This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Hu1h8PrG5cRphxl6xoCf3ZmJmB0.roa File: Hu1h8PrG5cRphxl6xoCf3ZmJmB0.roa (raw, json) Hash identifier: U2TjYe4v50XDCS0tLx8O8GKbL+cUzuD/PyrnA1ub3Ss= Subject key identifier: 1E:ED:61:F0:FA:C6:E5:C4:69:87:19:7A:C6:80:9F:DD:99:89:98:1D Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C7879D37B87D207B90551FE71C9BF7 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Hu1h8PrG5cRphxl6xoCf3ZmJmB0.roa Signing time: Thu 01 Jan 2026 04:18:43 +0000 ROA not before: Thu 01 Jan 2026 04:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199715 IP address blocks: 81.15.131.0/24 maxlen: 24 81.15.134.0/24 maxlen: 24 81.15.162.0/23 maxlen: 23 81.15.162.0/24 maxlen: 24 81.15.163.0/24 maxlen: 24 81.15.165.0/24 maxlen: 24 81.15.166.0/24 maxlen: 24 81.15.176.0/24 maxlen: 24 81.15.177.0/24 maxlen: 24 81.15.179.0/24 maxlen: 24 81.15.220.0/23 maxlen: 23 81.15.228.0/23 maxlen: 23 81.15.231.0/24 maxlen: 24 81.15.247.0/24 maxlen: 24 81.15.252.0/24 maxlen: 24 81.15.253.0/24 maxlen: 24 82.177.25.0/24 maxlen: 24 82.177.26.0/24 maxlen: 24 82.177.26.74/32 maxlen: 32 82.177.28.0/23 maxlen: 23 82.177.38.0/23 maxlen: 23 82.177.40.0/24 maxlen: 24 82.177.60.0/23 maxlen: 23 82.177.62.0/23 maxlen: 23 82.177.104.0/22 maxlen: 22 82.177.108.0/23 maxlen: 23 82.177.143.0/24 maxlen: 24 82.177.209.0/24 maxlen: 24 82.177.240.0/23 maxlen: 23 88.220.56.0/24 maxlen: 24 88.220.108.0/22 maxlen: 22 88.220.136.0/23 maxlen: 23 88.220.162.0/23 maxlen: 23 195.136.208.0/21 maxlen: 21 195.136.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:87:9d:37:b8:7d:20:7b:90:55:1f:e7:1c:9b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1eed61f0fac6e5c46987197ac6809fdd9989981d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b1:3a:3b:2b:0b:e3:c6:11:4c:63:a7:d3:a5: bc:b9:cf:10:23:cd:58:b1:26:fa:d1:42:db:b7:5b: 3b:74:9c:77:5c:66:e1:98:4b:84:90:d0:4c:8c:c6: 53:6e:41:bb:3a:65:cb:c5:2c:b2:43:be:1a:b3:e3: e7:64:63:bf:ff:55:6d:99:a6:e1:01:4f:a5:cf:74: 54:88:f3:bd:df:37:15:3f:2a:76:d5:8d:9b:f3:2e: ca:d6:0e:23:71:41:86:aa:60:48:fb:7e:78:e7:44: e7:ae:71:e5:90:27:c2:eb:70:67:02:2e:a3:e9:5b: 0e:b9:0c:ce:d5:65:b5:6e:10:46:1d:7b:61:f3:5a: 58:6a:de:99:b7:03:42:ef:f3:25:d5:5f:a2:96:39: 32:ee:29:d2:d3:76:50:e5:5d:cc:f4:88:ac:55:b6: 86:c2:c8:07:cb:80:36:e7:23:5a:95:46:63:f8:7c: f7:cd:71:c6:77:b6:4c:fb:3f:d5:d4:fe:8d:18:dc: 64:62:00:67:f5:9c:90:22:ec:ed:69:56:30:62:39: 5b:3f:bb:f6:7e:c5:73:10:1a:f6:8b:b0:b3:5a:5a: 91:7d:02:27:c2:e6:ca:23:fb:1b:f8:d8:1a:8c:1c: 5e:a3:0f:45:2c:4f:18:e7:f8:49:4e:ac:7d:28:a4: 54:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:ED:61:F0:FA:C6:E5:C4:69:87:19:7A:C6:80:9F:DD:99:89:98:1D X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Hu1h8PrG5cRphxl6xoCf3ZmJmB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.15.131.0/24 