This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/H3jTyRlviQDZUSJc8TpRwj8PKRA.roa File: H3jTyRlviQDZUSJc8TpRwj8PKRA.roa (raw, json) Hash identifier: p+++YoYuwo888NrE0/pgeoUageDuwSXAR7Cb5CIQ67s= Subject key identifier: 1F:78:D3:C9:19:6F:89:00:D9:51:22:5C:F1:3A:51:C2:3F:0F:29:10 Certificate issuer: /CN=529ca5a6e5d67421f3f2cd21138cb70704850955 Certificate serial: 019B7C125FCBCA3060C6EE2C754117C818E5 Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/H3jTyRlviQDZUSJc8TpRwj8PKRA.roa Signing time: Fri 02 Jan 2026 00:18:57 +0000 ROA not before: Fri 02 Jan 2026 00:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205385 IP address blocks: 185.220.48.0/22 maxlen: 24 185.231.36.0/22 maxlen: 24 2a0b:eec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:5f:cb:ca:30:60:c6:ee:2c:75:41:17:c8:18:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955 Validity Not Before: Jan 2 00:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f78d3c9196f8900d951225cf13a51c23f0f2910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:70:e1:7f:c1:6f:31:9a:24:b6:52:47:c5:4c: 8c:9e:46:07:23:6f:50:8c:86:bd:0a:4b:07:a5:56: 5e:21:e7:1f:4d:ff:14:e1:a0:2e:15:2b:a9:70:48: 17:2d:76:4c:bc:1a:c7:61:ff:63:6d:6b:24:93:e9: ef:fe:7a:5d:91:e2:36:48:7d:49:cc:7e:15:39:52: b5:3e:21:4b:70:b9:ab:70:7d:cf:dc:76:30:c2:0f: f9:d9:04:54:08:57:f8:bb:91:c2:6c:ad:dc:b5:53: 5b:60:bc:ba:04:f0:c8:43:20:04:18:db:ae:33:93: d3:48:f6:24:99:5d:42:95:ea:5e:87:6f:9c:a1:0d: 69:e3:26:dc:8c:b7:2a:c2:7b:ac:ad:e0:79:f9:d9: f5:d7:5e:dd:87:e9:4c:f1:fd:b9:cf:9a:eb:13:91: df:43:6d:b6:ae:4a:0f:63:64:3c:a5:95:7d:78:14: cb:f2:31:bb:27:80:6b:14:76:46:e0:b8:61:55:87: 48:33:6e:8d:39:fd:f5:67:10:81:e3:36:b9:d4:47: d1:53:92:58:cf:9a:4e:60:f8:9c:39:48:9d:a9:33: 6f:03:df:7e:3b:59:fb:5b:66:ed:62:9c:7c:bb:4f: 45:b8:69:51:43:15:86:ac:99:eb:51:2f:85:08:4a: 37:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:78:D3:C9:19:6F:89:00:D9:51:22:5C:F1:3A:51:C2:3F:0F:29:10 X509v3 Authority Key Identifier: keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/H3jTyRlviQDZUSJc8TpRwj8PKRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.48.0/22 185.231.36.0/22 IPv6: 2a0b:eec0::/32 Signature Algorithm: sha256WithRSAEncryption 9b:c3:02:0b:5f:c9:dc:5b:3e:0a:66:76:bd:c9:96:fc:51:8a: 74:27:3b:36:f7:c1:c5:79:a3:d5:51:4e:12:2d:6a:b9:c8:28: f6:7d:48:bb:ee:36:8e:34:e9:ef:bc:3c:7d:74:82:99:b4:31: