This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/hyiJPzfAptiIheKGmgXOpCc_N9s.roa File: hyiJPzfAptiIheKGmgXOpCc_N9s.roa (raw, json) Hash identifier: E8PxxP3rh4OaBNhRUw5kY24HDuRfFYWY8ni4A6l64oc= Subject key identifier: 87:28:89:3F:37:C0:A6:D8:88:85:E2:86:9A:05:CE:A4:27:3F:37:DB Certificate issuer: /CN=25a3f511d0095606a525084ae460836dc5d24397 Certificate serial: 019B7D5C0F7EE3A90B250BCB757A306951FB Authority key identifier: 25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/hyiJPzfAptiIheKGmgXOpCc_N9s.roa Signing time: Fri 02 Jan 2026 06:19:03 +0000 ROA not before: Fri 02 Jan 2026 06:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60608 IP address blocks: 185.28.120.0/24 maxlen: 24 185.28.121.0/24 maxlen: 24 185.28.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:0f:7e:e3:a9:0b:25:0b:cb:75:7a:30:69:51:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a3f511d0095606a525084ae460836dc5d24397 Validity Not Before: Jan 2 06:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8728893f37c0a6d88885e2869a05cea4273f37db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d3:13:eb:28:2b:0f:30:53:b1:f5:2f:1d:67: 38:9a:01:17:c3:47:d1:dd:c1:75:e6:cf:c6:39:d3: ef:0f:d6:a3:b5:22:4a:0e:3c:b7:df:14:9f:33:bd: db:3f:19:c5:c9:e0:e5:b3:5b:6f:f6:ad:9a:92:18: 1c:b6:44:f9:c0:f6:0e:57:fa:9b:ca:14:d7:6e:cf: cb:9c:4d:d4:c5:53:f5:4d:ac:71:90:c0:ee:bb:29: bb:0f:d9:8c:5a:fe:22:d8:01:0c:6a:d9:a3:53:7e: f8:0d:96:a3:b9:62:a5:d0:7b:94:d7:65:a1:a3:dc: 9a:7d:96:f8:16:0d:fc:e3:cf:73:bf:9b:45:eb:b6: 76:08:73:3e:63:98:50:6b:77:01:ff:1d:f8:0b:4a: 57:74:3a:9c:1d:dc:d1:00:3d:0c:d1:b1:45:f4:02: 61:be:96:c8:0a:60:2b:32:77:99:cb:5f:5d:1e:56: 66:9b:7c:7a:00:20:d6:e9:54:90:51:a5:83:24:65: 4a:4c:ed:1a:84:aa:30:10:b0:56:ed:9f:8e:14:5b: 22:b4:65:54:db:b9:7b:7a:0b:62:49:52:c1:c6:c2: 87:7d:48:bf:0a:8d:ba:cf:74:19:33:bb:02:c1:da: bd:09:13:15:8a:30:ac:a7:bc:65:f0:0e:dc:4a:b6: 03:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:28:89:3F:37:C0:A6:D8:88:85:E2:86:9A:05:CE:A4:27:3F:37:DB X509v3 Authority Key Identifier: keyid:25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/hyiJPzfAptiIheKGmgXOpCc_N9s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.28.120.0-185.28.122.255 Signature Algorithm: sha256WithRSAEncryption 60:c4:cf:fa:b8:49:23:14:c1:94:ed:bf:57:c9:e4:b9:30:1a: f7:9f:67:7f:ac:4b:f0:7b:52:f0:42:a7:79:6a:66:7c:84:8d: