This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/fh8CPsRBaOgVeNLKNFf0Iy3K2nw.roa File: fh8CPsRBaOgVeNLKNFf0Iy3K2nw.roa (raw, json) Hash identifier: oFIKrciPsc3moMYuX2W88+vKHwHDmQbPgmJvo4J6g7k= Subject key identifier: 7E:1F:02:3E:C4:41:68:E8:15:78:D2:CA:34:57:F4:23:2D:CA:DA:7C Certificate issuer: /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b Certificate serial: 019BEAC188494410D0CEA30B8D0CEC9E4DEE Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/fh8CPsRBaOgVeNLKNFf0Iy3K2nw.roa Signing time: Fri 23 Jan 2026 12:08:30 +0000 ROA not before: Fri 23 Jan 2026 12:08:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39728 IP address blocks: 45.152.24.0/22 maxlen: 22 45.152.27.0/24 maxlen: 24 91.217.4.0/23 maxlen: 23 176.113.224.0/19 maxlen: 19 178.214.160.0/19 maxlen: 19 178.216.232.0/21 maxlen: 21 185.149.196.0/22 maxlen: 22 185.178.245.0/24 maxlen: 24 194.31.152.0/22 maxlen: 24 195.8.56.0/23 maxlen: 24 2a07:6900::/48 maxlen: 48 2a07:6900:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:c1:88:49:44:10:d0:ce:a3:0b:8d:0c:ec:9e:4d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b Validity Not Before: Jan 23 12:08:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e1f023ec44168e81578d2ca3457f4232dcada7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:65:4b:d8:5c:ee:f2:2e:a3:eb:73:c8:50:84: 5f:56:de:a7:5e:da:74:2d:75:da:1f:54:06:2f:db: 64:e8:19:5a:f8:2f:42:9a:8f:e2:47:e7:6c:4b:1a: 23:ac:36:8f:2f:ad:cc:21:ec:44:1d:e5:88:00:c9: a1:b9:db:b7:38:d5:6c:87:26:ab:14:7f:46:1a:04: 1d:e9:23:cf:d2:a1:c5:d5:6a:fc:38:a6:e7:79:a9: 56:7e:ab:ef:8d:0b:83:5e:05:0f:2f:d2:40:35:e6: 3f:3a:91:f5:85:f1:4b:2d:b4:74:63:ad:22:c3:76: 88:e6:2e:22:bd:5d:cf:b4:0a:ab:8d:1b:96:8c:11: bb:26:b3:de:05:f8:05:8e:4b:05:02:af:89:cc:8c: e9:cd:0e:16:a2:15:c1:e6:65:f0:7e:e4:8b:8a:9d: 0f:3f:d1:53:ea:b1:47:a3:f3:9b:ad:06:d3:80:04: 6f:0d:b0:f8:b5:f1:fc:67:a8:34:e7:5c:9c:fe:cc: 74:03:65:4c:1b:bd:8c:58:83:63:3a:14:01:0f:c3: dc:a5:a3:57:04:7d:0f:80:fa:b8:9e:dd:69:b8:bf: 7f:06:c8:bd:58:b7:36:4c:85:98:7a:b6:81:cf:2d: a7:81:05:98:9c:4e:4f:44:17:ee:27:d8:bd:ca:06: a1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1F:02:3E:C4:41:68:E8:15:78:D2:CA:34:57:F4:23:2D:CA:DA:7C X509v3 Authority Key Identifier: keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/fh8CPsRBaOgVeNLKNFf0Iy3K2nw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.24.0/22 91.217.4.0/23 176.113.224.0/19 178.214.160.0/19 178.216.232.0/21 185.149.196.0/22 185.178.245.0/24 194.31.152.0/22 195.8.56.0/23 IPv6: 2a07:6900::/47 Signature Algorithm: sha256WithRSAEncryption 