This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/hJODD-xae4GPfgCvm7u_1biBHW8.roa File: hJODD-xae4GPfgCvm7u_1biBHW8.roa (raw, json) Hash identifier: bwel4sYC9ovxgVCjU95RSPer2KsFebCbfOZutFD0aHE= Subject key identifier: 84:93:83:0F:EC:5A:7B:81:8F:7E:00:AF:9B:BB:BF:D5:B8:81:1D:6F Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019B7E388D7CFA2311D778D11790CFBE20BD Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/hJODD-xae4GPfgCvm7u_1biBHW8.roa Signing time: Fri 02 Jan 2026 10:19:53 +0000 ROA not before: Fri 02 Jan 2026 10:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 213.249.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8d:7c:fa:23:11:d7:78:d1:17:90:cf:be:20:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Jan 2 10:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8493830fec5a7b818f7e00af9bbbbfd5b8811d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f8:31:df:9b:c8:32:5e:fe:56:81:5b:ba:29: bc:94:9e:07:b4:20:bd:2d:c8:24:e3:02:69:c3:bb: 37:d4:d6:0f:a9:77:52:0f:41:48:16:e1:d0:c3:4d: 69:f9:da:20:cf:0e:ba:a1:b3:dd:04:ac:10:d3:86: da:a9:e2:9e:32:4e:9b:7c:13:fa:2a:d4:3c:98:18: a4:19:9f:c5:76:33:0d:1c:ac:3d:45:e7:29:ee:ff: 52:a8:5b:d7:2b:bc:5a:83:ae:00:1e:8c:1c:d3:78: 12:53:c9:08:ee:d1:f4:39:7c:6c:9b:f5:62:dc:b9: cc:9b:7a:59:1a:14:f1:50:85:30:45:2a:3e:7f:c6: 01:7d:b6:59:00:22:16:21:ab:21:94:47:0c:0f:42: 1e:32:ba:8d:c7:d6:c2:20:3a:21:44:3a:6d:8c:8f: 76:8f:13:58:af:28:f1:7b:02:5b:79:7b:1f:f4:84: 9e:5c:5b:fe:41:19:ed:7e:bb:65:84:cd:95:5f:29: c3:18:41:45:af:60:8b:da:6f:b5:0b:01:96:f3:af: f1:4b:36:60:c2:ef:f2:06:22:9e:b8:1d:46:fd:de: 5a:64:09:02:69:46:ab:46:70:9f:42:7b:e1:8b:13: 32:a8:dc:4d:87:13:42:40:a8:72:fd:24:c1:37:b8: ca:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:93:83:0F:EC:5A:7B:81:8F:7E:00:AF:9B:BB:BF:D5:B8:81:1D:6F X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/hJODD-xae4GPfgCvm7u_1biBHW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.249.88.0/24 Signature Algorithm: sha256WithRSAEncryption 18:03:7b:07:64:49:37:26:d2:f7:c5:8f:c8:54:b1:20:2c:de: ff:d6:f0:4d:2f:1e:d7:44:99:80:d2:e9:d5:6f:f3:57:f5:67: 1c:27:00:e8:39:9f:35:86:aa:f6:4a:aa:0f:32:36:27:7b:d0: 67:fb:97:fe:73:a0:cf:2a:8d:55:85:a0:68:78:82:f6:9f:c7: f8:73:c0:b0:87:3a:9b:03:1d:f3:3b:f7:1b:ba:db:79:e8:51: fb:a3:87:21:b3:60:05:f4:dc:5e:6a:27:fe:a8:5f:8e:85:9a: 05:a0:58:09:71:37:6c:03:87:29:dc:ce:d4:89:a5:9c:de:ed: 5a:d6:3f:93:f7:ee:ec:fa:33:1d:4f:d8:86:d9:e0:6f:64:b2: 0f:b3:5b:36:79:d6:ff:fd:c5:7f:b6:85:65:c6:85:61:a9:d8: b2:44:35:51:ab:e8:14:71:97:38:b5:7d:ea:92:a4:24:ac:93: a4:56:dc:3f:a6:57:de:8f:a9:12:69:d3:db:da:5d:97:1f:f0: 44:68:02:dc:6a:52:8b:1d:73:47:d3:a0:be:92:13:15:56:da: 9c:5b:75:7e:d2:41:d1:3a:02:d5:71:c7:63:d1:a7:7f:cb:24: 03:0c:61:ae:da:c0:12:27:26:a5:3d:e9:0b:9f:01:fd:83:41: 29:41:02:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OI18+iMR13jRF5DPviC9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjYwMTAyMTAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDkzODMwZmVjNWE3YjgxOGY3ZTAwYWY5YmJiYmZkNWI4ODExZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/gx35vIMl7+VoFbuim8lJ4HtCC9 Lcgk4wJpw7s31NYPqXdSD0FIFuHQw01p+dogzw66obPdBKwQ04baqeKeMk6bfBP6 KtQ8mBikGZ/FdjMNHKw9Recp7v9SqFvXK7xag64AHowc03gSU8kI7tH0OXxsm/Vi 3LnMm3pZGhTxUIUwRSo+f8YBfbZZACIWIashlEcMD0IeMrqNx9bCIDohRDptjI92 jxNYryjxewJbeXsf9ISeXFv+QRntfrtlhM2VXynDGEFFr2CL2m+1CwGW86/xSzZg wu/yBiKeuB1G/d5aZAkCaUarRnCfQnvhixMyqNxNhxNCQKhy/STBN7jK9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFISTgw/sWnuBj34Ar5u7v9W4gR1vMB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvaEpPREQteGFlNEdQZmdDdm03dV8xYmlCSFc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1flYMA0G CSqGSIb3DQEBCwUAA4IBAQAYA3sHZEk3JtL3xY/IVLEgLN7/1vBNLx7XRJmA0unV b/NX9WccJwDoOZ81hqr2SqoPMjYne9Bn+5f+c6DPKo1VhaBoeIL2n8f4c8Cwhzqb Ax3zO/cbutt56FH7o4chs2AF9Nxeaif+qF+OhZoFoFgJcTdsA4cp3M7UiaWc3u1a 1j+T9+7s+jMdT9iG2eBvZLIPs1s2edb//cV/toVlxoVhqdiyRDVRq+gUcZc4tX3q kqQkrJOkVtw/plfej6kSadPb2l2XH/BEaALcalKLHXNH06C+khMVVtqcW3V+0kHR OgLVccdj0ad/yyQDDGGu2sASJyalPekLnwH9g0EpQQJJ -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:18 2026 by rpki-client