This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/Ht4mv8kp4i3crO6SB184ED4eteI.roa File: Ht4mv8kp4i3crO6SB184ED4eteI.roa (raw, json) Hash identifier: UhjKCPcDd1ersETNcFLEp5rKk3sifo5x89dtS1h38rA= Subject key identifier: 1E:DE:26:BF:C9:29:E2:2D:DC:AC:EE:92:07:5F:38:10:3E:1E:B5:E2 Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f Certificate serial: 019B7A5B94F5F98AD600A6541CB555440F0B Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/Ht4mv8kp4i3crO6SB184ED4eteI.roa Signing time: Thu 01 Jan 2026 16:19:40 +0000 ROA not before: Thu 01 Jan 2026 16:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8801 IP address blocks: 83.167.176.0/21 maxlen: 21 83.167.181.0/24 maxlen: 24 83.167.182.0/24 maxlen: 24 83.167.183.0/24 maxlen: 24 83.167.184.0/22 maxlen: 22 83.167.185.0/24 maxlen: 24 83.167.186.0/24 maxlen: 24 83.167.187.0/24 maxlen: 24 185.222.21.0/24 maxlen: 24 193.56.176.0/22 maxlen: 22 2a10:f300::/29 maxlen: 29 2a10:f301::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:94:f5:f9:8a:d6:00:a6:54:1c:b5:55:44:0f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f Validity Not Before: Jan 1 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ede26bfc929e22ddcacee92075f38103e1eb5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:eb:d2:c3:c9:16:4f:f8:49:52:a1:ec:d3:ec: 51:04:cf:d3:65:fe:08:0a:0f:d9:34:8b:72:42:b7: 4d:3b:e5:16:48:68:51:42:1a:25:ee:d6:b5:26:83: f3:85:7c:91:f4:0c:79:25:ca:1a:ab:15:1c:89:38: 44:5d:2d:5b:55:4f:1e:dc:9f:2e:63:b5:84:5a:34: f8:7f:5a:09:b3:94:67:fc:4d:83:a7:62:da:cc:08: 93:37:ee:f2:a0:c5:70:76:21:e2:23:2b:11:b8:a0: b4:13:5e:59:9a:aa:f5:5c:9c:65:c8:65:59:ed:cd: be:96:83:8c:de:0c:7e:cd:3e:bc:a3:5c:b9:a8:0f: 8e:35:6a:f9:95:b0:e9:e7:38:90:a1:de:ec:50:cb: 94:de:40:af:31:ec:70:49:8c:e0:c8:07:12:98:18: 40:f5:0a:9e:7c:c3:4d:87:7a:a8:0d:dc:af:d7:4b: 19:e9:f3:9e:88:05:f4:16:57:c0:2f:1d:43:7b:85: da:73:cc:03:cf:0e:2f:e2:96:6c:1b:78:77:06:5b: f4:77:b8:18:3b:ce:cc:2b:96:29:37:17:84:84:4d: af:f4:bb:75:26:13:32:47:15:21:2c:e9:a9:f9:fa: 5a:95:68:2a:60:d0:d0:2b:92:21:18:73:a0:61:ec: b4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DE:26:BF:C9:29:E2:2D:DC:AC:EE:92:07:5F:38:10:3E:1E:B5:E2 X509v3 Authority Key Identifier: keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/Ht4mv8kp4i3crO6SB184ED4eteI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.167.176.0-83.167.187.255 185.222.21.0/24 193.56.176.0/22 IPv6: 2a10:f300::/29 