This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/B_EncHrDvifkg2nCGMklUrOo0Ug.roa File: B_EncHrDvifkg2nCGMklUrOo0Ug.roa (raw, json) Hash identifier: xcZDiT2m5lq0I5LG6Q29RjfmHvdiXJHBI+h2WR1rfvY= Subject key identifier: 07:F1:27:70:7A:C3:BE:27:E4:83:69:C2:18:C9:25:52:B3:A8:D1:48 Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca Certificate serial: 019B77590CA6F5091C37FDBA39789DF21FE9 Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/B_EncHrDvifkg2nCGMklUrOo0Ug.roa Signing time: Thu 01 Jan 2026 02:18:03 +0000 ROA not before: Thu 01 Jan 2026 02:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12350 IP address blocks: 185.133.28.0/22 maxlen: 22 194.38.64.0/19 maxlen: 19 194.38.160.0/19 maxlen: 19 194.148.4.0/22 maxlen: 22 194.148.8.0/21 maxlen: 21 194.148.16.0/20 maxlen: 20 194.148.32.0/20 maxlen: 20 194.148.48.0/22 maxlen: 22 194.148.60.0/22 maxlen: 22 194.148.96.0/19 maxlen: 19 195.15.0.0/17 maxlen: 17 212.28.128.0/19 maxlen: 19 212.40.0.0/19 maxlen: 19 212.109.64.0/19 maxlen: 19 212.147.0.0/17 maxlen: 17 212.147.79.0/24 maxlen: 24 212.232.128.0/17 maxlen: 17 212.254.0.0/16 maxlen: 16 213.5.152.0/21 maxlen: 21 213.162.0.0/19 maxlen: 19 2001:4c78::/32 maxlen: 32 2a03:a360::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0c:a6:f5:09:1c:37:fd:ba:39:78:9d:f2:1f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca Validity Not Before: Jan 1 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07f127707ac3be27e48369c218c92552b3a8d148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:3a:25:28:cf:d9:9e:2c:f5:6e:6a:c3:de: 08:6b:18:f0:24:e3:cf:21:b9:d0:7a:3a:6b:33:36: 50:92:0e:1e:da:a9:ca:01:9e:0a:f0:44:07:0b:a4: 3e:db:db:ed:d6:aa:a6:3e:6e:eb:54:97:cc:15:5b: 93:17:35:83:5f:9b:c2:27:60:04:02:f5:0b:0b:a7: 29:39:32:a7:08:02:8d:7e:eb:2b:76:a6:18:b9:57: af:ad:f9:3e:1c:ec:88:25:6a:6a:07:7c:ef:59:b5: 62:27:f3:6e:71:19:18:a5:b7:17:98:86:e8:c5:51: da:24:65:39:2e:02:50:94:32:22:b4:48:ef:70:99: ef:ec:81:c3:06:19:50:02:8a:c7:13:1c:d2:28:e5: ae:7b:c9:50:53:10:dc:ee:c8:d8:c6:b0:6e:e7:d8: e3:59:e6:0d:35:50:bf:0d:18:cc:d6:23:b9:6d:5b: b9:cc:bb:07:6a:bd:a9:32:b6:d0:17:30:44:e6:db: c6:3e:66:c4:2d:0b:e2:91:43:88:c2:cf:02:43:8a: 50:04:0e:88:3f:9c:62:b0:d0:62:97:9f:7c:54:7f: a4:14:d7:16:46:08:d2:ac:cd:bd:93:05:ee:34:2d: 40:80:c5:67:aa:52:d4:40:22:af:62:3b:c3:e3:ea: 7f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F1:27:70:7A:C3:BE:27:E4:83:69:C2:18:C9:25:52:B3:A8:D1:48 X509v3 Authority Key Identifier: keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/B_EncHrDvifkg2nCGMklUrOo0Ug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.28.0/22 194.38.64.0/19 194.38.160.0/19 194.148.4.0-194.148.51.255 194.148.60.0/22 194.148.96.0/19 195.15.0.0/17 