This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/RH-_P69EnY_CfaPrSpeX5TNaUIk.roa File: RH-_P69EnY_CfaPrSpeX5TNaUIk.roa (raw, json) Hash identifier: Kh8dA74PAzmGIT95EUvW7CM2vVdmLwl1/1xo5k7UCuA= Subject key identifier: 44:7F:BF:3F:AF:44:9D:8F:C2:7D:A3:EB:4A:97:97:E5:33:5A:50:89 Certificate issuer: /CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d Certificate serial: 019B7E385E1F13E9DF5F6A9DF29BC68B949E Authority key identifier: FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/RH-_P69EnY_CfaPrSpeX5TNaUIk.roa Signing time: Fri 02 Jan 2026 10:19:41 +0000 ROA not before: Fri 02 Jan 2026 10:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15552 IP address blocks: 5.56.136.0/21 maxlen: 21 5.57.216.0/21 maxlen: 21 5.101.224.0/19 maxlen: 19 37.114.0.0/21 maxlen: 21 85.232.96.0/19 maxlen: 19 91.204.22.0/24 maxlen: 24 91.204.23.0/24 maxlen: 24 145.255.32.0/20 maxlen: 20 185.6.116.0/22 maxlen: 22 185.6.216.0/22 maxlen: 22 212.232.0.0/20 maxlen: 20 2a04:d2c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:5e:1f:13:e9:df:5f:6a:9d:f2:9b:c6:8b:94:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d Validity Not Before: Jan 2 10:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=447fbf3faf449d8fc27da3eb4a9797e5335a5089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:fd:85:a4:cf:90:6b:d9:28:2b:53:ce:da: f6:6f:ba:b2:a6:53:0b:17:be:23:44:f7:7b:3f:a0: 82:be:c5:7f:f3:07:4f:f3:b4:26:c3:61:97:f6:50: 81:93:a5:9f:19:02:90:d9:4d:06:0a:ea:74:86:c9: 3d:30:fe:ba:fb:60:6b:b9:cd:32:f0:f8:7d:0a:f5: 7a:31:6e:ca:b2:f5:89:1f:81:67:a1:d8:2b:4a:d6: 5f:82:e7:c8:51:45:f1:2b:ce:ac:59:3e:90:39:44: 04:bb:e5:b6:ae:1f:f4:44:e3:92:cb:03:66:50:16: 1f:f4:03:2d:be:a3:62:ad:ce:4c:d6:d1:e2:8f:99: c8:b6:d8:01:08:80:56:80:1a:83:0b:a3:c1:66:0f: 21:a7:cb:4e:b8:14:5f:86:52:8d:7d:48:99:3c:82: 13:7f:ca:01:9e:cb:cf:2d:3e:7c:cc:bb:46:9f:1b: 51:f4:ff:55:99:5a:d5:00:98:92:af:69:14:23:ea: 10:51:02:da:68:9c:f0:aa:82:3b:db:38:9e:f1:b6: fc:4b:53:cc:f8:11:a9:01:29:6c:81:0f:bc:b2:da: c8:01:ce:29:07:72:e6:b3:4f:d9:18:f4:61:3f:f0: 70:7d:f9:27:8c:76:b7:28:df:59:b4:9f:97:a8:2f: a3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7F:BF:3F:AF:44:9D:8F:C2:7D:A3:EB:4A:97:97:E5:33:5A:50:89 X509v3 Authority Key Identifier: keyid:FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/RH-_P69EnY_CfaPrSpeX5TNaUIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.136.0/21 5.57.216.0/21 5.101.224.0/19 37.114.0.0/21 85.232.96.0/19 91.204.22.0/23 145.255.32.0/20 185.6.116.0/22 185.6.216.0/22 212.232.0.0/20 IPv6: 2a04:d2c0::/29 Signature Algorithm: sha256WithRSAEncryption 