This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/H6q8h__WeJINLNS-JCWvRE5rrpQ.roa File: H6q8h__WeJINLNS-JCWvRE5rrpQ.roa (raw, json) Hash identifier: wliRsZf6kHIWennhhOkB1e0svy01r5HVaziAUGbDu0c= Subject key identifier: 1F:AA:BC:87:FF:D6:78:92:0D:2C:D4:BE:24:25:AF:44:4E:6B:AE:94 Certificate issuer: /CN=2f593b254a9c3fac81652502f1c43c2201c16a85 Certificate serial: 019B78A23F9AFCAC372C5BC541476C4BD148 Authority key identifier: 2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/H6q8h__WeJINLNS-JCWvRE5rrpQ.roa Signing time: Thu 01 Jan 2026 08:17:37 +0000 ROA not before: Thu 01 Jan 2026 08:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42830 IP address blocks: 91.193.160.0/22 maxlen: 22 176.105.128.0/20 maxlen: 20 185.212.164.0/22 maxlen: 22 2a0b:78c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3f:9a:fc:ac:37:2c:5b:c5:41:47:6c:4b:d1:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f593b254a9c3fac81652502f1c43c2201c16a85 Validity Not Before: Jan 1 08:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1faabc87ffd678920d2cd4be2425af444e6bae94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:01:0b:42:58:a9:af:e1:ad:48:ac:28:30:b0: 4f:cf:41:fb:e8:e9:32:e9:35:4f:6d:b2:b9:83:a6: d9:1a:c8:c0:69:a0:cf:d2:2f:94:fb:4b:c7:3b:b2: ba:9c:3d:87:52:6f:5c:3e:b7:1b:48:da:de:0f:76: d5:03:e4:2a:2b:b1:f9:58:b0:f6:76:74:70:d6:1e: 58:be:9b:c3:7f:c2:49:5f:31:4c:a7:29:c6:ec:1c: 46:37:62:b7:2f:cb:83:73:5e:4d:83:d6:ae:b2:d5: b8:b1:8e:01:70:fe:f8:63:a3:0d:56:fd:26:70:0c: 48:fd:96:08:ec:af:db:41:79:6b:e5:1a:14:72:9b: d6:14:ee:88:c2:9d:ce:2d:70:88:2b:64:e0:00:23: d4:40:8c:59:0d:8b:da:4e:4c:76:b1:bf:55:a4:77: 78:22:47:53:d3:33:c3:d0:3e:4f:a2:e2:93:f8:62: 8d:92:1f:c5:05:2f:02:40:94:8c:78:23:31:41:2b: e9:ff:bb:5b:6b:4c:6a:7c:ca:44:10:12:41:8f:5b: 89:2e:55:86:70:28:c6:ee:a7:ae:18:82:4b:9a:ed: bc:c6:12:52:94:94:18:62:d9:90:de:83:48:af:48: 7e:8c:b9:b7:41:a1:94:f4:17:81:46:0d:71:66:c1: 11:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AA:BC:87:FF:D6:78:92:0D:2C:D4:BE:24:25:AF:44:4E:6B:AE:94 X509v3 Authority Key Identifier: keyid:2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/H6q8h__WeJINLNS-JCWvRE5rrpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.160.0/22 176.105.128.0/20 185.212.164.0/22 IPv6: 2a0b:78c0::/32 Signature Algorithm: sha256WithRSAEncryption ad:15:f6:9d:46:dd:7e:cd:81:8f:e4:2d:cd:72:15:ef:3a:3c: 22:ae:fc:74:c5:a2:27:80:7e:4e:1f:62:8b:aa:d3:b1:d0:8b: 