This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/HiYbhZWhCJJeXZ2C1QF9HZFYuTg.roa File: HiYbhZWhCJJeXZ2C1QF9HZFYuTg.roa (raw, json) Hash identifier: J5Ar7UkCjCgNu5FTWi596RRrK/CIdvUtNz5mbXSomXk= Subject key identifier: 1E:26:1B:85:95:A1:08:92:5E:5D:9D:82:D5:01:7D:1D:91:58:B9:38 Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24 Certificate serial: 019B76EB8882A3C61B193F8719E935962828 Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/HiYbhZWhCJJeXZ2C1QF9HZFYuTg.roa Signing time: Thu 01 Jan 2026 00:18:26 +0000 ROA not before: Thu 01 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35819 IP address blocks: 91.229.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:88:82:a3:c6:1b:19:3f:87:19:e9:35:96:28:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24 Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e261b8595a108925e5d9d82d5017d1d9158b938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ba:62:50:2e:0b:92:31:b4:91:47:40:3a:74: 3e:e8:a4:d5:06:85:d7:0c:3e:f5:cf:74:3f:0d:12: 69:00:33:20:6d:50:0e:29:07:ae:f2:f2:74:d7:9f: bb:73:c7:86:17:99:5c:14:54:07:74:d3:bd:f0:ff: 50:9d:d3:91:9c:eb:be:45:2e:ce:25:a6:c8:7f:70: 3e:fd:bb:4b:80:92:de:76:a4:8e:fc:9c:9b:03:3f: 49:be:29:31:8f:39:42:f4:c6:b5:95:22:45:67:16: 57:25:0b:3d:d9:2a:0e:cc:38:2d:4e:ce:5a:66:23: 73:0d:85:93:3f:a9:de:9f:12:4d:1c:12:54:28:75: 3b:b8:34:65:b5:70:ee:a3:6f:8d:24:50:fd:e9:0d: fb:a4:32:7b:2a:48:15:60:4e:87:11:89:2f:19:ac: f6:25:3d:23:25:4d:12:41:bd:2a:b5:66:b1:c6:a6: c9:c4:fa:b1:ad:49:bb:99:7b:76:d0:b6:b6:08:7e: 04:71:c1:e3:6c:39:12:49:a0:70:4a:23:66:9a:dd: 53:b1:fe:1b:d1:2a:17:95:d6:80:74:f8:88:b3:f8: d5:df:5a:61:da:ae:4b:fb:c2:4f:d4:b2:e7:8a:94: 65:cf:d3:77:a5:42:32:d5:32:ad:8a:d4:40:69:9c: 71:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:26:1B:85:95:A1:08:92:5E:5D:9D:82:D5:01:7D:1D:91:58:B9:38 X509v3 Authority Key Identifier: keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/HiYbhZWhCJJeXZ2C1QF9HZFYuTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.220.0/24 Signature Algorithm: sha256WithRSAEncryption 70:34:f6:81:6e:be:ed:e5:2c:94:b8:bc:06:81:00:51:0f:3d: 5b:15:34:17:1a:f4:2d:fc:3f:94:d9:5a:89:ed:e0:47:cd:10: 25:85:bb:6a:b3:d4:4c:09:21:40:3b:b8:33:5a:d2:f0:a7:e9: 1e:fd:86:91:61:1e:be:cb:03:53:51:04:91:78:32:50:32:5f: c5:82:25:2c:ac:ed:d7:39:0e:cf:8e:87:18:b8:b0:70:c3:b2: 80:1d:87:0c:83:22:64:67:a8:9c:04:a7:36:72:29:a4:64:f0: be:4d:33:db:b2:43:44:72:16:63:58:58:cc:53:6b:9e:dd:f7: c7:c0:ef:d4:fd:f0:fa:35:2d:30:2e:79:a7:c1:79:1a:19:84: 9c:39:f7:17:f5:6d:92:47:98:6c:4f:dc:54:5a:e1:22:eb:55: c4:d5:2e:80:ca:48:f1:6d:97:20:88:61:6f:b6:46:de:65:b1: 55:ed:0b:d9:12:34:95:e3:d2:ac:49:49:0b:1e:e2:d1:bb:cc: bb:f7:14:97:c6:81:64:6d:5d:76:80:36:54:ae:77:63:98:85: 05:06:8e:3d:ca:01:0d:15:51:ac:45:9a:be:11:3d:1e:94:e8: 4a:e0:66:af:e5:54:d1:4e:2c:19:88:16:d3:c8:bb:dd:cb:6f: 89:bb:4f:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264iCo8YbGT+HGek1ligoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YjY0NDZiMGM2ZGNkY2RmN2YzYjlhYzQxMTc4N2M2ZjJl YjdiMjQwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTI2MWI4NTk1YTEwODkyNWU1ZDlkODJkNTAxN2QxZDkxNThiOTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLpiUC4LkjG0kUdAOnQ+6KTVBoXX DD71z3Q/DRJpADMgbVAOKQeu8vJ015+7c8eGF5lcFFQHdNO98P9QndORnOu+RS7O JabIf3A+/btLgJLedqSO/JybAz9JvikxjzlC9Ma1lSJFZxZXJQs92SoOzDgtTs5a ZiNzDYWTP6nenxJNHBJUKHU7uDRltXDuo2+NJFD96Q37pDJ7KkgVYE6HEYkvGaz2 JT0jJU0SQb0qtWaxxqbJxPqxrUm7mXt20La2CH4EccHjbDkSSaBwSiNmmt1Tsf4b 0SoXldaAdPiIs/jV31ph2q5L+8JP1LLnipRlz9N3pUIy1TKtitRAaZxxTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB4mG4WVoQiSXl2dgtUBfR2RWLk4MB8GA1UdIwQY MBaAFKS2RGsMbc3N9/O5rEEXh8by63skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMt Yzk0ZDM5M2I4YTk3LzEvSGlZYmhaV2hDSkplWFoyQzFRRjlIWkZZdVRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMtYzk0ZDM5M2I4YTk3 LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+XcMA0G CSqGSIb3DQEBCwUAA4IBAQBwNPaBbr7t5SyUuLwGgQBRDz1bFTQXGvQt/D+U2VqJ 7eBHzRAlhbtqs9RMCSFAO7gzWtLwp+ke/YaRYR6+ywNTUQSReDJQMl/FgiUsrO3X OQ7PjocYuLBww7KAHYcMgyJkZ6icBKc2cimkZPC+TTPbskNEchZjWFjMU2ue3ffH wO/U/fD6NS0wLnmnwXkaGYScOfcX9W2SR5hsT9xUWuEi61XE1S6AykjxbZcgiGFv tkbeZbFV7QvZEjSV49KsSUkLHuLRu8y79xSXxoFkbV12gDZUrndjmIUFBo49ygEN FVGsRZq+ET0elOhK4Gav5VTRTiwZiBbTyLvdy2+Ju09Q -----END CERTIFICATE-----Generated at Fri Jan 30 18:25:40 2026 by rpki-client