This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/AhIhHW2MibgaDu_QaZSY4Wn14lA.roa File: AhIhHW2MibgaDu_QaZSY4Wn14lA.roa (raw, json) Hash identifier: xbB2zeoDRQ7gNZ/Ox/bptd6ot/c5+mbp2c7ngkO2m1M= Subject key identifier: 02:12:21:1D:6D:8C:89:B8:1A:0E:EF:D0:69:94:98:E1:69:F5:E2:50 Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d Certificate serial: 019C1881C554F78C43B3CACCCB0890882F3D Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/AhIhHW2MibgaDu_QaZSY4Wn14lA.roa Signing time: Sun 01 Feb 2026 09:21:23 +0000 ROA not before: Sun 01 Feb 2026 09:21:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50272 IP address blocks: 62.24.32.0/19 maxlen: 19 62.24.32.0/20 maxlen: 24 62.24.48.0/20 maxlen: 24 185.41.64.0/22 maxlen: 24 185.41.64.0/24 maxlen: 24 185.41.65.0/24 maxlen: 24 185.41.66.0/24 maxlen: 24 185.155.140.0/22 maxlen: 24 185.155.140.0/24 maxlen: 24 185.155.141.0/24 maxlen: 24 185.155.142.0/24 maxlen: 24 185.155.143.0/24 maxlen: 24 2a03:1400::/32 maxlen: 32 2a07:33c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:18:81:c5:54:f7:8c:43:b3:ca:cc:cb:08:90:88:2f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d Validity Not Before: Feb 1 09:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0212211d6d8c89b81a0eefd0699498e169f5e250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:74:09:c8:2b:91:ed:90:7e:e4:f3:52:3c:ea: b3:68:72:0e:d8:e3:4f:c4:fd:46:19:6c:51:10:6f: 01:99:a0:ad:24:8b:68:f8:d6:b7:83:7b:c7:95:9d: 26:52:e4:ec:ae:d1:36:ba:6b:ab:e8:a4:8b:3d:cf: 40:92:b5:1d:39:d4:c9:d9:ba:29:3e:5a:45:79:a5: 3f:6a:11:e5:c0:18:34:b7:25:6d:4f:6b:66:4a:e3: 94:64:2d:7e:9f:47:4a:87:4e:79:1b:f0:81:44:c2: a3:84:3b:ed:f2:1a:be:6b:96:0b:d8:e1:48:a5:d7: 75:f0:81:d5:dd:75:fe:8e:6d:1a:bb:6f:78:eb:87: bd:4b:bd:6f:f1:ef:ac:68:73:e6:ac:f7:4f:e5:3f: 3e:ca:5b:37:73:bd:14:d7:ce:58:77:6b:95:7c:aa: d6:1b:55:dd:5b:0c:dd:51:bd:93:b9:3e:b3:2b:e8: 90:b6:ee:e5:ef:07:99:9b:96:f0:6c:07:f3:93:f0: 99:ea:de:ce:11:44:d0:e4:43:1c:42:ac:3a:fd:ca: e7:8f:c0:8b:15:ff:2a:bc:30:6b:eb:18:b1:b1:fa: 4e:29:8d:82:c3:26:45:80:93:2c:32:9b:c0:90:fc: 4b:7e:9f:28:27:82:c4:12:cd:b2:7e:bc:ed:7f:4d: 4c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:12:21:1D:6D:8C:89:B8:1A:0E:EF:D0:69:94:98:E1:69:F5:E2:50 X509v3 Authority Key Identifier: keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/AhIhHW2MibgaDu_QaZSY4Wn14lA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.24.32.0/19 185.41.64.0/22 185.155.140.0/22 IPv6: 2a03:1400::/32 2a07:33c0::/29 