This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/Hz8WUMxp_bI6D-1td5yRGj5vbeE.roa File: Hz8WUMxp_bI6D-1td5yRGj5vbeE.roa (raw, json) Hash identifier: 3PuiohsJTgVZuvcSVKeFTaxJ6yWBheVkQayWdYArdx0= Subject key identifier: 1F:3F:16:50:CC:69:FD:B2:3A:0F:ED:6D:77:9C:91:1A:3E:6F:6D:E1 Certificate issuer: /CN=b30e3011a0fb3111fbe8493c1230974aef532704 Certificate serial: 019B7EA71DF65A086B4ECDDAB6B374AF4811 Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/Hz8WUMxp_bI6D-1td5yRGj5vbeE.roa Signing time: Fri 02 Jan 2026 12:20:39 +0000 ROA not before: Fri 02 Jan 2026 12:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203755 IP address blocks: 45.155.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1d:f6:5a:08:6b:4e:cd:da:b6:b3:74:af:48:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704 Validity Not Before: Jan 2 12:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f3f1650cc69fdb23a0fed6d779c911a3e6f6de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:13:56:db:3b:e2:67:81:ee:0a:e2:54:0f:e1: 8e:58:cf:ba:b3:1c:99:a6:73:e0:f2:2d:89:dd:5d: 48:c7:a8:8d:89:92:43:f3:a5:d4:a9:cc:d8:ef:ea: 2f:de:24:6a:18:2c:aa:a7:b9:35:44:93:5c:8a:de: 35:b0:6a:84:37:35:64:0c:7e:91:db:60:71:da:f9: b4:af:26:0d:eb:27:40:ed:1c:2e:20:13:fa:25:0f: f2:1c:89:d8:25:93:fa:57:40:57:97:18:f6:b4:1f: 84:fa:36:33:c3:6b:4e:ee:11:60:00:e6:6a:31:77: 92:7a:d3:84:11:67:e5:d8:93:91:14:d7:a7:28:d0: 28:7d:e9:2c:88:b0:b8:37:eb:49:8c:ec:7e:3b:b8: 33:48:ea:11:2e:cd:c1:7b:c2:02:13:50:7c:83:33: 89:d0:8c:1e:fa:f6:35:69:27:a3:05:8c:1e:99:63: 0a:73:34:d3:6c:ba:aa:e6:b7:2e:e9:eb:02:18:95: 71:20:81:42:d1:2b:2a:50:4a:ac:4c:06:d9:07:4f: 95:5e:0e:ce:d7:b3:61:3e:8a:a6:e9:bf:b1:40:d7: 46:48:a9:31:ae:07:cb:39:df:bc:9b:1f:9b:9c:d1: 00:c7:0d:78:78:58:29:5d:b1:57:11:c1:7b:09:65: ab:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3F:16:50:CC:69:FD:B2:3A:0F:ED:6D:77:9C:91:1A:3E:6F:6D:E1 X509v3 Authority Key Identifier: keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/Hz8WUMxp_bI6D-1td5yRGj5vbeE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.4.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:79:04:82:31:f9:cc:51:36:20:ac:2b:2b:a6:7b:f3:15:e7: b9:c8:c8:d1:fe:3e:74:ce:8d:91:fd:4f:5f:af:b9:5e:c2:63: a7:8b:1b:dc:ee:f5:a6:0f:e7:0b:eb:95:d4:4d:32:04:4a:8f: e9:b2:26:30:4f:0d:34:aa:fb:11:d6:93:75:92:77:15:3b:10: 8a:f9:d5:4f:ec:17:81:b4:05:78:f1:24:1f:04:6d:ef:78:35: 6f:c5:d7:f4:03:ce:a4:5b:17:77:77:80:45:bf:1f:25:26:7c: 61:90:7a:36:f2:c0:b3:78:2b:5a:76:fa:bf:f8:f9:9a:74:74: 62:04:a7:b5:bc:d4:1a:43:9a:6f:28:25:4a:a7:c8:87:ec:f4: 3b:5d:cf:d8:38:a3:2c:38:59:26:38:48:9a:61:8a:87:ef:47: f5:33:0e:64:ee:6e:9a:d2:6b:3e:91:8a:94:65:c4:5f:fc:fa: 4d:40:1e:6f:a4:8b:e4:ab:94:b6:6f:e6:cf:7c:6d:93:aa:66: 72:3f:f6:7d:c5:1c:8b:57:cc:b9:5f:37:b5:5d:1b:7c:7c:05: 19:14:cb:a5:d7:30:b8:d1:62:1d:77:1d:08:02:b1:6b:a9:06: a3:b1:ed:96:43:6a:bd:1f:ea:23:b6:81:fd:53:cf:4c:99:52: 68:98:5c:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+px32WghrTs3atrN0r0gRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMGUzMDExYTBmYjMxMTFmYmU4NDkzYzEyMzA5NzRhZWY1 MzI3MDQwHhcNMjYwMTAyMTIyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjNmMTY1MGNjNjlmZGIyM2EwZmVkNmQ3NzljOTExYTNlNmY2ZGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBNW2zviZ4HuCuJUD+GOWM+6sxyZ pnPg8i2J3V1Ix6iNiZJD86XUqczY7+ov3iRqGCyqp7k1RJNcit41sGqENzVkDH6R 22Bx2vm0ryYN6ydA7RwuIBP6JQ/yHInYJZP6V0BXlxj2tB+E+jYzw2tO7hFgAOZq MXeSetOEEWfl2JORFNenKNAofeksiLC4N+tJjOx+O7gzSOoRLs3Be8ICE1B8gzOJ 0Iwe+vY1aSejBYwemWMKczTTbLqq5rcu6esCGJVxIIFC0SsqUEqsTAbZB0+VXg7O 17NhPoqm6b+xQNdGSKkxrgfLOd+8mx+bnNEAxw14eFgpXbFXEcF7CWWrpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB8/FlDMaf2yOg/tbXeckRo+b23hMB8GA1UdIwQY MBaAFLMOMBGg+zER++hJPBIwl0rvUycEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3c0d0VhRDdNUkg3NkVrOEVqQ1hTdTlUSndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wZmZiNjQtZWZjYi00OWY1LTgzNDIt ZjlmYjM4Yzc3YzU1LzEvSHo4V1VNeHBfYkk2RC0xdGQ1eVJHajV2YmVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8wZmZiNjQtZWZjYi00OWY1LTgzNDItZjlmYjM4Yzc3YzU1 LzEvc3c0d0VhRDdNUkg3NkVrOEVqQ1hTdTlUSndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZsEMA0G CSqGSIb3DQEBCwUAA4IBAQAueQSCMfnMUTYgrCsrpnvzFee5yMjR/j50zo2R/U9f r7lewmOnixvc7vWmD+cL65XUTTIESo/psiYwTw00qvsR1pN1kncVOxCK+dVP7BeB tAV48SQfBG3veDVvxdf0A86kWxd3d4BFvx8lJnxhkHo28sCzeCtadvq/+PmadHRi BKe1vNQaQ5pvKCVKp8iH7PQ7Xc/YOKMsOFkmOEiaYYqH70f1Mw5k7m6a0ms+kYqU ZcRf/PpNQB5vpIvkq5S2b+bPfG2TqmZyP/Z9xRyLV8y5Xze1XRt8fAUZFMul1zC4 0WIddx0IArFrqQajse2WQ2q9H+ojtoH9U89MmVJomFz+ -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:24 2026 by rpki-client