This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/R1HqNhBgcIe-3oW62MxdKjDKqQw.roa File: R1HqNhBgcIe-3oW62MxdKjDKqQw.roa (raw, json) Hash identifier: qEknwbkXeioT3cO8P3jelWto+d9dLLFAHoISR08x8Pc= Subject key identifier: 47:51:EA:36:10:60:70:87:BE:DE:85:BA:D8:CC:5D:2A:30:CA:A9:0C Certificate issuer: /CN=0cd49ca1901df020930ce971f65cc180a3fcbe81 Certificate serial: 019B7A5B01243149F87D39A7CE3DC6E05B6E Authority key identifier: 0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/R1HqNhBgcIe-3oW62MxdKjDKqQw.roa Signing time: Thu 01 Jan 2026 16:19:02 +0000 ROA not before: Thu 01 Jan 2026 16:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15405 IP address blocks: 91.198.244.0/24 maxlen: 24 185.22.156.0/22 maxlen: 22 185.159.36.0/22 maxlen: 22 185.202.68.0/22 maxlen: 22 195.162.84.0/22 maxlen: 22 2a03:4c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:01:24:31:49:f8:7d:39:a7:ce:3d:c6:e0:5b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cd49ca1901df020930ce971f65cc180a3fcbe81 Validity Not Before: Jan 1 16:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4751ea3610607087bede85bad8cc5d2a30caa90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2b:76:07:9b:9a:9b:05:bb:f2:49:c6:b0:d0: b8:f0:17:10:2b:e8:24:c8:bb:e7:be:fd:78:d5:fb: 85:f2:ec:02:85:8f:f6:e8:1a:32:f2:8e:34:1c:66: d3:c3:b4:e5:1d:40:e8:31:e2:41:49:9f:07:9d:f7: 4a:95:a4:0b:0d:f9:e8:fe:9b:08:7c:ce:a4:ee:2d: ea:fc:9f:b1:1f:39:c3:bc:79:c1:43:39:00:d2:d8: 4a:77:84:55:e9:1d:dc:bc:ba:18:ca:69:c4:44:d1: 0a:3f:c2:af:dd:75:e9:86:4b:de:02:cf:d2:ab:cc: 48:4f:5d:71:3b:08:cb:b8:2d:09:37:97:91:d1:52: 59:4e:f3:d6:c3:c4:e6:95:00:4f:9a:b8:1d:bb:30: be:23:b5:ef:37:6e:78:e3:64:b9:a8:99:ed:c7:c0: ab:d3:3b:ee:b8:15:59:7b:a4:2c:46:7f:3a:10:10: ee:5d:82:fb:d9:74:cf:e6:ca:c1:00:06:2f:e2:9a: 1a:d7:b7:c0:3e:0c:b6:f5:40:47:78:3d:86:ca:0d: 5e:eb:e5:98:71:19:bc:1d:66:59:1c:a4:96:8a:4d: 58:16:8e:02:26:1e:ae:79:48:08:36:5a:2b:e6:8f: 79:ca:1b:b2:1a:89:79:7e:dd:eb:47:2c:73:72:f9: f7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:51:EA:36:10:60:70:87:BE:DE:85:BA:D8:CC:5D:2A:30:CA:A9:0C X509v3 Authority Key Identifier: keyid:0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/R1HqNhBgcIe-3oW62MxdKjDKqQw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.244.0/24 185.22.156.0/22 185.159.36.0/22 185.202.68.0/22 195.162.84.0/22 IPv6: 2a03:4c0::/32 Signature Algorithm: sha256WithRSAEncryption 