This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/H1UfnsPmJquL-wAem-B7U2sSVbU.roa File: H1UfnsPmJquL-wAem-B7U2sSVbU.roa (raw, json) Hash identifier: jJFynedk78xhXpOxYHZ7thKVc027uZMv2ZJ5fQeWm5w= Subject key identifier: 1F:55:1F:9E:C3:E6:26:AB:8B:FB:00:1E:9B:E0:7B:53:6B:12:55:B5 Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df Certificate serial: 019B76EB2D750D309FD46513EF5D23405179 Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/H1UfnsPmJquL-wAem-B7U2sSVbU.roa Signing time: Thu 01 Jan 2026 00:18:02 +0000 ROA not before: Thu 01 Jan 2026 00:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203339 IP address blocks: 84.38.128.0/24 maxlen: 24 185.220.116.0/24 maxlen: 24 185.220.117.0/24 maxlen: 24 185.220.118.0/24 maxlen: 24 2a0b:f6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2d:75:0d:30:9f:d4:65:13:ef:5d:23:40:51:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df Validity Not Before: Jan 1 00:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f551f9ec3e626ab8bfb001e9be07b536b1255b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e0:03:60:17:f7:9a:a5:fd:2a:e7:af:59:27: 5e:31:18:30:24:05:ca:60:67:43:c7:af:e5:ec:35: 00:8e:f4:fc:73:6d:35:50:50:61:63:f8:26:d1:b1: 7d:da:2f:84:2e:27:8a:bf:00:c3:a2:3d:5b:d1:7a: 94:d1:c4:f6:d3:80:e2:ab:0a:b8:f4:1a:ee:f2:ff: a8:fd:51:b0:9f:83:d8:6f:58:b1:9a:f4:27:4e:f8: 77:46:ba:43:d5:a0:86:d4:f0:3c:6d:9b:4d:97:00: 7a:92:01:da:7c:8b:a7:64:b3:ff:50:d1:b5:57:6b: 43:83:ea:bf:dd:dc:3e:dd:99:5e:c3:cf:ad:bd:ed: d3:44:35:19:bd:d7:7b:1c:35:33:b2:67:bc:c1:fe: 0e:5b:fb:84:14:fe:06:dd:b5:39:db:5f:03:cc:47: 62:f7:9e:7d:72:8e:f0:ef:93:b8:59:dd:8c:3a:f6: 95:d1:c5:0a:bb:99:97:4d:47:4a:45:3f:1e:e5:b8: 32:ef:20:43:1d:3c:0e:7e:d1:9d:32:80:08:db:91: 5d:c0:b5:d7:61:54:d8:06:89:d8:3f:ed:4f:42:1b: 26:9d:4e:76:1a:a4:d0:0c:dd:ab:b7:96:8b:97:73: a4:12:58:29:5f:88:d1:a0:60:62:95:10:b9:7d:4d: 79:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:55:1F:9E:C3:E6:26:AB:8B:FB:00:1E:9B:E0:7B:53:6B:12:55:B5 X509v3 Authority Key Identifier: keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/H1UfnsPmJquL-wAem-B7U2sSVbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.38.128.0/24 185.220.116.0-185.220.118.255 IPv6: 2a0b:f6c0::/48 Signature Algorithm: sha256WithRSAEncryption 15:2e:5e:b8:1f:d4:53:d5:f4:a5:d1:6a:1e:77:f6:c3:8d:fd: 38:cd:9b:25:9c:51:b4:e7:42:c1:1d:ff:52:c2:ea:cb:d5:e5: