55c5b46638f12ecdcad786abda1ca2807f92d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:09:04:d2:b1:e7:2c:1f:be:54:13:ca:c2:ed: 70:b3:50:6f:34:8a:f3:f9:7a:eb:95:97:a4:53:d0: 4f:b7:d3:4c:6a:3d:68:42:8c:08:b5:f7:e3:02:2e: 4f:bc:1e:f0:bc:cb:d2:d9:2b:69:71:b8:7d:a9:c8: a2:79:2a:d1:ea:55:37:28:68:fc:f4:39:fd:18:a9: ba:13:64:b9:ea:14:a3:f5:78:a7:1b:16:ab:51:96: 5b:8d:91:15:6c:bb:3b:70:fd:74:ca:9b:98:a7:4a: a9:fe:14:e4:b9:5b:9f:3f:e9:01:1f:bf:9d:15:f3: d5:a8:9a:f5:b0:6f:62:bf:4e:09:1b:61:4b:15:36: b1:d4:45:78:1e:a5:d6:97:01:e1:62:7b:e6:2a:fc: 0a:69:ab:d4:ed:4c:c4:05:dc:ae:0d:13:57:a1:e1: 1f:c4:39:a7:b9:48:5d:e9:ba:8c:54:e1:c9:a8:c1: 8b:d1:90:df:0c:14:1f:32:57:b1:a6:d7:aa:97:53: 24:31:bf:0e:e9:3c:82:0b:d5:ce:c8:2a:66:e4:c3: c8:eb:50:ff:23:53:ee:00:22:7e:2a:1c:a0:0d:05: fb:2e:f4:f2:fc:d9:53:cd:a5:8c:71:75:dd:3e:49: fc:d3:90:58:6a:09:fb:c9:b2:7c:bd:6b:83:b1:c5: f9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:55:C5:B4:66:38:F1:2E:CD:CA:D7:86:AB:DA:1C:A2:80:7F:92:D3 X509v3 Authority Key Identifier: keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/H1XFtGY48S7NyteGq9ocooB_ktM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.53.236.0/22 185.144.132.0/22 185.201.172.0/22 IPv6: 2a00:b8c0::/32 Signature Algorithm: sha256WithRSAEncryption 89:f6:d9:65:aa:f4:fe:d0:89:c6:d0:62:08:40:e4:ac:31:4d: a9:cf:eb:e6:89:97:fa:63:ef:39:fb:49:39:e5:73:7d:f4:da: 87:a9:24:e5:20:0a:22:ba:7a:39:fa:c6:98:8c:99:18:0f:00: 72:e9:f7:bc:17:d8:53:39:4f:30:f8:a7:51:7c:c1:32:e5:01: fc:d0:06:d8:d7:19:02:a3:2d:98:02:84:b7:1c:06:c2:dc:2b: 3f:a6:ff:2c:8e:31:07:81:66:b9:50:82:3d:47:a7:3a:4b:f5: db:6d:bf:f5:1b:2f:07:db:9f:53:64:46:0e:c3:0c:c0:27:91: 02:e4:b7:49:a2:e2:12:31:e8:9a:0f:4f:e3:4d:dd:74:7d:8e: 49:f5:d5:2a:e9:a6:31:62:59:e1:ad:96:24:2a:2c:9d:44:96: b4:6a:41:c7:04:05:fc:ae:62:0e:84:d5:07:26:81:cf:50:6f: e3:44:ea:8d:2b:cb:f3:0f:e6:11:b9:3b:1e:3c:0f:26:b3:30: d2:d3:6c:23:31:8f:fd:b9:a4:75:3d:16:13:55:f2:85:2a:b6: 8f:63:ba:de:ac:dd:97:ce:ad:b6:1c:a3:5a:54:38:ec:90:81: 25:4e:41:cf:22:13:db:5e:f2:db:ef:c3:f6:b5:60:60:6d:ee: 3c:10:df:41 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9WzRlnCCkKAXx1Whr6JjqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZGZmMDFmNTZlMzQxOWQwMjdiZTc1OTFjZWVmNjI4NTFj ZTBmNmIwHhcNMjYwMTAyMDYxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjU1YzViNDY2MzhmMTJlY2RjYWQ3ODZhYmRhMWNhMjgwN2Y5MmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQkE0rHnLB++VBPKwu1ws1BvNIrz +XrrlZekU9BPt9NMaj1oQowItffjAi5PvB7wvMvS2Stpcbh9qciieSrR6lU3KGj8 9Dn9GKm6E2S56hSj9XinGxarUZZbjZEVbLs7cP10ypuYp0qp/hTkuVufP+kBH7+d FfPVqJr1sG9iv04JG2FLFTax1EV4HqXWlwHhYnvmKvwKaavU7UzEBdyuDRNXoeEf xDmnuUhd6bqMVOHJqMGL0ZDfDBQfMlexpteql1MkMb8O6TyCC9XOyCpm5MPI61D/ I1PuACJ+KhygDQX7LvTy/NlTzaWMcXXdPkn805BYagn7ybJ8vWuDscX5xwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFB9VxbRmOPEuzcrXhqvaHKKAf5LTMB8GA1UdIwQY MBaAFKjf8B9W40GdAnvnWRzu9ihRzg9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUt ODgyYzQ0OGUyZWY2LzEvSDFYRnRHWTQ4UzdOeXRlR3E5b2Nvb0Jfa3RNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUtODgyYzQ0OGUyZWY2 LzEvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCXDXsAwQC uZCEAwQCucmsMA0EAgACMAcDBQAqALjAMA0GCSqGSIb3DQEBCwUAA4IBAQCJ9tll qvT+0InG0GIIQOSsMU2pz+vmiZf6Y+85+0k55XN99NqHqSTlIAoiuno5+saYjJkY DwBy6fe8F9hTOU8w+KdRfMEy5QH80AbY1xkCoy2YAoS3HAbC3Cs/pv8sjjEHgWa5 UII9R6c6S/Xbbb/1Gy8H259TZEYOwwzAJ5EC5LdJouISMeiaD0/jTd10fY5J9dUq 6aYxYlnhrZYkKiydRJa0akHHBAX8rmIOhNUHJoHPUG/jROqNK8vzD+YRuTsePA8m szDS02wjMY/9uaR1PRYTVfKFKraPY7rerN2Xzq22HKNaVDjskIElTkHPIhPbXvLb 78P2tWBgbe48EN9B -----END CERTIFICATE-----Generated at Mon Jan 26 04:54:58 2026 by rpki-client