This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/HZb22Oio0r0dOkO7Ylc22UNpmkI.roa File: HZb22Oio0r0dOkO7Ylc22UNpmkI.roa (raw, json) Hash identifier: 4bxPJ8gmL9NMrQNM+ipouVsdrPbO9cdpsR6HkCC+6eM= Subject key identifier: 1D:96:F6:D8:E8:A8:D2:BD:1D:3A:43:BB:62:57:36:D9:43:69:9A:42 Certificate issuer: /CN=61e6ea83926bc478c785471d805a5c1210a8c993 Certificate serial: 019B78A37CC09F27FBBFDB46ADD8BD911C5D Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/HZb22Oio0r0dOkO7Ylc22UNpmkI.roa Signing time: Thu 01 Jan 2026 08:18:58 +0000 ROA not before: Thu 01 Jan 2026 08:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35273 IP address blocks: 195.69.248.0/22 maxlen: 22 195.238.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7c:c0:9f:27:fb:bf:db:46:ad:d8:bd:91:1c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993 Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d96f6d8e8a8d2bd1d3a43bb625736d943699a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:24:98:f2:88:3b:ed:3b:d4:ab:81:b2:3a:35: de:a1:70:3a:07:fc:47:0b:47:c8:d3:cb:29:9d:35: a4:b6:35:aa:ac:c8:0c:fb:02:08:80:54:35:78:0e: f5:88:73:89:b0:8b:d7:4b:71:67:2d:d1:3a:49:3e: 0a:4e:f9:03:82:01:7d:47:7d:6e:18:32:03:eb:66: 68:aa:18:5d:a5:6f:8b:1e:3d:0b:49:93:f2:32:de: d9:4e:43:35:ff:46:30:05:c2:0d:0d:45:3b:12:cf: c2:ba:63:3b:50:61:cc:6a:58:82:c0:93:b6:29:34: c8:19:ef:2d:ef:ee:58:4a:17:dc:ca:05:ea:64:80: 7d:d1:52:25:0c:5c:9a:c6:6d:4b:90:45:c9:80:73: db:a2:d4:c8:30:3c:57:3d:0b:8f:8b:7f:bc:5a:3c: 88:bf:5a:62:f9:69:19:cf:97:6f:24:09:bc:3a:67: 90:e1:6c:f1:22:1d:7f:8b:41:fa:a5:8b:a6:b5:fd: ec:d3:2d:83:d4:94:25:58:47:d9:28:cf:ab:d8:0a: a1:2f:d1:06:a9:98:72:00:d6:7a:7a:d2:24:1c:c6: bb:28:e9:a9:7c:f2:db:18:fc:20:cc:e0:54:21:76: 55:41:da:68:65:ff:fd:e7:6d:0e:c0:68:89:20:cc: 52:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:96:F6:D8:E8:A8:D2:BD:1D:3A:43:BB:62:57:36:D9:43:69:9A:42 X509v3 Authority Key Identifier: keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/HZb22Oio0r0dOkO7Ylc22UNpmkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.69.248.0/22 195.238.112.0/22 Signature Algorithm: sha256WithRSAEncryption 09:8c:d6:6b:5a:fe:f3:52:d9:12:55:73:4a:83:b7:3c:41:ca: d4:49:7b:e6:4a:12:3a:18:7a:4a:4c:bf:3a:16:39:23:b2:cb: 84:80:9a:4b:8e:1b:e3:1e:ef:df:65:f5:c1:f4:ef:66:ce:c2: 88:78:b7:34:b4:0d:dc:dc:5f:56:ad:92:50:7d:85:00:67:57: 5a:38:b3:30:dc:01:d7:fe:bd:8c:a5:a8:99:9f:17:e9:5a:b9: 74:60:50:92:87:45:b2:79:64:1b:d3:5e:be:37:14:24:f4:b3: 0c:14:8f:17:97:dd:f2:d6:08:83:10:da:99:10:f1:e8:b1:7e: 75:4e:f6:cd:e2:9d:92:93:6c:7a:8d:64:2d:b2:25:e6:49:55: 5e:1e:50:47:09:4b:5d:09:21:9c:04:12:22:db:c5:43:38:47: f2:c4:e7:0d:61:79:09:4e:34:57:fb:6a:56:8d:81:72:23:14: 80:e4:3f:38:77:5a:9e:f7:04:ad:02:78:b5:24:61:88:48:c5: fe:c3:76:f8:1f:0b:24:e1:11:90:4d:1f:7e:a0:0f:8e:d8:b4: cc:c8:c3:65:e9:c5:39:12:e6:3f:15:1d:19:04:a0:0e:78:f6: 6a:5d:b1:56:66:96:f7:e3:e5:98:fa:a1:95:f0:2d:0a:c7:0a: 7d:48:2f:98 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o3zAnyf7v9tGrdi9kRxdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZTZlYTgzOTI2YmM0NzhjNzg1NDcxZDgwNWE1YzEyMTBh OGM5OTMwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDk2ZjZkOGU4YThkMmJkMWQzYTQzYmI2MjU3MzZkOTQzNjk5YTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SSY8og77TvUq4GyOjXeoXA6B/xH C0fI08spnTWktjWqrMgM+wIIgFQ1eA71iHOJsIvXS3FnLdE6ST4KTvkDggF9R31u GDID62ZoqhhdpW+LHj0LSZPyMt7ZTkM1/0YwBcINDUU7Es/CumM7UGHMaliCwJO2 KTTIGe8t7+5YShfcygXqZIB90VIlDFyaxm1LkEXJgHPbotTIMDxXPQuPi3+8WjyI v1pi+WkZz5dvJAm8OmeQ4WzxIh1/i0H6pYumtf3s0y2D1JQlWEfZKM+r2AqhL9EG qZhyANZ6etIkHMa7KOmpfPLbGPwgzOBUIXZVQdpoZf/9520OwGiJIMxSWQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB2W9tjoqNK9HTpDu2JXNtlDaZpCMB8GA1UdIwQY MBaAFGHm6oOSa8R4x4VHHYBaXBIQqMmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWVicWc1SnJ4SGpIaFVjZGdGcGNFaENveVpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83NGJmNDEtZDZhNy00ZmI1LTgwMWMt MzNjYzNhZGIxZTc4LzEvSFpiMjJPaW8wcjBkT2tPN1lsYzIyVU5wbWtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83NGJmNDEtZDZhNy00ZmI1LTgwMWMtMzNjYzNhZGIxZTc4 LzEvWWVicWc1SnJ4SGpIaFVjZGdGcGNFaENveVpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCw0X4AwQC w+5wMA0GCSqGSIb3DQEBCwUAA4IBAQAJjNZrWv7zUtkSVXNKg7c8QcrUSXvmShI6 GHpKTL86FjkjssuEgJpLjhvjHu/fZfXB9O9mzsKIeLc0tA3c3F9WrZJQfYUAZ1da OLMw3AHX/r2MpaiZnxfpWrl0YFCSh0WyeWQb016+NxQk9LMMFI8Xl93y1giDENqZ EPHosX51TvbN4p2Sk2x6jWQtsiXmSVVeHlBHCUtdCSGcBBIi28VDOEfyxOcNYXkJ TjRX+2pWjYFyIxSA5D84d1qe9wStAni1JGGISMX+w3b4Hwsk4RGQTR9+oA+O2LTM yMNl6cU5EuY/FR0ZBKAOePZqXbFWZpb34+WY+qGV8C0Kxwp9SC+Y -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:14 2026 by rpki-client