c9:5c:5e:fc:a0:a8:a3:c5:dc:fa:fb:17:c0:81:87:ca:c4:a4: be:17:c9:81:d6:b4:aa:36:12:96:4a:b7:b6:95:93:e8:9e:cb: 19:1a:ec:f2:54:0f:00:61:68:e2:c2:d2:dd:61:df:06:4d:6d: 54:a6:03:cc:45:c0:af:a3:ea:21:c2:59:d2:5f:12:b3:5f:8d: e8:c6:f2:1e:5d:d6:98:5a:0c:55:99:2c:de:5d:ef:18:67:4f: 0f:a4:49:e2:9e:4c:46:c8:d8:50:44:21:b8:85:1c:41:e2:23: d2:81:0d:83:04:66:c6:ec:a7:9d:42:3c:13:04:df:3c:eb:30: d1:8d:8e:3e:60:c3:7c:6b:06:35:e3:11:c2:50:ce:4c:a4:25: da:fb:8e:7c:97:53:a6:33:1c:25:a4:f1:b2:cb:00:e3:54:05: a4:90:84:8f:48:c9:c3:b0:39:b9:8d:f1:bb:3f:fc:8f:64:1a: e3:20:64:3c:e1:66:a6:4d:bb:61:11:eb:19:81:79:a0:b7:77: b3:08:84:5d:13:25:54:86:e0:fe:43:90:3e:d6:35:f6:bc:d3: 3f:da:e1:7a -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt26y11DTCf1GUT710jQFF5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjI3M2E2M2M1MWVhZjNmOWU1YWU3YjlmYWFmZGIyOTMx MzQwZGYwHhcNMjYwMTAxMDAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjU1MWY5ZWMzZTYyNmFiOGJmYjAwMWU5YmUwN2I1MzZiMTI1NWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuADYBf3mqX9KuevWSdeMRgwJAXK YGdDx6/l7DUAjvT8c201UFBhY/gm0bF92i+ELieKvwDDoj1b0XqU0cT204Diqwq4 9Bru8v+o/VGwn4PYb1ixmvQnTvh3RrpD1aCG1PA8bZtNlwB6kgHafIunZLP/UNG1 V2tDg+q/3dw+3Zlew8+tve3TRDUZvdd7HDUzsme8wf4OW/uEFP4G3bU5218DzEdi 9559co7w75O4Wd2MOvaV0cUKu5mXTUdKRT8e5bgy7yBDHTwOftGdMoAI25FdwLXX YVTYBonYP+1PQhsmnU52GqTQDN2rt5aLl3OkElgpX4jRoGBilRC5fU15HQIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFB9VH57D5iari/sAHpvge1NrElW1MB8GA1UdIwQY MBaAFJDyc6Y8Uerz+eWue5+q/bKTE0DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BKenBqeFI2dlA1NWE1N242cjlzcE1UUU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iYzY3NmItYzBiNi00ZmJiLTkzM2Yt NTA4MmMyOGI3MTVmLzEvSDFVZm5zUG1KcXVMLXdBZW0tQjdVMnNTVmJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9iYzY3NmItYzBiNi00ZmJiLTkzM2YtNTA4MmMyOGI3MTVm LzEva1BKenBqeFI2dlA1NWE1N242cjlzcE1UUU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUAwQAVCaAMAwD BAK53HQDBAC53HYwDwQCAAIwCQMHACoL9sAAADANBgkqhkiG9w0BAQsFAAOCAQEA FS5euB/UU9X0pdFqHnf2w439OM2bJZxRtOdCwR3/UsLqy9XlyVxe/KCoo8Xc+vsX wIGHysSkvhfJgda0qjYSlkq3tpWT6J7LGRrs8lQPAGFo4sLS3WHfBk1tVKYDzEXA r6PqIcJZ0l8Ss1+N6MbyHl3WmFoMVZks3l3vGGdPD6RJ4p5MRsjYUEQhuIUcQeIj 0oENgwRmxuynnUI8EwTfPOsw0Y2OPmDDfGsGNeMRwlDOTKQl2vuOfJdTpjMcJaTx sssA41QFpJCEj0jJw7A5uY3xuz/8j2Qa4yBkPOFmpk27YRHrGYF5oLd3swiEXRMl VIbg/kOQPtY19rzTP9rheg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:50 2026 by rpki-client