This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/H4TlFSW9YaEptj2rG_zdsa63qRU.roa File: H4TlFSW9YaEptj2rG_zdsa63qRU.roa (raw, json) Hash identifier: kkvqIvLa9fbZkZn/+ru+xDu0mvZ+FojOrOmiey6ddzc= Subject key identifier: 1F:84:E5:15:25:BD:61:A1:29:B6:3D:AB:1B:FC:DD:B1:AE:B7:A9:15 Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257 Certificate serial: 019B77596DCD05A406475985F38BD1D3511C Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/H4TlFSW9YaEptj2rG_zdsa63qRU.roa Signing time: Thu 01 Jan 2026 02:18:28 +0000 ROA not before: Thu 01 Jan 2026 02:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7155 IP address blocks: 5.8.184.0/21 maxlen: 24 5.152.168.0/21 maxlen: 24 37.1.176.0/21 maxlen: 24 185.15.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6d:cd:05:a4:06:47:59:85:f3:8b:d1:d3:51:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257 Validity Not Before: Jan 1 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f84e51525bd61a129b63dab1bfcddb1aeb7a915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:05:f4:4f:64:c4:9e:05:d3:40:1c:a9:35:e1: 5e:bc:37:ed:a9:6a:8b:67:eb:35:8f:3e:17:c2:9b: 42:52:e0:93:0e:3d:f2:a4:4d:b7:fc:62:83:11:60: 9e:70:6f:bc:58:c3:fc:6e:c8:ba:32:3f:5d:a9:ed: e2:85:07:3b:b1:50:9b:cd:f3:95:b3:4e:44:1b:60: de:06:3d:44:68:a0:20:0d:bf:9c:74:1c:98:d0:e6: b5:3b:50:ec:39:8c:2a:a8:b1:3f:ae:c7:c1:7e:94: 22:2b:ff:3b:6a:61:56:48:d1:e2:f3:e7:20:f5:da: 3c:f8:c0:bb:67:59:f2:b6:ab:72:00:7d:5c:26:60: c1:40:c8:b8:1a:c5:96:06:8f:b0:64:fe:fa:4e:85: 14:20:9d:a1:59:b5:1e:78:4f:e3:07:bd:3f:4e:f9: a3:4e:52:00:1a:c9:ab:7a:cc:19:f7:e7:c2:ac:58: f7:5a:b0:79:07:93:eb:ae:fe:0d:01:9f:7b:6b:e0: ff:55:ae:73:35:05:19:97:4a:de:ed:dc:12:24:72: 98:16:bd:8c:d2:fa:02:84:38:c4:96:b3:8b:88:92: d4:a0:e5:14:4f:5e:55:6e:13:72:63:15:a6:fc:39: 6f:eb:5e:0d:03:02:98:d3:5b:8d:60:72:12:61:e7: 62:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:84:E5:15:25:BD:61:A1:29:B6:3D:AB:1B:FC:DD:B1:AE:B7:A9:15 X509v3 Authority Key Identifier: keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/H4TlFSW9YaEptj2rG_zdsa63qRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.184.0/21 5.152.168.0/21 37.1.176.0/21 185.15.100.0/22 Signature Algorithm: sha256WithRSAEncryption 54:e8:53:66:1e:44:72:df:5d:86:c5:18:35:5d:cc:ac:72:af: 6d:80:2f:43:8a:1e:ac:cf:fd:a1:c5:2e:44:14:bd:86:ef:9f: 2d:f1:f2:56:85:d0:fb:0c:3a:88:54:6c:4c:bf:24:08:b7:a8: a1:fe:9f:c1:fa:09:c1:1e:f3:fe:dd:2f:90:b6:55:2e:0d:ed: 86:5f:ab:e2:d7:9a:51:ad:8b:e9:47:ba:40:80:e6:58:48:10: e6:8d:64:af:34:a8:af:68:61:e8:ad:95:66:46:a3:e2:7b:33: 38:96:15:0b:55:5b:9c:ff:fc:53:f3:2d:41:5a:01:31:8e:b0: 19:6a:50:7e:61:1c:d3:0c:68:b7:03:b1:be:37:27:30:e2:95: 99:5f:e4:6d:e2:09:e1:3c:5e:b4:8a:89:6f:ec:29:bb:0e:2d: 1d:0b:1c:d3:2a:59:58:f3:28:33:17:00:e5:5e:7a:e4:b6:6a: 0f:c7:41:27:76:0b:ed:82:e2:b9:74:00:25:82:d4:7d:95:4e: c7:3d:7c:20:30:c5:b7:d8:60:54:d8:a7:ab:e1:47:49:8e:ad: d1:dd:67:b1:75:15:dc:8f:d7:10:49:22:b6:f1:ae:30:ae:71: 1c:5e:cc:e6:f7:f7:92:d0:e3:9a:aa:d6:cf:b4:99:00:34:fe: 1f:f6:31:47 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WW3NBaQGR1mF84vR01EcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTg5YjY3YzY2ZGViZjVkZWQzZjI4ODBiYjQ5NDFkMzA0 MTEyNTcwHhcNMjYwMTAxMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjg0ZTUxNTI1YmQ2MWExMjliNjNkYWIxYmZjZGRiMWFlYjdhOTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQX0T2TEngXTQBypNeFevDftqWqL Z+s1jz4XwptCUuCTDj3ypE23/GKDEWCecG+8WMP8bsi6Mj9dqe3ihQc7sVCbzfOV s05EG2DeBj1EaKAgDb+cdByY0Oa1O1DsOYwqqLE/rsfBfpQiK/87amFWSNHi8+cg 9do8+MC7Z1nytqtyAH1cJmDBQMi4GsWWBo+wZP76ToUUIJ2hWbUeeE/jB70/Tvmj TlIAGsmreswZ9+fCrFj3WrB5B5Prrv4NAZ97a+D/Va5zNQUZl0re7dwSJHKYFr2M 0voChDjElrOLiJLUoOUUT15VbhNyYxWm/Dlv614NAwKY01uNYHISYedikQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFB+E5RUlvWGhKbY9qxv83bGut6kVMB8GA1UdIwQY MBaAFLGom2fGbev13tPyiAu0lB0wQRJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTct MjEwMGJmMGYxNDBhLzEvSDRUbEZTVzlZYUVwdGoyckdfemRzYTYzcVJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTctMjEwMGJmMGYxNDBh LzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDBQi4AwQD BZioAwQDJQGwAwQCuQ9kMA0GCSqGSIb3DQEBCwUAA4IBAQBU6FNmHkRy312GxRg1 Xcyscq9tgC9Dih6sz/2hxS5EFL2G758t8fJWhdD7DDqIVGxMvyQIt6ih/p/B+gnB HvP+3S+QtlUuDe2GX6vi15pRrYvpR7pAgOZYSBDmjWSvNKivaGHorZVmRqPiezM4 lhULVVuc//xT8y1BWgExjrAZalB+YRzTDGi3A7G+Nycw4pWZX+Rt4gnhPF60iolv 7Cm7Di0dCxzTKllY8ygzFwDlXnrktmoPx0EndgvtguK5dAAlgtR9lU7HPXwgMMW3 2GBU2Ker4UdJjq3R3WexdRXcj9cQSSK28a4wrnEcXszm9/eS0OOaqtbPtJkANP4f 9jFH -----END CERTIFICATE-----Generated at Mon Jan 12 00:48:09 2026 by rpki-client