This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/h4VPt_ezR6pBjF1ytqFfJk_RH_g.roa File: h4VPt_ezR6pBjF1ytqFfJk_RH_g.roa (raw, json) Hash identifier: B+fnICpLokTB+5ePuFtzYa/q5V0EfzABtX3v8OW1PdQ= Subject key identifier: 87:85:4F:B7:F7:B3:47:AA:41:8C:5D:72:B6:A1:5F:26:4F:D1:1F:F8 Certificate issuer: /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4 Certificate serial: 019B7C7F75634030B6BF2F0056004D96C6A9 Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/h4VPt_ezR6pBjF1ytqFfJk_RH_g.roa Signing time: Fri 02 Jan 2026 02:18:06 +0000 ROA not before: Fri 02 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136796 IP address blocks: 185.192.56.0/22 maxlen: 24 185.192.56.0/24 maxlen: 24 185.192.57.0/24 maxlen: 24 185.192.58.0/24 maxlen: 24 185.192.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:75:63:40:30:b6:bf:2f:00:56:00:4d:96:c6:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4 Validity Not Before: Jan 2 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87854fb7f7b347aa418c5d72b6a15f264fd11ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:30:c7:91:2c:6f:61:03:62:bc:2b:51:7e:55: 92:99:de:3f:03:62:1d:45:e2:cc:60:dc:48:79:c5: b4:97:46:e5:de:4c:6d:61:fa:31:1b:8a:8d:ca:53: fe:85:1c:28:b2:b4:3b:fd:74:f0:d3:87:52:13:85: c1:21:51:23:aa:67:d5:94:de:c2:af:67:88:dc:0a: a3:de:ef:7b:ff:48:84:cd:7c:15:72:e0:04:11:48: c2:b2:1b:a8:91:4b:28:79:ed:6b:d0:95:fe:76:7d: 04:97:f7:7e:b7:5e:38:04:37:ac:bd:f1:53:c8:52: 33:33:5f:7f:ef:0a:4a:b3:5e:30:1f:25:42:ad:a6: 4d:24:59:21:ee:53:a5:24:eb:43:23:b9:ef:35:49: 99:a3:a5:2b:6e:86:19:fd:7b:e4:1a:cd:ce:19:b2: 1a:e3:c2:20:b1:6e:b7:47:5f:51:50:bf:13:15:1f: da:6b:83:3c:79:98:82:e8:55:5a:c1:dd:23:c1:cb: 0b:07:1b:27:34:c4:d6:dc:ca:a0:64:06:38:10:20: d8:aa:a9:ec:a2:e2:0f:fb:58:2f:55:a1:23:0b:13: c6:be:9c:95:0f:e2:97:47:ed:b7:60:e5:b3:56:27: 55:d4:b4:82:27:cf:8d:02:68:fe:0a:26:26:b3:05: 3f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:85:4F:B7:F7:B3:47:AA:41:8C:5D:72:B6:A1:5F:26:4F:D1:1F:F8 X509v3 Authority Key Identifier: keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/h4VPt_ezR6pBjF1ytqFfJk_RH_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.56.0/22 Signature Algorithm: sha256WithRSAEncryption ae:97:87:a0:6c:88:52:9e:d4:12:a6:f2:bd:7a:c2:c2:5f:af: 16:33:89:b1:72:de:2b:02:30:e8:66:0f:df:40:c8:15:e4:f7: 4d:b9:d2:e8:34:83:71:a5:ef:af:23:d2:5d:33:57:bf:cb:e8: cc:e7:e0:8d:2b:48:ec:85:03:7a:df:2a:d2:de:b5:d5:99:be: 5d:cb:9f:17:4a:ad:5d:da:67:29:92:e4:a6:26:71:ba:70:79: 8a:b0:c1:f4:7d:de:ba:f0:6e:e2:c7:08:b3:0d:17:ff:d7:50: 63:54:9c:f7:ce:57:e4:da:39:44:05:23:d7:ee:7a:b8:3b:0c: 2e:b1:06:de:1c:51:57:f6:e6:33:dd:bc:7f:bd:15:5c:d1:7f: c0:e6:74:7a:0f:52:5f:eb:58:1a:39:df:47:f8:37:bb:e3:90: 3d:f1:87:1b:77:2d:5f:97:63:3f:23:28:29:4d:0f:8e:f5:17: 3e:5f:bb:36:1c:a1:b2:88:22:aa:21:50:48:af:84:a1:dd:91: c6:cf:07:c3:16:89:4d:51:d6:e6:0e:98:8c:2f:bd:93:8d:bf: 5a:3a:5e:88:59:f3:02:4a:f5:5c:74:8b:a4:64:20:ec:bb:41: 81:5d:00:94:1d:9c:95:97:a9:73:28:03:4a:09:84:5c:a7:21: 41:34:0b:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f3VjQDC2vy8AVgBNlsapMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRkMTE1NTQyNDdiZDJiZDMwMWNlYTQzZmY1MTgwMzcy YzM4ZTQwHhcNMjYwMTAyMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Nzg1NGZiN2Y3YjM0N2FhNDE4YzVkNzJiNmExNWYyNjRmZDExZmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDDHkSxvYQNivCtRflWSmd4/A2Id ReLMYNxIecW0l0bl3kxtYfoxG4qNylP+hRwosrQ7/XTw04dSE4XBIVEjqmfVlN7C r2eI3Aqj3u97/0iEzXwVcuAEEUjCshuokUsoee1r0JX+dn0El/d+t144BDesvfFT yFIzM19/7wpKs14wHyVCraZNJFkh7lOlJOtDI7nvNUmZo6UrboYZ/XvkGs3OGbIa 48IgsW63R19RUL8TFR/aa4M8eZiC6FVawd0jwcsLBxsnNMTW3MqgZAY4ECDYqqns ouIP+1gvVaEjCxPGvpyVD+KXR+23YOWzVidV1LSCJ8+NAmj+CiYmswU/7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIeFT7f3s0eqQYxdcrahXyZP0R/4MB8GA1UdIwQY MBaAFBpN0RVUJHvSvTAc6kP/UYA3LDjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUt M2JhNWYzMGNhYWJmLzEvaDRWUHRfZXpSNnBCakYxeXRxRmZKa19SSF9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUtM2JhNWYzMGNhYWJm LzEvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucA4MA0G CSqGSIb3DQEBCwUAA4IBAQCul4egbIhSntQSpvK9esLCX68WM4mxct4rAjDoZg/f QMgV5PdNudLoNINxpe+vI9JdM1e/y+jM5+CNK0jshQN63yrS3rXVmb5dy58XSq1d 2mcpkuSmJnG6cHmKsMH0fd668G7ixwizDRf/11BjVJz3zlfk2jlEBSPX7nq4Owwu sQbeHFFX9uYz3bx/vRVc0X/A5nR6D1Jf61gaOd9H+De745A98Ycbdy1fl2M/Iygp TQ+O9Rc+X7s2HKGyiCKqIVBIr4Sh3ZHGzwfDFolNUdbmDpiML72Tjb9aOl6IWfMC SvVcdIukZCDsu0GBXQCUHZyVl6lzKANKCYRcpyFBNAuQ -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:21 2026 by rpki-client