81.15.134.0/24 81.15.162.0/23 81.15.165.0-81.15.166.255 81.15.176.0/23 81.15.179.0/24 81.15.220.0/23 81.15.228.0/23 81.15.231.0/24 81.15.247.0/24 81.15.252.0/23 82.177.25.0-82.177.26.255 82.177.28.0/23 82.177.38.0-82.177.40.255 82.177.60.0/22 82.177.104.0-82.177.109.255 82.177.143.0/24 82.177.209.0/24 82.177.240.0/23 88.220.56.0/24 88.220.108.0/22 88.220.136.0/23 88.220.162.0/23 195.136.208.0/20 Signature Algorithm: sha256WithRSAEncryption 8c:ca:4d:af:7a:00:3b:94:e9:b5:79:83:0f:8a:13:09:a3:c7: 9c:d8:26:bc:89:e2:ae:3c:cf:22:25:f0:dd:4c:63:52:8b:88: 08:df:ab:1c:48:bd:b5:e6:4c:eb:49:cd:ca:52:e2:c3:38:96: 25:32:f4:e8:03:b8:ff:84:69:cf:2e:9b:5f:26:f0:49:00:42: 4f:f3:31:36:da:d3:de:3e:19:67:c7:4e:aa:94:18:65:be:83: af:ec:66:93:db:48:bd:01:d4:f3:66:ef:4b:de:3e:a2:6a:2f: b1:13:57:ac:33:7e:c9:f3:09:ac:40:dd:f9:d2:c0:a4:d7:86: 15:43:34:be:9f:07:20:00:4f:46:ca:5d:af:fb:75:d3:02:4f: 75:30:84:c3:74:8b:c0:3b:30:6a:9d:10:6c:9f:bd:0e:4f:88: a7:f5:01:c2:a5:03:2e:e0:86:d8:31:b9:9d:27:73:88:2a:f9: 2c:3e:ae:af:c3:0c:a7:70:5d:f3:9d:39:09:a2:52:b7:4f:b1: 9f:29:91:76:f9:ff:de:07:b3:43:e3:e0:0d:51:d0:63:4e:f0: 11:bb:f5:b2:bd:67:2c:35:f3:c7:cd:73:69:82:75:85:3b:e0: 73:2c:03:59:21:5b:bd:3b:54:c7:10:4f:f3:1f:32:9e:69:c4: b3:8e:6e:e7 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZt3x4edN7h9IHuQVR/nHJv3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWVkNjFmMGZhYzZlNWM0Njk4NzE5N2FjNjgwOWZkZDk5ODk5ODFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rE6OysL48YRTGOn06W8uc8QI81Y sSb60ULbt1s7dJx3XGbhmEuEkNBMjMZTbkG7OmXLxSyyQ74as+PnZGO//1Vtmabh AU+lz3RUiPO93zcVPyp21Y2b8y7K1g4jcUGGqmBI+35450TnrnHlkCfC63BnAi6j 6VsOuQzO1WW1bhBGHXth81pYat6ZtwNC7/Ml1V+iljky7inS03ZQ5V3M9IisVbaG wsgHy4A25yNalUZj+Hz3zXHGd7ZM+z/V1P6NGNxkYgBn9ZyQIuztaVYwYjlbP7v2 fsVzEBr2i7CzWlqRfQInwubKI/sb+NgajBxeow9FLE8Y5/hJTqx9KKRUGwIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFB7tYfD6xuXEaYcZesaAn92ZiZgdMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvSHUxaDhQckc1Y1JwaHhsNnhvQ2YzWm1KbUIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHNBggrBgEFBQcBBwEB/wSBvTCBujCBtwQCAAEwgbADBABR D4MDBABRD4YDBAFRD6IwDAMEAFEPpQMEAFEPpgMEAVEPsAMEAFEPswMEAVEP3AME AVEP5AMEAFEP5wMEAFEP9wMEAVEP/DAMAwQAUrEZAwQAUrEaAwQBUrEcMAwDBAFS sSYDBABSsSgDBAJSsTwwDAMEA1KxaAMEAVKxbAMEAFKxjwMEAFKx0QMEAVKx8AME AFjcOAMEAljcbAMEAVjciAMEAVjcogMEBMOI0DANBgkqhkiG9w0BAQsFAAOCAQEA jMpNr3oAO5TptXmDD4oTCaPHnNgmvInirjzPIiXw3UxjUouICN+rHEi9teZM60nN ylLiwziWJTL06AO4/4Rpzy6bXybwSQBCT/MxNtrT3j4ZZ8dOqpQYZb6Dr+xmk9tI vQHU82bvS94+omovsRNXrDN+yfMJrEDd+dLApNeGFUM0vp8HIABPRspdr/t10wJP dTCEw3SLwDswap0QbJ+9Dk+Ip/UBwqUDLuCG2DG5nSdziCr5LD6ur8MMp3Bd8505 CaJSt0+xnymRdvn/3gezQ+PgDVHQY07wEbv1sr1nLDXzx81zaYJ1hTvgcywDWSFb vTtUxxBP8x8ynmnEs45u5w== -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:41 2026 by rpki-client