This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/hAT6y915VSkQC4qoBvBKOJ1u2x4.roa File: hAT6y915VSkQC4qoBvBKOJ1u2x4.roa (raw, json) Hash identifier: GJlH71N2PjMEPIaWcmF1Ia3pgXKWnWw9eHvlamX8RaE= Subject key identifier: 84:04:FA:CB:DD:79:55:29:10:0B:8A:A8:06:F0:4A:38:9D:6E:DB:1E Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B77C72E9038160D840CF92B60F89C377A Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/hAT6y915VSkQC4qoBvBKOJ1u2x4.roa Signing time: Thu 01 Jan 2026 04:18:20 +0000 ROA not before: Thu 01 Jan 2026 04:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200195 IP address blocks: 45.89.61.0/24 maxlen: 24 2a0e:4005::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2e:90:38:16:0d:84:0c:f9:2b:60:f8:9c:37:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jan 1 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8404facbdd795529100b8aa806f04a389d6edb1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:f2:b8:76:15:bb:2e:07:6d:bc:7a:98:e0:87: c0:3d:a8:02:05:97:db:41:b8:20:ba:58:a0:5a:00: b1:4f:1d:be:ac:8c:1d:ec:a2:a9:1f:91:91:44:7a: cd:9a:95:be:20:e0:82:8a:a7:5d:a2:e1:ac:91:df: f8:4c:4e:47:20:7d:e3:b5:3e:1b:08:20:f7:57:54: c0:fb:d0:39:10:9a:13:0f:b2:4e:0a:a9:a5:f3:7a: f4:e7:fc:bc:98:35:59:46:f8:9e:e3:d0:9d:db:b6: a0:21:04:3d:b7:6d:d9:32:f5:fa:22:30:0b:a6:07: e8:02:9a:aa:7a:d3:11:f9:29:35:ec:76:27:4a:91: 8c:23:0d:13:b8:fb:ee:28:b1:b3:3a:ed:1f:ec:45: 7a:77:c9:e7:88:c3:f1:ac:27:93:0e:56:d9:cb:a4: cf:cb:fe:2f:2f:5a:b3:e5:08:f8:4a:fd:4d:72:d7: 05:24:ad:f8:09:32:63:ed:50:2d:fb:7c:ec:cc:58: e3:d2:e2:bb:0a:2e:84:cc:b4:33:c8:1e:00:82:3d: d8:2f:f1:83:81:36:19:82:8c:41:04:22:72:7f:fb: 95:59:55:72:4b:18:4d:2a:de:93:6f:e4:5c:0f:3b: 25:28:bd:5f:c9:9d:7e:20:94:48:8c:8e:33:d6:4c: 08:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:04:FA:CB:DD:79:55:29:10:0B:8A:A8:06:F0:4A:38:9D:6E:DB:1E X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/hAT6y915VSkQC4qoBvBKOJ1u2x4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.61.0/24 IPv6: 2a0e:4005::/32 Signature Algorithm: sha256WithRSAEncryption a3:dc:e6:96:f0:13:3d:7d:ed:54:cc:61:29:c3:8f:46:c5:6e: 55:f0:9b:aa:01:17:71:42:7c:0a:b5:8f:c6:f6:b6:e0:23:73: 18:02:e0:81:d7:e3:67:bd:70:76:ac:8b:9a:7b:68:d0:ed:3a: 8d:57:a6:a1:c4:9e:31:a0:f0:cd:29:a3:f5:40:8b:f6:93:8b: 29:0e:3f:90:cf:08:77:05:6f:ab:77:81:22:cd:6c:6e:ed:c4: e2:dc:aa:b4:6f:d8:13:6a:92:15:45:af:90:92:83:12:88:a9: 3f:82:71:20:07:b5:63:1f:1f:b5:de:11:65:56:f1:a5:75:6e: e9:88:eb:25:5d:eb:a3:69:5e:bc:7a:2b:80:68:12:6c:1f:0b: 1d:96:3b:7d:8d:d0:d2:4c:ec:a0:fc:63:03:fb:36:b7:eb:f6: 54:5b:b0:16:bd:42:a1:e0:02:9e:e0:cb:22:fd:96:5e:26:f3: e3:6c:e6:4c:81:cc:35:45:33:cf:20:b4:c1:0a:fd:fa:a6:ea: 57:e8:7e:03:68:fa:35:a1:51:ae:c6:37:ff:af:96:b3:e8:2b: bf:e4:05:8a:83:7c:35:0e:a3:cb:0e:7e:34:1c:56:2c:53:5f: c4:a1:a3:29:f2:15:ed:b1:66:32:9a:0b:19:15:d8:e9:ca:6b: ca:bf:47:2c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xy6QOBYNhAz5K2D4nDd6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwMTAxMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDA0ZmFjYmRkNzk1NTI5MTAwYjhhYTgwNmYwNGEzODlkNmVkYjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+fK4dhW7LgdtvHqY4IfAPagCBZfb QbgguligWgCxTx2+rIwd7KKpH5GRRHrNmpW+IOCCiqddouGskd/4TE5HIH3jtT4b CCD3V1TA+9A5EJoTD7JOCqml83r05/y8mDVZRvie49Cd27agIQQ9t23ZMvX6IjAL pgfoApqqetMR+Sk17HYnSpGMIw0TuPvuKLGzOu0f7EV6d8nniMPxrCeTDlbZy6TP y/4vL1qz5Qj4Sv1NctcFJK34CTJj7VAt+3zszFjj0uK7Ci6EzLQzyB4Agj3YL/GD gTYZgoxBBCJyf/uVWVVySxhNKt6Tb+RcDzslKL1fyZ1+IJRIjI4z1kwINQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIQE+svdeVUpEAuKqAbwSjidbtseMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvaEFUNnk5MTVWU2tRQzRxb0J2QktPSjF1Mng0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALVk9MA0E AgACMAcDBQAqDkAFMA0GCSqGSIb3DQEBCwUAA4IBAQCj3OaW8BM9fe1UzGEpw49G xW5V8JuqARdxQnwKtY/G9rbgI3MYAuCB1+NnvXB2rIuae2jQ7TqNV6ahxJ4xoPDN KaP1QIv2k4spDj+Qzwh3BW+rd4EizWxu7cTi3Kq0b9gTapIVRa+QkoMSiKk/gnEg B7VjHx+13hFlVvGldW7piOslXeujaV68eiuAaBJsHwsdljt9jdDSTOyg/GMD+za3 6/ZUW7AWvUKh4AKe4Msi/ZZeJvPjbOZMgcw1RTPPILTBCv36pupX6H4DaPo1oVGu xjf/r5az6Cu/5AWKg3w1DqPLDn40HFYsU1/EoaMp8hXtsWYymgsZFdjpymvKv0cs -----END CERTIFICATE-----Generated at Wed Jan 21 06:49:13 2026 by rpki-client