212.28.128.0/19 212.40.0.0/19 212.109.64.0/19 212.147.0.0/17 212.232.128.0/17 212.254.0.0/16 213.5.152.0/21 213.162.0.0/19 IPv6: 2001:4c78::/32 2a03:a360::/32 Signature Algorithm: sha256WithRSAEncryption 01:ef:e4:f4:2a:41:9b:56:5e:98:c7:8e:7c:9d:40:8e:a6:5c: 42:2a:0c:1a:c5:9d:54:3d:12:a5:ad:46:a3:df:94:77:a3:e0: 3b:a3:a8:88:0f:46:1c:a4:ea:62:6d:fc:63:b8:33:31:7c:af: 1d:1f:06:1b:11:9e:ad:fb:89:7e:b3:15:a6:6b:44:bb:8e:19: 53:43:41:ae:9d:35:75:fb:c5:fb:b1:cc:80:65:73:08:e7:58: de:2f:5b:5f:95:29:2e:7d:e9:df:22:b2:d0:93:53:3b:75:4c: 4d:d5:ec:77:96:5d:2d:24:0d:45:d0:3f:d2:e3:32:85:88:63: 24:d9:1d:47:82:ab:10:05:d0:67:e6:40:4f:10:5b:87:52:71: 4d:08:3d:a3:06:9f:49:6c:5d:31:5b:6b:b7:81:82:51:36:05: 19:de:ef:01:27:99:f5:89:6a:5c:b3:8f:1c:c2:13:f7:cb:11: 64:f8:4b:12:56:02:18:84:1b:6c:14:ad:f0:bf:55:97:39:97: 86:8f:d4:d7:35:95:6e:5c:9b:99:cd:46:02:51:a8:2f:b1:c3: 32:fe:39:e1:51:cb:45:7e:c4:20:96:09:63:fc:77:6d:50:fb: 2c:52:4c:3b:2f:c1:6d:1c:22:4e:93:89:71:8e:71:5b:8b:d1: 42:74:fb:b3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgISAZt3WQym9QkcN/26OXid8h/pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNzM5ZDIxM2E0MzhmNjc4YjMyMmE4ZjhmODRlMmQ4Yzc4 MTRhY2EwHhcNMjYwMTAxMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2YxMjc3MDdhYzNiZTI3ZTQ4MzY5YzIxOGM5MjU1MmIzYThkMTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSE6JSjP2Z4s9W5qw94IaxjwJOPP IbnQejprMzZQkg4e2qnKAZ4K8EQHC6Q+29vt1qqmPm7rVJfMFVuTFzWDX5vCJ2AE AvULC6cpOTKnCAKNfusrdqYYuVevrfk+HOyIJWpqB3zvWbViJ/NucRkYpbcXmIbo xVHaJGU5LgJQlDIitEjvcJnv7IHDBhlQAorHExzSKOWue8lQUxDc7sjYxrBu59jj WeYNNVC/DRjM1iO5bVu5zLsHar2pMrbQFzBE5tvGPmbELQvikUOIws8CQ4pQBA6I P5xisNBil598VH+kFNcWRgjSrM29kwXuNC1AgMVnqlLUQCKvYjvD4+p/BQIDAQAB o4ICfDCCAngwHQYDVR0OBBYEFAfxJ3B6w74n5INpwhjJJVKzqNFIMB8GA1UdIwQY MBaAFB9znSE6Q49nizIqj4+E4tjHgUrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84MWJjOTUtMTQ0NC00MDhhLTkyZjEt MzkyZTA1YTg0Mjc3LzEvQl9FbmNIckR2aWZrZzJuQ0dNa2xVck9vMFVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84MWJjOTUtMTQ0NC00MDhhLTkyZjEtMzkyZTA1YTg0Mjc3 LzEvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MGcEAgABMGEDBAK5hRwD BAXCJkADBAXCJqAwDAMEAsKUBAMEAsKUMAMEAsKUPAMEBcKUYAMEB8MPAAMEBdQc gAMEBdQoAAMEBdRtQAMEB9STAAMEB9TogAMDANT+AwQD1QWYAwQF1aIAMBQEAgAC MA4DBQAgAUx4AwUAKgOjYDANBgkqhkiG9w0BAQsFAAOCAQEAAe/k9CpBm1ZemMeO fJ1AjqZcQioMGsWdVD0Spa1Go9+Ud6PgO6OoiA9GHKTqYm38Y7gzMXyvHR8GGxGe rfuJfrMVpmtEu44ZU0NBrp01dfvF+7HMgGVzCOdY3i9bX5UpLn3p3yKy0JNTO3VM TdXsd5ZdLSQNRdA/0uMyhYhjJNkdR4KrEAXQZ+ZATxBbh1JxTQg9owafSWxdMVtr t4GCUTYFGd7vASeZ9YlqXLOPHMIT98sRZPhLElYCGIQbbBSt8L9VlzmXho/U1zWV blybmc1GAlGoL7HDMv454VHLRX7EIJYJY/x3bVD7LFJMOy/BbRwiTpOJcY5xW4vR QnT7sw== -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:20 2026 by rpki-client