This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/cDH3zRFxxa5MCdHGhfO_X-DrZiY.roa File: cDH3zRFxxa5MCdHGhfO_X-DrZiY.roa (raw, json) Hash identifier: XO1nhE/daEhAYwuXZgOrEgjLVoR1QTpbhv4y3qZNEo0= Subject key identifier: 70:31:F7:CD:11:71:C5:AE:4C:09:D1:C6:85:F3:BF:5F:E0:EB:66:26 Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322 Certificate serial: 019B7F14F2F86E0D39BB4D84C07761BE07E9 Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/cDH3zRFxxa5MCdHGhfO_X-DrZiY.roa Signing time: Fri 02 Jan 2026 14:20:37 +0000 ROA not before: Fri 02 Jan 2026 14:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62105 IP address blocks: 82.163.40.0/21 maxlen: 21 185.47.132.0/22 maxlen: 22 2a01:90a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f2:f8:6e:0d:39:bb:4d:84:c0:77:61:be:07:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322 Validity Not Before: Jan 2 14:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7031f7cd1171c5ae4c09d1c685f3bf5fe0eb6626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cc:bb:90:40:f7:25:eb:bb:12:96:4b:45:27: 5d:e8:d2:33:4e:58:31:79:3a:c2:c6:82:c8:e3:64: 71:70:44:d0:52:e3:69:5f:9a:8b:47:35:04:80:a8: 63:0b:2f:0a:b0:65:1b:ea:44:b0:34:d3:18:87:bf: be:28:28:ff:15:f2:15:3b:33:13:d4:56:5d:c8:4f: 9a:54:fe:2f:dc:f3:2a:06:ea:da:62:ed:52:8e:c6: d8:9a:29:47:3c:f6:00:0b:dc:f9:51:c2:d6:ba:d3: 98:95:f7:68:d3:dd:97:ad:52:34:ba:a2:a8:8d:6f: 68:04:7f:84:f7:9a:d9:d1:f5:ee:2a:b3:02:46:0f: 3c:aa:ba:23:a8:ec:c0:ef:1e:dd:7d:b5:6e:b3:8d: 75:3b:f7:31:91:6e:61:f4:85:b2:c5:65:36:ac:07: 9a:c1:89:5c:de:ac:f0:62:ae:75:20:30:43:81:76: fe:71:c5:66:2d:8c:95:7a:3e:14:0b:0f:4d:74:c0: ba:1a:9a:82:5a:9c:67:1c:ea:77:b0:a4:63:dc:61: 07:3b:ce:5a:d2:0e:b5:ef:c6:c8:11:c4:b7:b0:0f: 83:2d:f1:5e:a9:84:d1:52:cd:42:42:03:bc:2f:8b: 26:03:3b:b8:b6:83:92:c6:d9:0d:6b:64:4c:5d:d7: 9b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:31:F7:CD:11:71:C5:AE:4C:09:D1:C6:85:F3:BF:5F:E0:EB:66:26 X509v3 Authority Key Identifier: keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/cDH3zRFxxa5MCdHGhfO_X-DrZiY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.163.40.0/21 185.47.132.0/22 IPv6: 2a01:90a0::/32 Signature Algorithm: sha256WithRSAEncryption 7b:ef:4b:61:42:42:0f:cf:d1:54:bb:10:83:32:e2:a5:9b:be: 1e:5d:a6:bc:00:5e:82:a5:e8:8b:b0:40:92:87:18:ff:eb:87: 13:ba:f0:43:87:b4:9a:9f:10:77:89:3f:64:69:72:21:cc:de: d3:23:03:22:41:89:30:c5:76:25:32:1d:77:99:ce:76:05:42: 16:b8:d7:12:eb:96:fb:c0:f0:a7:f7:bd:85:5d:2b:9c:38:a8: 48:78:b7:43:bc:e8:31:ac:bb:1d:11:f4:c4:60:52:dc:66:7e: aa:9a:ca:f2:b9:f2:cc:99:16:05:51:a7:d4:64:6b:00:4f:56: 5a:4a:e1:6d:45:6c:69:21:cb:06:1a:ee:92:c6:de:04:37:f0: 53:d3:55:03:84:07:cb:55:66:3c:ac:a1:b6:19:2a:2d:14:72: 13:bd:30:b8:98:0a:a0:fd:99:42:1f:b8:2f:71:b5:23:f7:7f: 9c:b5:7f:44:44:8e:40:15:84:27:1f:7f:2e:1b:60:68:59:ad: d6:d8:cd:62:93:fd:67:b4:1f:60:1d:48:86:a4:76:2d:85:d1: 48:46:bd:d0:e3:d1:75:61:a9:c6:08:0e:9b:2a:16:cd:1b:d6: e8:2d:22:d0:92:61:62:d0:a6:e2:d5:91:13:10:a9:b1:45:d0: da:1a:b6:f8 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FPL4bg05u02EwHdhvgfpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiY2VlNDA0MDVhZWZiNmRhMTdhMzQwZWVmMTU5Y2U5YzRk MTgzMjIwHhcNMjYwMTAyMTQyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDMxZjdjZDExNzFjNWFlNGMwOWQxYzY4NWYzYmY1ZmUwZWI2NjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcy7kED3Jeu7EpZLRSdd6NIzTlgx eTrCxoLI42RxcETQUuNpX5qLRzUEgKhjCy8KsGUb6kSwNNMYh7++KCj/FfIVOzMT 1FZdyE+aVP4v3PMqBuraYu1SjsbYmilHPPYAC9z5UcLWutOYlfdo092XrVI0uqKo jW9oBH+E95rZ0fXuKrMCRg88qrojqOzA7x7dfbVus411O/cxkW5h9IWyxWU2rAea wYlc3qzwYq51IDBDgXb+ccVmLYyVej4UCw9NdMC6GpqCWpxnHOp3sKRj3GEHO85a 0g6178bIEcS3sA+DLfFeqYTRUs1CQgO8L4smAzu4toOSxtkNa2RMXdeb9QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHAx980RccWuTAnRxoXzv1/g62YmMB8GA1UdIwQY MBaAFBvO5AQFrvttoXo0Du8VnOnE0YMiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZjg5ZDgtOGMzNS00YzhjLWIxNWQt N2U0NmFkNzQ4NDg0LzEvY0RIM3pSRnh4YTVNQ2RIR2hmT19YLURyWmlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hZjg5ZDgtOGMzNS00YzhjLWIxNWQtN2U0NmFkNzQ4NDg0 LzEvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDUqMoAwQC uS+EMA0EAgACMAcDBQAqAZCgMA0GCSqGSIb3DQEBCwUAA4IBAQB770thQkIPz9FU uxCDMuKlm74eXaa8AF6CpeiLsECShxj/64cTuvBDh7SanxB3iT9kaXIhzN7TIwMi QYkwxXYlMh13mc52BUIWuNcS65b7wPCn972FXSucOKhIeLdDvOgxrLsdEfTEYFLc Zn6qmsryufLMmRYFUafUZGsAT1ZaSuFtRWxpIcsGGu6Sxt4EN/BT01UDhAfLVWY8 rKG2GSotFHITvTC4mAqg/ZlCH7gvcbUj93+ctX9ERI5AFYQnH38uG2BoWa3W2M1i k/1ntB9gHUiGpHYthdFIRr3Q49F1YanGCA6bKhbNG9boLSLQkmFi0Kbi1ZETEKmx RdDaGrb4 -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:19 2026 by rpki-client