This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/H1USi8TyC61vGnlQNePe7EHhTYI.roa File: H1USi8TyC61vGnlQNePe7EHhTYI.roa (raw, json) Hash identifier: rZFl2qTrl3rjsuH/9Ibk5wD3xfS9IeB0O430ndvb+jI= Subject key identifier: 1F:55:12:8B:C4:F2:0B:AD:6F:1A:79:50:35:E3:DE:EC:41:E1:4D:82 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F853F4D3B622917C9F791C4FC1DCF45 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/H1USi8TyC61vGnlQNePe7EHhTYI.roa Signing time: Fri 02 Jan 2026 16:23:17 +0000 ROA not before: Fri 02 Jan 2026 16:23:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62281 IP address blocks: 91.242.86.0/23 maxlen: 24 91.242.88.0/22 maxlen: 24 91.242.92.0/23 maxlen: 24 91.242.96.0/24 maxlen: 24 91.242.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:3f:4d:3b:62:29:17:c9:f7:91:c4:fc:1d:cf:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f55128bc4f20bad6f1a795035e3deec41e14d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3b:44:a0:de:aa:62:9b:0d:4f:1b:e7:bf:fd: 62:54:87:b0:b0:cf:fc:af:25:40:e4:40:6c:d4:ea: e8:d4:3b:76:3e:b0:70:be:12:38:05:8d:7e:25:c3: b7:38:d4:99:22:e2:22:61:ab:a7:44:cf:37:fa:d5: 23:b9:1e:ad:76:74:21:fc:0d:1e:bd:19:d7:c6:1c: 18:52:47:87:53:75:ab:50:32:1f:12:f3:99:18:d3: a0:fb:47:87:ee:b3:61:ea:19:63:b4:12:ab:be:98: 91:2a:7b:86:2f:d9:c5:8b:a9:16:23:9a:69:06:d3: 10:63:14:c9:5b:4e:e3:bd:57:b6:d2:b3:19:4c:97: a0:54:7a:5c:0c:58:f6:c2:61:0b:82:9c:2b:ad:c7: 2e:9a:e8:29:21:2c:db:10:29:b5:cf:0d:3f:9c:6f: 6d:1f:e4:c1:c8:88:42:8a:77:1d:75:34:aa:df:55: 79:b3:0f:fc:3e:68:80:42:f5:c6:15:4f:ba:7e:84: 65:a6:e5:9c:7e:9d:cf:f8:99:05:de:81:b0:0f:63: b9:1e:a3:cd:1b:2f:a8:10:d7:37:c7:86:4d:3d:df: 9a:02:7d:bb:1e:b0:f1:52:a0:58:0f:88:f7:c7:8b: c3:8d:bf:65:98:90:6b:21:4b:7d:c3:df:0b:17:aa: e1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:55:12:8B:C4:F2:0B:AD:6F:1A:79:50:35:E3:DE:EC:41:E1:4D:82 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/H1USi8TyC61vGnlQNePe7EHhTYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.86.0-91.242.93.255 91.242.96.0/24 91.242.106.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:c2:08:87:8e:7a:99:fc:5b:0b:49:43:43:05:d2:22:b8:9a: e8:2b:69:3d:ae:79:d8:a2:3b:5a:e2:9a:6f:97:de:91:52:bc: 86:8a:db:0b:c6:b7:5b:68:bd:02:5a:d2:5d:40:23:cd:18:f0: cb:48:67:88:1f:37:67:a9:e8:c7:7e:58:b6:d8:c7:37:19:4e: 97:31:cc:39:49:6f:9d:8f:d8:04:ce:23:95:20:66:74:07:b7: b1:4f:f6:16:a8:1d:a4:45:b9:61:ab:7f:4b:d5:29:58:e1:95: 50:43:2a:20:c9:e1:10:31:b5:1d:eb:05:d6:51:a3:66:f4:8d: aa:a0:6f:77:6b:f9:00:df:03:fc:bc:82:33:b9:6a:d7:65:94: 5f:12:41:8e:69:30:19:ae:ac:8b:c8:72:d4:66:3f:60:60:8d: 16:93:84:ff:7f:2c:5d:71:44:36:4d:1d:00:c5:ef:f9:da:9f: 88:bb:4e:1d:3d:a5:4f:65:b7:7f:e2:7f:5c:18:db:c8:7d:cd: 2a:a6:53:d7:cb:0a:04:62:76:92:5a:e2:9b:1d:de:96:97:91: f1:2a:55:39:28:e6:a5:b2:19:66:a5:5b:45:71:bc:37:f9:23: 11:6a:96:ac:e3:d0:40:83:ca:0e:5e:45:20:c4:49:ad:68:41: 02:fc:0e:30 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/hT9NO2IpF8n3kcT8Hc9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjU1MTI4YmM0ZjIwYmFkNmYxYTc5NTAzNWUzZGVlYzQxZTE0ZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTtEoN6qYpsNTxvnv/1iVIewsM/8 ryVA5EBs1Oro1Dt2PrBwvhI4BY1+JcO3ONSZIuIiYaunRM83+tUjuR6tdnQh/A0e vRnXxhwYUkeHU3WrUDIfEvOZGNOg+0eH7rNh6hljtBKrvpiRKnuGL9nFi6kWI5pp BtMQYxTJW07jvVe20rMZTJegVHpcDFj2wmELgpwrrccumugpISzbECm1zw0/nG9t H+TByIhCincddTSq31V5sw/8PmiAQvXGFU+6foRlpuWcfp3P+JkF3oGwD2O5HqPN Gy+oENc3x4ZNPd+aAn27HrDxUqBYD4j3x4vDjb9lmJBrIUt9w98LF6rhOQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFB9VEovE8gutbxp5UDXj3uxB4U2CMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvSDFVU2k4VHlDNjF2R25sUU5lUGU3RUhoVFlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAFb8lYD BAFb8lwDBABb8mADBABb8mowDQYJKoZIhvcNAQELBQADggEBAC7CCIeOepn8WwtJ Q0MF0iK4mugraT2uediiO1rimm+X3pFSvIaK2wvGt1tovQJa0l1AI80Y8MtIZ4gf N2ep6Md+WLbYxzcZTpcxzDlJb52P2ATOI5UgZnQHt7FP9haoHaRFuWGrf0vVKVjh lVBDKiDJ4RAxtR3rBdZRo2b0jaqgb3dr+QDfA/y8gjO5atdllF8SQY5pMBmurIvI ctRmP2BgjRaThP9/LF1xRDZNHQDF7/nan4i7Th09pU9lt3/if1wY28h9zSqmU9fL CgRidpJa4psd3paXkfEqVTko5qWyGWalW0VxvDf5IxFqlqzj0ECDyg5eRSDESa1o QQL8DjA= -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:49 2026 by rpki-client