This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/H72aDLmziajxH7j-buUE4Es0RIo.roa File: H72aDLmziajxH7j-buUE4Es0RIo.roa (raw, json) Hash identifier: hI4MdmQURw2gDSqP3qZ28v2HkIRtU1OHtdMVA31r6DE= Subject key identifier: 1F:BD:9A:0C:B9:B3:89:A8:F1:1F:B8:FE:6E:E5:04:E0:4B:34:44:8A Certificate issuer: /CN=56b4bfcd0164ad7c6688af22246c82e1995dd351 Certificate serial: 019B791133EFB095FF7ED03FA0D6054283F2 Authority key identifier: 56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/H72aDLmziajxH7j-buUE4Es0RIo.roa Signing time: Thu 01 Jan 2026 10:18:48 +0000 ROA not before: Thu 01 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15694 IP address blocks: 185.123.124.0/23 maxlen: 23 185.123.126.0/23 maxlen: 23 2a06:af00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:33:ef:b0:95:ff:7e:d0:3f:a0:d6:05:42:83:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b4bfcd0164ad7c6688af22246c82e1995dd351 Validity Not Before: Jan 1 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fbd9a0cb9b389a8f11fb8fe6ee504e04b34448a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:4b:c5:ca:21:6f:10:e2:aa:6c:57:fa:5c: 0d:3d:ff:36:ae:6b:b9:6a:44:6f:ad:89:32:66:b6: 66:0d:59:71:2a:e4:65:97:f5:6f:27:02:a3:1c:1e: bb:ff:a6:18:fb:d6:a7:95:53:c8:46:91:75:87:e6: da:1c:a2:5e:16:82:6d:a9:15:16:f1:2a:4d:9a:d9: dd:56:64:2a:13:8f:c8:f7:85:21:cc:b0:b2:00:85: 88:1d:79:a4:7e:95:37:39:6b:2d:57:b7:50:b3:26: 42:c3:3d:75:69:1e:30:15:e6:d4:71:62:6d:fd:dd: b8:3a:94:2b:31:92:db:ba:25:4d:a9:2c:6e:32:e3: 70:e1:3f:82:68:e8:6e:97:95:70:55:d2:d0:19:c0: 98:be:59:0c:ef:9d:c7:9c:dc:b9:fb:4d:74:00:14: 88:91:74:6e:b4:a4:17:df:5e:12:0f:e4:8f:f2:7b: ff:a0:94:c7:77:7e:52:0d:bb:36:77:46:ac:92:c9: 25:90:76:93:d8:fa:a6:af:dc:15:66:65:7c:c3:89: d6:fd:9a:3c:21:61:cb:01:0a:a1:60:39:96:b7:f8: 59:7e:7a:62:af:71:e8:98:98:59:72:5f:a5:87:45: cf:59:14:ef:7c:fe:e4:4f:64:67:c1:d6:b5:08:9e: 7d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BD:9A:0C:B9:B3:89:A8:F1:1F:B8:FE:6E:E5:04:E0:4B:34:44:8A X509v3 Authority Key Identifier: keyid:56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/H72aDLmziajxH7j-buUE4Es0RIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.123.124.0/22 IPv6: 2a06:af00::/29 Signature Algorithm: sha256WithRSAEncryption a4:a6:3c:fd:ac:15:61:36:d7:81:86:5c:c6:80:d1:f6:ed:20: e1:21:6b:57:2c:5a:8f:5d:6a:7f:d9:6a:9f:e6:28:1c:d9:03: 