This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Hj6nzyLI9s3cGSdtL8pcj96ba04.roa File: Hj6nzyLI9s3cGSdtL8pcj96ba04.roa (raw, json) Hash identifier: XHGzTV2Ndlu7f8EQVDrhIFGwYLL0QZ69JoM3Gi6icJI= Subject key identifier: 1E:3E:A7:CF:22:C8:F6:CD:DC:19:27:6D:2F:CA:5C:8F:DE:9B:6B:4E Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C131896702119C528F7840F63DD7DA6 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Hj6nzyLI9s3cGSdtL8pcj96ba04.roa Signing time: Fri 02 Jan 2026 00:19:44 +0000 ROA not before: Fri 02 Jan 2026 00:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12541 IP address blocks: 45.83.50.0/23 maxlen: 23 45.83.50.0/24 maxlen: 24 45.83.51.0/24 maxlen: 24 80.66.112.0/23 maxlen: 23 80.66.114.0/24 maxlen: 24 80.66.115.0/24 maxlen: 24 80.66.117.0/24 maxlen: 24 80.66.118.0/24 maxlen: 24 80.66.119.0/24 maxlen: 24 80.66.120.0/23 maxlen: 23 80.66.120.0/24 maxlen: 24 80.66.121.0/24 maxlen: 24 80.66.122.0/24 maxlen: 24 80.66.123.0/24 maxlen: 24 80.66.124.0/24 maxlen: 24 80.66.125.0/24 maxlen: 24 80.66.126.0/24 maxlen: 24 80.66.127.0/24 maxlen: 24 89.42.70.0/24 maxlen: 24 89.44.150.0/24 maxlen: 24 89.44.151.0/24 maxlen: 24 89.45.208.0/24 maxlen: 24 91.132.28.0/23 maxlen: 23 91.132.31.0/24 maxlen: 24 94.198.47.0/24 maxlen: 24 178.19.34.0/24 maxlen: 24 178.19.35.0/24 maxlen: 24 178.19.44.0/24 maxlen: 24 178.19.45.0/24 maxlen: 24 178.19.46.0/24 maxlen: 24 178.19.47.0/24 maxlen: 24 185.71.28.0/24 maxlen: 24 185.203.21.0/24 maxlen: 24 185.203.22.0/24 maxlen: 24 185.203.23.0/24 maxlen: 24 185.229.215.0/24 maxlen: 24 185.242.175.0/24 maxlen: 24 193.178.212.0/24 maxlen: 24 193.178.218.0/24 maxlen: 24 193.186.1.0/24 maxlen: 24 193.186.11.0/24 maxlen: 24 194.15.140.0/24 maxlen: 24 194.15.146.0/24 maxlen: 24 194.15.182.0/24 maxlen: 24 194.15.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:18:96:70:21:19:c5:28:f7:84:0f:63:dd:7d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e3ea7cf22c8f6cddc19276d2fca5c8fde9b6b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e0:5e:ac:0f:a4:48:f8:9d:fd:f8:57:56:45: 8e:c9:3f:40:04:af:dc:92:5d:17:e7:63:28:60:95: 57:bc:80:5f:c6:62:a2:b9:3a:3f:79:a3:a4:fa:d1: a3:c6:43:82:80:57:80:69:d9:31:d7:fa:2e:db:bd: 55:82:2e:99:66:76:12:93:11:25:a6:d7:c9:81:57: 10:36:a6:12:f8:64:9f:91:9b:2a:c8:e3:d4:e4:3c: ae:2e:19:ed:71:53:8b:b0:72:33:8a:4f:20:03:25: 01:16:fe:06:a6:09:5f:4a:eb:76:75:1c:80:6f:e9: d4:fc:b3:4d:b4:7b:3c:c4:a2:cc:ad:4b:7c:44:aa: ad:be:7b:d1:1c:5d:ac:7c:98:03:47:f3:8b:6a:a4: 3a:57:0f:46:25:e7:67:fa:22:4d:79:9d:a2:d2:6a: f9:59:04:33:e7:79:11:67:a4:96:41:80:0a:1e:e8: 94:d7:c4:d4:c0:20:3e:8d:ee:26:f6:8e:90:4a:df: 45:56:82:3d:b6:66:80:3c:58:13:50:2a:3d:53:93: ed:8d:e7:b1:a7:71:50:dc:52:5e:c6:c2:96:f0:6c: b9:88:d1:63:c9:4b:95:3c:29:a0:ca:e8:c0:d5:78: 6d:3b:06:ce:d3:d0:7c:ac:75:42:b9:b6:fb:fc:15: 5f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3E:A7:CF:22:C8:F6:CD:DC:19:27:6D:2F:CA:5C:8F:DE:9B:6B:4E