d7:a0:78:c3:3f:2e:8f:7d:fe:43:36:01:cd:49:8d:87:16:ae: d9:6f:48:52:e2:96:5f:d9:f3:32:c3:58:3f:0f:62:c6:9b:f0: 22:90:11:4c:9b:13:b6:d0:2f:85:8f:a9:52:7b:05:37:bf:bc: fa:65:3a:56:8f:5b:6f:98:18:2e:98:9d:f2:ea:97:fc:1f:b1: 09:4e:10:06:cc:1d:1c:36:72:91:bf:a8:db:6f:6c:86:55:b5: da:83:55:bf:0e:b4:c1:88:94:85:3c:7d:b0:49:89:28:3f:55: 10:01:7c:9d:ed:7b:1a:21:e6:40:86:ad:23:a9:4d:45:b5:23: 0c:02:11:26:df:de:99:91:2d:19:fe:91:f2:1d:9c:8a:3b:4c: da:05:23:9f:68:04:91:41:bd:74:25:0d:3e:25:bc:fb:9b:8d: b7:29:ad:01:93:b6:89:ed:84:ec:28:7f:5e:a7:03:f1:9d:3e: 53:7a:8d:42:16:3f:7c:fe:18:de:d1:f6:7e:ed:b8:61:3d:28: 42:67:e4:c2:13:7d:c2:d6:39:fa:dd:f4:9c:34:03:3c:99:02: d2:be:a9:1a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9XA9+46kLJQvLdXowaVH7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YTNmNTExZDAwOTU2MDZhNTI1MDg0YWU0NjA4MzZkYzVk MjQzOTcwHhcNMjYwMTAyMDYxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzI4ODkzZjM3YzBhNmQ4ODg4NWUyODY5YTA1Y2VhNDI3M2YzN2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9MT6ygrDzBTsfUvHWc4mgEXw0fR 3cF15s/GOdPvD9ajtSJKDjy33xSfM73bPxnFyeDls1tv9q2akhgctkT5wPYOV/qb yhTXbs/LnE3UxVP1TaxxkMDuuym7D9mMWv4i2AEMatmjU374DZajuWKl0HuU12Wh o9yafZb4Fg38489zv5tF67Z2CHM+Y5hQa3cB/x34C0pXdDqcHdzRAD0M0bFF9AJh vpbICmArMneZy19dHlZmm3x6ACDW6VSQUaWDJGVKTO0ahKowELBW7Z+OFFsitGVU 27l7egtiSVLBxsKHfUi/Co26z3QZM7sCwdq9CRMVijCsp7xl8A7cSrYD5wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIcoiT83wKbYiIXihpoFzqQnPzfbMB8GA1UdIwQY MBaAFCWj9RHQCVYGpSUISuRgg23F0kOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmFQMUVkQUpWZ2FsSlFoSzVHQ0RiY1hTUTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kOGIwMDktZDkyMy00YmZmLWE4MmYt ZThiNzBhYTQ0MmZkLzEvaHlpSlB6ZkFwdGlJaGVLR21nWE9wQ2NfTjlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kOGIwMDktZDkyMy00YmZmLWE4MmYtZThiNzBhYTQ0MmZk LzEvSmFQMUVkQUpWZ2FsSlFoSzVHQ0RiY1hTUTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO5HHgD BAC5HHowDQYJKoZIhvcNAQELBQADggEBAGDEz/q4SSMUwZTtv1fJ5LkwGvefZ3+s S/B7UvBCp3lqZnyEjdegeMM/Lo99/kM2Ac1JjYcWrtlvSFLill/Z8zLDWD8PYsab 8CKQEUybE7bQL4WPqVJ7BTe/vPplOlaPW2+YGC6YnfLql/wfsQlOEAbMHRw2cpG/ qNtvbIZVtdqDVb8OtMGIlIU8fbBJiSg/VRABfJ3texoh5kCGrSOpTUW1IwwCESbf 3pmRLRn+kfIdnIo7TNoFI59oBJFBvXQlDT4lvPubjbcprQGTtonthOwof16nA/Gd PlN6jUIWP3z+GN7R9n7tuGE9KEJn5MITfcLWOfrd9Jw0AzyZAtK+qRo= -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:01 2026 by rpki-client