This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/hZKAqR6QknkFASXf8FpEd_mKZFc.roa File: hZKAqR6QknkFASXf8FpEd_mKZFc.roa (raw, json) Hash identifier: KzMYcZGAhPvDwgQOpxUt3D4xmzyN9ctcfUksHbupIAI= Subject key identifier: 85:92:80:A9:1E:90:92:79:05:01:25:DF:F0:5A:44:77:F9:8A:64:57 Certificate issuer: /CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5 Certificate serial: 019B7CED12DA33F276950A09A23E5BD72525 Authority key identifier: 46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/hZKAqR6QknkFASXf8FpEd_mKZFc.roa Signing time: Fri 02 Jan 2026 04:17:50 +0000 ROA not before: Fri 02 Jan 2026 04:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207851 IP address blocks: 193.105.208.0/24 maxlen: 24 193.105.217.0/24 maxlen: 24 193.105.250.0/24 maxlen: 24 193.106.239.0/24 maxlen: 24 2a0f:8b40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:12:da:33:f2:76:95:0a:09:a2:3e:5b:d7:25:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5 Validity Not Before: Jan 2 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=859280a91e909279050125dff05a4477f98a6457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ea:f0:67:11:ec:14:8d:33:79:92:00:ad:a7: b9:15:4f:79:47:78:65:44:3e:f1:d0:ca:d2:5d:1c: f8:99:25:32:a0:ff:c2:0e:16:df:63:57:88:fe:f0: d5:46:2c:e0:bc:98:86:8b:82:c6:d9:f1:ee:41:03: 1c:aa:63:d1:7b:52:3c:2a:d4:f2:42:3b:b1:e8:ef: 90:1f:ab:35:f7:14:63:35:86:d4:fe:77:d6:09:31: 1a:0a:63:6f:9f:51:a0:2a:73:db:cd:d6:7f:4a:cf: 9a:91:24:ab:a3:92:d4:f5:70:6c:e2:af:13:f8:97: 4f:da:6a:c7:d6:b2:4d:03:71:4d:e2:5d:93:b5:3f: d1:d1:42:91:92:cc:60:7a:95:98:3a:31:ba:88:a9: 92:50:6d:9f:b7:c7:da:dd:5f:f8:0e:38:21:9f:21: 80:31:ce:82:97:b6:a8:6d:c4:ae:c8:66:cc:2d:1b: 10:f1:12:a2:e9:fc:2f:5c:dd:65:e9:de:81:96:e5: 73:d1:71:a0:01:87:15:4e:8c:5f:1a:6c:4f:c7:8d: 5a:ed:85:a2:7e:02:8a:3c:2f:b5:8b:29:d2:7a:e1: a7:c6:e4:63:1a:38:9d:f5:38:80:70:38:59:16:db: 78:8a:14:bd:cd:fc:79:14:f9:d0:23:33:a7:4f:0e: e8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:92:80:A9:1E:90:92:79:05:01:25:DF:F0:5A:44:77:F9:8A:64:57 X509v3 Authority Key Identifier: keyid:46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/hZKAqR6QknkFASXf8FpEd_mKZFc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.208.0/24 193.105.217.0/24 193.105.250.0/24 193.106.239.0/24 IPv6: 2a0f:8b40::/29 Signature Algorithm: sha256WithRSAEncryption 87:cd:49:3e:1d:54:e2:97:e0:51:f7:ee:4c:da:18:96:bb:6c: 