This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/H02yV6HgXbkB7Sblo8iq_zMpEUA.roa File: H02yV6HgXbkB7Sblo8iq_zMpEUA.roa (raw, json) Hash identifier: wdaj1AYOG7ohn8sLP/a8ErBCpxjqgUG9MpQNoEmcpoE= Subject key identifier: 1F:4D:B2:57:A1:E0:5D:B9:01:ED:26:E5:A3:C8:AA:FF:33:29:11:40 Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f Certificate serial: 019B93C7AFFC5A0AD46A16E68B7D9D1ACD1D Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/H02yV6HgXbkB7Sblo8iq_zMpEUA.roa Signing time: Tue 06 Jan 2026 14:48:16 +0000 ROA not before: Tue 06 Jan 2026 14:48:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206119 IP address blocks: 185.205.16.0/24 maxlen: 24 185.205.18.0/24 maxlen: 24 185.237.80.0/24 maxlen: 24 185.237.81.0/24 maxlen: 24 185.254.93.0/24 maxlen: 24 193.36.62.0/24 maxlen: 24 194.1.218.0/24 maxlen: 24 194.145.136.0/24 maxlen: 24 194.145.139.0/24 maxlen: 24 2a05:b700::/29 maxlen: 29 2a0a:fa40::/29 maxlen: 29 2a0c:580::/29 maxlen: 29 2a0c:4a40::/29 maxlen: 29 2a0c:4a45::/32 maxlen: 32 2a0c:4a46::/32 maxlen: 32 2a0c:4a47::/32 maxlen: 32 2a0d:d380::/29 maxlen: 29 2a0d:d380::/32 maxlen: 32 2a0d:d381::/32 maxlen: 32 2a0d:d383::/32 maxlen: 32 2a0d:d384::/32 maxlen: 32 2a0d:d385::/32 maxlen: 32 2a0d:d386::/32 maxlen: 32 2a0d:d387::/32 maxlen: 32 2a10:4b40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:c7:af:fc:5a:0a:d4:6a:16:e6:8b:7d:9d:1a:cd:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f Validity Not Before: Jan 6 14:48:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f4db257a1e05db901ed26e5a3c8aaff33291140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ec:9a:c9:5a:b5:ce:c4:1b:25:9f:66:31:c4: 2c:14:fe:d3:ef:2c:6c:1a:b2:9c:84:6a:94:3a:a3: 7e:8c:e7:e1:7b:83:e1:26:64:4b:b4:95:ed:46:09: 41:ef:0b:42:ee:91:c5:01:a6:e2:2a:9e:ca:51:65: 82:dd:40:75:f7:31:a4:6b:36:2f:6d:12:70:51:9c: 35:2c:da:6c:52:ba:f6:f2:6b:1d:8e:44:96:8c:92: 59:8f:0e:ee:fc:df:9a:34:52:b1:1a:05:0e:12:65: a5:06:92:04:35:26:09:07:1a:37:b9:d6:6d:92:d0: fa:8a:e4:50:62:79:1d:30:b5:4d:98:7c:79:2f:bf: e4:4d:56:4e:a6:2c:09:01:75:4c:0d:5d:0b:37:d2: a0:58:60:82:83:9d:78:17:5c:b6:a5:e1:c3:6e:1a: 0a:3c:8d:a9:41:85:2e:81:fb:9c:61:46:b2:a4:dd: 73:65:a2:4c:5f:e9:4b:9f:f2:98:58:6a:01:c4:f1: f1:35:3c:73:06:09:f5:b7:1d:44:40:73:e5:86:54: 9f:ed:8d:f6:02:b3:9d:b2:f0:a7:a5:1c:44:8d:94: 29:a9:3b:94:80:6a:27:92:a1:e9:b0:fc:f5:2b:a5: 5c:c6:4e:57:a9:61:ff:7b:9c:57:bc:b4:fb:1e:21: be:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4D:B2:57:A1:E0:5D:B9:01:ED:26:E5:A3:C8:AA:FF:33:29:11:40 X509v3 Authority Key Identifier: keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/H02yV6HgXbkB7Sblo8iq_zMpEUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.16.0/24 