This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/h1XDgLusYZYzBKy-B3_oEeeQZbM.roa File: h1XDgLusYZYzBKy-B3_oEeeQZbM.roa (raw, json) Hash identifier: 5iJMVVOJPvV0Nkt7xC/3WSK+5BdOMwCxIwfFxLs7H2Q= Subject key identifier: 87:55:C3:80:BB:AC:61:96:33:04:AC:BE:07:7F:E8:11:E7:90:65:B3 Certificate issuer: /CN=554834da8600c96c5fde91278f520e6c0d26fff3 Certificate serial: 019B77C7018AC8C65EA850D56670BC3159E4 Authority key identifier: 55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/h1XDgLusYZYzBKy-B3_oEeeQZbM.roa Signing time: Thu 01 Jan 2026 04:18:09 +0000 ROA not before: Thu 01 Jan 2026 04:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43414 IP address blocks: 185.185.244.0/22 maxlen: 22 2a0b:6980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.crl rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:01:8a:c8:c6:5e:a8:50:d5:66:70:bc:31:59:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=554834da8600c96c5fde91278f520e6c0d26fff3 Validity Not Before: Jan 1 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8755c380bbac61963304acbe077fe811e79065b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ec:32:ce:93:e4:7d:cd:a2:23:6e:51:7c:bd: 7a:11:a5:f2:ca:c0:ab:8a:f4:94:a9:b4:e9:2e:82: 41:30:99:7e:10:2c:0f:36:2d:9e:34:38:ca:f8:51: 16:38:c1:dd:f8:40:44:23:75:23:b8:75:49:36:46: 48:e8:da:19:12:1c:18:af:ba:48:a2:59:cf:2f:40: d3:2f:cd:82:62:89:3e:40:7a:ef:5d:dd:ce:ec:ae: 59:88:ce:23:f5:e1:e7:86:4d:01:e3:c2:a6:99:12: 33:71:3d:87:22:f3:a1:39:64:1d:8a:cb:19:7e:85: dd:17:43:5a:15:d8:6b:26:8d:43:0d:cd:03:5d:0c: 4d:0e:4f:ff:1a:b5:2d:66:7d:ea:19:9f:22:59:28: 6f:7c:f2:a2:69:3a:2a:29:80:4f:e6:82:ef:f2:fe: b7:ae:f0:a0:7d:c1:b9:9d:c5:cd:cd:bb:d2:3e:dd: 81:bf:97:62:c1:02:cd:1b:a9:28:5b:75:93:9d:cb: b7:bb:f1:33:75:f7:68:9c:41:dd:6c:f6:52:83:b5: 88:53:34:ac:1c:8d:5a:85:ac:76:9c:50:cf:9f:83: f9:3a:cd:41:78:62:5c:6f:c4:72:87:bd:18:d4:0d: 79:27:0d:0f:d5:ca:4b:49:be:52:1b:43:84:de:62: e8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:55:C3:80:BB:AC:61:96:33:04:AC:BE:07:7F:E8:11:E7:90:65:B3 X509v3 Authority Key Identifier: keyid:55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/h1XDgLusYZYzBKy-B3_oEeeQZbM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.185.244.0/22 IPv6: 2a0b:6980::/29 Signature Algorithm: sha256WithRSAEncryption 92:47:00:9d:bb:26:99:2c:1f:06:2f:23:8f:eb:22:d0:e1:0e: 8a:26:4f:0e:e5:de:e4:1b:eb:b1:44:29:1c:f0:ae:b5:a5:e6: 