This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/H52_1NjStSe7bo70-a34b3HOvac.roa File: H52_1NjStSe7bo70-a34b3HOvac.roa (raw, json) Hash identifier: HF55nNJHz3uWR//Z7REZtnPpt29LIrDGhY4TPWFKubA= Subject key identifier: 1F:9D:BF:D4:D8:D2:B5:27:BB:6E:8E:F4:F9:AD:F8:6F:71:CE:BD:A7 Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019B7D5D023F12783EEB09F7BDA89F7C7CD7 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/H52_1NjStSe7bo70-a34b3HOvac.roa Signing time: Fri 02 Jan 2026 06:20:06 +0000 ROA not before: Fri 02 Jan 2026 06:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210950 IP address blocks: 45.143.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:02:3f:12:78:3e:eb:09:f7:bd:a8:9f:7c:7c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Jan 2 06:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f9dbfd4d8d2b527bb6e8ef4f9adf86f71cebda7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8f:d5:8a:90:23:bc:4e:2b:30:be:98:20:13: 6a:95:49:fc:b3:76:e0:f6:63:41:35:df:2f:bd:40: af:ff:3b:77:a9:83:31:2e:4b:39:e0:98:b6:c8:05: 41:7e:36:05:66:de:33:70:4a:ba:9d:db:98:e2:5c: c3:14:b8:5b:6f:d6:f4:00:50:60:84:b0:49:55:26: f2:41:d4:69:9d:52:23:74:0a:1e:04:01:99:e0:c5: 31:13:f1:c5:ee:98:f0:ea:d7:23:0e:42:9d:f4:72: 92:0a:e7:7b:b4:2e:54:e1:c2:02:82:25:f1:ee:05: 4c:e3:9d:5c:8a:95:5b:33:0c:8c:33:c0:ef:97:18: a9:a2:3c:45:b4:13:01:af:f4:0d:33:9d:1c:35:ad: f0:ea:06:7d:15:ca:25:20:82:b4:0f:74:12:fb:c6: 81:c4:88:f4:03:d9:b1:9d:a6:da:1a:eb:16:77:49: 35:85:fd:62:10:90:83:45:5e:5d:3f:34:b8:52:e6: e8:f8:33:ab:d8:34:31:c5:c0:f6:84:b9:0d:9a:32: f3:ad:61:79:ee:4e:d7:7a:27:3a:34:15:63:0c:54: be:c4:71:7f:06:c7:40:5f:73:15:72:7a:d2:a0:2c: ca:85:2c:45:31:69:95:c0:31:96:83:48:4c:8d:54: 94:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9D:BF:D4:D8:D2:B5:27:BB:6E:8E:F4:F9:AD:F8:6F:71:CE:BD:A7 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/H52_1NjStSe7bo70-a34b3HOvac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.201.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:ac:2d:f6:80:c9:26:1b:d7:ff:7d:e2:b6:53:84:79:c0:6b: 56:79:46:9e:6a:50:93:7c:c5:ec:ff:a9:fa:63:0a:72:41:bf: 5a:c9:5a:37:e3:02:2e:fc:f9:37:35:07:61:25:dc:38:cd:2a: 76:73:87:75:c1:96:09:58:42:5a:28:12:54:ee:64:5b:09:cc: 29:c9:4a:9a:9c:ab:2f:86:eb:6a:fa:66:c7:f9:e9:a1:94:d7: e7:da:19:fd:06:c2:07:8f:20:99:c5:3b:75:7a:2d:78:70:de: 0e:a9:73:55:3e:99:87:b8:bc:5d:04:51:aa:33:df:f1:f1:8f: 31:9d:40:a4:3a:44:3c:a4:bc:b6:0a:e1:56:00:31:f4:c9:09: 5e:40:df:49:fb:4b:91:c7:28:c7:b6:bd:c3:91:cd:1e:71:5d: 04:24:ef:be:ff:90:e4:e6:d5:a7:25:bc:aa:4a:38:cb:e6:56: c9:58:e1:f2:52:2d:db:56:48:e9:11:cb:c5:b0:e2:90:c4:82: a6:4a:17:64:76:44:96:d1:66:68:d1:47:e6:49:90:3e:d8:65: 54:72:a6:40:7c:59:d1:d6:d6:e9:06:a9:21:ab:83:47:d5:57: 7d:1b:30:9f:64:90:bf:13:90:94:63:54:54:44:04:1b:e2:8e: 61:a7:89:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XQI/Eng+6wn3vaiffHzXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwMTAyMDYyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjlkYmZkNGQ4ZDJiNTI3YmI2ZThlZjRmOWFkZjg2ZjcxY2ViZGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4/VipAjvE4rML6YIBNqlUn8s3bg 9mNBNd8vvUCv/zt3qYMxLks54Ji2yAVBfjYFZt4zcEq6nduY4lzDFLhbb9b0AFBg hLBJVSbyQdRpnVIjdAoeBAGZ4MUxE/HF7pjw6tcjDkKd9HKSCud7tC5U4cICgiXx 7gVM451cipVbMwyMM8DvlxipojxFtBMBr/QNM50cNa3w6gZ9FcolIIK0D3QS+8aB xIj0A9mxnabaGusWd0k1hf1iEJCDRV5dPzS4Uubo+DOr2DQxxcD2hLkNmjLzrWF5 7k7Xeic6NBVjDFS+xHF/BsdAX3MVcnrSoCzKhSxFMWmVwDGWg0hMjVSUYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB+dv9TY0rUnu26O9Pmt+G9xzr2nMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvSDUyXzFOalN0U2U3Ym83MC1hMzRiM0hPdmFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY/JMA0G CSqGSIb3DQEBCwUAA4IBAQAMrC32gMkmG9f/feK2U4R5wGtWeUaealCTfMXs/6n6 YwpyQb9ayVo34wIu/Pk3NQdhJdw4zSp2c4d1wZYJWEJaKBJU7mRbCcwpyUqanKsv hutq+mbH+emhlNfn2hn9BsIHjyCZxTt1ei14cN4OqXNVPpmHuLxdBFGqM9/x8Y8x nUCkOkQ8pLy2CuFWADH0yQleQN9J+0uRxyjHtr3Dkc0ecV0EJO++/5Dk5tWnJbyq SjjL5lbJWOHyUi3bVkjpEcvFsOKQxIKmShdkdkSW0WZo0UfmSZA+2GVUcqZAfFnR 1tbpBqkhq4NH1Vd9GzCfZJC/E5CUY1RURAQb4o5hp4lW -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:22 2026 by rpki-client