This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/hjLY93sTfKVGtH04a9-qkylCHmE.roa File: hjLY93sTfKVGtH04a9-qkylCHmE.roa (raw, json) Hash identifier: /mrPE+eKM9yKGu2TBD1xblJ2DuTRrBr+lNyxB56PAiE= Subject key identifier: 86:32:D8:F7:7B:13:7C:A5:46:B4:7D:38:6B:DF:AA:93:29:42:1E:61 Certificate issuer: /CN=97893182b16718983bc008c8d087f8ddca3d8614 Certificate serial: 019B7A5AD6E06BA6613DF8FF4C7B8C010832 Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/hjLY93sTfKVGtH04a9-qkylCHmE.roa Signing time: Thu 01 Jan 2026 16:18:52 +0000 ROA not before: Thu 01 Jan 2026 16:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.177.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d6:e0:6b:a6:61:3d:f8:ff:4c:7b:8c:01:08:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614 Validity Not Before: Jan 1 16:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8632d8f77b137ca546b47d386bdfaa9329421e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2d:9e:bf:0e:99:37:ee:d9:bc:96:37:42:56: 78:33:7c:97:d3:17:c6:24:84:36:b8:ba:74:b2:3b: 01:23:af:a1:81:f1:8e:e9:be:13:26:25:ed:e8:df: 43:27:d7:6e:3f:11:25:40:8e:18:be:10:cc:9f:2b: 5e:6c:e6:12:dd:20:e1:b9:4b:ad:78:92:87:36:d2: e7:de:8e:3f:2d:1e:cc:34:4e:9e:a1:ec:70:0a:b0: 3e:28:60:60:8c:dc:83:ff:3e:65:1a:d6:be:09:57: 40:7d:3c:1b:ef:1a:90:82:7f:63:76:8e:35:04:27: fb:14:59:1c:75:dc:89:05:19:ff:e3:d4:dc:b3:62: db:fd:a2:b5:e5:88:e8:47:f5:ca:79:2e:51:c3:fd: cb:f8:76:19:16:02:43:40:27:45:eb:75:93:4c:38: 30:2f:1d:6a:38:75:3e:59:c2:4f:fd:99:6f:07:8f: 45:9b:c1:8a:f6:cc:36:bf:d9:28:e4:85:5d:e7:9e: 45:4e:a0:67:fc:aa:cc:4b:46:45:b9:f6:84:19:59: 24:65:b0:9a:67:f0:ed:1d:8a:2b:7c:3d:0c:12:e7: 20:cf:15:a1:22:8c:0a:5f:23:79:20:63:34:79:31: bd:03:0a:87:3e:89:cc:b3:de:5d:bd:ce:2a:b4:33: 36:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:32:D8:F7:7B:13:7C:A5:46:B4:7D:38:6B:DF:AA:93:29:42:1E:61 X509v3 Authority Key Identifier: keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/hjLY93sTfKVGtH04a9-qkylCHmE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.177.130.0/24 Signature Algorithm: sha256WithRSAEncryption 87:71:8f:bf:cf:7d:c8:01:e1:8b:09:f0:51:2e:7c:63:53:9e: e5:23:43:30:8d:4a:d2:a6:be:ef:89:08:f0:5e:de:3b:25:eb: e4:9e:80:d6:87:97:8d:60:d8:87:1b:a5:55:34:f1:aa:69:29: a7:d2:60:bc:cf:d6:81:dd:6f:33:90:f9:02:83:29:11:97:af: 05:ef:67:84:55:e2:01:20:92:88:b3:8f:4b:74:49:6c:63:cf: 63:b8:bc:99:74:d2:8c:16:0a:b4:2d:51:8a:8a:04:af:b5:96: 30:f9:7b:2e:f4:c3:7a:ed:60:42:a6:ea:1f:ad:5b:39:b4:58: e8:f1:28:f6:1c:eb:28:e1:b8:24:4c:de:19:dd:ff:9f:06:1d: be:6a:d3:bf:ec:f3:f9:a3:51:b1:3f:5f:5e:12:2d:c6:40:8e: f6:57:64:ed:aa:6b:48:09:1d:98:be:bc:e1:2a:93:79:76:d5: a8:e5:0c:42:c5:71:42:73:af:d8:2b:32:4d:08:80:59:3d:15: e4:74:aa:d3:77:44:10:07:db:4f:9e:60:93:89:28:6c:e8:6c: 66:5d:bb:cd:a5:79:f1:24:5b:34:c3:bd:53:b3:2b:b0:38:69: b3:dd:15:e9:23:3f:a0:f3:fc:fa:82:3a:3a:e5:8e:6f:35:e8: 6d:e6:1d:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wtbga6ZhPfj/THuMAQgyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODkzMTgyYjE2NzE4OTgzYmMwMDhjOGQwODdmOGRkY2Ez ZDg2MTQwHhcNMjYwMTAxMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjMyZDhmNzdiMTM3Y2E1NDZiNDdkMzg2YmRmYWE5MzI5NDIxZTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi2evw6ZN+7ZvJY3QlZ4M3yX0xfG JIQ2uLp0sjsBI6+hgfGO6b4TJiXt6N9DJ9duPxElQI4YvhDMnytebOYS3SDhuUut eJKHNtLn3o4/LR7MNE6eoexwCrA+KGBgjNyD/z5lGta+CVdAfTwb7xqQgn9jdo41 BCf7FFkcddyJBRn/49Tcs2Lb/aK15YjoR/XKeS5Rw/3L+HYZFgJDQCdF63WTTDgw Lx1qOHU+WcJP/ZlvB49Fm8GK9sw2v9ko5IVd555FTqBn/KrMS0ZFufaEGVkkZbCa Z/DtHYorfD0MEucgzxWhIowKXyN5IGM0eTG9AwqHPonMs95dvc4qtDM2mQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIYy2Pd7E3ylRrR9OGvfqpMpQh5hMB8GA1UdIwQY MBaAFJeJMYKxZxiYO8AIyNCH+N3KPYYUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xMjAwNDMtMTczMy00YzcyLWFkNDct YmMwZTUxMWMyMGNlLzEvaGpMWTkzc1RmS1ZHdEgwNGE5LXFreWxDSG1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8xMjAwNDMtMTczMy00YzcyLWFkNDctYmMwZTUxMWMyMGNl LzEvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubGCMA0G CSqGSIb3DQEBCwUAA4IBAQCHcY+/z33IAeGLCfBRLnxjU57lI0MwjUrSpr7viQjw Xt47JevknoDWh5eNYNiHG6VVNPGqaSmn0mC8z9aB3W8zkPkCgykRl68F72eEVeIB IJKIs49LdElsY89juLyZdNKMFgq0LVGKigSvtZYw+Xsu9MN67WBCpuofrVs5tFjo 8Sj2HOso4bgkTN4Z3f+fBh2+atO/7PP5o1GxP19eEi3GQI72V2TtqmtICR2Yvrzh KpN5dtWo5QxCxXFCc6/YKzJNCIBZPRXkdKrTd0QQB9tPnmCTiShs6GxmXbvNpXnx JFs0w71TsyuwOGmz3RXpIz+g8/z6gjo65Y5vNeht5h1U -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:35 2026 by rpki-client