This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/H2UHdxs--mUhysff_fZAcgdRx8M.roa File: H2UHdxs--mUhysff_fZAcgdRx8M.roa (raw, json) Hash identifier: +4m/DoxWlWwqGWh1EfHl8rJsWNMtyllJ1qewG1BywTo= Subject key identifier: 1F:65:07:77:1B:3E:FA:65:21:CA:C7:DF:FD:F6:40:72:07:51:C7:C3 Certificate issuer: /CN=9b3620d6798e7eb186639c4548a0696af6e30589 Certificate serial: 019B7CEE65EEF862E9929B7215A20F5633A3 Authority key identifier: 9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/H2UHdxs--mUhysff_fZAcgdRx8M.roa Signing time: Fri 02 Jan 2026 04:19:17 +0000 ROA not before: Fri 02 Jan 2026 04:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16189 IP address blocks: 185.171.4.0/22 maxlen: 24 2a07:97c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:65:ee:f8:62:e9:92:9b:72:15:a2:0f:56:33:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b3620d6798e7eb186639c4548a0696af6e30589 Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f6507771b3efa6521cac7dffdf640720751c7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b2:72:9c:3c:3a:bd:c2:c7:55:db:26:5a:fb: 0f:0b:26:a5:2b:32:38:1d:98:42:25:ae:ae:9f:24: c8:8e:a8:96:1f:42:19:a6:57:48:a5:88:59:c0:55: 54:de:21:fc:eb:89:92:71:80:1d:1b:78:80:54:0b: 93:6c:86:f2:9d:df:99:c5:84:38:bb:80:4b:1d:32: 7b:8a:ac:fa:5d:97:21:a1:ff:a3:0b:95:6d:d9:cf: d2:07:a0:ee:5d:22:f5:6c:8e:c4:10:14:e8:53:6f: 57:5c:c6:c0:5d:f3:d8:a7:13:3a:ce:c2:e2:39:e1: b9:0e:67:a5:00:a4:97:82:f9:d3:fa:68:99:6d:9d: 00:16:64:04:ed:98:b4:f5:ed:20:08:3d:16:8f:1b: 7e:2a:7c:3c:85:55:da:db:2f:2b:2c:a1:e8:a1:ee: fa:67:0d:d9:b5:96:d8:0d:47:a0:5b:ca:b8:86:90: 1f:0e:22:f3:f6:ca:39:5f:fc:b3:38:cd:36:b7:2d: a2:6c:c0:a4:ec:a2:83:89:b9:eb:fe:61:d3:35:45: 32:29:7a:ac:ce:5c:32:e3:90:59:e7:23:b8:b3:79: 1e:d6:ed:32:66:82:f2:5f:27:08:d1:5d:47:1a:35: 29:33:2d:54:96:d7:c6:7d:69:14:bb:94:7d:47:1d: 46:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:65:07:77:1B:3E:FA:65:21:CA:C7:DF:FD:F6:40:72:07:51:C7:C3 X509v3 Authority Key Identifier: keyid:9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/H2UHdxs--mUhysff_fZAcgdRx8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.171.4.0/22 IPv6: 2a07:97c0::/29 Signature Algorithm: sha256WithRSAEncryption 03:a3:dc:7c:15:31:9f:ac:c6:9f:dd:2e:8c:c6:88:87:2a:95: ca:65:54:99:1b:72:fc:3b:72:06:0a:5e:ac:ff:0d:6c:f9:bc: 35:bd:88:1a:e6:45:b0:29:18:60:8a:14:f0:f6:96:b5:0d:8d: d4:ba:6a:c9:c7:7a:a0:47:3d:89:3b:fc:b3:5d:cd:3e:c7:97: a3:00:27:cf:1e:45:41:69:e5:43:9d:db:af:c6:7d:3f:ba:d1: bc:8c:ab:c7:ec:34:5e:d0:7c:d5:fd:72:02:21:a0:5f:5f:4f: fe:b7:71:2d:da:2d:da:3c:f1:5b:de:e3:b3:05:c4:46:0e:5b: 8c:e5:0a:5a:0c:98:31:55:76:aa:bb:a3:b6:b8:08:52:61:85: 31:2b:cf:57:84:31:e7:70:74:a2:2c:01:c1:61:48:2e:51:ab: 88:04:b0:a2:b4:fd:f7:58:6c:f4:d8:c5:89:49:e6:7c:81:f1: 23:26:8b:79:fe:e1:62:21:b9:5a:07:b0:e8:df:f1:65:f1:da: a6:0d:d0:f7:e8:08:57:a5:77:d5:d9:b5:b8:c4:08:53:6e:25: 02:5d:96:9b:71:a7:3b:c6:b5:a2:0e:7c:ba:95:04:f0:80:d8: 5c:c5:2b:69:94:19:94:54:f4:9f:89:ac:f6:d4:f3:08:40:42: 30:19:13:94 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87mXu+GLpkptyFaIPVjOjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMzYyMGQ2Nzk4ZTdlYjE4NjYzOWM0NTQ4YTA2OTZhZjZl MzA1ODkwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjY1MDc3NzFiM2VmYTY1MjFjYWM3ZGZmZGY2NDA3MjA3NTFjN2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07JynDw6vcLHVdsmWvsPCyalKzI4 HZhCJa6unyTIjqiWH0IZpldIpYhZwFVU3iH864mScYAdG3iAVAuTbIbynd+ZxYQ4 u4BLHTJ7iqz6XZchof+jC5Vt2c/SB6DuXSL1bI7EEBToU29XXMbAXfPYpxM6zsLi OeG5DmelAKSXgvnT+miZbZ0AFmQE7Zi09e0gCD0Wjxt+Knw8hVXa2y8rLKHooe76 Zw3ZtZbYDUegW8q4hpAfDiLz9so5X/yzOM02ty2ibMCk7KKDibnr/mHTNUUyKXqs zlwy45BZ5yO4s3ke1u0yZoLyXycI0V1HGjUpMy1UltfGfWkUu5R9Rx1GFwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFB9lB3cbPvplIcrH3/32QHIHUcfDMB8GA1UdIwQY MBaAFJs2INZ5jn6xhmOcRUigaWr24wWJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXpZZzFubU9mckdHWTV4RlNLQnBhdmJqQllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82YjYwNGItNGVlZC00MzkzLThlOGMt Y2JhMDYzMWYyOTNmLzEvSDJVSGR4cy0tbVVoeXNmZl9mWkFjZ2RSeDhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82YjYwNGItNGVlZC00MzkzLThlOGMtY2JhMDYzMWYyOTNm LzEvbXpZZzFubU9mckdHWTV4RlNLQnBhdmJqQllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuasEMA0E AgACMAcDBQMqB5fAMA0GCSqGSIb3DQEBCwUAA4IBAQADo9x8FTGfrMaf3S6MxoiH KpXKZVSZG3L8O3IGCl6s/w1s+bw1vYga5kWwKRhgihTw9pa1DY3UumrJx3qgRz2J O/yzXc0+x5ejACfPHkVBaeVDnduvxn0/utG8jKvH7DRe0HzV/XICIaBfX0/+t3Et 2i3aPPFb3uOzBcRGDluM5QpaDJgxVXaqu6O2uAhSYYUxK89XhDHncHSiLAHBYUgu UauIBLCitP33WGz02MWJSeZ8gfEjJot5/uFiIblaB7Do3/Fl8dqmDdD36AhXpXfV 2bW4xAhTbiUCXZabcac7xrWiDny6lQTwgNhcxStplBmUVPSfiaz21PMIQEIwGROU -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:07 2026 by rpki-client