This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/hjiO239O6FoIoQqbk0jamUzpCRU.roa File: hjiO239O6FoIoQqbk0jamUzpCRU.roa (raw, json) Hash identifier: kmhkzRRMD+GzJ07/fWO1FwuU6IlybG/WXyyzBGThHpc= Subject key identifier: 86:38:8E:DB:7F:4E:E8:5A:08:A1:0A:9B:93:48:DA:99:4C:E9:09:15 Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa Certificate serial: 019B7910DE510A582736169FB0107031C8C2 Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/hjiO239O6FoIoQqbk0jamUzpCRU.roa Signing time: Thu 01 Jan 2026 10:18:27 +0000 ROA not before: Thu 01 Jan 2026 10:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206423 IP address blocks: 185.156.252.0/22 maxlen: 23 2a07:a1c0::/29 maxlen: 48 2a13:6dc0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:de:51:0a:58:27:36:16:9f:b0:10:70:31:c8:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa Validity Not Before: Jan 1 10:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86388edb7f4ee85a08a10a9b9348da994ce90915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e5:e5:d5:d1:49:13:3b:a1:b6:bb:a5:1b:ff: ed:1f:3b:97:8a:e6:a2:ea:8b:b6:56:d4:83:ca:24: a3:f7:7f:e1:be:6c:d2:31:4c:3a:a5:b4:f2:71:38: dc:74:ac:65:40:0c:89:f6:1e:e3:fc:e0:c5:4b:5f: 14:3d:6f:54:20:79:03:36:54:9f:a7:88:4b:2f:c8: 77:29:e5:f7:23:f6:50:20:e7:a4:82:fe:56:13:ad: a4:de:02:f4:10:af:9e:9e:51:ea:da:7b:78:e8:be: 8a:bb:88:f2:68:4d:b3:a3:0b:6e:42:2d:69:c1:ec: ce:93:f1:95:4e:b9:c0:ea:2c:a7:10:56:af:7b:86: 5d:8a:55:95:b6:8f:a3:98:fb:59:30:a6:b6:d4:db: ec:b5:b9:72:dc:a6:eb:3c:b0:8e:61:dc:27:6f:e6: c5:53:0c:ca:ab:da:3e:1d:4c:2c:9d:12:15:c2:58: 4f:22:bc:b4:33:7d:2d:06:dd:c2:ee:0a:4a:26:b3: ce:ac:10:b9:4a:cd:af:d4:49:43:ec:31:57:e9:65: 33:84:f7:08:77:42:d8:2d:8b:37:72:d7:f6:78:06: 38:2f:ec:e8:67:fc:f3:f1:ac:d4:a0:4b:17:24:74: 40:85:90:cc:3b:5f:08:ad:d5:06:a2:a1:d7:fe:40: 95:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:38:8E:DB:7F:4E:E8:5A:08:A1:0A:9B:93:48:DA:99:4C:E9:09:15 X509v3 Authority Key Identifier: keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/hjiO239O6FoIoQqbk0jamUzpCRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.156.252.0/22 IPv6: 2a07:a1c0::/29 2a13:6dc0::/29 Signature Algorithm: sha256WithRSAEncryption aa:71:ea:82:00:12:41:99:6e:cd:1a:fd:b3:d2:08:28:c7:4b: ce:df:74:a9:4c:ea:9d:e2:3f:b2:34:10:8d:3c:b4:87:87:bf: cd:fd:7f:b2:81:e0:3a:f7:9f:33:bf:ac:08:8f:0c:b5:f7:af: 29:06:84:d8:c3:29:3f:0a:ae:3d:43:af:9c:01:ba:73:6f:9e: 2a:d8:b3:16:93:5c:1c:4c:fe:24:d8:e4:a8:e6:3a:98:1d:c2: ba:41:58:57:32:12:4d:cf:55:13:bf:10:66:47:12:ef:4e:53: b3:94:53:35:a8:23:a2:74:49:5e:4e:4a:ac:3b:5c:62:71:b9: 66:f2:1f:8d:77:e5:ca:0d:00:96:36:ef:02:1e:5e:57:3b:c2: 86:68:bc:64:a0:63:42:e4:11:1e:db:ac:fb:09:d9:a6:c1:da: 87:0e:40:3e:cf:0f:0d:07:ec:0d:08:80:5a:ee:1f:92:dc:55: d2:c6:95:72:2a:fc:72:8e:ff:fb:8c:76:33:c2:a7:93:d4:57: 30:6c:f4:40:04:46:a9:89:65:af:a5:23:72:51:2a:f0:56:68: 87:18:d9:34:4f:05:82:74:72:21:97:68:98:00:fa:16:2f:46: 96:ba:b8:51:24:e7:c3:27:da:fc:25:25:6f:70:98:f2:78:cb: 37:d4:d4:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt5EN5RClgnNhafsBBwMcjCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMDdmNjlkNjAyYjdlYmI3ZjYzMzBkNzE1YzllYzNlNWFi YTMwZmEwHhcNMjYwMTAxMTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjM4OGVkYjdmNGVlODVhMDhhMTBhOWI5MzQ4ZGE5OTRjZTkwOTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuXl1dFJEzuhtrulG//tHzuXiuai 6ou2VtSDyiSj93/hvmzSMUw6pbTycTjcdKxlQAyJ9h7j/ODFS18UPW9UIHkDNlSf p4hLL8h3KeX3I/ZQIOekgv5WE62k3gL0EK+enlHq2nt46L6Ku4jyaE2zowtuQi1p wezOk/GVTrnA6iynEFave4ZdilWVto+jmPtZMKa21Nvstbly3KbrPLCOYdwnb+bF UwzKq9o+HUwsnRIVwlhPIry0M30tBt3C7gpKJrPOrBC5Ss2v1ElD7DFX6WUzhPcI d0LYLYs3ctf2eAY4L+zoZ/zz8azUoEsXJHRAhZDMO18IrdUGoqHX/kCVEQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFIY4jtt/TuhaCKEKm5NI2plM6QkVMB8GA1UdIwQY MBaAFEwH9p1gK367f2Mw1xXJ7D5aujD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEFmMm5XQXJmcnRfWXpEWEZjbnNQbHE2TVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lZTcxYzYtMWJhZS00ODU4LWFmM2Et YmMyODlkYzE3ZDIwLzEvaGppTzIzOU82Rm9Jb1FxYmswamFtVXpwQ1JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9lZTcxYzYtMWJhZS00ODU4LWFmM2EtYmMyODlkYzE3ZDIw LzEvVEFmMm5XQXJmcnRfWXpEWEZjbnNQbHE2TVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQCuZz8MBQE AgACMA4DBQMqB6HAAwUDKhNtwDANBgkqhkiG9w0BAQsFAAOCAQEAqnHqggASQZlu zRr9s9IIKMdLzt90qUzqneI/sjQQjTy0h4e/zf1/soHgOvefM7+sCI8MtfevKQaE 2MMpPwquPUOvnAG6c2+eKtizFpNcHEz+JNjkqOY6mB3CukFYVzISTc9VE78QZkcS 705Ts5RTNagjonRJXk5KrDtcYnG5ZvIfjXflyg0AljbvAh5eVzvChmi8ZKBjQuQR Htus+wnZpsHahw5APs8PDQfsDQiAWu4fktxV0saVcir8co7/+4x2M8Knk9RXMGz0 QARGqYllr6UjclEq8FZohxjZNE8FgnRyIZdomAD6Fi9Glrq4USTnwyfa/CUlb3CY 8njLN9TUcg== -----END CERTIFICATE-----Generated at Tue Jan 20 06:07:15 2026 by rpki-client