48:43:62:9b:50:93:f8:12:c5:1c:8f:b5:cd:57:c5:2c:e2:f3: 9f:82:16:ba:49:17:27:d0:ea:af:9e:c9:63:3f:24:21:4b:5c: e0:e5:39:72:69:a5:50:3b:1b:c1:0e:e4:ef:51:eb:38:c3:2b: ff:85:49:05:eb:24:dd:8f:63:11:3c:79:1d:0d:c3:ab:d8:0f: f6:98:0f:ca:22:63:a8:39:e1:9d:c5:de:8f:61:a5:fc:7d:8b: 27:f0:82:80:2e:82:43:3c:9e:cf:66:61:7a:39:c9:1f:62:b4: 1e:ac:05:a0:95:8e:a8:a6:62:4b:bf:ed:41:a4:df:df:71:ed: 56:d4:94:ad:1a:ca:9e:67:0c:be:a0:cb:ec:32:03:1e:92:5e: b9:8d:a5:22:b6:2c:b4:27:2d:18:93:1b:eb:cc:80:66:a3:ac: 0a:b2:b6:e7:3c:91:41:ae:8d:c2:6e:3a:fe:33:15:7b:7e:37: dc:23:fe:cc:fe:14:98:a8:ae:38:07:ee:61:f5:32:df:2d:a1: be:62:94:71:99:f0:f3:fe:c0:9b:2b:44:88:47:57:8b:23:2e: 35:d3:99:1e:f0:1e:79:97:67:dd:a2:08:eb:5e:a7:57:6f:3d: 2b:14:c4:3a:b0:22:c3:38:30:7b:4d:ae:52:a2:e0:e2:1a:4c: 27:55:04:2d -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt6WwEkMUn4fTmnzj3G4FtuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZDQ5Y2ExOTAxZGYwMjA5MzBjZTk3MWY2NWNjMTgwYTNm Y2JlODEwHhcNMjYwMTAxMTYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzUxZWEzNjEwNjA3MDg3YmVkZTg1YmFkOGNjNWQyYTMwY2FhOTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4St2B5uamwW78knGsNC48BcQK+gk yLvnvv141fuF8uwChY/26Boy8o40HGbTw7TlHUDoMeJBSZ8HnfdKlaQLDfno/psI fM6k7i3q/J+xHznDvHnBQzkA0thKd4RV6R3cvLoYymnERNEKP8Kv3XXphkveAs/S q8xIT11xOwjLuC0JN5eR0VJZTvPWw8TmlQBPmrgduzC+I7XvN25442S5qJntx8Cr 0zvuuBVZe6QsRn86EBDuXYL72XTP5srBAAYv4poa17fAPgy29UBHeD2Gyg1e6+WY cRm8HWZZHKSWik1YFo4CJh6ueUgINlor5o95yhuyGol5ft3rRyxzcvn3CwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFEdR6jYQYHCHvt6FutjMXSowyqkMMB8GA1UdIwQY MBaAFAzUnKGQHfAgkwzpcfZcwYCj/L6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jOWNjYzktYzQwNS00MjhmLWI3NzMt ZGQyM2RjNDI0MWZhLzEvUjFIcU5oQmdjSWUtM29XNjJNeGRLakRLcVF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jOWNjYzktYzQwNS00MjhmLWI3NzMtZGQyM2RjNDI0MWZh LzEvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAW8b0AwQC uRacAwQCuZ8kAwQCucpEAwQCw6JUMA0EAgACMAcDBQAqAwTAMA0GCSqGSIb3DQEB CwUAA4IBAQBIQ2KbUJP4EsUcj7XNV8Us4vOfgha6SRcn0OqvnsljPyQhS1zg5Tly aaVQOxvBDuTvUes4wyv/hUkF6yTdj2MRPHkdDcOr2A/2mA/KImOoOeGdxd6PYaX8 fYsn8IKALoJDPJ7PZmF6OckfYrQerAWglY6opmJLv+1BpN/fce1W1JStGsqeZwy+ oMvsMgMekl65jaUitiy0Jy0YkxvrzIBmo6wKsrbnPJFBro3Cbjr+MxV7fjfcI/7M /hSYqK44B+5h9TLfLaG+YpRxmfDz/sCbK0SIR1eLIy4105ke8B55l2fdogjrXqdX bz0rFMQ6sCLDODB7Ta5SouDiGkwnVQQt -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:00 2026 by rpki-client