Signature Algorithm: sha256WithRSAEncryption 10:dd:3d:68:b6:b2:17:2e:e5:a9:7d:40:0c:53:20:e6:ca:35: 7f:21:1d:91:cf:33:9a:c0:43:f6:93:86:62:91:aa:06:c4:e3: ec:33:3a:ba:32:0f:39:af:53:e4:41:eb:3d:cb:d7:33:fe:cb: 4b:f3:e7:fb:81:72:d3:54:dd:e4:20:3b:dd:0d:3c:ce:90:52: 15:ca:28:f7:22:84:be:db:4e:58:9c:a9:86:46:b0:d8:63:d0: 03:b3:7d:23:1b:b6:8e:db:e7:a7:e8:61:7b:81:e6:1a:30:a7: 90:f4:8d:53:db:95:0d:33:93:ae:75:ff:45:a0:84:4f:00:91: c1:64:60:80:96:67:92:44:3f:be:12:66:f7:93:1c:0f:fd:36: 12:48:88:ab:a2:6d:65:ad:65:ed:00:2d:8f:71:c1:b8:b2:24: ef:1a:52:00:eb:b0:bf:5a:95:f3:fb:32:b1:e1:04:3d:6e:21: b2:f0:04:98:06:10:e9:86:d2:37:90:82:ce:0b:df:98:04:74: 70:00:99:35:0a:0b:8e:c8:ad:3e:96:ab:84:20:a3:e6:70:31: 88:65:0b:9b:25:c1:17:2e:18:0d:cc:1f:2e:ea:47:9f:35:a5: 67:a7:37:62:43:e6:27:14:e1:e4:8d:db:82:15:fb:ce:69:94: 43:24:f9:97 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZwYgcVU94xDs8rMywiQiC89MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYTk4YjFkMGVjY2NjNGY2ZmYxYTdlN2RiODRiNGJiMmY1 NWIwOGQwHhcNMjYwMjAxMDkyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjEyMjExZDZkOGM4OWI4MWEwZWVmZDA2OTk0OThlMTY5ZjVlMjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HQJyCuR7ZB+5PNSPOqzaHIO2ONP xP1GGWxREG8BmaCtJIto+Na3g3vHlZ0mUuTsrtE2umur6KSLPc9AkrUdOdTJ2bop PlpFeaU/ahHlwBg0tyVtT2tmSuOUZC1+n0dKh055G/CBRMKjhDvt8hq+a5YL2OFI pdd18IHV3XX+jm0au29464e9S71v8e+saHPmrPdP5T8+yls3c70U185Yd2uVfKrW G1XdWwzdUb2TuT6zK+iQtu7l7weZm5bwbAfzk/CZ6t7OEUTQ5EMcQqw6/crnj8CL Ff8qvDBr6xixsfpOKY2CwyZFgJMsMpvAkPxLfp8oJ4LEEs2yfrztf01McQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFAISIR1tjIm4Gg7v0GmUmOFp9eJQMB8GA1UdIwQY MBaAFPypix0OzMxPb/Gn59uEtLsvVbCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85NzFlNzMtZmE4My00NTc5LTg1MzIt NThmMGYzMjVjMmI4LzEvQWhJaEhXMk1pYmdhRHVfUWFaU1k0V24xNGxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85NzFlNzMtZmE4My00NTc5LTg1MzItNThmMGYzMjVjMmI4 LzEvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQFPhggAwQC uSlAAwQCuZuMMBQEAgACMA4DBQAqAxQAAwUDKgczwDANBgkqhkiG9w0BAQsFAAOC AQEAEN09aLayFy7lqX1ADFMg5so1fyEdkc8zmsBD9pOGYpGqBsTj7DM6ujIPOa9T 5EHrPcvXM/7LS/Pn+4Fy01Td5CA73Q08zpBSFcoo9yKEvttOWJyphkaw2GPQA7N9 Ixu2jtvnp+hhe4HmGjCnkPSNU9uVDTOTrnX/RaCETwCRwWRggJZnkkQ/vhJm95Mc D/02EkiIq6JtZa1l7QAtj3HBuLIk7xpSAOuwv1qV8/syseEEPW4hsvAEmAYQ6YbS N5CCzgvfmAR0cACZNQoLjsitPparhCCj5nAxiGULmyXBFy4YDcwfLupHnzWlZ6c3 YkPmJxTh5I3bghX7zmmUQyT5lw== -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:10 2026 by rpki-client