This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/H4E910mHd3NwPMuW-dbmWi2iqHk.roa File: H4E910mHd3NwPMuW-dbmWi2iqHk.roa (raw, json) Hash identifier: 381uzl24r+uPOKXs4s9+OH+E73WZT4iQfGrl9ztHA9M= Subject key identifier: 1F:81:3D:D7:49:87:77:73:70:3C:CB:96:F9:D6:E6:5A:2D:A2:A8:79 Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7 Certificate serial: 019B77594283619987F9FE90833468C24292 Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/H4E910mHd3NwPMuW-dbmWi2iqHk.roa Signing time: Thu 01 Jan 2026 02:18:17 +0000 ROA not before: Thu 01 Jan 2026 02:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34661 IP address blocks: 46.250.0.0/19 maxlen: 19 109.200.224.0/19 maxlen: 19 185.6.184.0/22 maxlen: 22 194.143.136.0/23 maxlen: 23 213.231.0.0/18 maxlen: 18 2a00:1e20::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:42:83:61:99:87:f9:fe:90:83:34:68:c2:42:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7 Validity Not Before: Jan 1 02:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f813dd749877773703ccb96f9d6e65a2da2a879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:ef:bf:e9:0c:ad:aa:4a:df:1c:9e:b5:e7: 74:f9:1a:9e:fd:9c:e7:8c:dc:8c:a1:0d:01:96:88: df:d6:a9:03:8a:52:1a:95:d7:84:0b:70:bb:68:1c: 47:8d:29:83:20:77:d7:88:65:3e:5f:57:25:52:e3: 3f:bd:8b:96:47:65:f6:1a:a7:2f:da:53:f1:73:5f: 55:80:09:9e:f5:d8:57:71:f9:74:9f:2c:42:ae:5c: e6:87:1a:92:83:dd:da:fe:67:b2:a7:f3:80:1a:3f: f2:3c:c5:34:9d:2d:97:51:3b:7f:46:1b:39:ae:7d: 18:a7:92:ff:9f:6c:04:3e:a6:ae:47:98:9f:85:79: c3:b5:24:eb:53:26:44:b3:37:d0:77:0f:80:18:ce: 84:3e:c6:66:45:0d:41:ea:d4:1c:42:1e:e0:b1:35: a2:1b:07:9b:27:73:08:9a:5a:b8:49:26:13:f3:fb: 65:3d:d7:93:1f:93:f7:37:a6:d2:5f:a1:5d:e6:d0: 30:fe:eb:17:dc:15:1d:83:36:11:a1:20:b5:86:b3: 09:8a:25:8e:63:28:b8:fc:bc:a8:68:8f:d7:c4:0e: ed:51:b9:e4:a8:cd:33:15:be:7b:84:01:ca:07:51: 57:8f:a0:e0:17:fe:71:30:d2:cb:b4:f1:80:b5:48: 99:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:81:3D:D7:49:87:77:73:70:3C:CB:96:F9:D6:E6:5A:2D:A2:A8:79 X509v3 Authority Key Identifier: keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/H4E910mHd3NwPMuW-dbmWi2iqHk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.250.0.0/19 109.200.224.0/19 185.6.184.0/22 194.143.136.0/23 213.231.0.0/18 IPv6: 2a00:1e20::/29 Signature Algorithm: sha256WithRSAEncryption 32:40:ed:00:ed:2d:80:c4:aa:92:44:2e:a8:06:37:df:ad:93: 4e:bc:5e:55:9d:c4:5d:05:75:fc:d6:5c:a9:8b:45:2d:d0:77: 0e:3d:a7:49:7e:51:7a:c6:4a:f1:46:4d:3e:b9:1e:36:f1:2a: c2:1d:1d:35:06:fd:63:8d:11:7c:81:db:aa:da:64:ee:09:c5: ac:80:d5:62:39:f0:77:8e:95:9f:cf:b4:32:fc:62:2d:c9:1f: 89:00:a3:b7:f2:e0:15:b7:01:d4:6d:f1:cb:90:60:31:7a:b5: 5b:ee:97:ef:47:41:f7:38:67:a5:f0:4b:02:d5:4a:68:d7:05: 45:d3:62:07:db:e3:99:dd:c7:2b:5a:ac:44:c8:15:2a:cd:f2: c3:91:49:c4:d8:51:9c:29:8b:09:ca:17:28:7c:a6:71:79:8a: 9d:17:05:32:75:fb:99:45:6f:66:8d:61:f5:53:ad:ef:2d:69: 07:64:0e:07:12:15:3c:23:55:12:85:90:b1:82:6c:db:cf:9a: 68:5e:49:c0:e0:9d:8c:c2:75:8e:c5:a3:2e:77:ee:68:05:1d: 9f:9a:55:f1:39:b3:b4:d7:56:bb:e1:a1:88:73:8e:1b:bc:92: 93:48:eb:b0:7e:c5:27:ae:f2:96:fb:52:2e:86:bb:25:98:67: b8:53:b7:ae -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt3WUKDYZmH+f6QgzRowkKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGJhODRjZGRlYTQzZmNiZTQxZTk4NmIxZmM3ODEzN2Rj ZmVmZDcwHhcNMjYwMTAxMDIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjgxM2RkNzQ5ODc3NzczNzAzY2NiOTZmOWQ2ZTY1YTJkYTJhODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM7vv+kMrapK3xyeted0+Rqe/Zzn jNyMoQ0Blojf1qkDilIaldeEC3C7aBxHjSmDIHfXiGU+X1clUuM/vYuWR2X2Gqcv 2lPxc19VgAme9dhXcfl0nyxCrlzmhxqSg93a/meyp/OAGj/yPMU0nS2XUTt/Rhs5 rn0Yp5L/n2wEPqauR5ifhXnDtSTrUyZEszfQdw+AGM6EPsZmRQ1B6tQcQh7gsTWi GwebJ3MImlq4SSYT8/tlPdeTH5P3N6bSX6Fd5tAw/usX3BUdgzYRoSC1hrMJiiWO Yyi4/LyoaI/XxA7tUbnkqM0zFb57hAHKB1FXj6DgF/5xMNLLtPGAtUiZEwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFB+BPddJh3dzcDzLlvnW5lotoqh5MB8GA1UdIwQY MBaAFFnbqEzd6kP8vkHphrH8eBN9z+/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEt MDVkMDhjZWEwMmE5LzEvSDRFOTEwbUhkM053UE11Vy1kYm1XaTJpcUhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEtMDVkMDhjZWEwMmE5 LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFLvoAAwQF bcjgAwQCuQa4AwQBwo+IAwQG1ecAMA0EAgACMAcDBQMqAB4gMA0GCSqGSIb3DQEB CwUAA4IBAQAyQO0A7S2AxKqSRC6oBjffrZNOvF5VncRdBXX81lypi0Ut0HcOPadJ flF6xkrxRk0+uR428SrCHR01Bv1jjRF8gduq2mTuCcWsgNViOfB3jpWfz7Qy/GIt yR+JAKO38uAVtwHUbfHLkGAxerVb7pfvR0H3OGel8EsC1Upo1wVF02IH2+OZ3ccr WqxEyBUqzfLDkUnE2FGcKYsJyhcofKZxeYqdFwUydfuZRW9mjWH1U63vLWkHZA4H EhU8I1UShZCxgmzbz5poXknA4J2MwnWOxaMud+5oBR2fmlXxObO011a74aGIc44b vJKTSOuwfsUnrvKW+1IuhrslmGe4U7eu -----END CERTIFICATE-----Generated at Mon Jan 26 12:26:02 2026 by rpki-client