X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Hj6nzyLI9s3cGSdtL8pcj96ba04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.50.0/23 80.66.112.0/22 80.66.117.0-80.66.127.255 89.42.70.0/24 89.44.150.0/23 89.45.208.0/24 91.132.28.0/23 91.132.31.0/24 94.198.47.0/24 178.19.34.0/23 178.19.44.0/22 185.71.28.0/24 185.203.21.0-185.203.23.255 185.229.215.0/24 185.242.175.0/24 193.178.212.0/24 193.178.218.0/24 193.186.1.0/24 193.186.11.0/24 194.15.140.0/24 194.15.146.0/24 194.15.182.0/24 194.15.195.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:5c:b8:80:33:e7:f5:28:74:95:8e:26:7d:7f:5f:f8:d5:09: 96:52:db:b0:a6:77:ef:9a:2d:af:12:78:57:4c:e1:8f:37:be: 27:60:71:44:57:44:52:86:67:c0:dc:9f:7e:bb:83:70:09:24: ba:d8:7e:e5:c7:8d:cd:b8:34:46:75:3c:8b:f2:9b:55:cf:12: af:ec:b6:20:dd:04:2e:a0:3c:e7:f0:c3:48:93:4a:80:85:84: 16:ed:93:5d:02:01:b3:40:a1:50:17:71:b9:06:c0:34:83:04: fc:68:c3:16:1b:7c:ee:87:b3:0c:88:b4:89:b3:8a:3d:e0:71: 66:49:bc:95:31:90:cd:c7:2c:15:c0:27:9d:59:c6:24:37:d6: 49:3c:29:3f:dc:de:8b:47:af:9b:42:f4:f0:71:c1:a2:ae:05: 91:aa:48:9c:25:ba:78:3b:7e:5f:e2:d9:89:0b:62:71:1a:52: 6a:0f:e7:49:64:06:3b:5b:da:b2:7c:b2:54:b6:bb:38:cd:79: ac:a8:b0:97:96:33:db:4e:7b:d7:e8:8d:da:99:56:38:34:32: 83:b4:73:63:7f:9a:6b:89:c5:84:7f:ea:5a:e0:99:13:f5:97: b8:dd:c4:11:e8:32:32:27:2d:64:11:09:d0:93:47:9d:02:68: b9:bf:08:a9 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgISAZt8ExiWcCEZxSj3hA9j3X2mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTNlYTdjZjIyYzhmNmNkZGMxOTI3NmQyZmNhNWM4ZmRlOWI2YjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuBerA+kSPid/fhXVkWOyT9ABK/c kl0X52MoYJVXvIBfxmKiuTo/eaOk+tGjxkOCgFeAadkx1/ou271Vgi6ZZnYSkxEl ptfJgVcQNqYS+GSfkZsqyOPU5DyuLhntcVOLsHIzik8gAyUBFv4GpglfSut2dRyA b+nU/LNNtHs8xKLMrUt8RKqtvnvRHF2sfJgDR/OLaqQ6Vw9GJedn+iJNeZ2i0mr5 WQQz53kRZ6SWQYAKHuiU18TUwCA+je4m9o6QSt9FVoI9tmaAPFgTUCo9U5Ptjeex p3FQ3FJexsKW8Gy5iNFjyUuVPCmgyujA1XhtOwbO09B8rHVCubb7/BVffQIDAQAB o4ICojCCAp4wHQYDVR0OBBYEFB4+p88iyPbN3BknbS/KXI/em2tOMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvSGo2bnp5TEk5czNjR1NkdEw4cGNqOTZiYTA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDCBoQQCAAEwgZoDBAEt UzIDBAJQQnAwDAMEAFBCdQMEB1BCAAMEAFkqRgMEAVkslgMEAFkt0AMEAVuEHAME AFuEHwMEAF7GLwMEAbITIgMEArITLAMEALlHHDAMAwQAucsVAwQDucsQAwQAueXX AwQAufKvAwQAwbLUAwQAwbLaAwQAwboBAwQAwboLAwQAwg+MAwQAwg+SAwQAwg+2 AwQAwg/DMA0GCSqGSIb3DQEBCwUAA4IBAQCPXLiAM+f1KHSVjiZ9f1/41QmWUtuw pnfvmi2vEnhXTOGPN74nYHFEV0RShmfA3J9+u4NwCSS62H7lx43NuDRGdTyL8ptV zxKv7LYg3QQuoDzn8MNIk0qAhYQW7ZNdAgGzQKFQF3G5BsA0gwT8aMMWG3zuh7MM iLSJs4o94HFmSbyVMZDNxywVwCedWcYkN9ZJPCk/3N6LR6+bQvTwccGirgWRqkic Jbp4O35f4tmJC2JxGlJqD+dJZAY7W9qyfLJUtrs4zXmsqLCXljPbTnvX6I3amVY4 NDKDtHNjf5pricWEf+pa4JkT9Ze43cQR6DIyJy1kEQnQk0edAmi5vwip -----END CERTIFICATE-----Generated at Fri Jan 23 21:36:19 2026 by rpki-client