This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/H2f81tAnClNQA7oxSnrk0RN1378.roa File: H2f81tAnClNQA7oxSnrk0RN1378.roa (raw, json) Hash identifier: ztDbogPZdL+kyDbQ7D06edmucI3GWmYZufxKMT/XxH4= Subject key identifier: 1F:67:FC:D6:D0:27:0A:53:50:03:BA:31:4A:7A:E4:D1:13:75:DF:BF Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d Certificate serial: 019B7C809E4ECE8A43C7DABD735EBC3A0C29 Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/H2f81tAnClNQA7oxSnrk0RN1378.roa Signing time: Fri 02 Jan 2026 02:19:22 +0000 ROA not before: Fri 02 Jan 2026 02:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8070 IP address blocks: 195.134.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9e:4e:ce:8a:43:c7:da:bd:73:5e:bc:3a:0c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d Validity Not Before: Jan 2 02:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f67fcd6d0270a535003ba314a7ae4d11375dfbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:13:f0:8d:1b:5d:02:a8:55:82:f2:f9:b7:70: 71:4c:ce:0b:62:4e:c4:15:f0:42:fd:b2:8b:d0:16: 60:6d:d9:cf:ff:a5:27:8d:1a:90:a8:69:c0:d1:11: 79:a3:81:b9:3c:a9:2f:d0:fd:60:9e:f6:0a:5a:9f: 71:84:ba:44:fc:94:08:50:10:c5:d9:11:4f:b5:e4: c1:e9:21:5f:2e:84:dc:0a:e6:a5:8a:05:9f:ef:f8: d5:f1:9c:37:93:7a:81:a3:1d:d6:b8:e4:dc:9b:0e: a2:e5:0c:5e:78:b6:c7:b1:b1:0d:0c:43:17:4c:4d: 60:52:91:ca:ef:50:c5:fd:2b:ed:c0:9d:ef:e8:78: 39:4a:3d:40:5d:c8:66:7d:ee:6f:99:a8:c3:0c:a1: bc:ff:10:df:85:c3:00:51:7b:18:17:38:d4:9c:e5: f9:e2:d7:9c:c1:29:cf:a8:a3:e3:5f:82:f8:72:63: b5:50:7a:d9:22:27:78:68:82:3a:e9:74:83:8d:2b: 2a:1e:a1:1e:0b:ca:b3:db:12:0b:e0:40:db:8c:ed: 66:57:92:a8:50:ed:1e:f4:4b:13:48:de:0f:3d:8b: df:d3:c7:69:0f:58:6b:5a:f5:44:03:9e:80:0f:24: 6c:9e:1f:b5:13:c2:b7:b4:15:d9:f9:9c:27:6d:2b: 5c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:67:FC:D6:D0:27:0A:53:50:03:BA:31:4A:7A:E4:D1:13:75:DF:BF X509v3 Authority Key Identifier: keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/H2f81tAnClNQA7oxSnrk0RN1378.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.134.224.0/19 Signature Algorithm: sha256WithRSAEncryption 07:57:c2:da:93:b2:25:be:38:ea:82:2c:c4:39:8e:ff:33:cf: 2f:79:60:49:37:21:3f:e7:e9:e2:66:4e:10:5d:1e:5e:f8:d4: 8b:30:1b:53:da:46:76:a5:bb:9a:ed:a4:9b:96:77:42:a9:52: 8d:a0:ea:83:4e:38:1a:f5:ec:c9:6b:51:b0:20:56:02:f9:03: 4f:d7:9a:ff:a6:55:21:ec:24:a9:2e:51:95:f6:e8:e2:ac:e8: 2c:c0:75:0b:21:62:be:d5:02:71:99:43:dc:89:f8:38:ba:cc: c3:44:d8:91:16:d4:e0:ce:7e:f0:47:cd:4c:b6:9b:2b:14:1a: 6e:98:35:39:65:78:af:b0:54:82:81:d1:c1:53:bb:b1:5f:b8: dd:a5:78:46:62:41:3a:b2:84:89:3f:7d:a8:42:21:a0:12:d2: e8:3f:b1:a6:54:14:f8:31:de:d8:27:2d:59:ad:5e:df:2b:5f: e6:32:a3:e0:67:4b:81:cd:f6:cd:60:2c:d8:59:d4:0d:28:70: f6:2e:98:d7:7c:7f:9e:f7:1b:ad:a6:dc:2d:0b:25:35:a8:5b: 76:e5:af:8b:44:07:b5:10:2b:c8:33:75:f0:79:f1:cd:4e:e5: 3d:2b:13:14:6f:8b:d0:e5:b6:a8:b8:0b:69:36:71:2a:7b:18: 70:3d:1d:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJ5OzopDx9q9c168OgwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNDBlMzA3ZDEyY2UwNTY4YzI5OWUxN2NkNjVhNjZiMjZj ZGIwNGQwHhcNMjYwMTAyMDIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjY3ZmNkNmQwMjcwYTUzNTAwM2JhMzE0YTdhZTRkMTEzNzVkZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhPwjRtdAqhVgvL5t3BxTM4LYk7E FfBC/bKL0BZgbdnP/6UnjRqQqGnA0RF5o4G5PKkv0P1gnvYKWp9xhLpE/JQIUBDF 2RFPteTB6SFfLoTcCualigWf7/jV8Zw3k3qBox3WuOTcmw6i5QxeeLbHsbENDEMX TE1gUpHK71DF/SvtwJ3v6Hg5Sj1AXchmfe5vmajDDKG8/xDfhcMAUXsYFzjUnOX5 4tecwSnPqKPjX4L4cmO1UHrZIid4aII66XSDjSsqHqEeC8qz2xIL4EDbjO1mV5Ko UO0e9EsTSN4PPYvf08dpD1hrWvVEA56ADyRsnh+1E8K3tBXZ+ZwnbStc6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB9n/NbQJwpTUAO6MUp65NETdd+/MB8GA1UdIwQY MBaAFJxA4wfRLOBWjCmeF81lpmsmzbBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mYWYyYWUtNmE4My00NDViLTk3NGIt OGZiMzc3OWI4NzA0LzEvSDJmODF0QW5DbE5RQTdveFNucmswUk4xMzc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mYWYyYWUtNmE4My00NDViLTk3NGItOGZiMzc3OWI4NzA0 LzEvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFw4bgMA0G CSqGSIb3DQEBCwUAA4IBAQAHV8Lak7IlvjjqgizEOY7/M88veWBJNyE/5+niZk4Q XR5e+NSLMBtT2kZ2pbua7aSblndCqVKNoOqDTjga9ezJa1GwIFYC+QNP15r/plUh 7CSpLlGV9ujirOgswHULIWK+1QJxmUPcifg4uszDRNiRFtTgzn7wR81MtpsrFBpu mDU5ZXivsFSCgdHBU7uxX7jdpXhGYkE6soSJP32oQiGgEtLoP7GmVBT4Md7YJy1Z rV7fK1/mMqPgZ0uBzfbNYCzYWdQNKHD2LpjXfH+e9xutptwtCyU1qFt25a+LRAe1 ECvIM3XwefHNTuU9KxMUb4vQ5baouAtpNnEqexhwPR3K -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:42 2026 by rpki-client