84:0a:b6:65:2d:62:6d:28:0d:85:da:12:84:9e:2a:3f:68:b1: 0d:09:4a:b1:e7:b2:11:bb:43:16:6a:cf:33:4d:6c:ce:9a:0c: 4c:3c:02:47:01:55:09:11:03:da:6a:e4:ff:c2:1b:f9:22:c5: 3d:5d:25:d2:83:8d:40:ec:03:dd:e9:98:c6:1c:7c:ba:d8:60: 6d:c3:6c:c6:25:f6:66:23:b7:a0:f3:ff:dd:fa:ce:74:94:d3: 9e:7a:41:96:a9:0a:4e:06:0a:d6:fb:ef:68:6f:f1:e9:34:be: 9d:35:e4:61:e9:40:b7:dc:72:f1:d6:07:f6:ce:43:8e:33:b6: b0:eb:4f:14:b5:73:0e:25:7e:f7:be:b5:30:b1:fd:de:e6:d8: 04:22:10:fa:65:75:61:e6:05:a5:13:79:a9:b0:35:af:0e:4a: 5a:5a:cf:71:04:cb:3d:e1:6a:69:b9:51:88:77:63:99:6d:1c: a0:eb:20:c7:5e:ca:af:4b:e9:68:5b:c1:64:2e:17:ef:17:e7: fc:d7:13:6e:da:34:73:1f:0d:e2:8c:27:72:e2:57:d0:dd:91: 2e:8a:d8:db:7c:c0:c7:99:60:e5:15:6a:bd:28:c9:46:3c:a4: 2e:93:53:1f:f7:a4:20:e8:67:43:2b:72:32:50:52:b0:15:09: a5:3d:88:00 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgISAZvqwYhJRBDQzqMLjQzsnk3uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOTVhMDY5NjY5ZWQ1YTc2NmVlZThlYmRjMzJlMzlmYjE0 ODQxMGIwHhcNMjYwMTIzMTIwODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTFmMDIzZWM0NDE2OGU4MTU3OGQyY2EzNDU3ZjQyMzJkY2FkYTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmVL2Fzu8i6j63PIUIRfVt6nXtp0 LXXaH1QGL9tk6Bla+C9Cmo/iR+dsSxojrDaPL63MIexEHeWIAMmhudu3ONVshyar FH9GGgQd6SPP0qHF1Wr8OKbnealWfqvvjQuDXgUPL9JANeY/OpH1hfFLLbR0Y60i w3aI5i4ivV3PtAqrjRuWjBG7JrPeBfgFjksFAq+JzIzpzQ4WohXB5mXwfuSLip0P P9FT6rFHo/ObrQbTgARvDbD4tfH8Z6g051yc/sx0A2VMG72MWINjOhQBD8PcpaNX BH0PgPq4nt1puL9/Bsi9WLc2TIWYeraBzy2ngQWYnE5PRBfuJ9i9ygahIQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFH4fAj7EQWjoFXjSyjRX9CMtytp8MB8GA1UdIwQY MBaAFB6VoGlmntWnZu7o69wy45+xSEELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBXZ2FXYWUxYWRtN3VqcjNETGpuN0ZJUVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xMDc0NTYtZGY1My00MjRkLTkzMjAt OTMzYmZhNTkyYjFkLzEvZmg4Q1BzUkJhT2dWZU5MS05GZjBJeTNLMm53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xMDc0NTYtZGY1My00MjRkLTkzMjAtOTMzYmZhNTkyYjFk LzEvSHBXZ2FXYWUxYWRtN3VqcjNETGpuN0ZJUVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzA8BAIAATA2AwQCLZgYAwQB W9kEAwQFsHHgAwQFstagAwQDstjoAwQCuZXEAwQAubL1AwQCwh+YAwQBwwg4MA8E AgACMAkDBwEqB2kAAAAwDQYJKoZIhvcNAQELBQADggEBAIQKtmUtYm0oDYXaEoSe Kj9osQ0JSrHnshG7QxZqzzNNbM6aDEw8AkcBVQkRA9pq5P/CG/kixT1dJdKDjUDs A93pmMYcfLrYYG3DbMYl9mYjt6Dz/936znSU0556QZapCk4GCtb772hv8ek0vp01 5GHpQLfccvHWB/bOQ44ztrDrTxS1cw4lfve+tTCx/d7m2AQiEPpldWHmBaUTeamw Na8OSlpaz3EEyz3hamm5UYh3Y5ltHKDrIMdeyq9L6WhbwWQuF+8X5/zXE27aNHMf DeKMJ3LiV9DdkS6K2Nt8wMeZYOUVar0oyUY8pC6TUx/3pCDoZ0MrcjJQUrAVCaU9 iAA= -----END CERTIFICATE-----Generated at Mon Feb 2 08:03:05 2026 by rpki-client