This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/H2jCTQzbQsYk13iwvq9UQ-x7Ky8.roa File: H2jCTQzbQsYk13iwvq9UQ-x7Ky8.roa (raw, json) Hash identifier: JT69tUqO6Fb/vLLIOCabYe71TY2HkCmIiLEaq7yso7U= Subject key identifier: 1F:68:C2:4D:0C:DB:42:C6:24:D7:78:B0:BE:AF:54:43:EC:7B:2B:2F Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EB78D6C4A468709F8F8A4D160ACA0 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/H2jCTQzbQsYk13iwvq9UQ-x7Ky8.roa Signing time: Thu 01 Jan 2026 12:18:26 +0000 ROA not before: Thu 01 Jan 2026 12:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41782 IP address blocks: 85.196.168.0/24 maxlen: 24 85.196.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b7:8d:6c:4a:46:87:09:f8:f8:a4:d1:60:ac:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f68c24d0cdb42c624d778b0beaf5443ec7b2b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:20:85:b9:d4:84:1f:b0:f3:5d:2f:d5:73:f2: 53:2d:4e:06:d8:c0:9a:51:a5:2b:11:77:64:3b:32: b4:01:4a:56:94:dc:f9:43:80:9b:12:02:bb:26:00: 19:1e:6f:e5:e0:9e:81:ce:f0:dd:e3:3a:23:78:22: 68:02:c5:df:fa:38:38:0d:cf:a6:2f:f8:75:bc:78: b1:85:ac:2b:41:e6:d8:ee:86:b7:48:2f:c6:31:89: 4f:e5:b2:68:7c:38:1b:8a:9c:3e:b8:2b:6a:0a:62: 1d:37:4f:58:4f:fe:8d:72:6b:9d:9f:7d:3b:8f:88: 1b:90:44:66:7c:c1:8d:30:c6:17:38:b9:46:cd:95: ff:4e:1d:e7:ab:d0:a1:92:1d:46:c7:bd:a7:6d:d2: 3b:dd:74:79:6d:2d:0c:e4:49:47:63:65:c3:93:c7: 37:68:76:b9:fb:27:90:f3:90:8e:0b:c0:9b:db:da: dd:fe:9f:95:af:c6:4f:d3:ab:71:08:28:00:ef:ec: 56:67:ce:6d:71:63:8d:0e:2a:a3:71:59:00:e4:f1: ac:2d:01:54:ad:71:f4:39:fa:22:b6:38:d9:a5:98: f6:ff:73:1f:c2:de:a9:b2:92:4f:f9:2b:96:3e:eb: 21:a2:64:41:c2:d8:d2:41:3f:4e:28:bf:99:45:16: 1c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:68:C2:4D:0C:DB:42:C6:24:D7:78:B0:BE:AF:54:43:EC:7B:2B:2F X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/H2jCTQzbQsYk13iwvq9UQ-x7Ky8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.196.168.0/23 Signature Algorithm: sha256WithRSAEncryption 32:95:61:d7:7a:ad:e4:1a:65:02:00:78:cb:9b:a1:2e:2a:a8: 2e:57:68:aa:11:df:e6:aa:1b:a5:6d:78:77:2d:c1:cf:40:12: e3:0c:cd:1b:37:92:94:39:e5:7b:fa:4d:9a:2b:45:b7:e4:5f: e4:40:20:a5:b2:0b:f8:d6:31:1e:c8:af:66:0d:24:4d:0c:29: 07:b9:4f:1c:57:24:c0:9c:50:55:09:87:33:cc:b4:57:dd:1e: fa:10:52:80:88:3d:ff:2a:9d:1f:09:0b:68:e6:e6:1c:48:77: 71:a5:c7:f5:34:bc:c0:65:5e:cd:98:8d:93:66:ec:c3:0b:76: d5:42:cf:40:9c:f9:c3:ec:c5:ba:92:c2:3c:2a:3c:c0:a1:d5: 56:0a:f3:c7:bc:60:b7:30:06:ac:ba:5b:7c:77:c9:c3:31:61: 8b:4d:19:93:ca:36:34:e5:1a:2e:3d:e0:21:37:63:42:68:e2: 4e:ba:78:56:83:c6:5e:69:fb:d2:32:8c:4b:6f:ef:09:3c:0a: 0c:c6:fa:22:58:e2:4e:7c:02:88:d7:8f:fd:50:0a:f3:cb:eb: af:cc:36:1a:a7:7c:a3:5a:8d:65:97:a4:6c:71:b4:44:55:8b: eb:68:9d:c6:6f:f1:6a:c8:0d:5e:04:a9:10:b3:cf:32:36:b0: 66:15:54:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5freNbEpGhwn4+KTRYKygMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjY4YzI0ZDBjZGI0MmM2MjRkNzc4YjBiZWFmNTQ0M2VjN2IyYjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iCFudSEH7DzXS/Vc/JTLU4G2MCa UaUrEXdkOzK0AUpWlNz5Q4CbEgK7JgAZHm/l4J6BzvDd4zojeCJoAsXf+jg4Dc+m L/h1vHixhawrQebY7oa3SC/GMYlP5bJofDgbipw+uCtqCmIdN09YT/6Ncmudn307 j4gbkERmfMGNMMYXOLlGzZX/Th3nq9Chkh1Gx72nbdI73XR5bS0M5ElHY2XDk8c3 aHa5+yeQ85COC8Cb29rd/p+Vr8ZP06txCCgA7+xWZ85tcWONDiqjcVkA5PGsLQFU rXH0OfoitjjZpZj2/3Mfwt6pspJP+SuWPushomRBwtjSQT9OKL+ZRRYchQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB9owk0M20LGJNd4sL6vVEPseysvMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvSDJqQ1RRemJRc1lrMTNpd3ZxOVVRLXg3S3k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVcSoMA0G CSqGSIb3DQEBCwUAA4IBAQAylWHXeq3kGmUCAHjLm6EuKqguV2iqEd/mqhulbXh3 LcHPQBLjDM0bN5KUOeV7+k2aK0W35F/kQCClsgv41jEeyK9mDSRNDCkHuU8cVyTA nFBVCYczzLRX3R76EFKAiD3/Kp0fCQto5uYcSHdxpcf1NLzAZV7NmI2TZuzDC3bV Qs9AnPnD7MW6ksI8KjzAodVWCvPHvGC3MAasult8d8nDMWGLTRmTyjY05RouPeAh N2NCaOJOunhWg8ZeafvSMoxLb+8JPAoMxvoiWOJOfAKI14/9UArzy+uvzDYap3yj Wo1ll6RscbREVYvraJ3Gb/FqyA1eBKkQs88yNrBmFVQm -----END CERTIFICATE-----Generated at Mon Jan 26 17:25:37 2026 by rpki-client