This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/H180kdffd3luCWDv6OkwCGcrOfc.roa File: H180kdffd3luCWDv6OkwCGcrOfc.roa (raw, json) Hash identifier: bZpdssv1zrr3XYWLcVwhDgI3iMTPHR0H5UYXdEHp1SQ= Subject key identifier: 1F:5F:34:91:D7:DF:77:79:6E:09:60:EF:E8:E9:30:08:67:2B:39:F7 Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd Certificate serial: 019B775899FC47EEC03F45A5B90840816D0F Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/H180kdffd3luCWDv6OkwCGcrOfc.roa Signing time: Thu 01 Jan 2026 02:17:33 +0000 ROA not before: Thu 01 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34224 IP address blocks: 82.112.171.0/24 maxlen: 24 82.112.174.0/24 maxlen: 24 82.112.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:99:fc:47:ee:c0:3f:45:a5:b9:08:40:81:6d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd Validity Not Before: Jan 1 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f5f3491d7df77796e0960efe8e93008672b39f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b1:02:aa:b9:1e:ef:19:c1:70:ec:0b:10:be: 4d:fb:36:b8:1c:06:bd:b1:fb:40:ec:77:d7:68:64: d7:1e:4d:7b:43:5d:5a:bc:ee:71:ec:24:f9:40:40: 8d:04:ed:e4:28:77:39:ad:cf:27:be:a0:42:e7:44: 0c:6f:cc:74:ef:a0:19:73:2c:7c:6c:b2:5c:94:cc: 64:6a:ca:15:c3:8b:a6:f1:d5:44:d3:8b:0a:ce:d9: 5b:96:d1:1a:a6:47:82:ad:6a:75:ca:d8:b2:b7:d2: 94:bb:fe:a6:10:f5:b0:b2:f9:06:0f:33:5e:11:8f: d1:93:17:44:ad:05:f0:6b:8e:62:b8:a2:3d:8e:9b: 7d:d1:e8:0c:5a:89:8f:2b:9d:44:d9:2b:a2:28:03: dd:98:7c:57:46:40:8a:af:60:41:bb:63:ea:ec:36: 3e:f6:8f:8e:fb:be:76:98:d6:48:86:e4:eb:71:55: 25:60:4f:5a:2d:83:8f:cd:ff:81:92:85:57:5e:97: 56:29:c4:67:2a:b5:71:bd:23:f8:7e:b4:b8:bd:40: 60:a9:0b:d1:4e:df:8a:e5:6d:92:1d:81:b5:7d:7a: 18:27:26:15:a7:6d:73:95:80:91:b9:b4:7a:9e:71: 98:d1:db:9d:2c:31:f5:b1:1a:72:3f:08:4c:19:21: 1e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5F:34:91:D7:DF:77:79:6E:09:60:EF:E8:E9:30:08:67:2B:39:F7 X509v3 Authority Key Identifier: keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/H180kdffd3luCWDv6OkwCGcrOfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.112.171.0/24 82.112.174.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:af:f8:37:87:87:36:b2:2d:14:13:9b:42:b3:c0:90:4f:12: 5b:45:b7:12:5f:50:89:13:f5:3a:77:53:5c:52:5e:2b:99:c0: 92:b3:c9:37:17:04:dd:cc:0d:68:4a:af:3a:97:9a:4c:94:df: bb:ae:f0:79:35:fa:56:80:1b:29:4f:8b:07:28:40:31:ea:47: c7:1f:d8:ac:5e:98:40:64:87:75:ef:1f:56:bf:83:40:fe:ed: 1a:a1:0b:90:d6:f5:ee:5d:80:34:a7:60:61:53:97:bf:4a:10: b6:28:b9:d6:3d:43:37:4c:fc:35:11:15:df:74:d5:19:5c:83: 1a:0d:01:39:de:85:f7:5f:51:e6:a9:cf:f6:14:f1:fc:ac:48: 63:8f:a1:78:d0:d0:cf:ad:17:ba:36:f0:31:a7:43:88:47:bc: 91:ee:78:7b:01:07:f8:0a:ee:f0:ce:6b:51:02:40:f3:97:9c: f8:33:b2:79:40:db:4b:65:39:16:66:82:94:f0:f4:88:89:2a: 55:de:92:4f:55:1d:94:60:7e:3b:aa:a6:52:7a:85:2a:35:06: a1:0b:23:9b:42:55:8a:a3:30:f1:f0:1f:79:6d:7f:30:1b:87: 76:b6:24:b4:a3:ba:10:30:74:29:51:27:b0:70:87:90:93:c2: 3b:3d:30:5a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WJn8R+7AP0WluQhAgW0PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMzgxYmM5NjlkZTZhZGMzZDFkZGMwZWI4OWJkZWVhY2U5 ODA1Y2QwHhcNMjYwMTAxMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjVmMzQ5MWQ3ZGY3Nzc5NmUwOTYwZWZlOGU5MzAwODY3MmIzOWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrECqrke7xnBcOwLEL5N+za4HAa9 sftA7HfXaGTXHk17Q11avO5x7CT5QECNBO3kKHc5rc8nvqBC50QMb8x076AZcyx8 bLJclMxkasoVw4um8dVE04sKztlbltEapkeCrWp1ytiyt9KUu/6mEPWwsvkGDzNe EY/RkxdErQXwa45iuKI9jpt90egMWomPK51E2SuiKAPdmHxXRkCKr2BBu2Pq7DY+ 9o+O+752mNZIhuTrcVUlYE9aLYOPzf+BkoVXXpdWKcRnKrVxvSP4frS4vUBgqQvR Tt+K5W2SHYG1fXoYJyYVp21zlYCRubR6nnGY0dudLDH1sRpyPwhMGSEeIQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB9fNJHX33d5bglg7+jpMAhnKzn3MB8GA1UdIwQY MBaAFJE4G8lp3mrcPR3cDrib3urOmAXNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mMzU0MDYtZDhjNC00ZjVjLTkyYWMt MjU2ZGE5NWQxMzQ1LzEvSDE4MGtkZmZkM2x1Q1dEdjZPa3dDR2NyT2ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mMzU0MDYtZDhjNC00ZjVjLTkyYWMtMjU2ZGE5NWQxMzQ1 LzEva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUnCrAwQB UnCuMA0GCSqGSIb3DQEBCwUAA4IBAQAbr/g3h4c2si0UE5tCs8CQTxJbRbcSX1CJ E/U6d1NcUl4rmcCSs8k3FwTdzA1oSq86l5pMlN+7rvB5NfpWgBspT4sHKEAx6kfH H9isXphAZId17x9Wv4NA/u0aoQuQ1vXuXYA0p2BhU5e/ShC2KLnWPUM3TPw1ERXf dNUZXIMaDQE53oX3X1Hmqc/2FPH8rEhjj6F40NDPrRe6NvAxp0OIR7yR7nh7AQf4 Cu7wzmtRAkDzl5z4M7J5QNtLZTkWZoKU8PSIiSpV3pJPVR2UYH47qqZSeoUqNQah CyObQlWKozDx8B95bX8wG4d2tiS0o7oQMHQpUSewcIeQk8I7PTBa -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:20 2026 by rpki-client