This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/1iEYAutxUY8Sk1LUURodyK_769I.roa File: 1iEYAutxUY8Sk1LUURodyK_769I.roa (raw, json) Hash identifier: xYW7bvZXfmBgnKNsTynuusrlfWM99SgeNDEpVUkOteQ= Subject key identifier: D6:21:18:02:EB:71:51:8F:12:93:52:D4:51:1A:1D:C8:AF:FB:EB:D2 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 019B7F154C84E363D864F83EED8F332905DE Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/1iEYAutxUY8Sk1LUURodyK_769I.roa Signing time: Fri 02 Jan 2026 14:21:00 +0000 ROA not before: Fri 02 Jan 2026 14:21:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 46.227.72.0/21 maxlen: 21 78.40.40.0/21 maxlen: 21 81.21.208.0/20 maxlen: 20 81.27.0.0/20 maxlen: 20 93.94.168.0/21 maxlen: 21 185.53.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:4c:84:e3:63:d8:64:f8:3e:ed:8f:33:29:05:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Jan 2 14:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6211802eb71518f129352d4511a1dc8affbebd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:de:2a:00:75:be:46:c2:cc:bb:5c:01:f8:e6: de:de:72:34:fd:2b:fc:b4:3a:85:dd:98:c8:18:fc: cf:80:70:3c:6a:50:79:3b:bc:2f:95:c4:60:10:58: 7a:e6:a9:05:6f:43:ef:31:27:9b:47:f3:68:02:3b: d4:6b:f2:f5:ce:1f:20:d2:ba:05:01:1a:3f:50:a1: 61:cd:74:df:fc:d5:ef:a7:15:31:4c:51:9b:dd:24: 67:21:17:bd:64:18:29:12:df:60:58:ef:16:df:6d: 3f:31:80:70:d3:82:4b:5b:f5:9c:b1:48:09:03:2c: 50:ca:28:83:4e:24:65:d9:c9:8c:dc:32:f2:10:68: 86:4b:11:6a:e7:24:78:38:74:6c:77:84:9c:14:ba: be:dd:b9:27:03:ab:0f:dd:68:7f:7d:a9:02:47:6b: 0c:f5:4b:c0:f7:6a:c9:91:05:c1:cf:2c:3d:16:fc: 28:39:fb:bf:81:3c:a3:83:0b:c8:e6:8b:74:09:38: 92:a4:53:e1:57:71:6e:51:46:35:59:58:71:65:bb: 92:e8:78:c4:4e:57:6e:06:72:c4:ae:74:4c:ea:06: 34:93:74:eb:61:95:3e:da:96:26:f8:68:b2:6b:05: e8:0d:b0:48:5d:d9:ca:f6:b6:1b:9e:7e:35:fa:d0: 29:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:21:18:02:EB:71:51:8F:12:93:52:D4:51:1A:1D:C8:AF:FB:EB:D2 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/1iEYAutxUY8Sk1LUURodyK_769I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.72.0/21 78.40.40.0/21 81.21.208.0/20 81.27.0.0/20 93.94.168.0/21 185.53.212.0/22 Signature Algorithm: sha256WithRSAEncryption d5:1d:2b:91:d7:dc:92:20:25:9e:95:ef:b5:6b:65:16:33:e5: e1:98:c3:28:ef:fc:9f:e0:70:cf:c9:de:57:53:9a:4e:f6:e2: 33:48:4e:ce:3e:c5:82:3d:12:03:75:c4:4b:85:bb:14:94:88: cc:e4:81:0a:c8:23:4f:a1:9f:b5:c0:83:5b:39:39:57:c0:a3: dc:b3:b2:2e:92:e8:6d:ca:9c:4e:6e:af:07:18:80:81:7a:aa: 39:fc:48:11:2f:e9:96:c7:0a:73:1c:35:25:ef:f9:cc:4b:cf: 20:bb:6f:9f:6c:2e:d8:72:35:25:2f:34:67:d9:5a:01:b4:ed: 45:38:a4:ec:38:0e:eb:e8:9c:ac:b0:1d:a9:2e:2f:de:3b:a2: cb:d8:fc:f8:0f:27:dd:9e:9c:bf:49:89:bd:d5:31:de:ee:f2: 01:96:6d:be:15:a3:25:d6:b8:3a:a1:fc:bb:5d:1f:02:94:1e: 05:6d:8e:0f:4b:51:d5:dd:9e:59:9a:7a:b0:97:e6:0b:da:0a: 6c:72:51:a8:7c:c8:6e:20:83:91:90:99:0c:16:7c:2b:82:34: 3d:20:30:8d:54:1a:6c:3c:64:89:f6:c7:e0:59:d5:af:8e:97: 48:00:08:c5:5a:8d:dc:9d:57:6c:48:6f:e9:b4:91:84:13:70: 7b:97:99:d8 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/FUyE42PYZPg+7Y8zKQXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjYwMTAyMTQyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjIxMTgwMmViNzE1MThmMTI5MzUyZDQ1MTFhMWRjOGFmZmJlYmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy94qAHW+RsLMu1wB+Obe3nI0/Sv8 tDqF3ZjIGPzPgHA8alB5O7wvlcRgEFh65qkFb0PvMSebR/NoAjvUa/L1zh8g0roF ARo/UKFhzXTf/NXvpxUxTFGb3SRnIRe9ZBgpEt9gWO8W320/MYBw04JLW/WcsUgJ AyxQyiiDTiRl2cmM3DLyEGiGSxFq5yR4OHRsd4ScFLq+3bknA6sP3Wh/fakCR2sM 9UvA92rJkQXBzyw9FvwoOfu/gTyjgwvI5ot0CTiSpFPhV3FuUUY1WVhxZbuS6HjE TlduBnLErnRM6gY0k3TrYZU+2pYm+GiyawXoDbBIXdnK9rYbnn41+tApkQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFNYhGALrcVGPEpNS1FEaHciv++vSMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvMWlFWUF1dHhVWThTazFMVVVSb2R5S183NjlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDLuNIAwQD TigoAwQEURXQAwQEURsAAwQDXV6oAwQCuTXUMA0GCSqGSIb3DQEBCwUAA4IBAQDV HSuR19ySICWele+1a2UWM+XhmMMo7/yf4HDPyd5XU5pO9uIzSE7OPsWCPRIDdcRL hbsUlIjM5IEKyCNPoZ+1wINbOTlXwKPcs7IukuhtypxObq8HGICBeqo5/EgRL+mW xwpzHDUl7/nMS88gu2+fbC7YcjUlLzRn2VoBtO1FOKTsOA7r6JyssB2pLi/eO6LL 2Pz4Dyfdnpy/SYm91THe7vIBlm2+FaMl1rg6ofy7XR8ClB4FbY4PS1HV3Z5Zmnqw l+YL2gpsclGofMhuIIORkJkMFnwrgjQ9IDCNVBpsPGSJ9sfgWdWvjpdIAAjFWo3c nVdsSG/ptJGEE3B7l5nY -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:49 2026 by rpki-client