This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/H7yvjO1PteMvFud2cVf980xvhOM.roa File: H7yvjO1PteMvFud2cVf980xvhOM.roa (raw, json) Hash identifier: RhQsj0SDsU/JKqzjG9Bf/mkgnMQmL8vD/s9sreGOu30= Subject key identifier: 1F:BC:AF:8C:ED:4F:B5:E3:2F:16:E7:76:71:57:FD:F3:4C:6F:84:E3 Certificate issuer: /CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8 Certificate serial: 019B7A5B734C94831FE0CFCCE59AB8AF6F3A Authority key identifier: FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/H7yvjO1PteMvFud2cVf980xvhOM.roa Signing time: Thu 01 Jan 2026 16:19:32 +0000 ROA not before: Thu 01 Jan 2026 16:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62429 IP address blocks: 80.87.144.0/20 maxlen: 20 91.195.16.0/23 maxlen: 23 91.197.160.0/22 maxlen: 22 185.18.90.0/24 maxlen: 24 185.35.116.0/22 maxlen: 22 2a00:db20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:73:4c:94:83:1f:e0:cf:cc:e5:9a:b8:af:6f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8 Validity Not Before: Jan 1 16:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fbcaf8ced4fb5e32f16e7767157fdf34c6f84e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9d:f6:4e:5a:a2:8c:da:5c:f1:69:20:94:e1: 89:55:70:d4:1a:62:ba:da:bc:39:18:51:27:f9:0d: 79:d2:5b:1c:b1:c2:0b:59:7b:6c:3b:11:c6:de:6d: 60:82:e9:26:bc:d9:b6:e2:63:7d:6e:0b:25:1c:f5: eb:a3:de:a5:9e:f4:96:41:10:b2:a8:04:c4:b7:e9: b0:dd:7a:c5:f7:56:8a:ad:c0:b9:8c:53:df:29:d6: 58:93:0e:17:94:55:08:a5:48:3a:4d:b9:d6:e7:46: 28:7c:eb:77:d4:05:e3:b8:a2:e1:b1:dd:59:ff:a7: 95:7c:35:f1:d4:24:74:91:49:37:41:14:74:12:6a: b8:ce:e1:a9:73:ea:29:5d:3d:33:cd:47:8b:20:0f: b3:4b:55:6a:5e:62:fd:4b:fe:e6:3c:39:4c:dc:42: d0:5a:30:16:17:81:fa:d4:8f:ed:4e:03:b2:3d:c4: 79:ef:a2:6c:40:80:b5:4f:65:2a:28:a0:ab:9a:01: 5d:61:ba:26:15:37:2e:ef:55:c6:4a:2b:29:5e:97: c3:46:e7:9f:e6:4f:4c:92:fa:dd:77:c6:d5:aa:b1: e8:0e:fd:45:96:85:99:20:d8:50:3f:ce:c3:b6:2a: 99:50:c3:ec:1b:75:ec:38:71:36:26:6b:a8:86:9a: f1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BC:AF:8C:ED:4F:B5:E3:2F:16:E7:76:71:57:FD:F3:4C:6F:84:E3 X509v3 Authority Key Identifier: keyid:FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/H7yvjO1PteMvFud2cVf980xvhOM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.87.144.0/20 91.195.16.0/23 91.197.160.0/22 185.18.90.0/24 185.35.116.0/22 IPv6: 2a00:db20::/32 Signature Algorithm: sha256WithRSAEncryption 0f:2b:95:7f:42:01:4c:77:7e:0d:a2:e4:c4:1b:f5:f7:7e:5f: b6:bd:70:98:52:f8:00:2c:74:1a:6d:bb:9b:1f:3b:70:c3:4d: 