This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/H4vZZgy8L-83loBlfJ2Z1eRuVjI.roa File: H4vZZgy8L-83loBlfJ2Z1eRuVjI.roa (raw, json) Hash identifier: n3TtZKW8jTF8quOeFDtPkhw+ZhgsE56xwHQyTvZ/ifg= Subject key identifier: 1F:8B:D9:66:0C:BC:2F:EF:37:96:80:65:7C:9D:99:D5:E4:6E:56:32 Certificate issuer: /CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f Certificate serial: 019B7DCB1C02A36973D09648F72F012D6FF9 Authority key identifier: 2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/H4vZZgy8L-83loBlfJ2Z1eRuVjI.roa Signing time: Fri 02 Jan 2026 08:20:21 +0000 ROA not before: Fri 02 Jan 2026 08:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47562 IP address blocks: 46.175.192.0/21 maxlen: 24 62.122.144.0/21 maxlen: 24 93.91.112.0/20 maxlen: 24 94.198.32.0/21 maxlen: 24 185.46.96.0/22 maxlen: 24 2a03:ce80::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:1c:02:a3:69:73:d0:96:48:f7:2f:01:2d:6f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f Validity Not Before: Jan 2 08:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f8bd9660cbc2fef379680657c9d99d5e46e5632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b4:99:78:47:2f:1a:7a:0b:52:82:eb:d7:42: 7f:f7:2a:7b:58:8d:b8:98:07:17:b7:1f:af:83:0f: 19:e3:da:b2:f1:a7:15:5f:3b:73:79:e1:35:9b:55: 5c:4d:d9:0f:65:06:bf:5b:81:b6:44:55:62:c1:2f: 88:21:be:b9:81:a9:2e:c3:f3:40:50:20:1c:30:b5: 53:3a:40:33:94:cc:34:2c:f4:9c:c9:cf:ff:34:9a: 77:d4:c9:6f:ef:d3:9b:90:c4:63:35:9f:ce:a9:de: 0a:12:9a:cb:a7:cf:7b:65:8d:38:ca:99:73:60:78: 40:32:e8:88:5b:86:dc:de:fe:30:5c:df:f4:95:89: 7e:1d:6a:e6:ca:e3:cf:56:47:98:1d:83:d2:93:1a: 5a:61:94:5d:a5:e4:18:3a:ad:d6:99:4e:71:0a:9e: c7:32:dd:9f:dc:00:1b:1f:9d:91:d8:a6:4e:f2:71: 24:78:62:2b:cb:10:a5:c1:df:e0:d8:9e:d1:ea:60: 68:32:ba:50:ae:84:1e:19:e2:ff:69:45:c8:ea:f1: 4d:3f:8f:8c:e4:85:38:38:87:c6:80:ca:44:14:10: ca:2e:7d:62:b7:36:ee:81:22:81:0f:4b:cf:71:57: 69:e5:35:7b:36:c8:18:26:8c:98:1f:e6:6d:ef:43: 6d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8B:D9:66:0C:BC:2F:EF:37:96:80:65:7C:9D:99:D5:E4:6E:56:32 X509v3 Authority Key Identifier: keyid:2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/H4vZZgy8L-83loBlfJ2Z1eRuVjI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.175.192.0/21 62.122.144.0/21 93.91.112.0/20 94.198.32.0/21 185.46.96.0/22 IPv6: 2a03:ce80::/32 Signature Algorithm: sha256WithRSAEncryption 