This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/HRoz101M-lrveZcnNZV2uhsvCkc.roa File: HRoz101M-lrveZcnNZV2uhsvCkc.roa (raw, json) Hash identifier: +IbJA51Ocg1tdb7H8y8jxMvadpEzbmCyGmXt8WGHMKk= Subject key identifier: 1D:1A:33:D7:4D:4C:FA:5A:EF:79:97:27:35:95:76:BA:1B:2F:0A:47 Certificate issuer: /CN=8d842656177b4267ab55e4ba165a5ec00f5084bc Certificate serial: 019B7A5B4B626FD68DD333057D0DA9172D25 Authority key identifier: 8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/HRoz101M-lrveZcnNZV2uhsvCkc.roa Signing time: Thu 01 Jan 2026 16:19:21 +0000 ROA not before: Thu 01 Jan 2026 16:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31183 IP address blocks: 109.235.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4b:62:6f:d6:8d:d3:33:05:7d:0d:a9:17:2d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d842656177b4267ab55e4ba165a5ec00f5084bc Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d1a33d74d4cfa5aef799727359576ba1b2f0a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:77:9c:39:89:d9:d8:c9:75:7c:ec:88:54:b2: e9:2c:b4:fa:7a:6d:9a:41:11:1e:a3:c7:98:c7:7c: c2:6e:9b:12:01:4e:88:48:88:65:56:7e:a8:64:2c: 2c:bb:0c:13:cd:c8:58:4b:49:47:17:7a:c9:e2:e8: a5:ee:70:c5:12:84:46:a1:59:be:8d:6f:cb:f2:15: 27:18:5c:b6:94:bb:75:ab:9e:e2:45:f5:a6:59:e3: 9f:7b:30:30:3c:aa:5f:e2:09:6c:43:bd:78:c1:50: 2e:a7:3a:74:47:d0:4f:80:85:eb:0b:64:be:1d:22: 6c:20:f1:7a:59:23:06:13:a6:b7:2e:86:85:47:e4: 51:4e:68:c7:b3:5b:a1:de:b3:10:2b:67:6a:79:57: 01:15:98:19:b1:28:65:6f:d8:86:14:59:e6:7c:8d: c1:57:67:bf:89:a2:4e:03:1f:25:1f:ae:0a:fa:34: 67:73:4d:d3:9c:10:b7:51:e3:f0:92:3b:41:6a:ee: ae:80:c2:4d:d6:d7:1b:29:e3:8a:24:f1:56:c2:85: 71:b3:bf:43:2d:bd:0a:25:32:45:a6:ba:0a:dd:a2: 02:f3:5b:38:76:51:70:6c:73:eb:b8:84:31:65:f0: 49:ab:14:71:e8:1a:95:eb:25:b5:fd:99:c3:c9:31: 03:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1A:33:D7:4D:4C:FA:5A:EF:79:97:27:35:95:76:BA:1B:2F:0A:47 X509v3 Authority Key Identifier: keyid:8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/HRoz101M-lrveZcnNZV2uhsvCkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.235.208.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:01:33:7e:a2:28:09:83:79:7d:ab:19:85:01:cc:d0:68:43: 3b:7c:2f:6a:f9:d6:d0:2f:26:0a:28:5c:82:84:3b:80:37:0c: 83:0f:31:3c:c0:67:aa:ee:35:80:cd:48:0c:bd:fb:06:14:39: cb:0a:6a:a8:f5:9c:71:de:32:68:01:7c:e1:cb:4d:f7:c3:2b: 22:79:1d:50:82:a8:71:b6:e8:1c:64:38:9c:9c:a3:0b:60:77: a1:27:80:d0:1c:0f:bf:41:a7:83:d5:e3:bc:34:a2:18:1d:85: 0e:d8:08:52:be:af:52:55:2a:0f:f4:ef:78:9b:dd:cc:34:fa: 13:9a:2e:53:d3:61:d8:63:d6:26:4c:55:33:e7:c7:b9:b9:5b: 5a:01:04:bf:bf:0b:b8:c0:38:21:8a:d6:60:f8:e8:5f:2d:87: 1e:88:bb:df:71:6d:73:9d:01:23:50:77:1d:6a:20:f0:4a:14: fc:c4:34:67:21:39:99:7b:d5:75:cb:20:10:35:03:cb:66:6c: 3d:db:d3:a8:2c:50:b3:e0:9e:16:59:41:e2:59:18:2f:12:52: 01:07:d2:31:cc:5e:96:c4:cc:16:e4:a9:33:69:02:fc:47:d5: d7:f3:34:54:3a:1f:7e:e1:bb:5c:fb:08:2c:6d:89:fd:db:24: 82:f1:bd:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W0tib9aN0zMFfQ2pFy0lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODQyNjU2MTc3YjQyNjdhYjU1ZTRiYTE2NWE1ZWMwMGY1 MDg0YmMwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDFhMzNkNzRkNGNmYTVhZWY3OTk3MjczNTk1NzZiYTFiMmYwYTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0necOYnZ2Ml1fOyIVLLpLLT6em2a QREeo8eYx3zCbpsSAU6ISIhlVn6oZCwsuwwTzchYS0lHF3rJ4uil7nDFEoRGoVm+ jW/L8hUnGFy2lLt1q57iRfWmWeOfezAwPKpf4glsQ714wVAupzp0R9BPgIXrC2S+ HSJsIPF6WSMGE6a3LoaFR+RRTmjHs1uh3rMQK2dqeVcBFZgZsShlb9iGFFnmfI3B V2e/iaJOAx8lH64K+jRnc03TnBC3UePwkjtBau6ugMJN1tcbKeOKJPFWwoVxs79D Lb0KJTJFproK3aIC81s4dlFwbHPruIQxZfBJqxRx6BqV6yW1/ZnDyTED4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB0aM9dNTPpa73mXJzWVdrobLwpHMB8GA1UdIwQY MBaAFI2EJlYXe0Jnq1XkuhZaXsAPUIS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallRbVZoZDdRbWVyVmVTNkZscGV3QTlRaEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MzYwZWMtOWNkMS00YzAwLTg2Njgt OTRjMmY4MjY5ZTljLzEvSFJvejEwMU0tbHJ2ZVpjbk5aVjJ1aHN2Q2tjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS85MzYwZWMtOWNkMS00YzAwLTg2NjgtOTRjMmY4MjY5ZTlj LzEvallRbVZoZDdRbWVyVmVTNkZscGV3QTlRaEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbevQMA0G CSqGSIb3DQEBCwUAA4IBAQAaATN+oigJg3l9qxmFAczQaEM7fC9q+dbQLyYKKFyC hDuANwyDDzE8wGeq7jWAzUgMvfsGFDnLCmqo9Zxx3jJoAXzhy033wysieR1Qgqhx tugcZDicnKMLYHehJ4DQHA+/QaeD1eO8NKIYHYUO2AhSvq9SVSoP9O94m93MNPoT mi5T02HYY9YmTFUz58e5uVtaAQS/vwu4wDghitZg+OhfLYceiLvfcW1znQEjUHcd aiDwShT8xDRnITmZe9V1yyAQNQPLZmw929OoLFCz4J4WWUHiWRgvElIBB9IxzF6W xMwW5KkzaQL8R9XX8zRUOh9+4btc+wgsbYn92ySC8b04 -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:37 2026 by rpki-client