7c:0d:90:30:c2:6b:24:fb:36:56:3e:72:52:7a:bf:1e:68:03: da:19:3b:00:d0:65:8f:77:07:15:2b:7e:c8:29:0c:8b:8e:21: c4:0a:08:bf:b7:19:fc:12:1c:2a:24:e3:43:78:ae:ab:e9:14: cd:b0:9b:14:27:57:5a:b2:18:62:84:af:fa:28:32:0e:d3:72: 9e:8c:4b:6f:0b:f3:f6:a7:e2:79:98:a2:57:36:e8:1c:d7:de: 9e:43:ca:80:45:49:92:7f:24:78:27:85:97:bd:fe:f0:dd:56: e2:1d:65:ac:11:d6:d9:9f:0b:23:13:20:85:48:1b:c8:5d:f1: 1c:7c:dc:7c:08:1f:df:f2:e1:99:d1:97:04:25:3d:b8:99:ef: 17:48:09:0d:07:29:43:31:2e:08:cc:bc:67:2e:21:fd:fb:9f: 6f:9f:a4:4c:48:4e:e0:ea:d0:6b:0c:58:b4:c0:19:e2:b6:4e: 03:11:56:c9:a3:ef:ec:b4:d7:3d:ff:93:b0:81:d7:b7:74:17: 66:40:d4:b2:3d:58:e5:4e:5e:12:38:f7:66:b0:ef:3d:19:6b: 64:09:62:91 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xwGKyMZeqFDVZnC8MVnkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NDgzNGRhODYwMGM5NmM1ZmRlOTEyNzhmNTIwZTZjMGQy NmZmZjMwHhcNMjYwMTAxMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzU1YzM4MGJiYWM2MTk2MzMwNGFjYmUwNzdmZTgxMWU3OTA2NWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxewyzpPkfc2iI25RfL16EaXyysCr ivSUqbTpLoJBMJl+ECwPNi2eNDjK+FEWOMHd+EBEI3UjuHVJNkZI6NoZEhwYr7pI olnPL0DTL82CYok+QHrvXd3O7K5ZiM4j9eHnhk0B48KmmRIzcT2HIvOhOWQdissZ foXdF0NaFdhrJo1DDc0DXQxNDk//GrUtZn3qGZ8iWShvfPKiaToqKYBP5oLv8v63 rvCgfcG5ncXNzbvSPt2Bv5diwQLNG6koW3WTncu3u/EzdfdonEHdbPZSg7WIUzSs HI1ahax2nFDPn4P5Os1BeGJcb8Ryh70Y1A15Jw0P1cpLSb5SG0OE3mLo7QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIdVw4C7rGGWMwSsvgd/6BHnkGWzMB8GA1UdIwQY MBaAFFVINNqGAMlsX96RJ49SDmwNJv/zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlVnMDJvWUF5V3hmM3BFbmoxSU9iQTBtX19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jOGFhNGUtZGQwMS00YTFhLThjYzAt ZWRmNDA5ZmVkZmNhLzEvaDFYRGdMdXNZWll6Qkt5LUIzX29FZWVRWmJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9jOGFhNGUtZGQwMS00YTFhLThjYzAtZWRmNDA5ZmVkZmNh LzEvVlVnMDJvWUF5V3hmM3BFbmoxSU9iQTBtX19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubn0MA0E AgACMAcDBQMqC2mAMA0GCSqGSIb3DQEBCwUAA4IBAQCSRwCduyaZLB8GLyOP6yLQ 4Q6KJk8O5d7kG+uxRCkc8K61peZ8DZAwwmsk+zZWPnJSer8eaAPaGTsA0GWPdwcV K37IKQyLjiHECgi/txn8EhwqJONDeK6r6RTNsJsUJ1dashhihK/6KDIO03KejEtv C/P2p+J5mKJXNugc196eQ8qARUmSfyR4J4WXvf7w3VbiHWWsEdbZnwsjEyCFSBvI XfEcfNx8CB/f8uGZ0ZcEJT24me8XSAkNBylDMS4IzLxnLiH9+59vn6RMSE7g6tBr DFi0wBnitk4DEVbJo+/stNc9/5Owgde3dBdmQNSyPVjlTl4SOPdmsO89GWtkCWKR -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:19 2026 by rpki-client