This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/H5JHH1DLge4h7pfmCgr_cVf_IBQ.roa File: H5JHH1DLge4h7pfmCgr_cVf_IBQ.roa (raw, json) Hash identifier: 6AjKnUFFBVJ7dfd01u9qH9oqcCZAX9GaVjPYeCYDJQA= Subject key identifier: 1F:92:47:1F:50:CB:81:EE:21:EE:97:E6:0A:0A:FF:71:57:FF:20:14 Certificate issuer: /CN=b85631108257b71fe330bc98b3abc146c95b88e0 Certificate serial: 019B7AC8F278CA9EA3BF54D2D7F7D086B906 Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/H5JHH1DLge4h7pfmCgr_cVf_IBQ.roa Signing time: Thu 01 Jan 2026 18:19:08 +0000 ROA not before: Thu 01 Jan 2026 18:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206757 IP address blocks: 45.147.16.0/22 maxlen: 22 45.147.16.0/24 maxlen: 24 45.147.17.0/24 maxlen: 24 45.147.18.0/24 maxlen: 24 45.147.19.0/24 maxlen: 24 116.204.252.0/23 maxlen: 23 185.218.236.0/22 maxlen: 22 185.218.236.0/24 maxlen: 24 185.218.237.0/24 maxlen: 24 185.218.238.0/24 maxlen: 24 185.218.239.0/24 maxlen: 24 193.16.151.0/24 maxlen: 24 193.16.156.0/24 maxlen: 24 195.10.218.0/24 maxlen: 24 201.148.168.0/24 maxlen: 24 201.148.169.0/24 maxlen: 24 201.148.170.0/24 maxlen: 24 201.148.171.0/24 maxlen: 24 203.78.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 09:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:f2:78:ca:9e:a3:bf:54:d2:d7:f7:d0:86:b9:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0 Validity Not Before: Jan 1 18:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f92471f50cb81ee21ee97e60a0aff7157ff2014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d3:ec:55:da:4d:0e:00:83:50:a0:14:e3:d7: a2:66:24:32:5b:3a:f2:06:25:9a:ba:8a:3b:95:b8: 52:2b:17:12:08:17:50:cb:7e:e7:a4:36:92:64:f3: 28:77:05:49:8c:af:0c:a1:dc:ef:80:cb:67:a4:8b: 3f:ed:a9:10:0f:e2:d4:9e:13:57:59:4f:14:1a:cb: d6:fc:71:8b:0b:b6:c0:a1:0f:93:3f:1a:01:6b:cb: e4:1e:2d:16:eb:06:5a:01:f1:f0:64:aa:ca:d7:db: fb:f1:c0:71:cc:9a:44:97:0a:4c:c0:0e:54:0e:e6: 66:a6:f1:04:89:1d:65:ce:88:96:51:80:12:6e:42: d9:7e:c6:76:6b:08:9b:4a:d3:75:e7:ea:94:85:95: 0e:2b:44:6e:b1:f2:8b:8f:40:21:25:35:33:20:6d: 9e:da:f5:a4:49:6d:72:e9:77:e1:fd:60:8e:9b:ff: f0:5a:f5:62:30:cc:c9:fa:05:09:8b:83:9a:45:9b: 6f:a6:b8:3c:ce:d0:38:1e:94:b6:a3:4d:63:be:f7: 86:5b:ee:ab:f2:6b:08:b5:6a:39:ba:2a:81:d4:b0: 1c:a5:65:5f:45:7e:03:b8:f0:4f:33:f4:90:ed:49: af:44:d8:e1:0f:99:28:5f:f7:bb:03:c9:34:5f:98: 16:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:92:47:1F:50:CB:81:EE:21:EE:97:E6:0A:0A:FF:71:57:FF:20:14 X509v3 Authority Key Identifier: keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/H5JHH1DLge4h7pfmCgr_cVf_IBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.16.0/22 