This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/19Q2Dwhtepvh3WfcRXocelqULL8.roa File: 19Q2Dwhtepvh3WfcRXocelqULL8.roa (raw, json) Hash identifier: 5gim+c2a2kpRDHritwN6RumGls9psmp/ew2vMiVkt54= Subject key identifier: D7:D4:36:0F:08:6D:7A:9B:E1:DD:67:DC:45:7A:1C:7A:5A:94:2C:BF Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 019B7AC907ED33E420EC68A1FE2FC5DEEE20 Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/19Q2Dwhtepvh3WfcRXocelqULL8.roa Signing time: Thu 01 Jan 2026 18:19:13 +0000 ROA not before: Thu 01 Jan 2026 18:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212496 IP address blocks: 85.92.109.0/24 maxlen: 24 185.166.199.0/24 maxlen: 24 195.80.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:07:ed:33:e4:20:ec:68:a1:fe:2f:c5:de:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Jan 1 18:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7d4360f086d7a9be1dd67dc457a1c7a5a942cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:76:c5:f4:ef:06:87:e6:07:12:1c:d9:eb:b5: 1f:40:2f:0d:56:ce:1a:ec:41:32:11:4d:02:10:25: 0e:af:ca:df:27:ec:7c:ca:1d:c8:a3:17:3c:20:36: 40:90:d7:ed:d0:b1:7b:70:ed:57:d5:0f:0d:1d:45: 55:1a:17:a5:de:6c:9c:8a:64:82:6a:53:fa:a5:5b: 80:be:c3:d1:d8:69:62:29:1e:be:4d:d4:fe:3a:be: 60:1e:58:a9:49:48:ee:26:a3:b5:8c:3d:d1:1e:d7: 17:57:6b:6d:24:b0:5a:31:fc:bc:1b:6c:51:75:0e: 98:3e:07:da:0d:da:b8:4f:06:e6:1a:f6:b9:ae:33: 21:11:7b:28:9a:fe:7c:0c:5a:11:bf:fe:a3:99:26: fa:f6:4e:f4:04:47:1f:57:1e:f2:2d:ab:97:04:ff: fe:3c:c4:bd:0a:f5:9d:ec:e8:ae:f0:e0:c8:51:d8: 84:cd:fd:c3:35:68:c6:d0:a3:99:30:94:c2:c1:e2: 10:34:eb:f2:6c:b4:98:12:c1:4c:50:3a:7a:ed:9c: 2e:a8:61:0c:ee:c2:29:7a:ae:aa:a6:f0:cc:72:9c: 65:2e:e7:25:c1:4c:16:9f:e1:58:56:3a:50:86:49: be:5e:4d:19:7c:90:b6:f7:4f:69:ef:74:bd:45:2d: f3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D4:36:0F:08:6D:7A:9B:E1:DD:67:DC:45:7A:1C:7A:5A:94:2C:BF X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/19Q2Dwhtepvh3WfcRXocelqULL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.92.109.0/24 185.166.199.0/24 195.80.48.0/24 Signature Algorithm: sha256WithRSAEncryption 43:65:a8:dd:4f:8e:16:8c:80:a2:18:e9:f0:c1:7d:dd:5d:5c: 87:5c:d9:f7:42:7d:a5:54:ce:9c:2b:b7:01:6e:a1:74:0a:1c: e7:3d:44:54:6d:3a:a6:e7:48:0b:b2:ed:35:66:0b:86:ad:0d: 3a:28:ef:40:27:79:dc:c1:d7:a6:ea:85:3d:3b:42:d6:69:80: de:28:88:ff:2c:9c:00:4a:3f:3d:f5:aa:81:2a:13:af:b6:21: 3f:7d:c4:1a:3b:33:79:ec:e2:89:50:10:a7:f5:0d:f5:d0:ef: 01:44:ce:b2:1a:72:db:80:40:fb:a4:ca:36:c1:89:0e:70:80: c7:7c:4f:c7:f2:d8:e8:e9:36:01:4b:d4:d2:77:7f:c8:52:fb: 0c:ab:f7:d9:fd:b7:15:bb:3c:a2:31:b7:ec:09:c0:23:a1:f4: 6e:e8:22:41:76:1b:72:0b:ee:b3:80:93:2a:b7:0f:79:c9:7c: cf:09:17:9e:22:25:47:84:bf:22:df:94:c7:35:f6:46:cc:73: 7f:53:d0:0b:ec:1a:40:31:5b:1d:74:25:77:21:41:7d:78:86: c9:1f:80:ef:61:aa:09:ca:9f:50:f6:8e:71:28:06:91:db:aa: 6d:f6:ac:22:ea:81:24:d9:7b:ab:cd:6a:d3:e7:18:27:52:f9: 37:1b:1b:b0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yQftM+Qg7Gih/i/F3u4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjYwMTAxMTgxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2Q0MzYwZjA4NmQ3YTliZTFkZDY3ZGM0NTdhMWM3YTVhOTQyY2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnbF9O8Gh+YHEhzZ67UfQC8NVs4a 7EEyEU0CECUOr8rfJ+x8yh3Ioxc8IDZAkNft0LF7cO1X1Q8NHUVVGhel3mycimSC alP6pVuAvsPR2GliKR6+TdT+Or5gHlipSUjuJqO1jD3RHtcXV2ttJLBaMfy8G2xR dQ6YPgfaDdq4TwbmGva5rjMhEXsomv58DFoRv/6jmSb69k70BEcfVx7yLauXBP/+ PMS9CvWd7Oiu8ODIUdiEzf3DNWjG0KOZMJTCweIQNOvybLSYEsFMUDp67ZwuqGEM 7sIpeq6qpvDMcpxlLuclwUwWn+FYVjpQhkm+Xk0ZfJC2909p73S9RS3zNwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNfUNg8IbXqb4d1n3EV6HHpalCy/MB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvMTlRMkR3aHRlcHZoM1dmY1JYb2NlbHFVTEw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVVxtAwQA uabHAwQAw1AwMA0GCSqGSIb3DQEBCwUAA4IBAQBDZajdT44WjICiGOnwwX3dXVyH XNn3Qn2lVM6cK7cBbqF0ChznPURUbTqm50gLsu01ZguGrQ06KO9AJ3ncwdem6oU9 O0LWaYDeKIj/LJwASj899aqBKhOvtiE/fcQaOzN57OKJUBCn9Q310O8BRM6yGnLb gED7pMo2wYkOcIDHfE/H8tjo6TYBS9TSd3/IUvsMq/fZ/bcVuzyiMbfsCcAjofRu 6CJBdhtyC+6zgJMqtw95yXzPCReeIiVHhL8i35THNfZGzHN/U9AL7BpAMVsddCV3 IUF9eIbJH4DvYaoJyp9Q9o5xKAaR26pt9qwi6oEk2XurzWrT5xgnUvk3Gxuw -----END CERTIFICATE-----Generated at Wed Jan 21 14:10:54 2026 by rpki-client