This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/H6EpcU26fmIrsGo3zJJyDzUbvzY.roa File: H6EpcU26fmIrsGo3zJJyDzUbvzY.roa (raw, json) Hash identifier: Lh/TLP8mmNx+QdZ5blWIekKDQkvQmtpVIjEeBx6UXlw= Subject key identifier: 1F:A1:29:71:4D:BA:7E:62:2B:B0:6A:37:CC:92:72:0F:35:1B:BF:36 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA754559ABA2E360229AA65831611DE Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/H6EpcU26fmIrsGo3zJJyDzUbvzY.roa Signing time: Fri 02 Jan 2026 12:20:53 +0000 ROA not before: Fri 02 Jan 2026 12:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6828 IP address blocks: 212.220.222.0/23 maxlen: 23 212.220.222.0/24 maxlen: 24 212.220.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:54:55:9a:ba:2e:36:02:29:aa:65:83:16:11:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fa129714dba7e622bb06a37cc92720f351bbf36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2c:8b:e1:43:1d:68:ea:37:59:94:62:8b:15: 5f:f0:10:13:7d:44:00:2d:46:cb:b0:a5:e8:0a:22: a9:8c:d1:e9:9e:78:ae:51:f3:0c:37:ce:d0:cf:a7: ee:89:a5:b1:e3:32:c1:05:ed:21:88:7f:16:f3:c9: 4e:2f:83:66:3e:ba:8c:36:e1:a0:21:4c:0c:13:08: 40:34:c3:a7:3e:8b:4e:92:b1:d1:71:36:d5:eb:f8: 4a:c5:89:a6:e7:e7:97:30:07:b6:a0:ca:93:aa:04: a9:2e:43:dc:71:ac:9d:a8:4b:90:97:a6:2c:78:bc: cc:16:51:ea:24:ee:0b:89:1d:6e:20:23:4c:70:f4: ab:af:09:fa:51:47:22:4d:41:7b:75:83:b5:83:10: cc:19:73:2d:88:95:79:f3:cc:0f:69:38:b1:e6:66: 5d:e3:7f:10:ff:8c:7b:c3:61:9f:01:8f:4f:eb:e6: 6a:79:67:2b:f4:7e:6f:81:70:43:8b:99:2b:b0:af: 40:64:18:e6:20:c7:86:6f:a8:88:5a:69:52:35:3a: a9:79:05:95:6e:81:62:75:c5:af:69:eb:40:b0:8f: b5:ba:b5:5f:d5:fb:20:f1:87:b1:e8:0e:b6:64:ab: 90:a6:32:22:36:c8:dc:21:28:70:ed:3b:c7:1b:58: dc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A1:29:71:4D:BA:7E:62:2B:B0:6A:37:CC:92:72:0F:35:1B:BF:36 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/H6EpcU26fmIrsGo3zJJyDzUbvzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.220.222.0/23 Signature Algorithm: sha256WithRSAEncryption 49:2e:c2:e1:8d:f9:96:59:c9:38:68:c5:07:1d:5c:c0:9d:9f: 76:41:b1:d4:22:db:72:41:4c:91:6c:cf:82:0a:dd:43:13:1f: f3:83:14:4a:82:a9:48:4a:50:b3:10:58:62:9e:7c:27:12:11: 7f:32:e9:57:27:c9:74:ee:a3:b3:51:25:c4:3c:b4:4f:19:57: 5c:5d:59:fc:69:51:72:a8:73:9a:0b:92:76:87:8f:96:61:a0: a6:8a:f1:7c:3f:76:cf:b5:81:10:fc:8c:23:4e:f5:5d:bd:96: 36:27:0d:20:dd:11:46:8d:ef:4b:74:39:ff:35:ac:a8:2a:72: 19:7a:dd:3e:17:8b:1e:02:d7:74:ac:57:bd:4d:2e:5f:ae:80: 60:9e:fd:d5:0a:c7:35:e0:77:c3:f3:77:e3:d4:23:b0:6c:b1: 21:4b:cb:20:44:8b:a0:18:97:ce:5b:8e:b4:03:d9:0a:2a:10: 5e:c0:fc:4f:6e:b5:c3:44:e8:26:f6:5b:71:f1:86:84:35:7d: 26:6f:61:60:ed:e6:24:08:ee:ff:83:c4:d5:6d:af:63:38:93: e7:9d:e3:1b:48:a2:11:b9:aa:e5:dd:e3:9b:86:b2:3b:75:87: 00:c3:87:de:7d:0f:26:d5:e1:5c:f4:b1:91:7b:13:ed:da:97: d1:0a:c8:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p1RVmrouNgIpqmWDFhHeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmExMjk3MTRkYmE3ZTYyMmJiMDZhMzdjYzkyNzIwZjM1MWJiZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiyL4UMdaOo3WZRiixVf8BATfUQA LUbLsKXoCiKpjNHpnniuUfMMN87Qz6fuiaWx4zLBBe0hiH8W88lOL4NmPrqMNuGg IUwMEwhANMOnPotOkrHRcTbV6/hKxYmm5+eXMAe2oMqTqgSpLkPccaydqEuQl6Ys eLzMFlHqJO4LiR1uICNMcPSrrwn6UUciTUF7dYO1gxDMGXMtiJV588wPaTix5mZd 438Q/4x7w2GfAY9P6+ZqeWcr9H5vgXBDi5krsK9AZBjmIMeGb6iIWmlSNTqpeQWV boFidcWvaetAsI+1urVf1fsg8Yex6A62ZKuQpjIiNsjcIShw7TvHG1jczQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB+hKXFNun5iK7BqN8yScg81G782MB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvSDZFcGNVMjZmbUlyc0dvM3pKSnlEelVidnpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1NzeMA0G CSqGSIb3DQEBCwUAA4IBAQBJLsLhjfmWWck4aMUHHVzAnZ92QbHUIttyQUyRbM+C Ct1DEx/zgxRKgqlISlCzEFhinnwnEhF/MulXJ8l07qOzUSXEPLRPGVdcXVn8aVFy qHOaC5J2h4+WYaCmivF8P3bPtYEQ/IwjTvVdvZY2Jw0g3RFGje9LdDn/NayoKnIZ et0+F4seAtd0rFe9TS5froBgnv3VCsc14HfD83fj1COwbLEhS8sgRIugGJfOW460 A9kKKhBewPxPbrXDROgm9ltx8YaENX0mb2Fg7eYkCO7/g8TVba9jOJPnneMbSKIR uarl3eObhrI7dYcAw4fefQ8m1eFc9LGRexPt2pfRCsii -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:14 2026 by rpki-client