99:8f:0b:eb:58:eb:61:ed:38:d9:7f:d8:59:4b:b3:71:ee:42: 59:9d:2f:62:59:80:1c:74:43:8f:56:34:9e:00:ba:9e:3c:c0: 26:a1:44:1f:d6:2b:dc:98:dd:4b:a4:d0:2c:1a:c5:d5:6a:da: b4:de:8f:60:28:96:7b:de:6a:6a:8c:9e:dd:1e:7c:a6:ce:ac: 5a:56:c0:fd:05:17:a0:ca:8f:56:15:56:dd:cc:2e:29:0f:1f: 36:92:ab:df:ba:65:09:20:31:3a:41:5a:8b:42:a1:a1:4e:f9: 13:96:c5:ea:54:ae:cb:44:f2:5b:85:70:c6:43:34:59:ab:c3: 03:1c:15:e9:ff:ea:59:44:52:35:c7:58:7c:66:51:8e:47:6c: a8:ef:e0:26:34:68:12:b8:c5:4b:58:3b:01:69:a3:f7:5d:9e: 8e:a2:b0:a4:34:26:f8:7a:ca:4f:5d:20:60:33:62:f0:71:3e: d2:c6:ad:38:9a:b5:4c:d8:79:ae:37:08:ba:d7:54:c8:ca:ab: 74:0c:f7:f6:25:e0:d4:48:e4:87:5c:90:7c:10:57:10:3d:bb: e6:61:85:76:ae:5a:8d:d4:4d:98:9a:a6:66:12:c8:7a:bc:b7: c3:f5:a0:a9:81:19:e2:d9:77:94:3a:b6:01:2a:44:7c:35:67: 7c:7d:e0:61 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt+OF4fE+nfX2qd8pvGi5SeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMjllNzBhZjJmN2UxOGNiYzE5Zjk3Y2NhOGZkNmMwNTA5 OTc0MWQwHhcNMjYwMTAyMTAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDdmYmYzZmFmNDQ5ZDhmYzI3ZGEzZWI0YTk3OTdlNTMzNWE1MDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNf9haTPkGvZKCtTztr2b7qyplML F74jRPd7P6CCvsV/8wdP87Qmw2GX9lCBk6WfGQKQ2U0GCup0hsk9MP66+2Bruc0y 8Ph9CvV6MW7KsvWJH4FnodgrStZfgufIUUXxK86sWT6QOUQEu+W2rh/0ROOSywNm UBYf9AMtvqNirc5M1tHij5nIttgBCIBWgBqDC6PBZg8hp8tOuBRfhlKNfUiZPIIT f8oBnsvPLT58zLtGnxtR9P9VmVrVAJiSr2kUI+oQUQLaaJzwqoI72zie8bb8S1PM +BGpASlsgQ+8strIAc4pB3Lms0/ZGPRhP/BwffknjHa3KN9ZtJ+XqC+jFwIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFER/vz+vRJ2Pwn2j60qXl+UzWlCJMB8GA1UdIwQY MBaAFP8p5wry9+GMvBn5fMqP1sBQmXQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3lubkN2TDM0WXk4R2ZsOHlvX1d3RkNaZEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lYzJkODktNDRkZC00YmFiLWFlN2Et Y2YyMGU1YjY3ZmM4LzEvUkgtX1A2OUVuWV9DZmFQclNwZVg1VE5hVUlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9lYzJkODktNDRkZC00YmFiLWFlN2EtY2YyMGU1YjY3ZmM4 LzEvX3lubkN2TDM0WXk4R2ZsOHlvX1d3RkNaZEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQDBTiIAwQD BTnYAwQFBWXgAwQDJXIAAwQFVehgAwQBW8wWAwQEkf8gAwQCuQZ0AwQCuQbYAwQE 1OgAMA0EAgACMAcDBQMqBNLAMA0GCSqGSIb3DQEBCwUAA4IBAQCZjwvrWOth7TjZ f9hZS7Nx7kJZnS9iWYAcdEOPVjSeALqePMAmoUQf1ivcmN1LpNAsGsXVatq03o9g KJZ73mpqjJ7dHnymzqxaVsD9BRegyo9WFVbdzC4pDx82kqvfumUJIDE6QVqLQqGh TvkTlsXqVK7LRPJbhXDGQzRZq8MDHBXp/+pZRFI1x1h8ZlGOR2yo7+AmNGgSuMVL WDsBaaP3XZ6OorCkNCb4espPXSBgM2LwcT7Sxq04mrVM2HmuNwi611TIyqt0DPf2 JeDUSOSHXJB8EFcQPbvmYYV2rlqN1E2YmqZmEsh6vLfD9aCpgRni2XeUOrYBKkR8 NWd8feBh -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:25 2026 by rpki-client