This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/H7Xngt8uDaQXLqhk29afH0VWFcw.roa File: H7Xngt8uDaQXLqhk29afH0VWFcw.roa (raw, json) Hash identifier: CThtSzNbfgXJz5IyFmqQ4qYlcRz/LI/HyRGPDPbi4Pg= Subject key identifier: 1F:B5:E7:82:DF:2E:0D:A4:17:2E:A8:64:DB:D6:9F:1F:45:56:15:CC Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034 Certificate serial: 019B7BA544CA534E3C6D594BB2833E5B148D Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/H7Xngt8uDaQXLqhk29afH0VWFcw.roa Signing time: Thu 01 Jan 2026 22:19:47 +0000 ROA not before: Thu 01 Jan 2026 22:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61149 IP address blocks: 45.82.106.0/24 maxlen: 24 45.82.107.0/24 maxlen: 24 86.104.226.0/24 maxlen: 24 91.235.107.0/24 maxlen: 24 185.16.88.0/22 maxlen: 22 185.16.88.0/23 maxlen: 23 185.16.88.0/24 maxlen: 24 185.16.89.0/24 maxlen: 24 185.16.90.0/23 maxlen: 23 185.16.90.0/24 maxlen: 24 185.16.91.0/24 maxlen: 24 2a03:cac0:2::/48 maxlen: 48 2a03:cac0:a::/48 maxlen: 48 2a03:cac0:b::/48 maxlen: 48 2a03:cac0:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:44:ca:53:4e:3c:6d:59:4b:b2:83:3e:5b:14:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034 Validity Not Before: Jan 1 22:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fb5e782df2e0da4172ea864dbd69f1f455615cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7f:ee:92:db:a7:78:1b:60:8f:97:08:44:73: 7f:00:93:22:c9:39:ab:b6:ee:6c:0a:29:39:70:cb: a1:ef:1c:83:30:ec:9e:b8:b3:a4:9a:15:ad:61:99: c9:10:d8:97:f4:ef:76:c9:79:06:4a:1e:71:67:fd: 28:db:fa:e3:48:2d:23:ff:7c:e7:87:5c:a9:14:05: 2b:57:db:a3:67:97:d4:6c:d2:d6:2d:f0:12:26:3b: c8:db:07:e2:c3:e6:af:ea:f4:97:5b:b3:63:59:7e: f1:1f:6f:2b:9c:85:39:0d:76:2b:c2:48:03:f4:5a: 53:87:a7:27:52:33:41:76:48:13:c9:bf:49:77:46: 41:1c:1b:e4:cb:a1:00:f0:bb:61:2d:59:82:34:ba: 07:78:92:23:a7:4c:d2:d1:c4:e7:23:04:1f:df:23: 37:dd:ca:9a:84:2b:84:f3:e8:fe:92:c7:78:1b:1a: 9c:87:2d:dd:c4:5e:07:18:9c:c0:66:60:a4:1c:bb: 9c:21:e5:14:13:b7:93:70:50:92:73:ec:f8:67:5a: fb:8f:a4:45:b1:77:af:44:c2:58:2e:9b:99:66:44: 31:df:6b:1e:cd:73:b5:5f:a6:84:46:64:d3:d4:66: 69:f2:81:9d:1f:1d:3b:15:8b:fb:4a:0b:13:16:ce: f0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B5:E7:82:DF:2E:0D:A4:17:2E:A8:64:DB:D6:9F:1F:45:56:15:CC X509v3 Authority Key Identifier: keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/H7Xngt8uDaQXLqhk29afH0VWFcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.106.0/23 86.104.226.0/24 91.235.107.0/24 185.16.88.0/22 IPv6: 2a03:cac0:2::/48 