This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/hLo6C6tebjFQtQDmI0Q3b6kPR3w.roa File: hLo6C6tebjFQtQDmI0Q3b6kPR3w.roa (raw, json) Hash identifier: 9sKjJMjkVL/S9kl3FSQOk76oCUEVM9PGOrM1vKQrGA0= Subject key identifier: 84:BA:3A:0B:AB:5E:6E:31:50:B5:00:E6:23:44:37:6F:A9:0F:47:7C Certificate issuer: /CN=9df185e99ffe611527a0e94331151ffe2ee72ae9 Certificate serial: 019B7FBEED55A90962523F4276936081D316 Authority key identifier: 9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/hLo6C6tebjFQtQDmI0Q3b6kPR3w.roa Signing time: Fri 02 Jan 2026 17:26:17 +0000 ROA not before: Fri 02 Jan 2026 17:26:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201990 IP address blocks: 45.90.43.0/24 maxlen: 24 167.104.48.0/24 maxlen: 24 185.205.84.0/22 maxlen: 22 193.218.203.0/24 maxlen: 24 217.197.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:be:ed:55:a9:09:62:52:3f:42:76:93:60:81:d3:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df185e99ffe611527a0e94331151ffe2ee72ae9 Validity Not Before: Jan 2 17:26:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84ba3a0bab5e6e3150b500e62344376fa90f477c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9e:8a:03:7d:b0:dd:ae:87:29:10:bf:62:6a: d8:ac:fd:fa:d0:a9:bd:1d:cc:64:5e:13:2e:51:90: 08:29:1a:2c:35:45:d6:74:68:02:31:43:08:24:c2: c5:de:a3:d2:34:6d:09:dd:f6:05:dc:0f:dc:a0:76: 5c:0d:b9:e4:74:99:29:09:49:9b:10:fe:ad:b0:95: ad:6e:19:12:c3:61:03:25:52:5f:85:11:da:7b:d8: 1b:9d:9c:ed:77:40:72:6a:e2:e2:42:7e:c0:82:19: 54:da:08:7d:5f:4e:71:fe:b9:0b:a2:25:41:8f:7e: 9a:7e:f6:e1:6f:22:93:d6:07:35:2d:1f:99:f0:7a: 09:7d:91:4e:1b:5e:99:38:d3:a8:bc:34:93:fb:8f: 04:b0:11:e8:ae:40:e3:4c:da:89:60:1a:e7:d7:18: 8f:fa:44:84:b1:2a:7e:aa:e5:cf:93:b4:8c:e6:1b: af:f9:a1:9e:a6:5d:5c:14:19:40:00:62:9d:c0:5f: 7b:bf:42:db:c2:8b:0e:99:53:4a:c8:da:33:99:54: a3:07:8f:07:c9:cb:f8:76:be:e5:2d:ab:a8:ae:bf: 81:fd:b2:19:b7:c4:c5:d2:ff:2b:ce:0c:46:83:0f: e7:2d:35:21:29:c6:60:ee:67:e5:0e:ef:5e:59:1b: 7b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BA:3A:0B:AB:5E:6E:31:50:B5:00:E6:23:44:37:6F:A9:0F:47:7C X509v3 Authority Key Identifier: keyid:9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/hLo6C6tebjFQtQDmI0Q3b6kPR3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.43.0/24 167.104.48.0/24 185.205.84.0/22 193.218.203.0/24 217.197.102.0/24 Signature Algorithm: sha256WithRSAEncryption