This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/hfhUXMCuQT_VCWWlZb_FA3LnXZE.roa File: hfhUXMCuQT_VCWWlZb_FA3LnXZE.roa (raw, json) Hash identifier: fhhNelDWqCLG11Kc8Ta29JEhYTwI3+9ugvs3dkYGgzs= Subject key identifier: 85:F8:54:5C:C0:AE:41:3F:D5:09:65:A5:65:BF:C5:03:72:E7:5D:91 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB57580481FA086A486BED43EC4864 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/hfhUXMCuQT_VCWWlZb_FA3LnXZE.roa Signing time: Fri 02 Jan 2026 08:20:36 +0000 ROA not before: Fri 02 Jan 2026 08:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12722 IP address blocks: 5.182.116.0/24 maxlen: 24 45.15.255.0/24 maxlen: 24 45.86.3.0/24 maxlen: 24 45.90.44.0/24 maxlen: 24 45.90.47.0/24 maxlen: 24 45.128.130.0/23 maxlen: 23 46.149.174.0/24 maxlen: 24 62.204.32.0/24 maxlen: 24 83.171.212.0/22 maxlen: 22 178.212.78.0/24 maxlen: 24 185.253.2.0/24 maxlen: 24 188.64.140.0/24 maxlen: 24 188.93.136.0/24 maxlen: 24 212.60.6.0/24 maxlen: 24 212.107.24.0/24 maxlen: 24 212.115.48.0/24 maxlen: 24 212.115.50.0/24 maxlen: 24 213.166.92.0/24 maxlen: 24 213.166.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:57:58:04:81:fa:08:6a:48:6b:ed:43:ec:48:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85f8545cc0ae413fd50965a565bfc50372e75d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:56:ae:e5:80:63:aa:0e:58:b6:ba:aa:98:09: 30:88:0a:42:76:8d:bf:16:e4:c2:07:35:07:74:ff: c0:b1:3c:ca:75:11:59:78:9e:48:66:cc:64:f2:45: 65:f2:e7:bf:4b:fc:54:82:11:93:af:46:de:02:04: 11:63:d2:ea:91:b5:e6:e7:31:1d:b6:47:29:6d:4a: db:fa:ee:99:ce:18:be:3b:13:35:b9:e2:1c:df:cf: d2:48:a4:d4:f5:b8:f6:f8:4c:e8:63:67:66:37:71: 72:60:fc:fd:a9:9e:db:f5:19:a9:40:d8:93:10:86: 66:59:05:9f:32:85:3b:05:4d:f5:21:8f:49:b0:01: c6:bb:db:eb:7c:61:66:3b:4f:d5:bc:97:5e:58:ce: 9c:9d:df:cf:89:ce:83:10:15:87:be:55:00:f5:00: 1b:2f:ff:e3:c2:00:34:ab:08:7d:b8:15:06:58:e8: b7:92:fc:80:b7:a9:31:bf:2e:cb:1a:92:90:59:50: 39:9c:bd:1d:0a:2d:49:4f:37:1e:f7:70:11:d9:ff: 25:62:1a:ba:17:24:f5:e5:55:b4:56:6c:65:ec:be: a7:64:6b:69:17:4d:c2:b6:6c:01:c9:44:04:9e:47: 54:7e:f7:24:c1:23:6b:af:66:ad:ec:4b:3d:99:74: 7f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F8:54:5C:C0:AE:41:3F:D5:09:65:A5:65:BF:C5:03:72:E7:5D:91 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/hfhUXMCuQT_VCWWlZb_FA3LnXZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.116.0/24 45.15.255.0/24 45.86.3.0/24 45.90.44.0/24 45.90.47.0/24 45.128.130.0/23 46.149.174.0/24 62.204.32.0/24 83.171.212.0/22 178.212.78.0/24 185.253.2.0/24 188.64.140.0/24 188.93.136.0/24 212.60.6.0/24 212.107.24.0/24 212.115.48.0/24 212.115.50.0/24 213.166.92.0/24 213.166.95.