76:0b:0b:92:9d:b1:0c:60:75:01:2d:91:b4:6b:3d:a8:00:02: a4:0e:54:4f:e6:b1:19:45:37:7f:07:ed:0b:62:e9:58:10:2a: 7a:b1:53:53:ba:2f:d6:00:46:b1:40:b8:9a:c1:70:95:5c:ef: 31:7f:eb:26:38:bb:03:98:a3:96:4b:f0:71:cf:ad:86:54:b9: 00:99:b2:21:f1:ba:de:e9:a4:53:79:a5:2c:51:18:a4:b9:e4: 52:be:a4:a2:71:c0:89:8a:8c:93:da:1f:20:f0:f3:ba:be:49: 98:20:88:13:0c:3a:66:b0:0d:bf:fc:0f:c5:20:12:73:f4:c5: 3c:fa:98:65:99:89:2e:f8:42:a4:e3:06:23:bd:b6:f5:9b:32: fa:5f:9a:53:be:a0:7d:a8:89:fe:f2:9e:74:29:f4:d5:f3:5b: d5:fe:b7:9f:16:b3:42:3c:a0:9c:cd:fb:ed:d2:de:bd:cd:df: 47:fd:8b:1d:4f:92:e2:5a:cf:c4:0b:8b:96:b6:77:41:55:97: 52:b1:07:63:d9:5c:e6:e7:ae:73:cc:a6:6d:80:cc:d9:4d:3a: 7c:47:05:4c -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt6W3NMlIMf4M/M5Zq4r286MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkNzhmMTNmZmE5MmYwNzRlYmU1NTdkMmEyZDI5YWQwZGEz M2U1ZDgwHhcNMjYwMTAxMTYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmJjYWY4Y2VkNGZiNWUzMmYxNmU3NzY3MTU3ZmRmMzRjNmY4NGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ32TlqijNpc8WkglOGJVXDUGmK6 2rw5GFEn+Q150lscscILWXtsOxHG3m1ggukmvNm24mN9bgslHPXro96lnvSWQRCy qATEt+mw3XrF91aKrcC5jFPfKdZYkw4XlFUIpUg6TbnW50YofOt31AXjuKLhsd1Z /6eVfDXx1CR0kUk3QRR0Emq4zuGpc+opXT0zzUeLIA+zS1VqXmL9S/7mPDlM3ELQ WjAWF4H61I/tTgOyPcR576JsQIC1T2UqKKCrmgFdYbomFTcu71XGSispXpfDRuef 5k9Mkvrdd8bVqrHoDv1FloWZINhQP87DtiqZUMPsG3XsOHE2Jmuohprx5wIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFB+8r4ztT7XjLxbndnFX/fNMb4TjMB8GA1UdIwQY MBaAFP148T/6kvB06+VX0qLSmtDaM+XYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1hqeFBfcVM4SFRyNVZmU290S2EwTm96NWRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lNDFjMzQtMDI1Mi00NzE4LTlmM2Qt ZmRmMDExOGNjMDE2LzEvSDd5dmpPMVB0ZU12RnVkMmNWZjk4MHh2aE9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9lNDFjMzQtMDI1Mi00NzE4LTlmM2QtZmRmMDExOGNjMDE2 LzEvX1hqeFBfcVM4SFRyNVZmU290S2EwTm96NWRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQEUFeQAwQB W8MQAwQCW8WgAwQAuRJaAwQCuSN0MA0EAgACMAcDBQAqANsgMA0GCSqGSIb3DQEB CwUAA4IBAQAPK5V/QgFMd34NouTEG/X3fl+2vXCYUvgALHQabbubHztww012CwuS nbEMYHUBLZG0az2oAAKkDlRP5rEZRTd/B+0LYulYECp6sVNTui/WAEaxQLiawXCV XO8xf+smOLsDmKOWS/Bxz62GVLkAmbIh8bre6aRTeaUsURikueRSvqSiccCJioyT 2h8g8PO6vkmYIIgTDDpmsA2//A/FIBJz9MU8+phlmYku+EKk4wYjvbb1mzL6X5pT vqB9qIn+8p50KfTV81vV/refFrNCPKCczfvt0t69zd9H/YsdT5LiWs/EC4uWtndB VZdSsQdj2Vzm565zzKZtgMzZTTp8RwVM -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:59 2026 by rpki-client