This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/hh9xnwJxEyuwW4XUrmPGny_7GIQ.roa File: hh9xnwJxEyuwW4XUrmPGny_7GIQ.roa (raw, json) Hash identifier: vIdII9FGfAaR8PEPE8i0EU2+vBGrmhUq1uzpwDgm5VU= Subject key identifier: 86:1F:71:9F:02:71:13:2B:B0:5B:85:D4:AE:63:C6:9F:2F:FB:18:84 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F8546727CCBE5E1508F08A9424BBA30 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/hh9xnwJxEyuwW4XUrmPGny_7GIQ.roa Signing time: Fri 02 Jan 2026 16:23:19 +0000 ROA not before: Fri 02 Jan 2026 16:23:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206654 IP address blocks: 45.88.124.0/22 maxlen: 22 185.212.11.0/24 maxlen: 24 195.211.48.0/24 maxlen: 24 2a0f:fa00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:46:72:7c:cb:e5:e1:50:8f:08:a9:42:4b:ba:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=861f719f0271132bb05b85d4ae63c69f2ffb1884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:c9:27:c3:b6:6a:17:cc:38:49:3d:e5:26: 97:4d:40:33:5e:e9:72:3b:9f:5b:b7:c7:30:47:d9: d4:1b:34:95:29:52:f8:7a:f1:20:28:5a:2d:7e:85: d8:63:d1:fc:0f:01:d2:06:e8:22:19:e4:14:a6:1e: 7d:97:f5:0c:f0:5a:40:23:03:db:c2:10:6c:fa:df: bc:0a:25:fb:dc:5e:d3:c4:18:d0:3f:3d:54:10:c0: d6:ad:20:95:af:03:3c:1c:02:5c:fa:04:46:56:aa: 92:20:41:3c:b4:58:ce:20:80:23:90:43:ef:26:9f: 4d:a3:98:bc:a0:a1:c3:c0:cc:02:84:bc:b8:7f:5c: 15:4d:77:03:57:6b:45:b7:02:1b:c1:3c:25:3a:ee: 2e:8c:43:cc:f5:f8:ad:90:0a:f8:f4:83:23:d0:6f: c6:08:a7:8c:22:ca:7d:05:fe:9a:9c:65:8b:b9:b8: 7c:41:64:84:81:5a:73:00:ed:d2:1e:94:ae:9b:14: 10:9e:7b:20:23:ed:fa:75:10:f4:70:3b:0b:b1:61: c8:f7:a2:d8:f4:7c:b5:d3:5b:22:0b:ad:a3:82:68: 05:d1:c9:01:56:2f:60:49:a3:a2:2c:f4:7a:00:24: a9:9c:58:6a:e3:a7:4b:f8:fc:ea:9f:bc:7e:ad:a9: 11:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1F:71:9F:02:71:13:2B:B0:5B:85:D4:AE:63:C6:9F:2F:FB:18:84 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/hh9xnwJxEyuwW4XUrmPGny_7GIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.124.0/22 185.212.11.0/24 195.211.48.0/24 IPv6: 2a0f:fa00::/29 Signature Algorithm: sha256WithRSAEncryption 44:a5:01:ee:fc:db:32:12:34:7a:54:7e:ee:e9:f3:5f:e8:8d: 9d:ac:db:6d:d0:a7:53:5c:c7:52:50:45:8e:0c:04:b5:f0:3b: e4:25:08:12:c9:10:41:02:fd:a8:b5:d2:fc:ff:6f:b0:2e:ac: 6d:9e:cd:6d:2d:45:22:42:0d:d6:b1:44:a6:a7:41:b5:be:65: 17:cd:f8:c6:b2:09:d2:76:0a:f0:34:20:2f:6d:12:95:43:78: 01:00:6a:f8:6b:19:e6:d6:7f:d9:ff:c7:00:f8:96:d9:3d:ca: a4:9c:39:77:f3:4b:40:5a:58:b1:8f:26:fd:22:b7:b2:c1:3a: 82:3a:e1:81:e6:b2:db:7b:b4:2f:e0:88:56:23:17:d3:89:76: fa:1d:bc:1e:a4:fc:13:4d:65:cf:a7:ad:7e:de:3b:48:7a:06: 52:34:46:94:50:a0:9e:52:76:13:ff:2f:65:fa:ff:cd:92:fc: 9d:44:f7:61:46:c6:af:8f:f3:d3:55:b0:07:8e:23:29:7b:99: 0d:fd:a5:47:b6:d4:79:4a:4d:65:09:fb:bb:94:a4:e5:dd:f2: 13:cc:f7:41:91:b1:d3:c1:c4:a9:ce:f0:08:77:da:bb:f6:86: 89:11:a1:9c:a4:e6:3d:88:75:88:d6:a4:52:52:5b:f3:45:b9: b9:e0:dd:be -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/hUZyfMvl4VCPCKlCS7owMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjFmNzE5ZjAyNzExMzJiYjA1Yjg1ZDRhZTYzYzY5ZjJmZmIxODg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXLJJ8O2ahfMOEk95SaXTUAzXuly O59bt8cwR9nUGzSVKVL4evEgKFotfoXYY9H8DwHSBugiGeQUph59l/UM8FpAIwPb whBs+t+8CiX73F7TxBjQPz1UEMDWrSCVrwM8HAJc+gRGVqqSIEE8tFjOIIAjkEPv Jp9No5i8oKHDwMwChLy4f1wVTXcDV2tFtwIbwTwlOu4ujEPM9fitkAr49IMj0G/G CKeMIsp9Bf6anGWLubh8QWSEgVpzAO3SHpSumxQQnnsgI+36dRD0cDsLsWHI96LY 9Hy101siC62jgmgF0ckBVi9gSaOiLPR6ACSpnFhq46dL+Pzqn7x+rakRTwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFIYfcZ8CcRMrsFuF1K5jxp8v+xiEMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvaGg5eG53SnhFeXV3VzRYVXJtUEdueV83R0lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLVh8AwQA udQLAwQAw9MwMA0EAgACMAcDBQMqD/oAMA0GCSqGSIb3DQEBCwUAA4IBAQBEpQHu /NsyEjR6VH7u6fNf6I2drNtt0KdTXMdSUEWODAS18DvkJQgSyRBBAv2otdL8/2+w Lqxtns1tLUUiQg3WsUSmp0G1vmUXzfjGsgnSdgrwNCAvbRKVQ3gBAGr4axnm1n/Z /8cA+JbZPcqknDl380tAWlixjyb9IreywTqCOuGB5rLbe7Qv4IhWIxfTiXb6Hbwe pPwTTWXPp61+3jtIegZSNEaUUKCeUnYT/y9l+v/NkvydRPdhRsavj/PTVbAHjiMp e5kN/aVHttR5Sk1lCfu7lKTl3fITzPdBkbHTwcSpzvAId9q79oaJEaGcpOY9iHWI 1qRSUlvzRbm54N2+ -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:46 2026 by rpki-client