a1:6b:d7:12:02:d0:da:8a:86:65:1b:fe:51:4f:f6:c3:27:9c: ee:e9:18:d3:25:df:4c:f0:4e:44:64:ce:e3:5d:82:1f:b6:6f: 6d:5e:2b:80:42:6c:a0:80:c3:01:0a:2f:ff:4e:b4:e8:a3:64: af:d6:3c:fd:f7:03:b6:a2:30:1c:4a:35:63:58:8e:87:1b:10: b5:9c:22:6b:c7:0c:95:dd:79:89:15:d5:60:59:df:2c:27:7b: da:f0:95:8a:7e:84:a1:6f:84:c0:6f:cd:14:22:03:d6:49:c9: 35:4e:a7:92:ef:50:a7:78:a3:23:43:a9:07:0d:7d:c1:b6:31: 7a:b6:f2:5d:0c:be:f8:35:7b:f2:3e:12:4e:e0:29:da:d1:b1: f6:39:48:ea:1c:31:bc:66:74:3e:dc:0f:4d:64:d2:75:ae:7b: c6:95:a3:68:a4:7e:0f:02:ac:b8:f4:0a:1d:0f:43:de:a2:19: c9:96:ed:4c:f6:50:fd:00:88:4d:53:36:27:8c:42:1c:96:38: 61:bb:19:68:c9:eb:e0:bd:6e:04:2c:55:b2:be:c7:43:64:cb: ea:61:58:d3:cc:99:45:56:e2:e8:d8:27:53:c3:4b:08:c5:c2: a0:d0:bf:4c:5b:fc:cc:6a:57:e0:84:1c:28:cc:1c:71:07:0c: 9f:9a:2d:2f -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/vu1VqQliUj9CdpNggdMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZjE4NWU5OWZmZTYxMTUyN2EwZTk0MzMxMTUxZmZlMmVl NzJhZTkwHhcNMjYwMTAyMTcyNjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGJhM2EwYmFiNWU2ZTMxNTBiNTAwZTYyMzQ0Mzc2ZmE5MGY0NzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp6KA32w3a6HKRC/YmrYrP360Km9 HcxkXhMuUZAIKRosNUXWdGgCMUMIJMLF3qPSNG0J3fYF3A/coHZcDbnkdJkpCUmb EP6tsJWtbhkSw2EDJVJfhRHae9gbnZztd0ByauLiQn7AghlU2gh9X05x/rkLoiVB j36afvbhbyKT1gc1LR+Z8HoJfZFOG16ZONOovDST+48EsBHorkDjTNqJYBrn1xiP +kSEsSp+quXPk7SM5huv+aGepl1cFBlAAGKdwF97v0LbwosOmVNKyNozmVSjB48H ycv4dr7lLauorr+B/bIZt8TF0v8rzgxGgw/nLTUhKcZg7mflDu9eWRt7cwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFIS6OgurXm4xULUA5iNEN2+pD0d8MB8GA1UdIwQY MBaAFJ3xhemf/mEVJ6DpQzEVH/4u5yrpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82MGU1MWYtYjgwMy00NzRkLWIyN2Et ZjI5OTBjZWI5NGVjLzEvaExvNkM2dGViakZRdFFEbUkwUTNiNmtQUjN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy82MGU1MWYtYjgwMy00NzRkLWIyN2EtZjI5OTBjZWI5NGVj LzEvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALVorAwQA p2gwAwQCuc1UAwQAwdrLAwQA2cVmMA0GCSqGSIb3DQEBCwUAA4IBAQCha9cSAtDa ioZlG/5RT/bDJ5zu6RjTJd9M8E5EZM7jXYIftm9tXiuAQmyggMMBCi//TrToo2Sv 1jz99wO2ojAcSjVjWI6HGxC1nCJrxwyV3XmJFdVgWd8sJ3va8JWKfoShb4TAb80U IgPWSck1TqeS71CneKMjQ6kHDX3BtjF6tvJdDL74NXvyPhJO4Cna0bH2OUjqHDG8 ZnQ+3A9NZNJ1rnvGlaNopH4PAqy49AodD0PeohnJlu1M9lD9AIhNUzYnjEIcljhh uxloyevgvW4ELFWyvsdDZMvqYVjTzJlFVuLo2CdTw0sIxcKg0L9MW/zMalfghBwo zBxxBwyfmi0v -----END CERTIFICATE-----Generated at Mon Feb 9 22:24:02 2026 by rpki-client