This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/HIhz8pdIXgjK-XvqEHJKRiDVUZU.roa File: HIhz8pdIXgjK-XvqEHJKRiDVUZU.roa (raw, json) Hash identifier: 9IgTkOouc4NOjiZYiPyRk/fd3ULM88kb+ZAbPFTN9oU= Subject key identifier: 1C:88:73:F2:97:48:5E:08:CA:F9:7B:EA:10:72:4A:46:20:D5:51:95 Certificate issuer: /CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d Certificate serial: 019B7FF1D1D3AE5B4A5397C3571CBB09196D Authority key identifier: 5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/HIhz8pdIXgjK-XvqEHJKRiDVUZU.roa Signing time: Fri 02 Jan 2026 18:21:52 +0000 ROA not before: Fri 02 Jan 2026 18:21:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212748 IP address blocks: 83.242.104.0/23 maxlen: 23 83.242.104.0/24 maxlen: 24 83.242.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:d1:d3:ae:5b:4a:53:97:c3:57:1c:bb:09:19:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d Validity Not Before: Jan 2 18:21:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c8873f297485e08caf97bea10724a4620d55195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:00:6e:c5:cc:3a:a1:3f:4c:ab:9c:9b:0c:47: 64:14:e2:74:0c:bb:a1:41:18:35:0d:c0:70:b1:cb: 12:9e:91:ba:73:99:c0:f1:d6:5a:5b:91:d2:74:f9: 12:d4:f5:af:1b:26:67:28:0a:0c:1d:d5:ff:df:b5: 1b:0d:be:1e:03:d5:cc:86:bf:7b:21:e7:b6:f6:8a: 2a:e3:2d:3b:45:fd:2d:0f:fe:44:68:45:6b:6b:42: a5:79:09:29:1a:12:05:e5:79:49:f6:8b:c8:e4:19: a1:c4:57:96:bf:b7:40:27:1e:30:8e:bc:8b:8b:b3: bb:e2:4b:c4:59:a1:2e:89:66:ad:b1:40:cf:c3:c3: 3a:2c:b2:5e:e8:d9:5e:02:c9:af:5b:d3:a1:5d:a2: 35:9f:a3:ad:5c:ce:1e:f9:c0:43:7e:41:62:88:1e: 4f:88:b4:8d:4a:37:5b:b4:03:85:fd:19:88:2c:0c: 43:b5:7b:1b:33:50:98:2d:36:9f:f8:98:ff:21:58: 05:12:71:59:5f:8f:bc:2f:85:dc:f5:cd:c1:dc:96: c4:c2:ec:80:7f:e7:f3:9d:7e:7a:db:08:17:ec:97: 73:9e:e3:4f:0d:f9:23:e2:ed:2d:6d:f6:b7:d6:29: 10:87:44:2a:14:c6:f2:34:b4:94:60:5c:e5:5d:16: ad:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:88:73:F2:97:48:5E:08:CA:F9:7B:EA:10:72:4A:46:20:D5:51:95 X509v3 Authority Key Identifier: keyid:5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/HIhz8pdIXgjK-XvqEHJKRiDVUZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.242.104.0/23 Signature Algorithm: sha256WithRSAEncryption 56:64:91:64:2a:63:e3:d9:f3:4b:b5:b4:9b:a3:57:1c:c5:17: d1:6f:d9:3a:74:50:68:80:d2:fe:a8:09:ec:c4:51:7c:a8:3a: 67:95:46:10:3a:80:03:a2:37:65:bd:55:a5:67:43:05:ba:7b: 60:22:e1:ff:58:0c:eb:a9:d1:e4:56:06:16:24:ef:26:fc:9d: 9a:20:7a:55:8a:c3:1a:fa:9b:bc:8f:1f:f5:1e:9d:fa:91:d0: 96:3b:44:46:0e:2b:b7:02:f2:6d:1c:23:c6:3f:b4:9a:c5:41: a3:3c:dd:a6:95:8a:6f:a9:78:00:20:03:f6:2d:8b:8b:17:27: ca:5b:d8:29:fe:7c:f0:11:30:78:cd:10:fb:f7:84:72:30:fd: df:62:c5:bc:0a:4a:b9:06:03:00:9e:b6:f4:8e:a1:9f:87:8c: 64:62:59:71:e5:da:20:fd:2f:4d:d5:04:f8:e4:78:a6:bd:16: 87:b0:be:0e:96:e4:30:61:71:38:69:b5:0d:63:15:8d:89:a2: 9c:8d:dd:25:f3:37:d3:9c:bd:0f:ac:bd:4f:36:15:a0:0c:25: 5e:23:c8:b7:61:d9:cf:ee:e2:16:3a:52:96:50:7b:95:c6:67: a1:b2:dd:11:b1:50:4a:f2:38:b6:4e:35:52:78:ef:98:0c:ab: fc:82:18:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8dHTrltKU5fDVxy7CRltMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYzA0NGI0Yjk2ZjIxZmE5YTg0NjQ1YmQ1ZTNhOWUxOTcy MzA4MmQwHhcNMjYwMTAyMTgyMTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzg4NzNmMjk3NDg1ZTA4Y2FmOTdiZWExMDcyNGE0NjIwZDU1MTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wBuxcw6oT9Mq5ybDEdkFOJ0DLuh QRg1DcBwscsSnpG6c5nA8dZaW5HSdPkS1PWvGyZnKAoMHdX/37UbDb4eA9XMhr97 Iee29ooq4y07Rf0tD/5EaEVra0KleQkpGhIF5XlJ9ovI5BmhxFeWv7dAJx4wjryL i7O74kvEWaEuiWatsUDPw8M6LLJe6NleAsmvW9OhXaI1n6OtXM4e+cBDfkFiiB5P iLSNSjdbtAOF/RmILAxDtXsbM1CYLTaf+Jj/IVgFEnFZX4+8L4Xc9c3B3JbEwuyA f+fznX562wgX7JdznuNPDfkj4u0tbfa31ikQh0QqFMbyNLSUYFzlXRatEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFByIc/KXSF4Iyvl76hBySkYg1VGVMB8GA1UdIwQY MBaAFF7ARLS5byH6moRkW9XjqeGXIwgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHNCRXRMbHZJZnFhaEdSYjFlT3A0WmNqQ0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83N2I4NmYtN2E5NC00ODQ3LTkwM2It NjFlNGViZjY3MWFiLzEvSEloejhwZElYZ2pLLVh2cUVISktSaURWVVpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC83N2I4NmYtN2E5NC00ODQ3LTkwM2ItNjFlNGViZjY3MWFi LzEvWHNCRXRMbHZJZnFhaEdSYjFlT3A0WmNqQ0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBU/JoMA0G CSqGSIb3DQEBCwUAA4IBAQBWZJFkKmPj2fNLtbSbo1ccxRfRb9k6dFBogNL+qAns xFF8qDpnlUYQOoADojdlvVWlZ0MFuntgIuH/WAzrqdHkVgYWJO8m/J2aIHpVisMa +pu8jx/1Hp36kdCWO0RGDiu3AvJtHCPGP7SaxUGjPN2mlYpvqXgAIAP2LYuLFyfK W9gp/nzwETB4zRD794RyMP3fYsW8Ckq5BgMAnrb0jqGfh4xkYllx5dog/S9N1QT4 5HimvRaHsL4OluQwYXE4abUNYxWNiaKcjd0l8zfTnL0PrL1PNhWgDCVeI8i3YdnP 7uIWOlKWUHuVxmehst0RsVBK8ji2TjVSeO+YDKv8ghje -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:55 2026 by rpki-client