2a03:cac0:a::-2a03:cac0:c:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3e:44:57:94:81:b4:04:8d:2d:09:a0:59:33:b9:d4:8a:45:86: 09:43:8e:dc:35:68:b7:67:09:1c:c9:2b:11:72:ad:67:c3:5f: a6:ce:18:61:9e:ad:70:4b:5e:e6:bf:18:fc:8c:d1:c9:ea:d9: de:3b:21:86:2e:45:06:d8:b5:bb:89:51:41:43:fb:cb:df:4a: 90:d8:4e:7e:a8:2f:2c:11:a4:5a:1a:7b:1f:d2:46:9f:cf:84: 18:63:2c:80:36:01:fd:bb:84:4c:1f:42:67:72:49:c1:fc:b8: 30:4e:81:e6:9a:fc:93:59:26:29:b4:dc:cb:14:df:0a:6b:e1: 45:5c:fb:dd:58:80:c5:66:9f:ee:50:11:bb:24:62:d9:9e:63: 77:55:1d:42:a3:7c:56:e2:20:66:fa:9f:7e:52:40:c0:61:26: 08:9f:76:6a:57:72:46:3f:6a:1a:a3:41:2d:d0:cf:16:b7:57: 17:73:27:f7:97:dc:0b:fd:47:2c:24:12:82:ac:0f:81:49:ee: 2e:6e:d0:8e:d2:2f:d6:db:18:4f:1c:ae:09:cd:8c:a5:92:da: 51:1e:72:e3:e9:ba:14:91:ae:f0:35:8f:3e:e0:ef:c0:6f:d3: 0f:ed:7d:4a:88:ac:e1:86:b9:99:af:dd:e9:ec:43:08:16:cd: bf:18:9b:c2 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZt7pUTKU048bVlLsoM+WxSNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjQyMzYwYTM5NzBhODA4MDE2ZmRmOGQ4ZGJhMzk2YzVh MWQwMzQwHhcNMjYwMTAxMjIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmI1ZTc4MmRmMmUwZGE0MTcyZWE4NjRkYmQ2OWYxZjQ1NTYxNWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3X/uktuneBtgj5cIRHN/AJMiyTmr tu5sCik5cMuh7xyDMOyeuLOkmhWtYZnJENiX9O92yXkGSh5xZ/0o2/rjSC0j/3zn h1ypFAUrV9ujZ5fUbNLWLfASJjvI2wfiw+av6vSXW7NjWX7xH28rnIU5DXYrwkgD 9FpTh6cnUjNBdkgTyb9Jd0ZBHBvky6EA8LthLVmCNLoHeJIjp0zS0cTnIwQf3yM3 3cqahCuE8+j+ksd4Gxqchy3dxF4HGJzAZmCkHLucIeUUE7eTcFCSc+z4Z1r7j6RF sXevRMJYLpuZZkQx32sezXO1X6aERmTT1GZp8oGdHx07FYv7SgsTFs7w+wIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFB+154LfLg2kFy6oZNvWnx9FVhXMMB8GA1UdIwQY MBaAFPH0I2CjlwqAgBb9+Njbo5bFodA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMt ZDRmMDhiZTA1MGQ1LzEvSDdYbmd0OHVEYVFYTHFoazI5YWZIMFZXRmN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMtZDRmMDhiZTA1MGQ1 LzEvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTAeBAIAATAYAwQBLVJqAwQA VmjiAwQAW+trAwQCuRBYMCMEAgACMB0DBwAqA8rAAAIwEgMHASoDysAACgMHACoD ysAADDANBgkqhkiG9w0BAQsFAAOCAQEAPkRXlIG0BI0tCaBZM7nUikWGCUOO3DVo t2cJHMkrEXKtZ8Nfps4YYZ6tcEte5r8Y/IzRyerZ3jshhi5FBti1u4lRQUP7y99K kNhOfqgvLBGkWhp7H9JGn8+EGGMsgDYB/buETB9CZ3JJwfy4ME6B5pr8k1kmKbTc yxTfCmvhRVz73ViAxWaf7lARuyRi2Z5jd1UdQqN8VuIgZvqfflJAwGEmCJ92aldy Rj9qGqNBLdDPFrdXF3Mn95fcC/1HLCQSgqwPgUnuLm7QjtIv1tsYTxyuCc2MpZLa UR5y4+m6FJGu8DWPPuDvwG/TD+19Sois4Ya5ma/d6exDCBbNvxibwg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:31 2026 by rpki-client