This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Hz3_GZtbgtc1gxUVxE9EBySqAI0.roa File: Hz3_GZtbgtc1gxUVxE9EBySqAI0.roa (raw, json) Hash identifier: 70Iwrd/yh1P263P8isG4sHBCROiIXQF1rOERH550hbM= Subject key identifier: 1F:3D:FF:19:9B:5B:82:D7:35:83:15:15:C4:4F:44:07:24:AA:00:8D Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15EADFFD7606C2CF23787CCC19EC92 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Hz3_GZtbgtc1gxUVxE9EBySqAI0.roa Signing time: Fri 02 Jan 2026 14:21:41 +0000 ROA not before: Fri 02 Jan 2026 14:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202656 IP address blocks: 85.209.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ea:df:fd:76:06:c2:cf:23:78:7c:cc:19:ec:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f3dff199b5b82d735831515c44f440724aa008d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:f2:17:1a:81:c4:a6:94:cc:6c:83:df:cc: d2:8b:0a:9c:93:0e:11:4e:b4:ac:aa:01:37:f1:5d: 9b:0e:c0:1c:99:b5:66:93:25:cc:12:d8:1f:f6:b5: bc:71:07:be:33:48:62:10:b2:4b:a1:0e:a6:16:ea: ee:04:7c:6f:3a:4e:f8:7a:05:52:96:44:cc:91:3f: 88:3a:01:a0:e5:81:db:30:3d:07:f0:4e:88:ce:ba: 92:97:4a:34:75:28:b9:7d:b5:be:bd:64:fa:98:ec: fc:81:23:59:d7:a5:67:02:0a:f7:31:c1:8b:5d:24: d9:2c:e6:bc:f0:0f:3c:f6:15:88:f9:de:1c:c7:a3: 1e:a7:67:5b:25:15:c8:a1:cb:fe:9a:35:d8:be:91: df:28:3e:e2:6d:85:93:51:70:0b:48:fd:9e:d1:be: e1:0a:1d:d1:75:96:a9:5d:2d:91:77:fa:c4:de:ed: 15:24:c4:23:e0:44:28:f6:cf:b9:74:1b:34:68:71: b6:b8:38:b3:34:f1:3e:6a:58:38:4d:1d:84:59:d9: 09:c5:cb:c7:e2:16:70:4e:03:b7:f7:a9:b5:36:aa: 2c:a1:3d:29:0f:d8:65:47:02:00:9d:06:51:a1:94: bb:1f:65:a9:36:94:43:f9:35:be:ea:2b:a1:5c:ae: 94:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3D:FF:19:9B:5B:82:D7:35:83:15:15:C4:4F:44:07:24:AA:00:8D X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Hz3_GZtbgtc1gxUVxE9EBySqAI0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.122.0/24 Signature Algorithm: sha256WithRSAEncryption 08:02:da:db:dd:97:e4:ad:63:39:05:c6:6b:58:de:e0:f7:b2: 85:5d:cd:01:5a:4f:f8:68:f5:e0:6f:0f:3f:98:24:59:c1:0b: de:d8:ee:d9:05:f4:af:1d:0c:75:08:ea:59:89:3d:44:bc:53: eb:cb:c9:10:65:80:57:a7:9c:0f:3c:c7:02:6a:6d:0a:05:8f: c9:57:f3:3a:67:65:a2:bc:0d:13:ce:e9:fa:1f:99:8e:af:0e: d4:f1:c8:74:75:ab:ad:12:35:fa:53:78:c1:ad:fa:be:20:ac: 31:1d:94:c4:3c:0b:87:db:c2:92:a5:0b:48:e8:2a:5d:66:38: 7e:1f:ea:84:6b:c7:ca:55:e9:8a:b2:68:5e:5e:be:83:78:d8: 2e:0b:e9:58:45:a7:e9:ab:28:e8:31:ac:4e:85:a9:24:8c:03: c3:94:e8:f4:dc:47:d6:45:de:08:a3:19:49:a8:3b:52:26:e8: 82:e9:86:c9:44:0f:22:31:56:b4:57:81:02:d9:14:8d:de:8b: 16:20:c7:50:6e:4b:f8:85:e9:2e:ad:20:67:c5:54:6b:32:1a: 29:22:10:cf:76:1d:0c:13:67:7f:e4:8c:38:11:fa:e0:18:4e: c0:e9:11:91:30:1a:d7:c4:1e:6c:6f:61:f3:1b:0e:95:82:a6: 8e:31:af:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Ferf/XYGws8jeHzMGeySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjNkZmYxOTliNWI4MmQ3MzU4MzE1MTVjNDRmNDQwNzI0YWEwMDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC/yFxqBxKaUzGyD38zSiwqckw4R TrSsqgE38V2bDsAcmbVmkyXMEtgf9rW8cQe+M0hiELJLoQ6mFuruBHxvOk74egVS lkTMkT+IOgGg5YHbMD0H8E6IzrqSl0o0dSi5fbW+vWT6mOz8gSNZ16VnAgr3McGL XSTZLOa88A889hWI+d4cx6Mep2dbJRXIocv+mjXYvpHfKD7ibYWTUXALSP2e0b7h Ch3RdZapXS2Rd/rE3u0VJMQj4EQo9s+5dBs0aHG2uDizNPE+alg4TR2EWdkJxcvH 4hZwTgO396m1NqosoT0pD9hlRwIAnQZRoZS7H2WpNpRD+TW+6iuhXK6U7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB89/xmbW4LXNYMVFcRPRAckqgCNMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvSHozX0dadGJndGMxZ3hVVnhFOUVCeVNxQUkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdF6MA0G CSqGSIb3DQEBCwUAA4IBAQAIAtrb3ZfkrWM5BcZrWN7g97KFXc0BWk/4aPXgbw8/ mCRZwQve2O7ZBfSvHQx1COpZiT1EvFPry8kQZYBXp5wPPMcCam0KBY/JV/M6Z2Wi vA0Tzun6H5mOrw7U8ch0dautEjX6U3jBrfq+IKwxHZTEPAuH28KSpQtI6CpdZjh+ H+qEa8fKVemKsmheXr6DeNguC+lYRafpqyjoMaxOhakkjAPDlOj03EfWRd4IoxlJ qDtSJuiC6YbJRA8iMVa0V4EC2RSN3osWIMdQbkv4hekurSBnxVRrMhopIhDPdh0M E2d/5Iw4EfrgGE7A6RGRMBrXxB5sb2HzGw6VgqaOMa9V -----END CERTIFICATE-----Generated at Tue Jan 6 20:52:14 2026 by rpki-client