36:34:62:e2:a4:f6:c3:7d:50:ef:f1:98:5b:0d:eb:b9:dd:f9: cf:9a:91:98:f8:f1:c1:f3:71:5e:f2:e9:2b:f0:8d:2f:d0:29: d7:a6:d4:f6:5b:08:a0:06:1d:ed:78:2f:4a:8f:57:35:71:9e: 85:fd:15:f2:07:4f:0c:2f:86:5f:8a:9a:62:1b:28:31:b6:07: d1:88:5a:17:68:7d:7a:f4:ac:94:18:f4:a6:79:45:ff:f8:59: 06:e9:ba:1f:b9:65:55:98:c4:23:c0:8a:8b:cb:e8:86:27:a2: c3:69:fa:d7:ce:81:01:ca:0c:f1:42:ba:d9:7d:0a:58:32:5c: 79:b2:93:bd:88:0e:be:59:84:ae:48:37:eb:7c:fc:ae:49:a1: a0:8c:d1:e7:db:1e:16:17:59:09:21:b9:71:3e:24:8b:56:dd: d4:70:68:36:aa:ac:70:d4:d1:ac:0c:51:9a:8c:15:02:24:c8: 38:d6:c9:01:ee:05:d6:45:22:4f:c9:41:70:40:cf:eb:dc:7a: db:0c:44:d9:86:d5:14:66:4d:d6:32:12:9b:95:79:04:80:10: 5f:df:06:a1 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4oj+a/Kw3LFvFQUdsS9FIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNTkzYjI1NGE5YzNmYWM4MTY1MjUwMmYxYzQzYzIyMDFj MTZhODUwHhcNMjYwMTAxMDgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmFhYmM4N2ZmZDY3ODkyMGQyY2Q0YmUyNDI1YWY0NDRlNmJhZTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QELQlipr+GtSKwoMLBPz0H76Oky 6TVPbbK5g6bZGsjAaaDP0i+U+0vHO7K6nD2HUm9cPrcbSNreD3bVA+QqK7H5WLD2 dnRw1h5YvpvDf8JJXzFMpynG7BxGN2K3L8uDc15Ng9austW4sY4BcP74Y6MNVv0m cAxI/ZYI7K/bQXlr5RoUcpvWFO6Iwp3OLXCIK2TgACPUQIxZDYvaTkx2sb9VpHd4 IkdT0zPD0D5PouKT+GKNkh/FBS8CQJSMeCMxQSvp/7tba0xqfMpEEBJBj1uJLlWG cCjG7qeuGIJLmu28xhJSlJQYYtmQ3oNIr0h+jLm3QaGU9BeBRg1xZsER+wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFB+qvIf/1niSDSzUviQlr0ROa66UMB8GA1UdIwQY MBaAFC9ZOyVKnD+sgWUlAvHEPCIBwWqFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDFrN0pVcWNQNnlCWlNVQzhjUThJZ0hCYW9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9lZjM2MDgtYWNkNC00NWUxLTlkMzIt YzNiYjg0NzYwMGNkLzEvSDZxOGhfX1dlSklOTE5TLUpDV3ZSRTVycnBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9lZjM2MDgtYWNkNC00NWUxLTlkMzItYzNiYjg0NzYwMGNk LzEvTDFrN0pVcWNQNnlCWlNVQzhjUThJZ0hCYW9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCW8GgAwQE sGmAAwQCudSkMA0EAgACMAcDBQAqC3jAMA0GCSqGSIb3DQEBCwUAA4IBAQCtFfad Rt1+zYGP5C3NchXvOjwirvx0xaIngH5OH2KLqtOx0Is2NGLipPbDfVDv8ZhbDeu5 3fnPmpGY+PHB83Fe8ukr8I0v0CnXptT2WwigBh3teC9Kj1c1cZ6F/RXyB08ML4Zf ippiGygxtgfRiFoXaH169KyUGPSmeUX/+FkG6bofuWVVmMQjwIqLy+iGJ6LDafrX zoEBygzxQrrZfQpYMlx5spO9iA6+WYSuSDfrfPyuSaGgjNHn2x4WF1kJIblxPiSL Vt3UcGg2qqxw1NGsDFGajBUCJMg41skB7gXWRSJPyUFwQM/r3HrbDETZhtUUZk3W MhKblXkEgBBf3wah -----END CERTIFICATE-----Generated at Sat Feb 7 04:04:26 2026 by rpki-client