This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/hKt_LDA2znF1i5FMyMXJ4_vTugo.roa File: hKt_LDA2znF1i5FMyMXJ4_vTugo.roa (raw, json) Hash identifier: i2tFIa9dPefQFxdN53wBfIScjnwzGr39U65xb787QKY= Subject key identifier: 84:AB:7F:2C:30:36:CE:71:75:8B:91:4C:C8:C5:C9:E3:FB:D3:BA:0A Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019B7FF1917B23EBCD1972F3A5EF95E6D384 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/hKt_LDA2znF1i5FMyMXJ4_vTugo.roa Signing time: Fri 02 Jan 2026 18:21:36 +0000 ROA not before: Fri 02 Jan 2026 18:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48147 IP address blocks: 212.16.86.0/24 maxlen: 24 212.80.18.0/23 maxlen: 23 212.80.18.0/24 maxlen: 24 212.80.19.0/24 maxlen: 24 212.80.20.0/22 maxlen: 22 212.80.20.0/24 maxlen: 24 212.80.21.0/24 maxlen: 24 212.80.22.0/24 maxlen: 24 212.80.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:91:7b:23:eb:cd:19:72:f3:a5:ef:95:e6:d3:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 2 18:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84ab7f2c3036ce71758b914cc8c5c9e3fbd3ba0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:98:27:a8:99:19:5d:fb:60:5e:5e:94:33:9a: 19:a1:16:7a:f9:0c:99:3b:51:17:91:5c:cc:59:78: 2e:ae:24:6e:3f:dd:94:91:0b:44:a9:ea:c1:71:66: 04:36:3b:d4:a8:a2:da:c3:a0:b8:a2:19:28:a8:0c: 4f:f7:b0:30:f2:95:7f:03:86:ae:62:bf:be:28:67: f0:44:da:d9:0c:79:75:54:ad:d8:64:66:44:b7:c1: b2:d0:ce:74:2b:60:c0:1f:03:df:d8:4b:c7:f3:60: 4c:9e:84:83:f4:8c:eb:67:c3:2d:dc:90:70:b9:33: b8:8a:6a:48:8b:46:75:8a:03:da:58:b1:3d:43:87: 07:05:29:85:5a:91:1d:7f:7a:25:28:a0:8c:3f:0e: ea:1f:ab:7b:fa:4d:8d:e7:b5:b3:3c:17:05:56:49: dc:85:d1:fd:87:c3:ba:7f:de:b1:44:c5:c4:d5:4d: c0:f9:ad:80:82:56:90:1b:60:fc:ff:43:b9:3c:8c: be:b6:0f:9d:d4:3a:a1:cc:5c:44:8f:6d:74:85:e4: 7b:dc:02:eb:df:54:de:28:0c:50:12:ab:3f:35:74: db:a3:be:a2:91:6b:a5:bd:4d:89:56:46:d2:b2:c1: 6f:e1:3e:b5:df:e8:b6:4f:c3:94:34:c7:ae:0f:4e: 20:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AB:7F:2C:30:36:CE:71:75:8B:91:4C:C8:C5:C9:E3:FB:D3:BA:0A X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/hKt_LDA2znF1i5FMyMXJ4_vTugo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.16.86.0/24 212.80.18.0-212.80.23.255 Signature Algorithm: sha256WithRSAEncryption 26:d9:b4:9e:2d:a8:a1:da:23:f7:24:1e:1d:c8:a5:4d:40:ec: fe:4e:90:b6:52:24:d9:0b:fa:17:6b:b5:48:67:27:72:ca:c9: d1:1d:08:1b:15:06:9f:15:be:77:b9:f5:23:43:65:39:60:7f: 0a:59:3b:f5:ce:27:ea:68:9f:17:34:1d:c6:86:3a:83:59:e3: fd:0e:be:76:14:a6:0e:b0:8e:f4:c9:78:db:46:1b:ea:49:81: 6e:7f:5e:a3:de:4c:0d:2e:dd:05:9b:88:f1:86:ac:b2:4c:05: d8:34:45:b8:98:e0:51:01:ba:10:c0:ae:b0:07:a6:74:b5:d3: ab:e0:07:f8:3d:6d:4a:c0:89:cc:7a:5b:7a:73:d5:cb:9a:6d: b9:cc:5d:25:4d:d1:4b:f0:90:9e:fe:0b:a8:94:02:c1:8d:31: 85:5f:2b:e8:3a:d2:48:a0:0b:37:a2:1d:bb:1b:24:1e:19:f8: 83:06:51:df:bb:3c:b0:2a:81:15:0d:e6:27:83:be:2f:d9:9a: 41:a9:c4:2c:fd:e3:bf:dd:f4:5c:d8:79:c9:d7:38:b2:a4:99: ad:88:1c:44:f3:7c:27:f9:81:75:c2:63:59:53:a0:83:8b:a3: 8e:6e:3b:d9:89:f5:d1:f6:c4:8e:53:03:cf:16:01:79:9e:82: ee:ce:12:51 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/8ZF7I+vNGXLzpe+V5tOEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTAyMTgyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGFiN2YyYzMwMzZjZTcxNzU4YjkxNGNjOGM1YzllM2ZiZDNiYTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopgnqJkZXftgXl6UM5oZoRZ6+QyZ O1EXkVzMWXguriRuP92UkQtEqerBcWYENjvUqKLaw6C4ohkoqAxP97Aw8pV/A4au Yr++KGfwRNrZDHl1VK3YZGZEt8Gy0M50K2DAHwPf2EvH82BMnoSD9IzrZ8Mt3JBw uTO4impIi0Z1igPaWLE9Q4cHBSmFWpEdf3olKKCMPw7qH6t7+k2N57WzPBcFVknc hdH9h8O6f96xRMXE1U3A+a2AglaQG2D8/0O5PIy+tg+d1DqhzFxEj210heR73ALr 31TeKAxQEqs/NXTbo76ikWulvU2JVkbSssFv4T613+i2T8OUNMeuD04gOQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFISrfywwNs5xdYuRTMjFyeP707oKMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvaEt0X0xEQTJ6bkYxaTVGTXlNWEo0X3ZUdWdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQA1BBWMAwD BAHUUBIDBAPUUBAwDQYJKoZIhvcNAQELBQADggEBACbZtJ4tqKHaI/ckHh3IpU1A 7P5OkLZSJNkL+hdrtUhnJ3LKydEdCBsVBp8Vvne59SNDZTlgfwpZO/XOJ+ponxc0 HcaGOoNZ4/0OvnYUpg6wjvTJeNtGG+pJgW5/XqPeTA0u3QWbiPGGrLJMBdg0RbiY 4FEBuhDArrAHpnS106vgB/g9bUrAicx6W3pz1cuabbnMXSVN0UvwkJ7+C6iUAsGN MYVfK+g60kigCzeiHbsbJB4Z+IMGUd+7PLAqgRUN5ieDvi/ZmkGpxCz947/d9FzY ecnXOLKkma2IHETzfCf5gXXCY1lToIOLo45uO9mJ9dH2xI5TA88WAXmegu7OElE= -----END CERTIFICATE-----Generated at Wed Jan 21 04:03:07 2026 by rpki-client