185.205.18.0/24 185.237.80.0/23 185.254.93.0/24 193.36.62.0/24 194.1.218.0/24 194.145.136.0/24 194.145.139.0/24 IPv6: 2a05:b700::/29 2a0a:fa40::/29 2a0c:580::/29 2a0c:4a40::/29 2a0d:d380::/29 2a10:4b40::/29 Signature Algorithm: sha256WithRSAEncryption 76:5d:e5:e7:38:cf:24:96:98:86:fe:f7:11:28:9d:44:7c:ef: 11:8f:74:7b:76:86:b2:2a:e6:1b:ab:e0:a0:a2:54:a9:e1:8b: ec:c3:b6:c9:ef:cf:0d:f0:39:4e:6b:ff:b7:04:5d:94:79:cc: 9c:79:a9:b4:25:42:93:ce:f7:a0:c8:4c:f4:e9:f2:6c:ba:85: 37:c9:a6:f5:b6:b4:85:bb:7a:1e:8a:04:bb:2c:46:3e:ab:16: 55:9d:80:90:45:d9:b2:45:f4:a0:13:f9:41:be:6d:6b:57:6f: 45:cb:a0:be:e3:da:b6:7c:b5:93:21:fc:f1:4e:10:fa:6b:ba: 8b:54:e8:8f:bd:2f:17:6a:d3:2d:42:39:6a:8b:e6:3a:10:13: 3a:69:43:b2:60:4a:4c:9c:f3:3b:8d:81:9f:66:40:7e:b2:b8: d1:91:06:ff:ab:3d:82:55:9a:f1:17:0b:10:b7:99:9c:9e:e9: 94:94:ee:89:ba:c5:0d:20:32:f9:c9:59:22:76:27:7c:2a:9c: 08:46:60:4a:b2:b1:69:b2:f1:5c:51:dd:a6:bb:4f:52:62:5c: 71:37:34:13:f3:00:6e:6e:a5:2d:27:08:a2:36:67:0b:b0:93: 43:e7:c8:48:57:6d:87:89:63:3a:8a:27:c7:cc:52:ca:fa:3d: 15:51:08:4a -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISAZuTx6/8WgrUahbmi32dGs0dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi ZDBhNWYwHhcNMjYwMTA2MTQ0ODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjRkYjI1N2ExZTA1ZGI5MDFlZDI2ZTVhM2M4YWFmZjMzMjkxMTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+yayVq1zsQbJZ9mMcQsFP7T7yxs GrKchGqUOqN+jOfhe4PhJmRLtJXtRglB7wtC7pHFAabiKp7KUWWC3UB19zGkazYv bRJwUZw1LNpsUrr28msdjkSWjJJZjw7u/N+aNFKxGgUOEmWlBpIENSYJBxo3udZt ktD6iuRQYnkdMLVNmHx5L7/kTVZOpiwJAXVMDV0LN9KgWGCCg514F1y2peHDbhoK PI2pQYUugfucYUaypN1zZaJMX+lLn/KYWGoBxPHxNTxzBgn1tx1EQHPlhlSf7Y32 ArOdsvCnpRxEjZQpqTuUgGonkqHpsPz1K6Vcxk5XqWH/e5xXvLT7HiG+7wIDAQAB o4ICZTCCAmEwHQYDVR0OBBYEFB9Nsleh4F25Ae0m5aPIqv8zKRFAMB8GA1UdIwQY MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt N2JiZDI4Y2U0YTc1LzEvSDAyeVY2SGdYYmtCN1NibG84aXFfek1wRVVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1 LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajA2BAIAATAwAwQAuc0QAwQA uc0SAwQBue1QAwQAuf5dAwQAwSQ+AwQAwgHaAwQAwpGIAwQAwpGLMDAEAgACMCoD BQMqBbcAAwUDKgr6QAMFAyoMBYADBQMqDEpAAwUDKg3TgAMFAyoQS0AwDQYJKoZI hvcNAQELBQADggEBAHZd5ec4zySWmIb+9xEonUR87xGPdHt2hrIq5hur4KCiVKnh i+zDtsnvzw3wOU5r/7cEXZR5zJx5qbQlQpPO96DITPTp8my6hTfJpvW2tIW7eh6K BLssRj6rFlWdgJBF2bJF9KAT+UG+bWtXb0XLoL7j2rZ8tZMh/PFOEPpruotU6I+9 Lxdq0y1COWqL5joQEzppQ7JgSkyc8zuNgZ9mQH6yuNGRBv+rPYJVmvEXCxC3mZye 6ZSU7om6xQ0gMvnJWSJ2J3wqnAhGYEqysWmy8VxR3aa7T1JiXHE3NBPzAG5upS0n CKI2Zwuwk0PnyEhXbYeJYzqKJ8fMUsr6PRVRCEo= -----END CERTIFICATE-----Generated at Wed Jan 21 22:03:44 2026 by rpki-client