This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/8HWIcI9N3AE2x8zYy673Vd_4kfo.roa File: 8HWIcI9N3AE2x8zYy673Vd_4kfo.roa (raw, json) Hash identifier: LN2KpWeg+Ys04Rwx9lWA0rODgISnXB2tF8WbAfHw9WY= Subject key identifier: F0:75:88:70:8F:4D:DC:01:36:C7:CC:D8:CB:AE:F7:55:DF:F8:91:FA Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 019B7C1283DB782DEA92F726DE08DE7A3C72 Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/8HWIcI9N3AE2x8zYy673Vd_4kfo.roa Signing time: Fri 02 Jan 2026 00:19:06 +0000 ROA not before: Fri 02 Jan 2026 00:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44587 IP address blocks: 217.151.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:83:db:78:2d:ea:92:f7:26:de:08:de:7a:3c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Jan 2 00:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f07588708f4ddc0136c7ccd8cbaef755dff891fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:09:ab:27:c1:68:f6:54:8e:57:97:6d:68:36: 24:eb:e7:f6:2b:09:ba:ca:88:7f:b7:10:89:fd:8c: 9a:f5:79:e0:76:b2:76:45:d5:4c:d6:60:8e:44:d8: 86:36:da:8d:c4:64:9e:95:3c:44:9c:52:43:08:1d: 91:f5:ba:f4:de:d3:3c:20:ea:60:96:0b:3c:9e:a8: 3d:1c:77:73:38:19:ca:c4:e0:30:93:29:32:33:48: da:96:73:d9:03:8b:91:06:4e:e7:dc:f2:6b:3f:cf: 39:8c:c8:ae:36:1b:63:2b:83:37:9c:05:30:bf:64: 95:b2:4c:32:78:ba:f4:06:29:3d:ce:ee:a9:51:ab: b2:79:3d:c9:9d:c1:73:f8:2f:f1:86:15:82:aa:c8: 13:39:4f:42:f1:6d:ad:11:ba:b4:1c:0a:a5:97:61: ff:38:9a:65:69:a7:e0:8f:93:46:1b:36:7f:a6:06: 13:c4:c5:c6:72:39:df:60:92:15:74:26:bc:92:17: 41:f6:b8:1f:0b:22:3b:fd:36:5f:b4:6c:e9:2a:08: d6:2b:b6:ce:6e:d6:08:9c:24:ea:b9:49:d1:ad:dd: f6:58:c1:56:17:76:c6:dd:67:24:07:0b:d3:f4:ec: 8b:a1:6e:77:78:10:d7:af:92:1f:0c:a6:b7:a0:d3: 6f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:75:88:70:8F:4D:DC:01:36:C7:CC:D8:CB:AE:F7:55:DF:F8:91:FA X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/8HWIcI9N3AE2x8zYy673Vd_4kfo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.151.228.0/24 Signature Algorithm: sha256WithRSAEncryption 06:16:74:fa:53:45:74:79:0f:e7:82:16:dc:f5:5c:b1:ed:fe: 34:66:69:2f:b8:9a:e7:fd:56:3e:a7:79:b9:f3:48:4b:8b:91: 17:c3:21:aa:e4:87:16:7f:b2:84:0e:d7:a6:d5:4d:e2:89:74: 13:eb:dd:2f:e4:c2:f2:ec:0b:d2:0e:f6:56:e7:0a:fc:36:1e: 60:bb:52:02:1d:f2:b7:15:35:9c:e4:4e:ea:11:e0:82:a4:39: 55:d8:7d:22:ea:e3:20:a3:ab:43:37:29:f7:bd:50:6b:ea:ed: 74:b6:03:e7:24:fa:81:89:a2:05:98:83:b7:89:df:fd:11:f0: 58:f8:da:46:b6:8b:39:09:40:df:06:9e:34:a7:e6:f2:58:82: f0:92:04:69:45:ee:55:35:7f:ac:c2:d1:39:b7:a7:72:c9:33: 25:4c:5f:8b:0e:ae:35:c8:2f:39:b6:33:2e:85:21:d7:e3:9f: dc:53:ff:9f:ea:78:8f:d5:c1:b7:49:41:f7:22:8b:55:20:2a: 73:30:0b:2c:46:0b:3f:e5:69:ee:5b:60:63:43:53:d7:e8:37: 27:68:ba:d2:bb:22:ef:6f:96:aa:67:5a:7c:32:85:36:af:36: ff:82:84:fb:78:4e:c9:4c:46:d5:34:e3:81:c2:6b:cc:2e:a7: 0a:12:64:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EoPbeC3qkvcm3gjeejxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjYwMTAyMDAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDc1ODg3MDhmNGRkYzAxMzZjN2NjZDhjYmFlZjc1NWRmZjg5MWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AmrJ8Fo9lSOV5dtaDYk6+f2Kwm6 yoh/txCJ/Yya9XngdrJ2RdVM1mCORNiGNtqNxGSelTxEnFJDCB2R9br03tM8IOpg lgs8nqg9HHdzOBnKxOAwkykyM0jalnPZA4uRBk7n3PJrP885jMiuNhtjK4M3nAUw v2SVskwyeLr0Bik9zu6pUauyeT3JncFz+C/xhhWCqsgTOU9C8W2tEbq0HAqll2H/ OJplaafgj5NGGzZ/pgYTxMXGcjnfYJIVdCa8khdB9rgfCyI7/TZftGzpKgjWK7bO btYInCTquUnRrd32WMFWF3bG3WckBwvT9OyLoW53eBDXr5IfDKa3oNNvAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPB1iHCPTdwBNsfM2Muu91Xf+JH6MB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvOEhXSWNJOU4zQUUyeDh6WXk2NzNWZF80a2ZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZfkMA0G CSqGSIb3DQEBCwUAA4IBAQAGFnT6U0V0eQ/nghbc9Vyx7f40ZmkvuJrn/VY+p3m5 80hLi5EXwyGq5IcWf7KEDtem1U3iiXQT690v5MLy7AvSDvZW5wr8Nh5gu1ICHfK3 FTWc5E7qEeCCpDlV2H0i6uMgo6tDNyn3vVBr6u10tgPnJPqBiaIFmIO3id/9EfBY +NpGtos5CUDfBp40p+byWILwkgRpRe5VNX+swtE5t6dyyTMlTF+LDq41yC85tjMu hSHX45/cU/+f6niP1cG3SUH3IotVICpzMAssRgs/5WnuW2BjQ1PX6DcnaLrSuyLv b5aqZ1p8MoU2rzb/goT7eE7JTEbVNOOBwmvMLqcKEmSf -----END CERTIFICATE-----Generated at Sun Jan 25 12:15:30 2026 by rpki-client