This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/H-_mFdNLWMZC53UZe-bifFdtJXY.roa File: H-_mFdNLWMZC53UZe-bifFdtJXY.roa (raw, json) Hash identifier: KU+nTj/Oi0ZZBazAj+NjaO+F9Nkjm2dvb6SsyCURy98= Subject key identifier: 1F:EF:E6:15:D3:4B:58:C6:42:E7:75:19:7B:E6:E2:7C:57:6D:25:76 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C801407F8B47631FE2ABDE8EC185202 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/H-_mFdNLWMZC53UZe-bifFdtJXY.roa Signing time: Fri 02 Jan 2026 02:18:47 +0000 ROA not before: Fri 02 Jan 2026 02:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26636 IP address blocks: 2.56.246.0/23 maxlen: 23 147.78.124.0/22 maxlen: 22 212.87.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:14:07:f8:b4:76:31:fe:2a:bd:e8:ec:18:52:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fefe615d34b58c642e775197be6e27c576d2576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:73:28:a1:52:55:77:db:4b:6b:a7:4c:41:9d: 55:bb:4d:2b:62:e3:35:55:81:71:1c:67:45:cb:e2: b1:3f:02:7b:4a:4b:24:6f:90:3c:5a:c2:2a:d1:46: 10:82:f8:ee:39:e8:15:ee:4c:fd:35:e2:3c:7a:73: d7:38:bd:c5:80:5a:eb:75:70:4c:42:e5:0a:a0:ce: fe:07:40:17:c8:87:32:f5:67:d8:4f:a1:1f:70:e7: 4c:24:b1:73:61:47:0c:9d:8d:11:19:7e:4f:94:f1: 6a:ad:08:b0:ed:d2:36:46:f4:b1:49:1e:7c:16:cc: d7:29:51:4c:a1:14:d4:9e:0d:84:a9:ef:ac:d2:8f: 69:bd:3e:85:54:fa:b3:02:4a:13:dc:8b:95:c5:9b: 95:7f:9d:61:80:35:c9:13:06:9d:e2:8a:ef:52:aa: 74:82:66:10:9e:0a:c4:85:03:6c:c2:74:72:52:ba: 75:a3:5e:91:3b:2b:a5:c6:3b:66:65:80:bb:71:25: 75:62:5c:1e:20:b7:c4:25:08:9f:b3:13:3a:d9:b2: 68:6f:be:00:8a:9a:f0:88:95:05:c2:77:a6:de:61: c6:e1:9a:aa:41:74:8d:ac:04:26:70:9f:9f:e4:9d: bc:63:a5:a5:39:8a:f8:91:be:f0:82:78:ac:96:a7: 31:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:EF:E6:15:D3:4B:58:C6:42:E7:75:19:7B:E6:E2:7C:57:6D:25:76 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/H-_mFdNLWMZC53UZe-bifFdtJXY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.246.0/23 147.78.124.0/22 212.87.212.0/22 Signature Algorithm: sha256WithRSAEncryption a8:88:9d:90:5b:f0:82:13:de:ea:13:a9:a8:81:c1:5e:d9:af: 49:73:68:e2:b0:a9:68:ef:73:bb:3c:ee:4b:01:d6:56:46:35: 0a:3f:21:34:cd:0c:e8:ed:a7:08:68:cf:66:ef:e7:6d:a9:5e: 77:0f:b2:ea:bb:c1:c9:8b:b9:4c:f9:6c:d1:39:90:ec:3b:08: 4a:ac:2f:47:a3:dc:ea:bb:10:68:3e:e1:c0:13:b0:4f:43:78: e3:2a:f6:78:eb:89:78:87:53:0d:78:1e:de:fe:9a:17:06:8c: cf:71:21:fb:3e:10:44:17:e3:e0:3f:14:6d:85:fa:80:59:a4: 5c:6b:2c:e7:74:58:13:c4:12:87:78:93:12:8e:af:98:85:07: 8c:9e:fd:d0:50:01:10:b5:17:ef:d5:1c:81:92:d8:6a:70:59: e0:6b:12:a4:09:0b:af:89:9f:99:08:4d:e5:3a:d6:d6:9f:ed: 86:02:e5:04:3b:83:5c:d3:16:38:8f:fc:08:d0:56:19:3a:21: 8a:e6:19:d7:60:ec:91:a6:1a:d1:f3:6a:17:9a:c8:71:18:d5: 73:ae:6a:63:99:73:05:61:af:fd:ce:c1:7f:b3:54:69:8b:a1: 1b:13:43:b0:51:eb:2d:02:df:1f:82:95:8a:a0:e1:85:7d:68: 69:5e:19:9d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gBQH+LR2Mf4qvejsGFICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmVmZTYxNWQzNGI1OGM2NDJlNzc1MTk3YmU2ZTI3YzU3NmQyNTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHMooVJVd9tLa6dMQZ1Vu00rYuM1 VYFxHGdFy+KxPwJ7Skskb5A8WsIq0UYQgvjuOegV7kz9NeI8enPXOL3FgFrrdXBM QuUKoM7+B0AXyIcy9WfYT6EfcOdMJLFzYUcMnY0RGX5PlPFqrQiw7dI2RvSxSR58 FszXKVFMoRTUng2Eqe+s0o9pvT6FVPqzAkoT3IuVxZuVf51hgDXJEwad4orvUqp0 gmYQngrEhQNswnRyUrp1o16ROyulxjtmZYC7cSV1YlweILfEJQifsxM62bJob74A iprwiJUFwnem3mHG4ZqqQXSNrAQmcJ+f5J28Y6WlOYr4kb7wgnislqcxPwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFB/v5hXTS1jGQud1GXvm4nxXbSV2MB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvSC1fbUZkTkxXTVpDNTNVWmUtYmlmRmR0SlhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBAjj2AwQC k058AwQC1FfUMA0GCSqGSIb3DQEBCwUAA4IBAQCoiJ2QW/CCE97qE6mogcFe2a9J c2jisKlo73O7PO5LAdZWRjUKPyE0zQzo7acIaM9m7+dtqV53D7Lqu8HJi7lM+WzR OZDsOwhKrC9Ho9zquxBoPuHAE7BPQ3jjKvZ464l4h1MNeB7e/poXBozPcSH7PhBE F+PgPxRthfqAWaRcayzndFgTxBKHeJMSjq+YhQeMnv3QUAEQtRfv1RyBkthqcFng axKkCQuviZ+ZCE3lOtbWn+2GAuUEO4Nc0xY4j/wI0FYZOiGK5hnXYOyRphrR82oX mshxGNVzrmpjmXMFYa/9zsF/s1Rpi6EbE0OwUestAt8fgpWKoOGFfWhpXhmd -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:12 2026 by rpki-client