This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/H2ga1O1qKzRR8q_8zJazodNjzz8.roa File: H2ga1O1qKzRR8q_8zJazodNjzz8.roa (raw, json) Hash identifier: YVg5eFWXr4f+E2vR45lk4R3YG7ojGn5iinnAnjeUfgQ= Subject key identifier: 1F:68:1A:D4:ED:6A:2B:34:51:F2:AF:FC:CC:96:B3:A1:D3:63:CF:3F Certificate issuer: /CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6 Certificate serial: 019B76EB7AF325E04D388A1991E00D9788E8 Authority key identifier: 02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/H2ga1O1qKzRR8q_8zJazodNjzz8.roa Signing time: Thu 01 Jan 2026 00:18:22 +0000 ROA not before: Thu 01 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49937 IP address blocks: 185.28.72.0/24 maxlen: 24 193.31.214.0/24 maxlen: 24 193.31.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7a:f3:25:e0:4d:38:8a:19:91:e0:0d:97:88:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6 Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f681ad4ed6a2b3451f2affccc96b3a1d363cf3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9e:f5:03:53:44:56:48:46:33:06:c6:da:04: d1:52:a5:19:42:3c:c3:53:c7:e6:84:f1:d5:39:e2: e2:bb:79:2f:4e:c7:0c:56:3c:84:64:50:3c:0e:29: e4:b9:50:5b:df:1e:24:23:c2:16:ed:3a:57:39:f0: 7c:87:8f:56:af:30:b5:61:31:b1:7b:7a:15:57:a2: 84:77:3d:53:b7:30:8b:43:94:6a:21:86:c3:47:4f: ae:4f:f7:a2:03:7c:d3:f9:b5:b3:73:1f:3f:c5:e9: c8:b6:ad:f5:e7:c0:b9:08:cf:58:f1:ad:73:82:68: a6:c9:85:2a:5d:bf:de:5a:c0:00:73:d9:4b:3a:1f: 9c:7e:e9:77:73:6a:67:8b:31:5a:91:25:0a:de:de: 1d:12:93:ba:af:d8:5b:f5:15:6a:14:94:9b:e2:40: ac:50:d0:9a:7d:aa:f3:31:3f:3f:81:1d:bd:ad:f8: 49:33:b0:61:f8:1b:f4:87:84:0c:9f:37:dc:07:b0: fa:ed:6b:08:18:7b:95:b6:7e:c0:98:18:c2:be:58: 5e:9f:a5:df:79:89:66:81:79:2c:b6:d2:ce:8e:06: 1a:5b:b1:65:d6:ec:9a:7f:f4:55:f5:34:fd:36:c7: 1e:26:9d:29:bf:99:d4:9a:5c:97:d1:31:3c:99:cd: 98:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:68:1A:D4:ED:6A:2B:34:51:F2:AF:FC:CC:96:B3:A1:D3:63:CF:3F X509v3 Authority Key Identifier: keyid:02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/H2ga1O1qKzRR8q_8zJazodNjzz8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.28.72.0/24 193.31.214.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:39:bc:10:15:46:5d:47:c4:53:ae:1d:e3:46:37:23:92:f7: 53:41:0c:94:03:e9:c4:3b:0e:67:9a:e3:e8:70:98:68:d3:97: ea:2b:31:e4:e1:98:1c:93:fb:00:50:6d:39:c8:4f:a6:f7:8f: 84:50:be:f7:45:b9:71:be:f9:bf:e3:4b:52:54:f1:47:22:d8: 8b:5a:3c:30:a2:81:c0:f5:5e:a7:d3:c3:e9:bf:50:a2:40:de: 96:3f:7e:bc:e8:6f:1c:21:1e:29:5b:6b:19:7c:0d:c7:da:24: 4c:9d:8e:6e:cb:b6:ec:37:63:83:be:13:37:b5:c9:38:a9:5b: 86:1c:e2:5f:e4:55:04:23:6e:d2:7e:1a:06:51:69:5e:84:9a: 29:c9:51:e2:2b:23:cc:fb:a8:dd:95:78:47:93:56:fd:cc:bb: f6:3f:fd:59:7b:df:22:d6:57:a0:e9:69:76:aa:f4:75:3f:a3: 08:a1:a3:c1:a3:45:18:8b:c4:9e:c4:ea:28:f2:a0:a7:3a:b4: 37:88:f6:f2:4a:e8:87:ce:10:c7:88:bc:30:cf:11:e6:e3:97: bf:2e:83:bb:ca:e2:ff:6c:a5:1a:7c:fc:31:c8:bb:d9:ec:92: 81:3a:2e:4c:d5:fc:87:8a:e4:15:b7:6f:ec:4e:34:28:65:86: 14:24:30:2a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt263rzJeBNOIoZkeANl4joMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNDZlOGE3NmQzMGM3YzA0OTViYzVjZThlZTUxMTBmZWFi Mjg2ZTYwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjY4MWFkNGVkNmEyYjM0NTFmMmFmZmNjYzk2YjNhMWQzNjNjZjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp71A1NEVkhGMwbG2gTRUqUZQjzD U8fmhPHVOeLiu3kvTscMVjyEZFA8DinkuVBb3x4kI8IW7TpXOfB8h49WrzC1YTGx e3oVV6KEdz1TtzCLQ5RqIYbDR0+uT/eiA3zT+bWzcx8/xenItq3158C5CM9Y8a1z gmimyYUqXb/eWsAAc9lLOh+cful3c2pnizFakSUK3t4dEpO6r9hb9RVqFJSb4kCs UNCafarzMT8/gR29rfhJM7Bh+Bv0h4QMnzfcB7D67WsIGHuVtn7AmBjCvlhen6Xf eYlmgXksttLOjgYaW7Fl1uyaf/RV9TT9NsceJp0pv5nUmlyX0TE8mc2Y6wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB9oGtTtais0UfKv/MyWs6HTY88/MB8GA1UdIwQY MBaAFAJG6KdtMMfASVvFzo7lEQ/qsobmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWtib3AyMHd4OEJKVzhYT2p1VVJELXF5aHVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jMGE1NzYtYTIyMC00ZGUwLWFhYzEt N2I5NmE5OTk3NzE4LzEvSDJnYTFPMXFLelJSOHFfOHpKYXpvZE5qeno4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9jMGE1NzYtYTIyMC00ZGUwLWFhYzEtN2I5NmE5OTk3NzE4 LzEvQWtib3AyMHd4OEJKVzhYT2p1VVJELXF5aHVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuRxIAwQB wR/WMA0GCSqGSIb3DQEBCwUAA4IBAQB9ObwQFUZdR8RTrh3jRjcjkvdTQQyUA+nE Ow5nmuPocJho05fqKzHk4Zgck/sAUG05yE+m94+EUL73Rblxvvm/40tSVPFHItiL WjwwooHA9V6n08Ppv1CiQN6WP3686G8cIR4pW2sZfA3H2iRMnY5uy7bsN2ODvhM3 tck4qVuGHOJf5FUEI27SfhoGUWlehJopyVHiKyPM+6jdlXhHk1b9zLv2P/1Ze98i 1leg6Wl2qvR1P6MIoaPBo0UYi8SexOoo8qCnOrQ3iPbySuiHzhDHiLwwzxHm45e/ LoO7yuL/bKUafPwxyLvZ7JKBOi5M1fyHiuQVt2/sTjQoZYYUJDAq -----END CERTIFICATE-----Generated at Mon Jan 26 01:43:57 2026 by rpki-client