This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/AHDIp8270zSqh_FTyxhRg8w5gN8.roa File: AHDIp8270zSqh_FTyxhRg8w5gN8.roa (raw, json) Hash identifier: FOrKrk+AlkMU+F2AuO8VhR8dhWWnyB1iwg8bXCReV/A= Subject key identifier: 00:70:C8:A7:CD:BB:D3:34:AA:87:F1:53:CB:18:51:83:CC:39:80:DF Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5D0295EF38AD00C59EA787A522747B Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/AHDIp8270zSqh_FTyxhRg8w5gN8.roa Signing time: Fri 02 Jan 2026 06:20:06 +0000 ROA not before: Fri 02 Jan 2026 06:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60448 IP address blocks: 85.219.192.0/24 maxlen: 24 89.174.25.0/24 maxlen: 24 89.174.26.0/23 maxlen: 23 89.174.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:02:95:ef:38:ad:00:c5:9e:a7:87:a5:22:74:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0070c8a7cdbbd334aa87f153cb185183cc3980df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:80:93:3c:f0:a1:4b:6f:75:20:6a:21:65:d8: 0a:46:cc:89:4f:4d:a8:6b:0c:9e:8e:c1:5a:17:f6: e2:94:dd:da:bf:ef:bf:be:0e:df:37:16:5d:0e:25: f7:66:08:3d:a7:43:3d:98:25:70:f7:8d:c1:23:77: c4:b5:d3:40:66:22:ec:4e:1e:5a:29:ae:5a:50:fc: ab:c0:99:1d:f6:01:1f:3f:b5:13:c6:8c:1e:7a:6e: 3b:71:e7:de:7d:82:3a:7a:07:60:81:6d:c6:6a:47: 0f:2c:6c:d4:9a:cb:25:96:6f:14:7d:3d:16:9b:7f: 77:b7:73:d3:04:53:28:c2:be:d1:a8:02:fc:23:cc: e3:9e:43:98:4c:40:0e:c9:24:b2:0d:69:92:b6:fd: 4e:a9:3f:63:1e:41:ac:75:7f:f1:b6:f8:f9:19:2f: af:ae:14:a7:bf:b8:32:e8:fd:ce:5d:55:1f:b2:0c: 37:a0:f2:08:4c:2f:a7:f4:cd:cd:92:6f:ae:cb:0a: 03:2a:34:c1:81:9e:fd:b9:19:7c:8b:2e:f0:2f:af: aa:cc:d4:c8:db:4d:2c:f8:a0:c1:a7:84:36:73:57: f3:02:bb:fc:88:c6:0e:0d:9b:ea:50:93:6a:bf:04: db:d0:0e:dd:1d:6f:a1:9b:00:cb:a3:dc:bd:6e:dd: bf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:70:C8:A7:CD:BB:D3:34:AA:87:F1:53:CB:18:51:83:CC:39:80:DF X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/AHDIp8270zSqh_FTyxhRg8w5gN8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.219.192.0/24 89.174.25.0-89.174.27.255 89.174.184.0/24 Signature Algorithm: sha256WithRSAEncryption 12:53:cb:5b:6f:59:fe:0b:a3:19:a2:ef:b0:1a:f5:aa:04:c7: 34:89:de:34:fd:af:99:35:8b:6c:ab:a1:28:fd:2a:91:80:58: 1f:88:15:0d:d3:14:06:5a:92:31:32:c3:80:14:03:73:d8:f5: 09:dd:1a:e2:32:c9:e4:aa:34:70:30:78:b0:f5:1b:26:79:e5: 7e:cb:8c:1d:96:91:d9:c1:21:80:e7:2b:0e:b4:96:47:be:2c: 05:9f:31:49:9a:7e:dd:ff:92:44:98:dd:05:8c:90:85:42:ce: 5f:0c:64:41:9d:20:5d:c4:d7:b7:07:c5:25:d5:07:f0:7d:1e: cb:d2:87:86:8d:60:a7:f7:f8:f1:18:cf:83:7a:9c:16:27:88: e6:38:fe:89:48:d6:31:43:03:fc:e4:e7:57:8c:36:cf:ab:37: fd:1d:46:08:34:5f:f0:20:3a:ea:9d:d1:cd:e2:1f:f4:0b:3b: c0:29:7b:3e:2b:d2:91:30:20:57:8d:3f:07:a9:2e:7a:a3:b5: 1a:2b:9d:2f:59:1c:c9:37:d5:f3:2d:41:33:86:2a:cb:3c:ce: bd:70:1a:01:ed:d5:c4:b8:60:25:d1:88:02:a9:fc:7e:21:56: ac:80:8e:fe:b8:76:33:9c:42:be:53:f0:29:50:ed:e2:f4:03: 37:d7:f7:b1 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt9XQKV7zitAMWep4elInR7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDcwYzhhN2NkYmJkMzM0YWE4N2YxNTNjYjE4NTE4M2NjMzk4MGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYCTPPChS291IGohZdgKRsyJT02o awyejsFaF/bilN3av++/vg7fNxZdDiX3Zgg9p0M9mCVw943BI3fEtdNAZiLsTh5a Ka5aUPyrwJkd9gEfP7UTxoweem47cefefYI6egdggW3GakcPLGzUmssllm8UfT0W m393t3PTBFMowr7RqAL8I8zjnkOYTEAOySSyDWmStv1OqT9jHkGsdX/xtvj5GS+v rhSnv7gy6P3OXVUfsgw3oPIITC+n9M3Nkm+uywoDKjTBgZ79uRl8iy7wL6+qzNTI 200s+KDBp4Q2c1fzArv8iMYODZvqUJNqvwTb0A7dHW+hmwDLo9y9bt2/5wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFABwyKfNu9M0qofxU8sYUYPMOYDfMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvQUhESXA4MjcwelNxaF9GVHl4aFJnOHc1Z044LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAVdvAMAwD BABZrhkDBAJZrhgDBABZrrgwDQYJKoZIhvcNAQELBQADggEBABJTy1tvWf4Loxmi 77Aa9aoExzSJ3jT9r5k1i2yroSj9KpGAWB+IFQ3TFAZakjEyw4AUA3PY9QndGuIy yeSqNHAweLD1GyZ55X7LjB2WkdnBIYDnKw60lke+LAWfMUmaft3/kkSY3QWMkIVC zl8MZEGdIF3E17cHxSXVB/B9HsvSh4aNYKf3+PEYz4N6nBYniOY4/olI1jFDA/zk 51eMNs+rN/0dRgg0X/AgOuqd0c3iH/QLO8Apez4r0pEwIFeNPwepLnqjtRornS9Z HMk31fMtQTOGKss8zr1wGgHt1cS4YCXRiAKp/H4hVqyAjv64djOcQr5T8ClQ7eL0 AzfX97E= -----END CERTIFICATE-----Generated at Mon Jan 26 17:26:32 2026 by rpki-client