116.204.252.0/23 185.218.236.0/22 193.16.151.0/24 193.16.156.0/24 195.10.218.0/24 201.148.168.0/22 203.78.160.0/24 Signature Algorithm: sha256WithRSAEncryption 01:c6:04:4b:7c:7b:cc:f5:8f:95:8b:9c:95:18:ff:b8:8a:59: fc:ee:d3:af:f6:58:48:07:f5:f0:b8:e4:60:86:03:12:71:d1: 9d:17:a7:f7:9f:f7:fd:c5:05:a5:30:11:54:34:df:ea:8e:3f: 54:7b:26:7e:9f:f3:c0:14:ed:f1:8f:f5:8b:fd:89:2d:f8:67: eb:8e:9f:d6:95:7e:c8:e0:cb:80:99:29:08:70:64:a1:26:0d: 49:c9:90:1a:51:c4:81:9c:f0:9d:20:a2:12:44:01:b6:f4:28: f3:50:25:a6:e2:71:91:a5:d1:bc:c9:31:49:55:50:ed:cf:49: 75:cc:aa:41:f3:3b:40:a0:16:11:b4:c0:d8:a2:3b:b7:33:91: 12:32:db:ac:ef:76:a9:ff:41:4a:10:1a:86:ef:a6:74:ee:51: c2:60:72:59:09:d3:12:cd:3e:2b:00:1a:65:f8:b1:1e:af:86: 13:d7:14:94:16:0a:d0:ed:82:d7:3a:fc:97:15:7a:ea:6d:6a: 35:af:b4:78:a9:bc:52:ed:49:f4:ee:5f:08:20:31:87:bb:73: 08:7a:b6:d9:63:b7:90:b5:8e:f2:37:32:30:0a:56:98:ae:f8: 8a:5c:fc:e1:40:98:9c:3a:24:1d:19:a5:ce:3b:1b:ae:ac:56: c9:d5:ba:5e -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt6yPJ4yp6jv1TS1/fQhrkGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NTYzMTEwODI1N2I3MWZlMzMwYmM5OGIzYWJjMTQ2Yzk1 Yjg4ZTAwHhcNMjYwMTAxMTgxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjkyNDcxZjUwY2I4MWVlMjFlZTk3ZTYwYTBhZmY3MTU3ZmYyMDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNPsVdpNDgCDUKAU49eiZiQyWzry BiWauoo7lbhSKxcSCBdQy37npDaSZPModwVJjK8ModzvgMtnpIs/7akQD+LUnhNX WU8UGsvW/HGLC7bAoQ+TPxoBa8vkHi0W6wZaAfHwZKrK19v78cBxzJpElwpMwA5U DuZmpvEEiR1lzoiWUYASbkLZfsZ2awibStN15+qUhZUOK0RusfKLj0AhJTUzIG2e 2vWkSW1y6Xfh/WCOm//wWvViMMzJ+gUJi4OaRZtvprg8ztA4HpS2o01jvveGW+6r 8msItWo5uiqB1LAcpWVfRX4DuPBPM/SQ7UmvRNjhD5koX/e7A8k0X5gWAQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFB+SRx9Qy4HuIe6X5goK/3FX/yAUMB8GA1UdIwQY MBaAFLhWMRCCV7cf4zC8mLOrwUbJW4jgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81NDg3ZGUtNjc4NC00MDJhLTg3YWEt YTJlY2JhOGU0OTlkLzEvSDVKSEgxRExnZTRoN3BmbUNncl9jVmZfSUJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81NDg3ZGUtNjc4NC00MDJhLTg3YWEtYTJlY2JhOGU0OTlk LzEvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCLZMQAwQB dMz8AwQCudrsAwQAwRCXAwQAwRCcAwQAwwraAwQCyZSoAwQAy06gMA0GCSqGSIb3 DQEBCwUAA4IBAQABxgRLfHvM9Y+Vi5yVGP+4iln87tOv9lhIB/XwuORghgMScdGd F6f3n/f9xQWlMBFUNN/qjj9UeyZ+n/PAFO3xj/WL/Ykt+Gfrjp/WlX7I4MuAmSkI cGShJg1JyZAaUcSBnPCdIKISRAG29CjzUCWm4nGRpdG8yTFJVVDtz0l1zKpB8ztA oBYRtMDYoju3M5ESMtus73ap/0FKEBqG76Z07lHCYHJZCdMSzT4rABpl+LEer4YT 1xSUFgrQ7YLXOvyXFXrqbWo1r7R4qbxS7Un07l8IIDGHu3MIerbZY7eQtY7yNzIw ClaYrviKXPzhQJicOiQdGaXOOxuurFbJ1bpe -----END CERTIFICATE-----Generated at Sat Jan 10 18:08:14 2026 by rpki-client