This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/bHuZc9mUYBcqpEDyA_8H3U2OWFM.roa File: bHuZc9mUYBcqpEDyA_8H3U2OWFM.roa (raw, json) Hash identifier: LIqVQ9mxztvdOqUbAJcArQV2MAsX+TwnaJ0MIMH4BK4= Subject key identifier: 6C:7B:99:73:D9:94:60:17:2A:A4:40:F2:03:FF:07:DD:4D:8E:58:53 Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f Certificate serial: 019B7E38D9C27EE8E7ECEA8EEFAE4AA9E474 Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/bHuZc9mUYBcqpEDyA_8H3U2OWFM.roa Signing time: Fri 02 Jan 2026 10:20:13 +0000 ROA not before: Fri 02 Jan 2026 10:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201086 IP address blocks: 185.86.80.0/24 maxlen: 24 185.205.19.0/24 maxlen: 24 185.254.95.0/24 maxlen: 24 193.36.63.0/24 maxlen: 24 194.145.138.0/24 maxlen: 24 2a0a:fa40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d9:c2:7e:e8:e7:ec:ea:8e:ef:ae:4a:a9:e4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f Validity Not Before: Jan 2 10:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c7b9973d99460172aa440f203ff07dd4d8e5853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:68:81:c2:ac:0b:e5:e9:20:14:b0:ce:68:93: 5b:2f:4c:b0:ff:7a:cb:63:0e:d7:89:e7:77:ed:a8: ff:20:33:2d:f0:99:e8:2f:b7:4e:35:27:8f:3f:7e: ef:64:fc:f9:83:46:a9:70:99:13:c3:ef:5f:32:cf: a9:15:06:34:2b:4b:73:c4:6f:e3:cb:36:cf:1d:31: 83:df:8e:08:4b:2e:6d:39:f4:fe:01:b9:b3:ba:db: 31:24:3b:ac:f7:c4:9d:1b:bd:15:34:56:74:e5:13: 1c:79:97:5f:4f:6b:33:9f:32:c0:58:b3:ff:f7:24: 91:58:c7:10:75:fa:57:fa:5c:c1:8f:3a:9d:42:20: 4a:5f:e0:0e:8e:1b:1a:ac:05:93:2b:61:ef:19:74: ae:25:06:ac:4e:8e:f3:01:32:a0:da:e0:5e:5e:27: bd:88:af:5c:9f:f7:51:3b:4a:4b:db:3a:eb:f1:8c: 9b:6c:30:81:02:b0:3b:38:c0:20:9d:af:16:89:3a: bc:cd:4c:c1:0f:27:df:aa:1b:33:1b:25:ed:51:28: fc:96:67:2c:c3:0a:a7:5e:d3:16:16:37:20:1d:72: ec:e3:d3:8a:65:de:0c:b8:06:98:8a:71:e7:14:91: 11:23:c6:da:ab:f9:3f:48:20:b2:c7:6e:22:be:f9: 9b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7B:99:73:D9:94:60:17:2A:A4:40:F2:03:FF:07:DD:4D:8E:58:53 X509v3 Authority Key Identifier: keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/bHuZc9mUYBcqpEDyA_8H3U2OWFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.80.0/24 185.205.19.0/24 185.254.95.0/24 193.36.63.0/24 194.145.138.0/24 IPv6: 2a0a:fa40::/32 Signature Algorithm: sha256WithRSAEncryption 95:a9:04:f0:e8:65:c0:9a:ec:e7:b3:47:83:ed:bd:e1:8f:94: aa:40:7f:d0:70:6e:f3:a5:cd:38:5a:c3:e2:21:41:84:a6:98: 25:79:11:d6:7c:12:4f:73:2e:ee:9c:94:cf:a2:da:1e:bf:bc: 5f:db:09:09:a5:2f:e2:f6:28:e8:fc:56:47:11:09:1e:4d:41: 65:48:b6:05:8a:15:5a:80:eb:12:f8:6f:83:7b:b2:03:a5:e5: 50:5c:db:3a:51:7f:6e:72:26:7c:eb:6a:0e:6c:a8:82:12:bb: f8:46:d9:f2:c7:ef:2b:5d:44:44:6f:09:f0:5b:f8:05:3f:52: 1e:e5:4c:f7:3f:bc:1f:2d:f2:a6:db:c7:fc:95:6b:6a:ed:8b: ac:90:04:0f:e5:d9:d2:20:ea:15:bb:c1:e2:6a:b5:7b:71:84: 79:89:87:d1:b1:89:58:66:51:8a:44:e9:0b:bd:6d:31:b3:3f: 63:f3:66:cb:6b:bd:38:8f:93:49:48:71:e3:a8:6b:a7:57:38: 50:4b:09:05:a5:bb:3d:10:90:c4:df:51:c8:81:3f:4a:1e:cc: eb:45:e3:02:b6:d1:d8:f0:05:dd:f2:9d:21:97:eb:41:0e:e2: ac:ed:07:3c:90:40:58:e4:ac:42:26:9a:54:50:7f:e3:9b:9c: 29:dc:0d:1e -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt+ONnCfujn7OqO765KqeR0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi ZDBhNWYwHhcNMjYwMTAyMTAyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzdiOTk3M2Q5OTQ2MDE3MmFhNDQwZjIwM2ZmMDdkZDRkOGU1ODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmiBwqwL5ekgFLDOaJNbL0yw/3rL Yw7Xied37aj/IDMt8JnoL7dONSePP37vZPz5g0apcJkTw+9fMs+pFQY0K0tzxG/j yzbPHTGD344ISy5tOfT+AbmzutsxJDus98SdG70VNFZ05RMceZdfT2sznzLAWLP/ 9ySRWMcQdfpX+lzBjzqdQiBKX+AOjhsarAWTK2HvGXSuJQasTo7zATKg2uBeXie9 iK9cn/dRO0pL2zrr8YybbDCBArA7OMAgna8WiTq8zUzBDyffqhszGyXtUSj8lmcs wwqnXtMWFjcgHXLs49OKZd4MuAaYinHnFJERI8baq/k/SCCyx24ivvmbKwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFGx7mXPZlGAXKqRA8gP/B91NjlhTMB8GA1UdIwQY MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt N2JiZDI4Y2U0YTc1LzEvYkh1WmM5bVVZQmNxcEVEeUFfOEgzVTJPV0ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1 LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAuVZQAwQA uc0TAwQAuf5fAwQAwSQ/AwQAwpGKMA0EAgACMAcDBQAqCvpAMA0GCSqGSIb3DQEB CwUAA4IBAQCVqQTw6GXAmuzns0eD7b3hj5SqQH/QcG7zpc04WsPiIUGEppgleRHW fBJPcy7unJTPotoev7xf2wkJpS/i9ijo/FZHEQkeTUFlSLYFihVagOsS+G+De7ID peVQXNs6UX9uciZ862oObKiCErv4Rtnyx+8rXUREbwnwW/gFP1Ie5Uz3P7wfLfKm 28f8lWtq7YuskAQP5dnSIOoVu8HiarV7cYR5iYfRsYlYZlGKROkLvW0xsz9j82bL a704j5NJSHHjqGunVzhQSwkFpbs9EJDE31HIgT9KHszrReMCttHY8AXd8p0hl+tB DuKs7Qc8kEBY5KxCJppUUH/jm5wp3A0e -----END CERTIFICATE-----Generated at Mon Jan 26 15:34:06 2026 by rpki-client