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:00:59:f4:77:ea:29:cd:c5:98:b7:37:7b:05:89:5b:5d:e1: 3d:d5:92:fb:b5:33:c7:13:4c:f9:f0:78:32:f0:33:e5:49:17: 75:ea:00:08:46:f9:52:ce:7f:5d:4d:ad:85:17:d4:05:11:c0: 57:5b:19:2a:17:1c:6b:0e:2a:b0:b7:ca:d4:3e:5c:52:cd:d0: 39:46:fb:1d:18:75:fd:e2:82:cc:68:8e:fb:cb:18:ef:15:b0: 75:36:5b:db:65:ad:dd:92:18:49:b9:8b:f7:4a:8f:18:a5:31: 7f:51:44:84:cf:6a:8f:56:7e:3e:93:39:2f:66:4c:42:2e:0a: c3:26:4f:89:58:37:91:01:f5:81:be:a7:ee:cc:a2:33:37:03: 68:9c:ff:65:40:6c:0d:1d:52:76:dc:d1:cb:73:75:4b:21:9e: ff:81:66:62:f2:54:da:b2:30:74:d6:41:9b:83:d6:b0:ee:a5: 7c:bb:ac:4e:ef:6d:18:cb:5b:d6:b7:29:ac:b1:be:b2:04:31: e0:51:9e:25:19:27:c8:64:58:35:24:1b:89:02:18:87:86:2c: 67:df:1d:96:06:27:f8:2c:0e:4a:cf:ec:75:79:f5:09:12:fa: 0f:60:e2:a1:20:fa:68:22:2a:4e:fe:9e:1d:11:be:4b:90:88: 37:92:18:bc -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgISAZt9y1dYBIH6CGpIa+1D7EhkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWY4NTQ1Y2MwYWU0MTNmZDUwOTY1YTU2NWJmYzUwMzcyZTc1ZDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Fau5YBjqg5YtrqqmAkwiApCdo2/ FuTCBzUHdP/AsTzKdRFZeJ5IZsxk8kVl8ue/S/xUghGTr0beAgQRY9LqkbXm5zEd tkcpbUrb+u6Zzhi+OxM1ueIc38/SSKTU9bj2+EzoY2dmN3FyYPz9qZ7b9RmpQNiT EIZmWQWfMoU7BU31IY9JsAHGu9vrfGFmO0/VvJdeWM6cnd/Pic6DEBWHvlUA9QAb L//jwgA0qwh9uBUGWOi3kvyAt6kxvy7LGpKQWVA5nL0dCi1JTzce93AR2f8lYhq6 FyT15VW0Vmxl7L6nZGtpF03CtmwByUQEnkdUfvckwSNrr2at7Es9mXR/SwIDAQAB o4ICdjCCAnIwHQYDVR0OBBYEFIX4VFzArkE/1QllpWW/xQNy512RMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvaGZoVVhNQ3VRVF9WQ1dXbFpiX0ZBM0xuWFpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEAAW2dAME AC0P/wMEAC1WAwMEAC1aLAMEAC1aLwMEAS2AggMEAC6VrgMEAD7MIAMEAlOr1AME ALLUTgMEALn9AgMEALxAjAMEALxdiAMEANQ8BgMEANRrGAMEANRzMAMEANRzMgME ANWmXAMEANWmXzANBgkqhkiG9w0BAQsFAAOCAQEAbABZ9HfqKc3FmLc3ewWJW13h PdWS+7UzxxNM+fB4MvAz5UkXdeoACEb5Us5/XU2thRfUBRHAV1sZKhccaw4qsLfK 1D5cUs3QOUb7HRh1/eKCzGiO+8sY7xWwdTZb22Wt3ZIYSbmL90qPGKUxf1FEhM9q j1Z+PpM5L2ZMQi4KwyZPiVg3kQH1gb6n7syiMzcDaJz/ZUBsDR1SdtzRy3N1SyGe /4FmYvJU2rIwdNZBm4PWsO6lfLusTu9tGMtb1rcprLG+sgQx4FGeJRknyGRYNSQb iQIYh4YsZ98dlgYn+CwOSs/sdXn1CRL6D2DioSD6aCIqTv6eHRG+S5CIN5IYvA== -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:52 2026 by rpki-client