This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/h1Jq-BmhzVw08USZWDlg7KtmtsE.roa File: h1Jq-BmhzVw08USZWDlg7KtmtsE.roa (raw, json) Hash identifier: jeo43FpLi7UDUw/M2WnglTYY40DIOY19X0q2leeHc1M= Subject key identifier: 87:52:6A:F8:19:A1:CD:5C:34:F1:44:99:58:39:60:EC:AB:66:B6:C1 Certificate issuer: /CN=af48f67f53fce9891d41593ac84cae304abfcbcf Certificate serial: 019B7C12352E7832A2321EAB9B6E9BAC556E Authority key identifier: AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/h1Jq-BmhzVw08USZWDlg7KtmtsE.roa Signing time: Fri 02 Jan 2026 00:18:46 +0000 ROA not before: Fri 02 Jan 2026 00:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208034 IP address blocks: 185.194.248.0/24 maxlen: 24 193.169.106.0/24 maxlen: 24 193.169.107.0/24 maxlen: 24 193.169.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:35:2e:78:32:a2:32:1e:ab:9b:6e:9b:ac:55:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af48f67f53fce9891d41593ac84cae304abfcbcf Validity Not Before: Jan 2 00:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87526af819a1cd5c34f14499583960ecab66b6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:57:f6:e5:7d:37:54:42:65:fb:b9:4e:7d:15: 52:d7:2b:ea:33:0d:04:9c:e9:b0:9a:f9:94:9a:dd: 64:cf:cd:7c:ab:3e:f1:3a:73:6c:61:2a:33:1b:cf: 2e:2a:6d:6b:94:bc:74:f4:f4:56:9f:17:57:98:e4: d2:13:a7:37:82:bf:c2:26:23:fc:b2:a0:18:d7:e0: 4e:52:17:00:e4:13:f9:e7:b6:f6:5f:a9:9d:57:90: db:ff:fd:fa:68:8e:fe:4e:87:75:e7:b2:51:b6:87: 51:d2:79:7d:93:75:e5:06:2f:3f:e0:f4:44:e4:a4: 7e:ad:99:ec:78:e5:0b:36:4b:c9:8b:89:d3:9d:c9: f2:a7:45:e3:55:65:fb:5b:00:f9:ec:a9:f0:a1:a0: d4:9b:1b:b4:3b:dd:3a:53:07:49:db:3b:44:be:48: 30:66:4e:c8:76:9b:a9:1c:bd:56:d3:c4:57:a7:54: c7:56:a2:75:29:b7:6d:42:70:1c:cf:61:21:76:54: eb:95:b4:9c:74:c6:7f:b9:25:ac:b6:e5:6e:f0:13: 78:81:19:2f:55:4c:86:26:75:77:71:40:80:6c:d8: 06:ce:6e:72:5d:74:87:23:f0:8d:e8:ab:9a:7e:cd: c4:e1:a5:18:1b:f9:88:2f:1b:c5:a2:ad:12:69:6f: 6f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:52:6A:F8:19:A1:CD:5C:34:F1:44:99:58:39:60:EC:AB:66:B6:C1 X509v3 Authority Key Identifier: keyid:AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/h1Jq-BmhzVw08USZWDlg7KtmtsE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.248.0/24 193.169.106.0/23 193.169.170.0/24 Signature Algorithm: sha256WithRSAEncryption a8:78:db:f0:be:a4:ca:a9:83:23:fb:d5:84:d5:94:c5:b6:e0: ce:c6:4b:bf:d4:b5:ce:22:d8:c3:f2:a9:f6:e9:95:ce:41:7a: