This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/HvvYce2lyVlZo0K5qONasUupbiM.roa File: HvvYce2lyVlZo0K5qONasUupbiM.roa (raw, json) Hash identifier: kk/JmVvld/s18l7uimHCEPJ58RJkP9Sl4O6TUSKa5vQ= Subject key identifier: 1E:FB:D8:71:ED:A5:C9:59:59:A3:42:B9:A8:E3:5A:B1:4B:A9:6E:23 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B7F8384C8B49B51D286764878C34D5139 Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/HvvYce2lyVlZo0K5qONasUupbiM.roa Signing time: Fri 02 Jan 2026 16:21:24 +0000 ROA not before: Fri 02 Jan 2026 16:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26737 IP address blocks: 45.65.114.0/24 maxlen: 24 45.65.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:84:c8:b4:9b:51:d2:86:76:48:78:c3:4d:51:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 2 16:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1efbd871eda5c95959a342b9a8e35ab14ba96e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b4:3a:55:30:1d:9d:c7:0d:80:dc:03:6c:bb: 3d:0d:0d:93:82:a8:67:62:a8:5b:bf:d0:1f:47:d0: cd:07:39:8e:8b:08:13:01:d8:c2:64:e8:35:25:eb: 30:cc:2f:30:47:23:ce:56:c5:c4:41:31:3e:5d:17: b4:9f:6b:d8:b0:6d:18:f7:49:fc:ef:dc:6b:1b:80: 9c:23:e1:a2:5b:37:77:1a:12:82:c3:7c:c4:d2:e4: 03:75:6b:87:7b:44:7b:4b:6a:79:95:86:60:9a:13: 8d:ac:ba:92:5e:89:73:6f:83:45:e0:a6:d8:fd:8b: 86:40:51:c3:02:22:2c:75:a5:b0:7e:7c:b5:3c:5d: 15:3a:e8:42:dd:42:4f:a2:48:ff:f0:95:bb:9d:c9: ab:66:52:39:3c:60:ec:f9:2d:e3:b4:2a:db:5c:a2: dc:98:6b:2b:0b:30:10:80:84:5f:d2:46:1a:df:1a: e1:36:ba:b0:7f:7a:a1:0e:6e:d5:70:ce:a1:de:ac: e4:c7:28:f8:fa:b6:92:11:e9:25:8f:4c:15:62:78: ad:af:92:df:7f:f1:7c:2f:b8:42:3e:fa:ba:02:fb: 4d:1f:1a:78:40:4a:78:4a:74:f3:7d:bf:b4:25:62: 5e:08:fa:01:76:57:db:72:f4:a9:e4:c2:f8:6e:2f: de:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FB:D8:71:ED:A5:C9:59:59:A3:42:B9:A8:E3:5A:B1:4B:A9:6E:23 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/HvvYce2lyVlZo0K5qONasUupbiM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.114.0/23 Signature Algorithm: sha256WithRSAEncryption 31:99:98:46:d7:4a:90:32:c7:a4:2d:c2:58:7f:a2:1d:8a:71: d1:5c:e7:52:73:16:d2:61:30:23:c6:ed:d4:12:b7:8d:97:43: 44:b2:d4:e9:15:48:3f:3f:0d:8e:7a:78:2b:03:41:c5:d7:fb: 7d:45:a1:bc:63:17:22:cb:31:a5:97:84:7a:5e:de:13:ab:70: c8:64:d7:01:77:6f:8c:ab:1e:74:c6:d9:a4:88:6b:af:6b:00: 39:36:b0:b9:d9:4e:4c:81:18:ae:3d:49:4c:a4:a7:15:d1:8c: 12:84:9a:96:81:10:cc:05:8b:af:2e:8f:3e:bc:c2:81:9c:99: 05:54:50:a0:aa:bd:e8:7e:36:bd:f5:55:ee:ba:0d:7b:71:7a: bd:4d:c9:c9:d2:ac:0f:22:da:a4:3b:cd:61:83:59:96:33:e2: 2d:44:52:ab:2b:61:67:ee:86:28:29:bc:5c:e2:6b:b9:f9:91: c0:26:8a:f0:b4:d2:75:6f:0a:61:be:40:7c:f5:1c:0c:85:4c: ef:c6:f2:5c:94:d4:54:95:65:77:77:e7:4a:a6:4d:4d:c9:09: e1:38:74:fb:38:68:2d:1c:e8:d5:7d:23:84:99:16:a8:90:68: f7:03:cc:06:5e:1a:98:2b:45:89:80:4b:f1:57:61:87:9b:de: 20:b0:80:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g4TItJtR0oZ2SHjDTVE5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTAyMTYyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWZiZDg3MWVkYTVjOTU5NTlhMzQyYjlhOGUzNWFiMTRiYTk2ZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLQ6VTAdnccNgNwDbLs9DQ2Tgqhn Yqhbv9AfR9DNBzmOiwgTAdjCZOg1JeswzC8wRyPOVsXEQTE+XRe0n2vYsG0Y90n8 79xrG4CcI+GiWzd3GhKCw3zE0uQDdWuHe0R7S2p5lYZgmhONrLqSXolzb4NF4KbY /YuGQFHDAiIsdaWwfny1PF0VOuhC3UJPokj/8JW7ncmrZlI5PGDs+S3jtCrbXKLc mGsrCzAQgIRf0kYa3xrhNrqwf3qhDm7VcM6h3qzkxyj4+raSEeklj0wVYnitr5Lf f/F8L7hCPvq6AvtNHxp4QEp4SnTzfb+0JWJeCPoBdlfbcvSp5ML4bi/eawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB772HHtpclZWaNCuajjWrFLqW4jMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvSHZ2WWNlMmx5VmxabzBLNXFPTmFzVXVwYmlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLUFyMA0G CSqGSIb3DQEBCwUAA4IBAQAxmZhG10qQMsekLcJYf6IdinHRXOdScxbSYTAjxu3U EreNl0NEstTpFUg/Pw2OengrA0HF1/t9RaG8YxciyzGll4R6Xt4Tq3DIZNcBd2+M qx50xtmkiGuvawA5NrC52U5MgRiuPUlMpKcV0YwShJqWgRDMBYuvLo8+vMKBnJkF VFCgqr3ofja99VXuug17cXq9TcnJ0qwPItqkO81hg1mWM+ItRFKrK2Fn7oYoKbxc 4mu5+ZHAJorwtNJ1bwphvkB89RwMhUzvxvJclNRUlWV3d+dKpk1NyQnhOHT7OGgt HOjVfSOEmRaokGj3A8wGXhqYK0WJgEvxV2GHm94gsIB9 -----END CERTIFICATE-----Generated at Tue Jan 20 02:50:00 2026 by rpki-client