This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/H56VyEC8BD8bkJOQ5CVnqV33T_g.roa File: H56VyEC8BD8bkJOQ5CVnqV33T_g.roa (raw, json) Hash identifier: tWRdp8GeSscQXyw4RUOY2YksBqsGvkjXw0yOHLSV6Cw= Subject key identifier: 1F:9E:95:C8:40:BC:04:3F:1B:90:93:90:E4:25:67:A9:5D:F7:4F:F8 Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd Certificate serial: 019BB73B287E63CCDFD91C725ECC934C9A4B Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/H56VyEC8BD8bkJOQ5CVnqV33T_g.roa Signing time: Tue 13 Jan 2026 12:01:06 +0000 ROA not before: Tue 13 Jan 2026 12:01:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42237 IP address blocks: 91.236.116.0/24 maxlen: 24 185.217.0.0/24 maxlen: 24 185.217.1.0/24 maxlen: 24 185.217.2.0/24 maxlen: 24 185.246.128.0/24 maxlen: 24 185.246.129.0/24 maxlen: 24 185.246.130.0/24 maxlen: 24 193.105.134.0/24 maxlen: 24 2a0b:c040::/32 maxlen: 32 2a0b:c041::/32 maxlen: 32 2a0d:8980::/32 maxlen: 32 2a0d:8981::/32 maxlen: 32 2a0d:8982::/32 maxlen: 32 2a0d:8983::/32 maxlen: 32 2a0d:8984::/32 maxlen: 32 2a0d:8985::/32 maxlen: 32 2a0d:8986::/32 maxlen: 32 2a0d:8987::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.mft rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b7:3b:28:7e:63:cc:df:d9:1c:72:5e:cc:93:4c:9a:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd Validity Not Before: Jan 13 12:01:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f9e95c840bc043f1b909390e42567a95df74ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ba:ab:23:0f:42:17:59:0c:d2:c5:6a:1b:41: f8:14:d2:49:c8:00:17:76:39:47:58:76:97:6b:3d: 3f:71:9f:2a:63:b4:8b:17:c7:e7:01:29:7b:ec:0b: bd:33:b6:8e:57:ae:92:a9:e9:88:95:91:f0:0d:f7: 5f:82:f1:f5:e5:41:f2:44:74:fa:bd:c4:d9:55:da: 34:77:e5:39:c9:27:4d:ef:6e:92:87:7a:fb:30:94: db:2d:07:20:01:5c:c1:e8:b1:02:36:2c:35:45:21: 31:c0:84:ab:88:a6:e8:17:f8:fa:aa:98:72:5c:bd: 03:d3:a9:87:fa:50:07:e0:2f:61:9c:fa:59:85:9f: ff:48:44:99:79:cb:a3:a7:4e:a3:c6:e0:66:d5:ff: 78:ef:86:ce:0b:04:75:02:bc:f7:7b:c8:8c:5c:70: a1:19:93:23:4d:6b:14:37:9e:57:c2:7c:1c:64:22: ef:85:ea:5f:d0:22:59:44:5f:3e:7c:a4:97:ca:37: 75:36:9b:59:ce:71:d3:1a:86:86:84:1b:c8:05:9c: f1:8c:16:63:05:88:bc:de:8c:13:4a:7b:58:08:7e: 6c:e7:a0:00:fe:78:af:f0:b2:89:6a:d9:84:9c:7a: 2a:8b:88:17:f9:22:ae:9f:03:b4:0e:43:02:06:78: d5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9E:95:C8:40:BC:04:3F:1B:90:93:90:E4:25:67:A9:5D:F7:4F:F8 X509v3 Authority Key Identifier: keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/H56VyEC8BD8bkJOQ5CVnqV33T_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.116.0/24 