42:9d:39:2e:5c:c5:69:68:8d:dd:0d:a9:33:8f:5d:6c:bf:c8: 98:5b:26:cf:4d:d5:e0:51:60:64:55:06:11:76:d5:9a:80:7e: 85:ea:c3:f6:0b:c4:19:3c:1d:4f:ac:a0:62:59:69:07:c7:a9: be:da:e2:82:0c:e1:83:86:d5:57:1c:d2:89:16:6e:b4:46:69: 79:74:a6:59:bf:3c:20:35:ee:b5:03:1f:a9:29:71:9e:64:e4: 2a:95:3a:fb:1b:8d:52:31:3a:f2:eb:18:d0:2d:f7:d6:a5:4f: d0:4b:15:67:99:c3:79:69:da:ce:a6:f7:8b:16:7c:d3:ca:35: b0:69:04:4e:70:91:a7:34:29:47:84:91:d5:21:3e:33:a3:4c: 61:24:39:32:e9:9a:6a:c5:8b:71:36:82:27:3c:99:f6:45:b3: b6:3f:2a:27:cf:ba:be:5a:52:77:11:cf:2d:a0:aa:6a:00:76: 21:2b:11:79:c9:df:a6:65:25:e1:c8:32:aa:d3:4e:c4:ab:03: b2:fd:ff:7a:28:b5:9d:3b:48:7f:5e:27:0b:1a:20:a2:2f:76: 23:51:4c:18 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ETPvsJX/ftA/oNYFQoPyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YjRiZmNkMDE2NGFkN2M2Njg4YWYyMjI0NmM4MmUxOTk1 ZGQzNTEwHhcNMjYwMTAxMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmJkOWEwY2I5YjM4OWE4ZjExZmI4ZmU2ZWU1MDRlMDRiMzQ0NDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4tLxcohbxDiqmxX+lwNPf82rmu5 akRvrYkyZrZmDVlxKuRll/VvJwKjHB67/6YY+9anlVPIRpF1h+baHKJeFoJtqRUW 8SpNmtndVmQqE4/I94UhzLCyAIWIHXmkfpU3OWstV7dQsyZCwz11aR4wFebUcWJt /d24OpQrMZLbuiVNqSxuMuNw4T+CaOhul5VwVdLQGcCYvlkM753HnNy5+010ABSI kXRutKQX314SD+SP8nv/oJTHd35SDbs2d0asksklkHaT2Pqmr9wVZmV8w4nW/Zo8 IWHLAQqhYDmWt/hZfnpir3HomJhZcl+lh0XPWRTvfP7kT2Rnwda1CJ59iQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFB+9mgy5s4mo8R+4/m7lBOBLNESKMB8GA1UdIwQY MBaAFFa0v80BZK18ZoivIiRsguGZXdNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJTX3pRRmtyWHhtaUs4aUpHeUM0WmxkMDFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9lMDNlMGYtZjNhNi00YzU1LWFkZGQt MjQxNjY1ZjQ5ZDI1LzEvSDcyYURMbXppYWp4SDdqLWJ1VUU0RXMwUklvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9lMDNlMGYtZjNhNi00YzU1LWFkZGQtMjQxNjY1ZjQ5ZDI1 LzEvVnJTX3pRRmtyWHhtaUs4aUpHeUM0WmxkMDFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXt8MA0E AgACMAcDBQMqBq8AMA0GCSqGSIb3DQEBCwUAA4IBAQCkpjz9rBVhNteBhlzGgNH2 7SDhIWtXLFqPXWp/2Wqf5igc2QNCnTkuXMVpaI3dDakzj11sv8iYWybPTdXgUWBk VQYRdtWagH6F6sP2C8QZPB1PrKBiWWkHx6m+2uKCDOGDhtVXHNKJFm60Rml5dKZZ vzwgNe61Ax+pKXGeZOQqlTr7G41SMTry6xjQLffWpU/QSxVnmcN5adrOpveLFnzT yjWwaQROcJGnNClHhJHVIT4zo0xhJDky6ZpqxYtxNoInPJn2RbO2Pyonz7q+WlJ3 Ec8toKpqAHYhKxF5yd+mZSXhyDKq007EqwOy/f96KLWdO0h/XicLGiCiL3YjUUwY -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:16 2026 by rpki-client