This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/hyqfjg6g6o8uq-QACPMTfQs5lQc.roa File: hyqfjg6g6o8uq-QACPMTfQs5lQc.roa (raw, json) Hash identifier: hYE/MgKu1hpnAI+3myRRccnC0a+MVJNeTXAHofbn5YI= Subject key identifier: 87:2A:9F:8E:0E:A0:EA:8F:2E:AB:E4:00:08:F3:13:7D:0B:39:95:07 Certificate issuer: /CN=522a22bccd3de8265afd55f9830ffc01c83af726 Certificate serial: 019BC0BA9490D4CF7B0EE5EFE6F3919E4329 Authority key identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/hyqfjg6g6o8uq-QACPMTfQs5lQc.roa Signing time: Thu 15 Jan 2026 08:16:51 +0000 ROA not before: Thu 15 Jan 2026 08:16:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208770 IP address blocks: 45.136.44.0/22 maxlen: 24 153.55.184.0/21 maxlen: 21 153.55.184.0/22 maxlen: 22 153.55.184.0/23 maxlen: 23 153.55.184.0/24 maxlen: 24 153.55.185.0/24 maxlen: 24 153.55.186.0/23 maxlen: 23 153.55.186.0/24 maxlen: 24 153.55.187.0/24 maxlen: 24 153.55.188.0/22 maxlen: 22 153.55.188.0/23 maxlen: 23 153.55.188.0/24 maxlen: 24 153.55.189.0/24 maxlen: 24 153.55.190.0/23 maxlen: 23 153.55.190.0/24 maxlen: 24 153.55.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c0:ba:94:90:d4:cf:7b:0e:e5:ef:e6:f3:91:9e:43:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522a22bccd3de8265afd55f9830ffc01c83af726 Validity Not Before: Jan 15 08:16:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=872a9f8e0ea0ea8f2eabe40008f3137d0b399507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ca:71:6f:ad:a6:72:c6:0b:c1:4d:80:f4:68: 7c:14:6a:ac:2b:61:b9:3b:14:d4:0b:95:03:3d:66: 10:e5:85:54:1e:81:84:80:c5:19:72:56:65:83:81: 7c:ac:dd:2b:da:a5:26:02:19:20:e5:83:28:97:1e: 1c:e6:84:d8:38:98:10:a1:4a:2d:58:88:0e:2e:60: f8:ea:0e:4c:ee:e4:30:da:bc:60:ee:a4:3a:10:06: a5:ec:71:d8:34:24:92:d1:8d:0a:0a:89:ce:ac:5b: fe:bb:af:df:f1:02:54:e9:08:e1:27:cb:84:85:89: 0b:fd:97:d1:2e:ab:c0:d0:24:ea:13:3a:4e:96:36: 6a:a8:2d:d8:5a:15:74:7c:66:1a:af:53:b8:72:d2: d2:a8:81:a0:cd:e2:d3:83:c5:23:0d:6e:17:ff:9d: e8:d4:36:90:e9:bf:66:02:78:c8:e3:6c:e5:7f:c1: b6:d1:2a:39:64:8b:4a:f5:06:74:9b:2c:53:05:cd: 33:42:61:2a:ac:72:97:ec:71:14:b0:2f:20:f9:9d: 5b:a1:80:05:16:fe:90:ce:3b:6b:61:78:57:43:da: a1:2c:04:60:c7:4b:47:e1:1f:3f:ee:26:7f:8e:f4: f0:1d:20:4e:d6:5d:24:65:51:af:08:22:74:b6:4f: 68:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2A:9F:8E:0E:A0:EA:8F:2E:AB:E4:00:08:F3:13:7D:0B:39:95:07 X509v3 Authority Key Identifier: keyid:52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/hyqfjg6g6o8uq-QACPMTfQs5lQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.44.0/22 