This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/hdfHlp9X2wMs9YL8yldtpHWheV8.roa File: hdfHlp9X2wMs9YL8yldtpHWheV8.roa (raw, json) Hash identifier: Pv6P2CmLu762uZLyxGq9eFFRzEqg1ASmUsEfElOD4ZA= Subject key identifier: 85:D7:C7:96:9F:57:DB:03:2C:F5:82:FC:CA:57:6D:A4:75:A1:79:5F Certificate issuer: /CN=37af48131ecd9dca3def2b2de788f15060627755 Certificate serial: 019B7EA710E831743E8EF4B4A44594A6BB32 Authority key identifier: 37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/hdfHlp9X2wMs9YL8yldtpHWheV8.roa Signing time: Fri 02 Jan 2026 12:20:36 +0000 ROA not before: Fri 02 Jan 2026 12:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12388 IP address blocks: 83.220.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:10:e8:31:74:3e:8e:f4:b4:a4:45:94:a6:bb:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37af48131ecd9dca3def2b2de788f15060627755 Validity Not Before: Jan 2 12:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85d7c7969f57db032cf582fcca576da475a1795f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:44:45:ba:f4:e7:7f:58:35:0c:85:75:9e:43: 5a:08:72:4f:88:5b:20:31:07:e4:96:fe:e7:a7:4f: 57:6c:3a:0d:27:7c:e4:00:7c:0e:8f:25:fd:87:5f: 40:6d:10:dd:06:c6:bd:87:05:7d:e4:45:43:25:ad: 8e:d6:07:68:2e:58:63:0b:17:a8:77:c5:2e:e1:1c: 1e:89:d2:fd:c5:59:d5:e9:cc:0b:f6:f9:d9:4e:dd: 24:5a:c8:6d:0c:33:e9:b5:91:a1:e8:97:90:3e:fb: 04:22:22:37:5d:39:bf:a9:dc:83:8c:4d:21:e2:f6: e9:54:29:5e:c3:fb:6e:88:77:48:c1:b9:2b:42:f1: bd:9d:5d:c7:62:15:f8:ff:b4:9c:1d:b0:94:d7:f0: 42:df:d6:3e:37:5a:f3:12:b3:fe:a0:fa:ca:dd:66: e5:dd:ff:9b:03:47:19:9c:7e:bf:2b:90:8b:75:b7: 26:4a:be:40:a1:1a:3b:73:19:86:ef:90:eb:55:62: 57:35:ef:13:da:74:11:b5:12:39:ff:01:82:6a:55: 17:92:8b:76:89:05:75:32:d5:85:55:9c:51:77:1e: 97:a9:07:ee:7e:26:bc:f9:b0:fd:f0:c4:8b:81:09: bb:ab:75:a4:df:fa:6a:cf:74:e6:70:3e:30:f9:db: 8f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D7:C7:96:9F:57:DB:03:2C:F5:82:FC:CA:57:6D:A4:75:A1:79:5F X509v3 Authority Key Identifier: keyid:37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/hdfHlp9X2wMs9YL8yldtpHWheV8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.220.192.0/19 Signature Algorithm: sha256WithRSAEncryption 43:7a:7f:b0:50:08:6a:19:f2:e1:2d:55:3d:4b:6e:aa:3e:99: 7c:c4:cc:78:24:49:c1:85:60:96:e7:3e:cd:4c:87:f5:c5:6f: be:ed:eb:03:3b:bf:e7:48:27:a7:3a:06:e9:d3:82:99:af:b6: eb:3f:a4:8b:68:7c:7e:f4:6a:a8:b8:e3:61:d9:83:f2:21:2c: 30:d7:b7:d5:bb:ab:7d:d6:91:83:8e:1f:16:04:82:e8:aa:ef: 0a:ee:4a:18:4d:c6:43:e7:82:6e:9c:4e:c4:1f:1a:7e:9c:37: d2:bb:fa:7c:1c:fa:b9:0f:19:42:d0:f9:7a:f3:42:40:55:c4: a5:95:17:bb:fd:e1:a6:56:cc:63:d1:1f:dd:48:b2:0a:6a:3f: b9:96:75:74:b5:6a:35:ff:44:ce:a9:1d:e4:a9:81:55:47:bf: 6b:e6:03:a0:6d:02:21:b3:dc:9f:d7:ad:a3:04:f3:6e:02:b9: 5d:b5:2c:7a:34:f4:51:97:71:36:23:f7:8a:af:4a:31:f8:98: 9d:82:2d:13:87:5e:24:f2:60:ae:e3:28:d5:16:da:1e:80:40: c8:12:a6:03:27:8d:6c:04:85:80:5f:b1:c5:11:39:95:27:60: 6a:b9:ad:98:47:2e:9f:bc:a8:bb:3d:87:cd:2b:f5:4e:84:ed: e3:20:3d:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pxDoMXQ+jvS0pEWUprsyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YWY0ODEzMWVjZDlkY2EzZGVmMmIyZGU3ODhmMTUwNjA2 Mjc3NTUwHhcNMjYwMTAyMTIyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWQ3Yzc5NjlmNTdkYjAzMmNmNTgyZmNjYTU3NmRhNDc1YTE3OTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0RFuvTnf1g1DIV1nkNaCHJPiFsg MQfklv7np09XbDoNJ3zkAHwOjyX9h19AbRDdBsa9hwV95EVDJa2O1gdoLlhjCxeo d8Uu4RweidL9xVnV6cwL9vnZTt0kWshtDDPptZGh6JeQPvsEIiI3XTm/qdyDjE0h 4vbpVClew/tuiHdIwbkrQvG9nV3HYhX4/7ScHbCU1/BC39Y+N1rzErP+oPrK3Wbl 3f+bA0cZnH6/K5CLdbcmSr5AoRo7cxmG75DrVWJXNe8T2nQRtRI5/wGCalUXkot2 iQV1MtWFVZxRdx6XqQfufia8+bD98MSLgQm7q3Wk3/pqz3TmcD4w+duPnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIXXx5afV9sDLPWC/MpXbaR1oXlfMB8GA1UdIwQY MBaAFDevSBMezZ3KPe8rLeeI8VBgYndVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjY5SUV4N05uY285N3lzdDU0anhVR0JpZDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zNWZhZWQtYzJkNy00Y2I5LTk3ZjUt ZGY2ZjIwZGNiOTRiLzEvaGRmSGxwOVgyd01zOVlMOHlsZHRwSFdoZVY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zNWZhZWQtYzJkNy00Y2I5LTk3ZjUtZGY2ZjIwZGNiOTRi LzEvTjY5SUV4N05uY285N3lzdDU0anhVR0JpZDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFU9zAMA0G CSqGSIb3DQEBCwUAA4IBAQBDen+wUAhqGfLhLVU9S26qPpl8xMx4JEnBhWCW5z7N TIf1xW++7esDO7/nSCenOgbp04KZr7brP6SLaHx+9GqouONh2YPyISww17fVu6t9 1pGDjh8WBILoqu8K7koYTcZD54JunE7EHxp+nDfSu/p8HPq5DxlC0Pl680JAVcSl lRe7/eGmVsxj0R/dSLIKaj+5lnV0tWo1/0TOqR3kqYFVR79r5gOgbQIhs9yf162j BPNuArldtSx6NPRRl3E2I/eKr0ox+Jidgi0Th14k8mCu4yjVFtoegEDIEqYDJ41s BIWAX7HFETmVJ2Bqua2YRy6fvKi7PYfNK/VOhO3jID0d -----END CERTIFICATE-----Generated at Sat Jan 10 06:59:46 2026 by rpki-client