aa:39:5d:f3:a3:ad:78:f7:8e:87:c4:22:45:3e:74:0a:91:54: 8d:1f:11:c4:a4:85:67:de:b0:d4:dd:ab:63:7f:54:78:70:1e: 51:10:d5:3d:db:56:24:c0:53:f2:11:bf:40:a3:60:c8:86:f4: 70:ce:7e:2b:e5:c9:bf:93:11:38:ba:87:30:d3:e4:f8:3f:9f: 5f:0e:21:6a:92:21:89:55:6d:45:1e:53:48:b4:74:b1:1f:ed: f5:65:c3:69:dc:cc:04:9f:95:70:45:c1:40:bb:98:09:26:2e: e5:41:3b:fb:6a:1d:17:1a:f1:f1:29:d7:fc:9e:30:5f:79:d1: a8:59:42:dc:90:c4:35:3d:9c:7b:f3:93:54:14:11:4d:60:1c: 9e:e1:71:73:2c:85:00:72:6d:fc:18:cc:f5:91:87:9e:45:af: 85:4f:8c:13:ca:f5:b7:43:66:4e:a8:c6:e2:dc:a9:10:0e:d9: 96:a5:bf:f0:1c:3c:fa:fb:61:ee:cd:80:b5:02:e7:92:d4:ff: 4e:46:22:59 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8El/LyjBgxu4sdUEXyBjlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyOWNhNWE2ZTVkNjc0MjFmM2YyY2QyMTEzOGNiNzA3MDQ4 NTA5NTUwHhcNMjYwMTAyMDAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjc4ZDNjOTE5NmY4OTAwZDk1MTIyNWNmMTNhNTFjMjNmMGYyOTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9nDhf8FvMZoktlJHxUyMnkYHI29Q jIa9CksHpVZeIecfTf8U4aAuFSupcEgXLXZMvBrHYf9jbWskk+nv/npdkeI2SH1J zH4VOVK1PiFLcLmrcH3P3HYwwg/52QRUCFf4u5HCbK3ctVNbYLy6BPDIQyAEGNuu M5PTSPYkmV1Clepeh2+coQ1p4ybcjLcqwnusreB5+dn1117dh+lM8f25z5rrE5Hf Q222rkoPY2Q8pZV9eBTL8jG7J4BrFHZG4LhhVYdIM26NOf31ZxCB4za51EfRU5JY z5pOYPicOUidqTNvA99+O1n7W2btYpx8u09FuGlRQxWGrJnrUS+FCEo3gQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFB9408kZb4kA2VEiXPE6UcI/DykQMB8GA1UdIwQY MBaAFFKcpabl1nQh8/LNIROMtwcEhQlVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXB5bHB1WFdkQ0h6OHMwaEU0eTNCd1NGQ1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82MGY5YWMtMDUzYS00Njg5LWIwODEt M2EzYTlmMDI0MmI4LzEvSDNqVHlSbHZpUURaVVNKYzhUcFJ3ajhQS1JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC82MGY5YWMtMDUzYS00Njg5LWIwODEtM2EzYTlmMDI0MmI4 LzEvVXB5bHB1WFdkQ0h6OHMwaEU0eTNCd1NGQ1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCudwwAwQC ueckMA0EAgACMAcDBQAqC+7AMA0GCSqGSIb3DQEBCwUAA4IBAQCbwwILX8ncWz4K Zna9yZb8UYp0Jzs298HFeaPVUU4SLWq5yCj2fUi77jaONOnvvDx9dIKZtDGqOV3z o614946HxCJFPnQKkVSNHxHEpIVn3rDU3atjf1R4cB5RENU921YkwFPyEb9Ao2DI hvRwzn4r5cm/kxE4uocw0+T4P59fDiFqkiGJVW1FHlNItHSxH+31ZcNp3MwEn5Vw RcFAu5gJJi7lQTv7ah0XGvHxKdf8njBfedGoWULckMQ1PZx785NUFBFNYBye4XFz LIUAcm38GMz1kYeeRa+FT4wTyvW3Q2ZOqMbi3KkQDtmWpb/wHDz6+2HuzYC1AueS 1P9ORiJZ -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:39 2026 by rpki-client