2b:fd:92:d1:6f:93:d4:7a:32:e2:3d:cb:3a:bd:9c:95:19:5b: e5:a4:04:18:85:5e:31:0e:62:25:21:28:98:18:2d:9e:62:65: b7:99:e3:74:fe:93:95:03:7c:0c:19:ff:a9:35:65:db:16:b7: 59:9b:ba:cb:fd:27:9d:78:48:7f:3e:ea:4a:25:eb:b8:cf:f3: 91:da:c6:9c:aa:10:87:55:30:2a:b8:ec:61:8f:be:0c:31:8e: 5c:35:b2:43:54:59:42:97:81:6f:da:a0:0c:69:6e:b0:55:d7: 73:4a:c2:c5:b6:ec:ac:89:f7:b3:6e:a2:75:03:51:84:ad:21: e1:57:2e:28:b3:9a:4b:60:9b:39:e3:3f:5f:49:d6:55:dd:3f: 9a:91:14:eb:0d:43:7d:9f:d1:15:1b:b9:61:8b:2b:b6:d8:da: d4:09:63:0c:24:5b:4a:7b:54:67:6f:79:86:7a:1f:f4:ef:19: 28:a9:3c:43:b7:e0:3b:e0:a6:2a:42:59:37:25:8f:be:64:23: 58:28:40:5c:97:61:5d:bf:b0:50:78:74:30:37:ad:76:6a:26: 7e:29:dd:2d:85:c3:e9:0c:a1:2c:90:68:e9:10:46:31:72:b7: ec:28:0c:f2:fb:15:78:4a:b0:1d:80:7e:3b:09:30:b8:b3:a3: 63:3f:b8:89 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt9yxwCo2lz0JZI9y8BLW/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTE0YmZmODM0ODBkMTBjZDBmYmViYjgwYjJjYjUwOTFm Y2Y4MmYwHhcNMjYwMTAyMDgyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjhiZDk2NjBjYmMyZmVmMzc5NjgwNjU3YzlkOTlkNWU0NmU1NjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7SZeEcvGnoLUoLr10J/9yp7WI24 mAcXtx+vgw8Z49qy8acVXztzeeE1m1VcTdkPZQa/W4G2RFViwS+IIb65gakuw/NA UCAcMLVTOkAzlMw0LPScyc//NJp31Mlv79ObkMRjNZ/Oqd4KEprLp897ZY04yplz YHhAMuiIW4bc3v4wXN/0lYl+HWrmyuPPVkeYHYPSkxpaYZRdpeQYOq3WmU5xCp7H Mt2f3AAbH52R2KZO8nEkeGIryxClwd/g2J7R6mBoMrpQroQeGeL/aUXI6vFNP4+M 5IU4OIfGgMpEFBDKLn1itzbugSKBD0vPcVdp5TV7NsgYJoyYH+Zt70NtWQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFB+L2WYMvC/vN5aAZXydmdXkblYyMB8GA1UdIwQY MBaAFCqhS/+DSA0QzQ++u4Cyy1CR/PgvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMTk4MTEtZmEyMy00N2IwLWI1Nzct MTc2OThmODhjM2JkLzEvSDR2WlpneThMLTgzbG9CbGZKMloxZVJ1VmpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9iMTk4MTEtZmEyMy00N2IwLWI1NzctMTc2OThmODhjM2Jk LzEvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDLq/AAwQD PnqQAwQEXVtwAwQDXsYgAwQCuS5gMA0EAgACMAcDBQAqA86AMA0GCSqGSIb3DQEB CwUAA4IBAQAr/ZLRb5PUejLiPcs6vZyVGVvlpAQYhV4xDmIlISiYGC2eYmW3meN0 /pOVA3wMGf+pNWXbFrdZm7rL/SedeEh/PupKJeu4z/OR2sacqhCHVTAquOxhj74M MY5cNbJDVFlCl4Fv2qAMaW6wVddzSsLFtuysifezbqJ1A1GErSHhVy4os5pLYJs5 4z9fSdZV3T+akRTrDUN9n9EVG7lhiyu22NrUCWMMJFtKe1Rnb3mGeh/07xkoqTxD t+A74KYqQlk3JY++ZCNYKEBcl2Fdv7BQeHQwN612aiZ+Kd0thcPpDKEskGjpEEYx crfsKAzy+xV4SrAdgH47CTC4s6NjP7iJ -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:14 2026 by rpki-client