This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/_H4CUuz3Tvl-T1zwCAZAvhXJbiM.roa File: _H4CUuz3Tvl-T1zwCAZAvhXJbiM.roa (raw, json) Hash identifier: xsJ3awajiTbn083/zKjj3KHpA/9WdA0RqzmcuoYihQA= Subject key identifier: FC:7E:02:52:EC:F7:4E:F9:7E:4F:5C:F0:08:06:40:BE:15:C9:6E:23 Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467 Certificate serial: 019B7DC9B87932AD933DCFCBAF07146DC8C8 Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/_H4CUuz3Tvl-T1zwCAZAvhXJbiM.roa Signing time: Fri 02 Jan 2026 08:18:50 +0000 ROA not before: Fri 02 Jan 2026 08:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.238.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:b8:79:32:ad:93:3d:cf:cb:af:07:14:6d:c8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467 Validity Not Before: Jan 2 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc7e0252ecf74ef97e4f5cf0080640be15c96e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cb:da:57:38:ab:65:66:83:c5:3e:30:9a:9f: 87:b3:0a:ee:a5:f7:55:27:1d:32:0b:93:fe:75:a2: 4f:ed:d1:9e:74:71:c3:05:a1:44:ff:ff:d6:b6:b5: c5:65:15:aa:01:18:a8:ee:93:09:34:51:c5:ce:2e: 21:d2:21:32:46:ab:cf:90:2b:8d:c9:59:09:30:ae: 60:d5:6b:d4:b7:23:fc:bf:df:7b:ce:0e:32:f7:73: 6d:03:af:95:76:47:18:5f:88:d4:86:05:f0:e8:6f: cb:a7:f4:ca:45:ca:25:c3:1a:61:3e:f9:52:68:71: ef:0b:67:72:85:78:df:cd:ec:33:0b:fd:7b:60:03: bb:f7:e0:36:09:4a:d5:ab:ff:c2:e5:9b:2c:e1:7c: 88:d4:a3:cd:86:d3:2d:46:a7:c1:21:3f:c7:90:64: 1b:4d:0a:6b:53:73:db:5b:7d:a1:23:9e:08:37:ec: 97:0e:86:83:26:20:00:e5:96:51:b1:67:07:9b:dc: 57:7f:7f:f6:25:be:53:63:d4:ae:de:e1:d0:87:77: 6d:a5:ff:91:81:10:90:61:31:10:04:6b:45:04:09: bd:54:4f:20:c0:e9:c4:b4:f8:c0:19:98:49:c0:89: 19:ac:d3:aa:ca:44:34:b6:11:84:85:61:ce:44:2b: da:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7E:02:52:EC:F7:4E:F9:7E:4F:5C:F0:08:06:40:BE:15:C9:6E:23 X509v3 Authority Key Identifier: keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/_H4CUuz3Tvl-T1zwCAZAvhXJbiM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.12.0/22 Signature Algorithm: sha256WithRSAEncryption 02:df:ba:06:80:51:c2:e3:26:47:3d:41:33:13:be:f3:97:56: 2b:f1:f0:72:1e:a8:66:c1:14:06:a2:be:05:8f:fa:f3:6a:1f: 95:df:98:ee:a0:1f:84:4c:ba:17:8b:39:79:41:54:f9:23:fe: 8e:28:53:15:25:1b:f1:30:89:54:11:3c:c9:9c:f2:e7:38:27: 48:9f:72:27:e6:4f:a9:f3:4f:5d:b8:7a:c6:60:14:71:db:8d: be:72:09:b2:0e:ab:bc:3b:12:fd:d5:c7:4d:ba:61:81:72:d2: 3c:5e:04:27:0f:4b:c9:0b:57:e8:7d:ff:2d:c7:26:f0:83:0f: 28:0a:83:08:70:0e:58:9d:19:cf:78:77:34:d1:80:3e:6c:d9: 89:bf:89:b5:43:98:68:50:c4:69:44:bc:7f:86:e9:04:e3:53: cd:1b:25:78:f3:f9:44:d4:47:7c:7b:61:b9:e4:46:b9:83:57: 97:c7:66:fa:9f:1a:43:c8:4d:e0:0b:9a:b4:a1:84:fc:16:d9: 84:c5:e1:d3:66:60:dd:c9:c6:f0:cc:8f:63:34:3d:14:55:05: 8c:22:da:bd:b1:c0:2f:11:59:9a:e7:8a:b1:44:2a:6e:60:57: 2e:bf:f3:3e:49:88:80:d1:fe:8d:65:ba:d4:35:2c:42:7e:a2: 21:4f:52:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ybh5Mq2TPc/LrwcUbcjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMWFlNWU0OWE0NGFiZGRjMjJiMGFkYmRhZWI2NDEzNmYy NWQ0NjcwHhcNMjYwMTAyMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzdlMDI1MmVjZjc0ZWY5N2U0ZjVjZjAwODA2NDBiZTE1Yzk2ZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28vaVzirZWaDxT4wmp+HswrupfdV Jx0yC5P+daJP7dGedHHDBaFE///WtrXFZRWqARio7pMJNFHFzi4h0iEyRqvPkCuN yVkJMK5g1WvUtyP8v997zg4y93NtA6+VdkcYX4jUhgXw6G/Lp/TKRcolwxphPvlS aHHvC2dyhXjfzewzC/17YAO79+A2CUrVq//C5Zss4XyI1KPNhtMtRqfBIT/HkGQb TQprU3PbW32hI54IN+yXDoaDJiAA5ZZRsWcHm9xXf3/2Jb5TY9Su3uHQh3dtpf+R gRCQYTEQBGtFBAm9VE8gwOnEtPjAGZhJwIkZrNOqykQ0thGEhWHORCvaIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPx+AlLs9075fk9c8AgGQL4VyW4jMB8GA1UdIwQY MBaAFBoa5eSaRKvdwisK29rrZBNvJdRnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2hybDVKcEVxOTNDS3dyYjJ1dGtFMjhsMUdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85OWRjY2EtOTYzYS00MDAzLWJmYWYt YTExNjlhMjg5YzU0LzEvX0g0Q1V1ejNUdmwtVDF6d0NBWkF2aFhKYmlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85OWRjY2EtOTYzYS00MDAzLWJmYWYtYTExNjlhMjg5YzU0 LzEvR2hybDVKcEVxOTNDS3dyYjJ1dGtFMjhsMUdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue4MMA0G CSqGSIb3DQEBCwUAA4IBAQAC37oGgFHC4yZHPUEzE77zl1Yr8fByHqhmwRQGor4F j/rzah+V35juoB+ETLoXizl5QVT5I/6OKFMVJRvxMIlUETzJnPLnOCdIn3In5k+p 809duHrGYBRx242+cgmyDqu8OxL91cdNumGBctI8XgQnD0vJC1foff8txybwgw8o CoMIcA5YnRnPeHc00YA+bNmJv4m1Q5hoUMRpRLx/hukE41PNGyV48/lE1Ed8e2G5 5Ea5g1eXx2b6nxpDyE3gC5q0oYT8FtmExeHTZmDdycbwzI9jND0UVQWMItq9scAv EVma54qxRCpuYFcuv/M+SYiA0f6NZbrUNSxCfqIhT1J8 -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:18 2026 by rpki-client