185.217.0.0-185.217.2.255 185.246.128.0-185.246.130.255 193.105.134.0/24 IPv6: 2a0b:c040::/31 2a0d:8980::/29 Signature Algorithm: sha256WithRSAEncryption 04:c6:98:2e:da:87:94:98:c1:b1:07:41:5e:c5:ee:a7:89:ac: 96:84:76:46:bd:88:cf:2a:42:90:31:35:f5:d0:19:22:76:bf: c7:74:9c:68:e0:2e:be:2a:e1:85:67:41:d0:f2:14:dc:3e:33: 4b:8b:a2:88:36:f2:fe:69:db:b3:1d:56:49:2c:f8:9e:54:43: c1:14:28:75:44:9c:0a:5c:70:9e:c9:87:9c:4d:18:aa:3b:c9: 4f:06:0a:ed:9a:58:2a:d1:12:91:f3:70:13:a1:ed:0b:fc:b9: d6:22:4e:b6:74:38:00:75:44:99:67:01:00:c5:f3:36:80:9b: 26:26:77:d1:ee:35:87:39:1c:d5:6d:39:df:99:c5:ee:30:ca: 13:5e:49:db:85:b0:3c:09:d9:7c:2f:3c:d7:13:cf:ef:89:95: 84:50:50:e9:88:f4:8c:6e:21:48:f8:b5:6c:c2:8b:f8:44:3c: 1b:a1:91:f1:06:bc:41:ca:91:42:2e:bc:0b:bd:5b:eb:d3:ff: 8b:45:19:38:0a:67:65:9e:60:2c:9c:88:cb:01:95:92:7f:6a: 19:b6:08:8f:77:32:4a:0f:9d:28:6e:75:41:41:15:e9:6f:34: 71:8f:6f:09:62:94:02:00:62:e5:97:50:98:f9:ec:65:c2:48: 9a:21:61:29 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZu3Oyh+Y8zf2RxyXsyTTJpLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNzk4ZjBmZTRmNGRmZmRmZWQyYzhlNjJkMjM1NDMwZjQ5 Mzc3Y2QwHhcNMjYwMTEzMTIwMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjllOTVjODQwYmMwNDNmMWI5MDkzOTBlNDI1NjdhOTVkZjc0ZmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LqrIw9CF1kM0sVqG0H4FNJJyAAX djlHWHaXaz0/cZ8qY7SLF8fnASl77Au9M7aOV66SqemIlZHwDfdfgvH15UHyRHT6 vcTZVdo0d+U5ySdN726Sh3r7MJTbLQcgAVzB6LECNiw1RSExwISriKboF/j6qphy XL0D06mH+lAH4C9hnPpZhZ//SESZecujp06jxuBm1f9474bOCwR1Arz3e8iMXHCh GZMjTWsUN55XwnwcZCLvhepf0CJZRF8+fKSXyjd1NptZznHTGoaGhBvIBZzxjBZj BYi83owTSntYCH5s56AA/niv8LKJatmEnHoqi4gX+SKunwO0DkMCBnjVLQIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFB+elchAvAQ/G5CTkOQlZ6ld90/4MB8GA1UdIwQY MBaAFGp5jw/k9N/9/tLI5i0jVDD0k3fNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMt NzdjZjgxMDQxMDgzLzEvSDU2VnlFQzhCRDhia0pPUTVDVm5xVjMzVF9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMtNzdjZjgxMDQxMDgz LzEvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTAtBAIAATAnAwQAW+x0MAsD AwC52QMEALnZAjAMAwQHufaAAwQAufaCAwQAwWmGMBQEAgACMA4DBQEqC8BAAwUD Kg2JgDANBgkqhkiG9w0BAQsFAAOCAQEABMaYLtqHlJjBsQdBXsXup4msloR2Rr2I zypCkDE19dAZIna/x3ScaOAuvirhhWdB0PIU3D4zS4uiiDby/mnbsx1WSSz4nlRD wRQodUScClxwnsmHnE0YqjvJTwYK7ZpYKtESkfNwE6HtC/y51iJOtnQ4AHVEmWcB AMXzNoCbJiZ30e41hzkc1W0535nF7jDKE15J24WwPAnZfC881xPP74mVhFBQ6Yj0 jG4hSPi1bMKL+EQ8G6GR8Qa8QcqRQi68C71b69P/i0UZOApnZZ5gLJyIywGVkn9q GbYIj3cySg+dKG51QUEV6W80cY9vCWKUAgBi5ZdQmPnsZcJImiFhKQ== -----END CERTIFICATE-----Generated at Mon Jan 26 19:41:57 2026 by rpki-client