83:51:65:04:d5:76:44:ad:0b:96:13:87:76:23:fb:9a:7d:99: 6d:06:06:a4:8c:77:81:87:89:48:78:5a:7d:7b:0f:42:7c:2b: db:37:24:52:04:83:cd:8a:fd:b1:69:ea:9a:ba:f6:e1:f8:a6: d5:90:8b:87:6d:3f:b8:7d:1e:29:05:4c:e4:0a:84:76:9e:ef: 45:3c:e2:f5:07:f9:d6:3e:6b:ae:40:21:51:eb:95:d0:b0:07: 07:d4:df:90:da:4e:a0:d2:83:bb:90:4f:ef:4b:77:6f:5a:ca: fc:84:15:cf:d4:f7:ed:97:17:39:74:22:07:5f:08:49:84:24: f0:9e:da:e8:68:01:a8:c2:90:9a:b1:83:0d:ec:5a:e2:d2:ec: 11:04:06:c1:41:f6:11:39:5a:08:61:0d:ba:0a:34:a8:ba:ae: 58:f2:4a:fa:22:99:3b:c9:ad:31:8b:7d:c3:c7:44:a7:9a:01: 7e:b9:97:ea:f1:fc:9c:d6:da:64:00:0e:f5:1c:a0:92:e7:1c: cd:14:c0:12:93:f9:5a:9c:a5:ac:fa:88:12:1c:0f:65:90:81: ff:90:b4:00:9d:84:bc:7e:b0:3e:20:dd:e1:32:fa:d9:05:30: dc:57:39:94 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt87RLaM/J2lQoJoj5b1yUlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MTIwN2EzZWVmMmI0NGY4ZTI3MzFiN2IwYWM3ZDE3MTZl MzU1YzUwHhcNMjYwMTAyMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTkyODBhOTFlOTA5Mjc5MDUwMTI1ZGZmMDVhNDQ3N2Y5OGE2NDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuerwZxHsFI0zeZIArae5FU95R3hl RD7x0MrSXRz4mSUyoP/CDhbfY1eI/vDVRizgvJiGi4LG2fHuQQMcqmPRe1I8KtTy Qjux6O+QH6s19xRjNYbU/nfWCTEaCmNvn1GgKnPbzdZ/Ss+akSSro5LU9XBs4q8T +JdP2mrH1rJNA3FN4l2TtT/R0UKRksxgepWYOjG6iKmSUG2ft8fa3V/4DjghnyGA Mc6Cl7aobcSuyGbMLRsQ8RKi6fwvXN1l6d6BluVz0XGgAYcVToxfGmxPx41a7YWi fgKKPC+1iynSeuGnxuRjGjid9TiAcDhZFtt4ihS9zfx5FPnQIzOnTw7oVwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFIWSgKkekJJ5BQEl3/BaRHf5imRXMB8GA1UdIwQY MBaAFEYSB6Pu8rRPjicxt7CsfRcW41XFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zOGMxOTgtMGYxYi00YzU5LTgxZmUt MWM4Y2U3YzMzYWMwLzEvaFpLQXFSNlFrbmtGQVNYZjhGcEVkX21LWkZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zOGMxOTgtMGYxYi00YzU5LTgxZmUtMWM4Y2U3YzMzYWMw LzEvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAwWnQAwQA wWnZAwQAwWn6AwQAwWrvMA0EAgACMAcDBQMqD4tAMA0GCSqGSIb3DQEBCwUAA4IB AQCHzUk+HVTil+BR9+5M2hiWu2yDUWUE1XZErQuWE4d2I/uafZltBgakjHeBh4lI eFp9ew9CfCvbNyRSBIPNiv2xaeqauvbh+KbVkIuHbT+4fR4pBUzkCoR2nu9FPOL1 B/nWPmuuQCFR65XQsAcH1N+Q2k6g0oO7kE/vS3dvWsr8hBXP1Pftlxc5dCIHXwhJ hCTwntroaAGowpCasYMN7Fri0uwRBAbBQfYROVoIYQ26CjSouq5Y8kr6Ipk7ya0x i33Dx0SnmgF+uZfq8fyc1tpkAA71HKCS5xzNFMASk/lanKWs+ogSHA9lkIH/kLQA nYS8frA+IN3hMvrZBTDcVzmU -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:20 2026 by rpki-client