This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/hMll936y-VnIGyKFpI9W4TyHMFI.roa File: hMll936y-VnIGyKFpI9W4TyHMFI.roa (raw, json) Hash identifier: zp5ARgBN8QflvaVAJ9nRhStFHBsPVoAGgxuH0fJrslA= Subject key identifier: 84:C9:65:F7:7E:B2:F9:59:C8:1B:22:85:A4:8F:56:E1:3C:87:30:52 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F1447E337A537EB0AE55875BE339ECE Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/hMll936y-VnIGyKFpI9W4TyHMFI.roa Signing time: Fri 02 Jan 2026 14:19:54 +0000 ROA not before: Fri 02 Jan 2026 14:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43581 IP address blocks: 147.45.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:47:e3:37:a5:37:eb:0a:e5:58:75:be:33:9e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84c965f77eb2f959c81b2285a48f56e13c873052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1d:eb:2a:22:ab:b8:85:cf:56:bc:8f:b3:06: ee:84:0c:96:ab:00:99:a7:96:47:72:83:53:3f:35: c8:3b:c2:60:51:05:0f:13:60:4a:05:ea:20:38:11: 52:3d:6c:be:38:ca:aa:b8:7e:a3:16:09:de:a5:90: 7d:b6:68:3f:4b:70:1b:39:a8:eb:f6:c3:50:6c:5e: 38:66:76:6e:44:3d:ea:56:01:2b:87:a6:2b:bc:5b: 53:33:85:28:22:d0:30:0c:87:e8:51:23:ad:5a:46: a1:0d:1b:69:41:04:e5:39:b9:2a:f3:8f:45:ab:9b: f3:1b:83:bf:ac:b2:b7:69:86:d7:64:e0:f9:c5:cd: c2:df:38:c5:7c:13:94:53:69:25:d6:81:76:4c:85: 2f:9f:db:e2:e1:0d:00:a6:0f:4c:0b:25:ab:fe:3d: 15:59:0e:b1:1f:82:47:ba:bf:85:7c:a2:86:8a:56: e2:f4:0f:be:61:bc:e1:40:4f:27:10:d9:79:ae:ff: 83:a6:31:44:90:e5:db:dd:83:a6:1e:62:00:38:67: a0:e1:6c:bb:e4:25:8f:b8:77:04:fa:a2:7c:d2:08: 74:d1:eb:44:12:7e:ba:11:ff:2d:1d:64:d3:2f:37: c3:eb:c3:3b:46:d5:44:2a:5f:b4:af:3f:15:a5:70: 51:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C9:65:F7:7E:B2:F9:59:C8:1B:22:85:A4:8F:56:E1:3C:87:30:52 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/hMll936y-VnIGyKFpI9W4TyHMFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.117.0/24 Signature Algorithm: sha256WithRSAEncryption 09:64:0c:5f:4b:36:10:11:ed:44:52:ff:35:e3:ad:5d:c2:46: c8:9c:84:23:a5:b3:bd:10:89:b6:b5:18:a2:82:bf:17:49:e0: 92:a0:61:99:8b:9e:fa:6a:b1:df:1f:62:e2:fd:7b:62:78:42: 93:40:26:89:21:23:27:9e:48:c0:d7:7d:14:83:34:45:c0:90: 2e:5b:2e:b2:17:a4:29:c4:cb:7a:90:4f:32:05:24:c5:d5:71: 7e:62:2c:10:ef:c2:a7:0c:c8:2f:7a:cf:2b:c5:99:92:d6:07: 5c:19:17:1b:05:e6:ee:70:c5:02:b8:fb:da:80:ef:44:b9:6e: 94:05:15:ec:a5:08:af:39:95:1c:d1:44:26:1d:2b:f7:05:9b: e0:06:1d:1a:b6:98:37:de:c2:24:9f:ea:61:26:a1:82:a8:ed: 91:d0:f3:50:f2:2a:54:55:1a:02:92:df:fc:56:c7:b9:9f:42: 9b:db:94:77:c0:8f:4c:81:a7:be:a2:3e:c2:84:d5:5c:f1:92: 7c:18:7f:37:14:be:41:10:67:57:79:ad:5f:e5:c1:92:3f:81: 46:41:69:7e:ad:b0:d6:8f:2e:70:ab:41:a9:a6:09:4c:be:b2: 67:b6:1b:e4:50:14:93:3a:18:da:75:4d:f2:aa:85:42:72:b6: 1e:bc:1c:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FEfjN6U36wrlWHW+M57OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGM5NjVmNzdlYjJmOTU5YzgxYjIyODVhNDhmNTZlMTNjODczMDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB3rKiKruIXPVryPswbuhAyWqwCZ p5ZHcoNTPzXIO8JgUQUPE2BKBeogOBFSPWy+OMqquH6jFgnepZB9tmg/S3AbOajr 9sNQbF44ZnZuRD3qVgErh6YrvFtTM4UoItAwDIfoUSOtWkahDRtpQQTlObkq849F q5vzG4O/rLK3aYbXZOD5xc3C3zjFfBOUU2kl1oF2TIUvn9vi4Q0Apg9MCyWr/j0V WQ6xH4JHur+FfKKGilbi9A++YbzhQE8nENl5rv+DpjFEkOXb3YOmHmIAOGeg4Wy7 5CWPuHcE+qJ80gh00etEEn66Ef8tHWTTLzfD68M7RtVEKl+0rz8VpXBRCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFITJZfd+svlZyBsihaSPVuE8hzBSMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvaE1sbDkzNnktVm5JR3lLRnBJOVc0VHlITUZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAky11MA0G CSqGSIb3DQEBCwUAA4IBAQAJZAxfSzYQEe1EUv81461dwkbInIQjpbO9EIm2tRii gr8XSeCSoGGZi576arHfH2Li/XtieEKTQCaJISMnnkjA130UgzRFwJAuWy6yF6Qp xMt6kE8yBSTF1XF+YiwQ78KnDMgves8rxZmS1gdcGRcbBebucMUCuPvagO9EuW6U BRXspQivOZUc0UQmHSv3BZvgBh0atpg33sIkn+phJqGCqO2R0PNQ8ipUVRoCkt/8 Vse5n0Kb25R3wI9Mgae+oj7ChNVc8ZJ8GH83FL5BEGdXea1f5cGSP4FGQWl+rbDW jy5wq0GppglMvrJnthvkUBSTOhjadU3yqoVCcrYevBzE -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:46 2026 by rpki-client