This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/hKpc9uRsZ2_suERQsQjosJeuDjs.roa File: hKpc9uRsZ2_suERQsQjosJeuDjs.roa (raw, json) Hash identifier: xDc2bz+2Um8RwvagWvueORu1Sq+T14OtyqTp1PhQYTk= Subject key identifier: 84:AA:5C:F6:E4:6C:67:6F:EC:B8:44:50:B1:08:E8:B0:97:AE:0E:3B Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15F31FBD062633F3C6AD68BA0AF9EC Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/hKpc9uRsZ2_suERQsQjosJeuDjs.roa Signing time: Fri 02 Jan 2026 14:21:43 +0000 ROA not before: Fri 02 Jan 2026 14:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 45.138.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f3:1f:bd:06:26:33:f3:c6:ad:68:ba:0a:f9:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84aa5cf6e46c676fecb84450b108e8b097ae0e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4e:d2:8b:83:1a:16:96:ed:fd:4b:ca:3b:2a: 4a:c7:92:2b:11:36:7e:89:16:72:c4:43:30:cd:64: 15:c8:89:c7:10:d5:d5:e5:b8:67:8e:b0:aa:6a:88: c0:f5:f6:05:55:a7:74:e4:f4:a6:f2:3b:77:cd:1d: 6d:d4:85:b2:c9:65:e7:83:e0:cd:0e:6f:f8:2e:2e: ad:7a:b7:9e:59:8d:d2:c9:03:37:bf:dc:cf:b6:ce: 4e:a1:d1:69:dc:c4:b1:68:56:9e:ee:c5:31:19:d9: 64:c7:de:be:e0:48:7f:61:7e:6c:2c:2f:6b:9c:76: 7c:f4:22:c8:94:53:9c:74:10:28:b4:3c:f2:d1:51: 85:8e:d0:30:94:2d:3c:cc:60:45:55:a0:b0:89:a3: 66:c5:36:23:0b:12:d8:6d:35:62:15:15:1a:ab:7b: 0e:fe:ee:97:d4:ba:9d:79:93:4e:44:06:94:e7:58: ab:3f:b8:e6:1f:d8:db:3c:ca:2b:02:e9:15:2b:ff: c4:81:23:28:4b:82:a5:7a:3d:fd:e0:a5:bb:18:c6: 47:2c:7d:fa:c1:1b:56:32:69:42:04:d6:29:0f:4a: 1c:0e:65:fa:30:8d:04:4f:b8:61:2c:f4:6b:0f:1b: f0:2e:01:9e:32:86:70:08:df:b1:85:c3:13:cd:ad: e4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AA:5C:F6:E4:6C:67:6F:EC:B8:44:50:B1:08:E8:B0:97:AE:0E:3B X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/hKpc9uRsZ2_suERQsQjosJeuDjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.181.0/24 Signature Algorithm: sha256WithRSAEncryption bd:af:34:86:f6:82:d0:1d:d3:fe:d9:03:ec:b8:83:23:3b:5e: a1:ee:2c:54:b8:10:1d:5f:f0:2f:ba:96:ae:79:e3:79:14:8a: c8:9a:ff:b6:fe:ce:79:e0:49:17:81:f4:84:f2:74:5d:62:4c: 1c:28:97:11:5d:da:c1:bf:55:07:9d:1a:71:60:e8:34:ba:55: 6a:a5:d3:b1:f3:31:6a:ab:97:fc:30:4d:9f:b9:5b:ef:b1:56: 5d:81:e1:21:f0:14:e0:6a:74:fe:7a:db:f8:42:38:fe:b4:1f: a2:de:fb:f8:75:5f:f5:f3:07:10:21:7f:3e:6f:95:5e:ee:93: 06:b3:d6:e3:68:18:74:18:06:c7:41:f2:7c:e3:8e:8e:fd:f7: 27:07:9a:ec:4b:c3:4c:e4:40:10:0c:ce:86:d4:86:21:72:9c: a4:0e:8b:be:10:47:89:e0:86:ba:a9:9f:34:85:d1:81:7e:44: 66:8e:df:0e:1c:ab:03:14:66:ea:5e:f2:91:1b:6d:4e:9f:22: 39:e3:d7:97:a0:02:ff:00:36:dc:97:d6:ef:db:89:d4:f1:b5: 03:bd:8d:84:f6:fe:bc:c0:fc:96:5f:26:42:a8:2b:ba:eb:01: e1:a1:48:11:d7:c2:5f:50:63:7f:62:2a:74:c3:32:17:07:77: dc:73:aa:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FfMfvQYmM/PGrWi6CvnsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGFhNWNmNmU0NmM2NzZmZWNiODQ0NTBiMTA4ZThiMDk3YWUwZTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk7Si4MaFpbt/UvKOypKx5IrETZ+ iRZyxEMwzWQVyInHENXV5bhnjrCqaojA9fYFVad05PSm8jt3zR1t1IWyyWXng+DN Dm/4Li6tereeWY3SyQM3v9zPts5OodFp3MSxaFae7sUxGdlkx96+4Eh/YX5sLC9r nHZ89CLIlFOcdBAotDzy0VGFjtAwlC08zGBFVaCwiaNmxTYjCxLYbTViFRUaq3sO /u6X1LqdeZNORAaU51irP7jmH9jbPMorAukVK//EgSMoS4Klej394KW7GMZHLH36 wRtWMmlCBNYpD0ocDmX6MI0ET7hhLPRrDxvwLgGeMoZwCN+xhcMTza3k4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFISqXPbkbGdv7LhEULEI6LCXrg47MB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvaEtwYzl1UnNaMl9zdUVSUXNRam9zSmV1RGpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYq1MA0G CSqGSIb3DQEBCwUAA4IBAQC9rzSG9oLQHdP+2QPsuIMjO16h7ixUuBAdX/Avupau eeN5FIrImv+2/s554EkXgfSE8nRdYkwcKJcRXdrBv1UHnRpxYOg0ulVqpdOx8zFq q5f8ME2fuVvvsVZdgeEh8BTganT+etv4Qjj+tB+i3vv4dV/18wcQIX8+b5Ve7pMG s9bjaBh0GAbHQfJ8446O/fcnB5rsS8NM5EAQDM6G1IYhcpykDou+EEeJ4Ia6qZ80 hdGBfkRmjt8OHKsDFGbqXvKRG21OnyI549eXoAL/ADbcl9bv24nU8bUDvY2E9v68 wPyWXyZCqCu66wHhoUgR18JfUGN/Yip0wzIXB3fcc6ot -----END CERTIFICATE-----Generated at Tue Jan 6 20:51:38 2026 by rpki-client