Signature Algorithm: sha256WithRSAEncryption 73:8a:91:2d:d4:e4:ac:13:d0:52:af:df:53:5d:8d:f1:9d:7f: 54:54:31:60:88:f0:00:34:b9:98:ad:8d:d6:bc:dc:c3:2f:e1: 40:05:78:ca:ce:af:8b:e3:4f:a1:e1:63:cd:81:a0:53:c5:45: 7c:8a:d6:ce:c3:74:9f:18:76:17:f7:d8:43:5f:17:21:44:43: 3d:79:95:ca:a2:5d:24:38:8a:79:83:7a:80:c5:8b:28:b7:46: 30:26:75:26:c3:89:a8:f7:d8:fc:57:54:5b:c7:e9:48:56:12: 1a:f2:b1:f4:0e:ea:51:9f:6b:3c:2a:4a:bf:13:91:15:df:2b: ce:18:b0:a3:31:54:e1:c8:a9:46:81:0e:ec:ca:83:a9:14:15: 77:43:48:db:90:d1:f9:e3:2d:70:d8:2a:3d:18:1c:7e:03:c9: a4:e3:70:dd:ff:e5:a0:43:33:71:a4:5a:10:76:50:50:d8:ac: 62:fc:84:11:b6:2d:87:4d:64:b9:ab:34:d5:b1:bf:07:b7:a8: 19:31:ce:98:48:51:40:2f:52:02:f0:ac:ef:80:ed:17:a0:22: cb:e7:0c:37:76:87:62:51:7b:7d:43:10:54:47:19:82:ad:dd: c6:7c:50:1e:92:f5:1d:4f:0a:97:24:1c:12:92:2b:7d:36:b6: 61:ee:4d:17 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt6W5T1+YrWAKZUHLVVRA8LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZTZmNzdjYmRhMTAxOTg3ZDlkZmM4NGJlOTBiNmZiYTY2 YWRjOWYwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWRlMjZiZmM5MjllMjJkZGNhY2VlOTIwNzVmMzgxMDNlMWViNWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruvSw8kWT/hJUqHs0+xRBM/TZf4I Cg/ZNItyQrdNO+UWSGhRQhol7ta1JoPzhXyR9Ax5JcoaqxUciThEXS1bVU8e3J8u Y7WEWjT4f1oJs5Rn/E2Dp2LazAiTN+7yoMVwdiHiIysRuKC0E15Zmqr1XJxlyGVZ 7c2+loOM3gx+zT68o1y5qA+ONWr5lbDp5ziQod7sUMuU3kCvMexwSYzgyAcSmBhA 9QqefMNNh3qoDdyv10sZ6fOeiAX0FlfALx1De4Xac8wDzw4v4pZsG3h3Blv0d7gY O87MK5YpNxeEhE2v9Lt1JhMyRxUhLOmp+fpalWgqYNDQK5IhGHOgYey08QIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFB7eJr/JKeIt3KzukgdfOBA+HrXiMB8GA1UdIwQY MBaAFJbm93y9oQGYfZ38hL6QtvumatyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDkt MzIwOGRlMzljMDlkLzEvSHQ0bXY4a3A0aTNjck82U0IxODRFRDRldGVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDktMzIwOGRlMzljMDlk LzEvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaMAwDBARTp7AD BAJTp7gDBAC53hUDBALBOLAwDQQCAAIwBwMFAyoQ8wAwDQYJKoZIhvcNAQELBQAD ggEBAHOKkS3U5KwT0FKv31NdjfGdf1RUMWCI8AA0uZitjda83MMv4UAFeMrOr4vj T6HhY82BoFPFRXyK1s7DdJ8Ydhf32ENfFyFEQz15lcqiXSQ4inmDeoDFiyi3RjAm dSbDiaj32PxXVFvH6UhWEhrysfQO6lGfazwqSr8TkRXfK84YsKMxVOHIqUaBDuzK g6kUFXdDSNuQ0fnjLXDYKj0YHH4DyaTjcN3/5aBDM3GkWhB2UFDYrGL8hBG2LYdN ZLmrNNWxvwe3qBkxzphIUUAvUgLwrO+A7RegIsvnDDd2h2JRe31DEFRHGYKt3cZ8 UB6S9R1PCpckHBKSK302tmHuTRc= -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:45 2026 by rpki-client