e4:33:ba:05:80:5f:ac:6d:49:62:d6:ae:53:f5:db:a8:1b:1b: a1:cf:a1:a1:07:2a:51:6c:33:ba:97:79:56:80:a3:67:8a:26: ae:86:d2:d8:28:35:06:0e:05:e3:10:6a:21:cc:a4:1e:f0:97: 61:30:45:99:a5:b5:3d:74:88:bc:42:eb:4b:61:0b:58:72:b1: 04:ff:0b:ac:3f:3d:e5:da:38:4b:45:7b:c2:46:a0:f0:31:40: 05:ec:d1:25:81:93:5d:b4:df:88:ad:78:f2:e8:2e:cf:88:3a: eb:57:4c:e0:06:be:dd:6d:a8:d3:80:12:42:b1:29:c1:8d:e7: 18:0e:2c:33:a8:4c:e1:ee:23:fd:1e:d0:94:bf:5c:e4:12:35: 38:24:5d:f4:c1:fc:98:5e:a7:a1:a2:13:73:c0:20:42:4e:07: a5:67:19:99:bd:6a:04:ad:f0:cc:d0:5f:4d:0d:76:4d:8c:76: b5:56:a5:c8:c4:53:9f:ba:23:b2:4a:bd:c6:53:54:ae:75:c1: 3f:f4:9d:29:c5:8a:09:a8:e1:07:98:a6:94:57:9f:df:b1:f8: 88:aa:4d:11 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EjUueDKiMh6rm26brFVuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNDhmNjdmNTNmY2U5ODkxZDQxNTkzYWM4NGNhZTMwNGFi ZmNiY2YwHhcNMjYwMTAyMDAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzUyNmFmODE5YTFjZDVjMzRmMTQ0OTk1ODM5NjBlY2FiNjZiNmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVf25X03VEJl+7lOfRVS1yvqMw0E nOmwmvmUmt1kz818qz7xOnNsYSozG88uKm1rlLx09PRWnxdXmOTSE6c3gr/CJiP8 sqAY1+BOUhcA5BP557b2X6mdV5Db//36aI7+Tod157JRtodR0nl9k3XlBi8/4PRE 5KR+rZnseOULNkvJi4nTncnyp0XjVWX7WwD57KnwoaDUmxu0O906UwdJ2ztEvkgw Zk7IdpupHL1W08RXp1THVqJ1KbdtQnAcz2EhdlTrlbScdMZ/uSWstuVu8BN4gRkv VUyGJnV3cUCAbNgGzm5yXXSHI/CN6Kuafs3E4aUYG/mILxvFoq0SaW9vEwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIdSavgZoc1cNPFEmVg5YOyrZrbBMB8GA1UdIwQY MBaAFK9I9n9T/OmJHUFZOshMrjBKv8vPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjBqMmYxUDg2WWtkUVZrNnlFeXVNRXFfeTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lMTU0NWItZmM1Mi00NGMwLThmNTct Mjg4NGRkODI0OGQ2LzEvaDFKcS1CbWh6VncwOFVTWldEbGc3S3RtdHNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9lMTU0NWItZmM1Mi00NGMwLThmNTctMjg4NGRkODI0OGQ2 LzEvcjBqMmYxUDg2WWtkUVZrNnlFeXVNRXFfeTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAucL4AwQB walqAwQAwamqMA0GCSqGSIb3DQEBCwUAA4IBAQCoeNvwvqTKqYMj+9WE1ZTFtuDO xku/1LXOItjD8qn26ZXOQXrkM7oFgF+sbUli1q5T9duoGxuhz6GhBypRbDO6l3lW gKNniiauhtLYKDUGDgXjEGohzKQe8JdhMEWZpbU9dIi8QutLYQtYcrEE/wusPz3l 2jhLRXvCRqDwMUAF7NElgZNdtN+IrXjy6C7PiDrrV0zgBr7dbajTgBJCsSnBjecY DiwzqEzh7iP9HtCUv1zkEjU4JF30wfyYXqehohNzwCBCTgelZxmZvWoErfDM0F9N DXZNjHa1VqXIxFOfuiOySr3GU1SudcE/9J0pxYoJqOEHmKaUV5/fsfiIqk0R -----END CERTIFICATE-----Generated at Tue Feb 10 05:49:14 2026 by rpki-client