153.55.184.0/21 Signature Algorithm: sha256WithRSAEncryption 02:22:8b:25:6a:c9:f1:06:d9:1d:8d:f1:47:a7:78:bd:18:13: 4c:15:8b:6b:50:a5:50:21:60:01:1e:9b:12:5e:af:96:89:58: b6:88:f0:26:84:f7:34:78:ec:d0:25:d7:f7:85:d6:78:c8:33: eb:d3:4d:25:c9:54:d8:a3:e3:9b:73:8b:a7:2a:f6:6b:c7:0a: be:78:05:30:a9:f7:2c:29:ce:ef:d7:a4:f6:c5:37:fe:c9:10: f8:1f:70:a9:4a:04:31:a5:8f:9f:70:9b:81:0a:b2:e6:ec:87: d9:f8:19:3a:81:06:3a:9e:39:e2:fe:75:b0:c7:4a:74:61:97: c7:94:17:23:a3:46:bd:20:9c:8c:03:9b:f1:7e:51:e9:6c:f8: 03:3d:c1:c8:1f:45:cc:2f:34:9a:f0:b2:85:3c:04:9c:86:33: 52:39:d4:1a:15:0c:fd:51:f2:ca:9b:8a:90:b9:47:7b:8c:be: 6c:de:34:ea:80:56:89:e0:9f:9a:99:6f:5b:95:11:c5:aa:0a: e8:0f:29:d2:5b:5d:ee:32:0c:b9:d0:fa:e5:72:8e:2d:10:61: bd:18:0c:d9:54:54:6a:de:cf:96:86:77:4e:97:08:af:e4:c3: 83:17:1d:4e:fc:65:33:23:b3:1d:e5:d8:10:7e:98:c3:23:ec: 4b:38:82:cb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvAupSQ1M97DuXv5vORnkMpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMmEyMmJjY2QzZGU4MjY1YWZkNTVmOTgzMGZmYzAxYzgz YWY3MjYwHhcNMjYwMTE1MDgxNjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzJhOWY4ZTBlYTBlYThmMmVhYmU0MDAwOGYzMTM3ZDBiMzk5NTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5spxb62mcsYLwU2A9Gh8FGqsK2G5 OxTUC5UDPWYQ5YVUHoGEgMUZclZlg4F8rN0r2qUmAhkg5YMolx4c5oTYOJgQoUot WIgOLmD46g5M7uQw2rxg7qQ6EAal7HHYNCSS0Y0KConOrFv+u6/f8QJU6QjhJ8uE hYkL/ZfRLqvA0CTqEzpOljZqqC3YWhV0fGYar1O4ctLSqIGgzeLTg8UjDW4X/53o 1DaQ6b9mAnjI42zlf8G20So5ZItK9QZ0myxTBc0zQmEqrHKX7HEUsC8g+Z1boYAF Fv6QzjtrYXhXQ9qhLARgx0tH4R8/7iZ/jvTwHSBO1l0kZVGvCCJ0tk9oBQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIcqn44OoOqPLqvkAAjzE30LOZUHMB8GA1UdIwQY MBaAFFIqIrzNPegmWv1V+YMP/AHIOvcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWlvaXZNMDk2Q1phX1ZYNWd3XzhBY2c2OXlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZTQ3NjAtYzU0Ni00YmVjLWE2MzUt ZmYzNzIzZTc4YmQzLzEvaHlxZmpnNmc2bzh1cS1RQUNQTVRmUXM1bFFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xZTQ3NjAtYzU0Ni00YmVjLWE2MzUtZmYzNzIzZTc4YmQz LzEvVWlvaXZNMDk2Q1phX1ZYNWd3XzhBY2c2OXlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYgsAwQD mTe4MA0GCSqGSIb3DQEBCwUAA4IBAQACIoslasnxBtkdjfFHp3i9GBNMFYtrUKVQ IWABHpsSXq+WiVi2iPAmhPc0eOzQJdf3hdZ4yDPr000lyVTYo+Obc4unKvZrxwq+ eAUwqfcsKc7v16T2xTf+yRD4H3CpSgQxpY+fcJuBCrLm7IfZ+Bk6gQY6njni/nWw x0p0YZfHlBcjo0a9IJyMA5vxflHpbPgDPcHIH0XMLzSa8LKFPASchjNSOdQaFQz9 UfLKm4qQuUd7jL5s3jTqgFaJ4J+amW9blRHFqgroDynSW13uMgy50Prlco4tEGG9 GAzZVFRq3s+WhndOlwiv5MODFx1O/GUzI7Md5dgQfpjDI+xLOILL -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:20 2026 by rpki-client