This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hIl9YwGP9KNNYc-kWa9ByhnFFMw.roa File: hIl9YwGP9KNNYc-kWa9ByhnFFMw.roa (raw, json) Hash identifier: k+CEky46uUg1wUDtSRfbPi4iQjpsDQmTlW/NwFlLWDI= Subject key identifier: 84:89:7D:63:01:8F:F4:A3:4D:61:CF:A4:59:AF:41:CA:19:C5:14:CC Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3 Certificate serial: 019B7F1565FDE23B43B94628CE6F96E7894B Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hIl9YwGP9KNNYc-kWa9ByhnFFMw.roa Signing time: Fri 02 Jan 2026 14:21:07 +0000 ROA not before: Fri 02 Jan 2026 14:21:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30784 IP address blocks: 79.172.64.0/18 maxlen: 24 81.200.0.0/19 maxlen: 24 82.199.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:65:fd:e2:3b:43:b9:46:28:ce:6f:96:e7:89:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3 Validity Not Before: Jan 2 14:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84897d63018ff4a34d61cfa459af41ca19c514cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:60:cd:f3:6d:f2:69:8f:d9:c3:a3:2d:7e:b1: dd:e1:6c:37:2d:94:53:d3:a5:af:71:97:92:93:a7: 53:51:e0:12:db:3c:0f:f4:29:25:f9:bc:e7:f8:0f: b7:d7:d7:01:db:ed:1b:d7:34:09:f2:61:7e:97:3d: ad:b7:a3:8d:e5:42:c3:23:5c:11:8c:d6:a7:6a:92: cd:fb:53:1b:ba:26:32:6b:86:a6:85:31:53:dd:d0: d0:bc:b0:c7:82:43:e5:a7:2f:80:bc:ac:5e:82:85: 8a:25:c9:b9:ef:40:cd:52:4d:81:33:88:ed:df:73: 9d:57:6f:eb:a6:7b:e5:b4:b3:04:57:43:cc:30:1e: 2d:47:f8:04:b8:ac:77:29:d1:40:c1:aa:2c:3b:eb: 37:2a:59:93:7e:a9:cc:99:aa:78:f4:25:e1:43:f0: cd:4f:66:9c:b3:9d:77:f2:93:3d:b0:e3:f4:23:33: de:46:9f:e1:9c:4d:a8:ee:f1:8f:c5:e9:fc:42:21: ce:e0:bd:bd:7f:a9:b5:a1:43:c1:b0:cc:46:7d:55: a4:a6:70:5d:90:9e:ea:a3:f4:a8:5e:6b:fb:ef:2e: a0:06:39:2f:4f:4e:f9:4a:91:17:48:19:50:26:94: 04:a9:ad:c3:74:99:00:17:fe:bc:a1:fc:b9:d0:e0: 8f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:89:7D:63:01:8F:F4:A3:4D:61:CF:A4:59:AF:41:CA:19:C5:14:CC X509v3 Authority Key Identifier: keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hIl9YwGP9KNNYc-kWa9ByhnFFMw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.64.0/18 81.200.0.0/19 82.199.96.0/19 Signature Algorithm: sha256WithRSAEncryption ba:25:6e:03:d4:ab:f9:c9:b0:8f:d8:3e:78:c2:34:7a:e5:e4: 95:af:2a:dc:ac:89:a9:84:00:32:ab:22:b9:87:1a:f3:13:16: d1:6b:45:bb:10:76:e4:a3:a8:52:be:a4:ec:69:c0:af:21:f7: 0e:c5:43:87:c6:bf:9e:e2:a0:7b:b4:66:57:6b:d9:ed:2f:be: 59:21:20:ce:09:04:6e:58:03:43:32:54:a8:01:cd:0e:69:09: 0d:82:99:95:e3:29:17:b8:e4:f8:89:6f:1e:60:0b:e9:cc:a2: 87:15:74:12:af:53:79:cf:68:37:2c:04:d0:72:b1:14:a9:92: 4c:07:0f:2a:90:4c:ac:96:e9:c7:c3:01:13:e3:ca:01:83:39: d2:1e:53:96:ef:cd:7e:e1:16:13:b0:69:6e:fc:48:42:e6:67: 0b:45:42:4b:cb:d3:00:01:ea:43:ac:67:88:2b:2a:95:f3:51: f5:22:cb:1f:27:e5:54:eb:dd:6d:6c:bc:24:52:ae:1d:0d:9e: d0:71:71:90:bd:8c:ff:ab:81:49:a2:0c:90:e9:d4:28:67:6e: a7:1e:80:d6:dc:82:80:f2:41:38:ff:00:a7:ef:a7:c8:5d:f0: 7b:eb:57:1e:50:f7:3e:91:f9:0c:a1:b4:6e:b9:6b:bc:ea:ab: f1:b0:d9:b9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FWX94jtDuUYozm+W54lLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MTA3ZTNmZDliOTRiNGIzNmU2YThmMzcwZTg2NTBhN2Y1 N2U2YzMwHhcNMjYwMTAyMTQyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDg5N2Q2MzAxOGZmNGEzNGQ2MWNmYTQ1OWFmNDFjYTE5YzUxNGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGDN823yaY/Zw6MtfrHd4Ww3LZRT 06WvcZeSk6dTUeAS2zwP9Ckl+bzn+A+319cB2+0b1zQJ8mF+lz2tt6ON5ULDI1wR jNanapLN+1MbuiYya4amhTFT3dDQvLDHgkPlpy+AvKxegoWKJcm570DNUk2BM4jt 33OdV2/rpnvltLMEV0PMMB4tR/gEuKx3KdFAwaosO+s3KlmTfqnMmap49CXhQ/DN T2acs5138pM9sOP0IzPeRp/hnE2o7vGPxen8QiHO4L29f6m1oUPBsMxGfVWkpnBd kJ7qo/SoXmv77y6gBjkvT075SpEXSBlQJpQEqa3DdJkAF/68ofy50OCPwQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFISJfWMBj/SjTWHPpFmvQcoZxRTMMB8GA1UdIwQY MBaAFIcQfj/ZuUtLNuao83DoZQp/V+bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHhCLVA5bTVTMHMyNXFqemNPaGxDbjlYNXNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNTkzOTAtODA0OC00M2I5LTgyYjUt NzYxZGFiMzg5YjViLzEvaElsOVl3R1A5S05OWWMta1dhOUJ5aG5GRk13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9hNTkzOTAtODA0OC00M2I5LTgyYjUtNzYxZGFiMzg5YjVi LzEvaHhCLVA5bTVTMHMyNXFqemNPaGxDbjlYNXNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQGT6xAAwQF UcgAAwQFUsdgMA0GCSqGSIb3DQEBCwUAA4IBAQC6JW4D1Kv5ybCP2D54wjR65eSV ryrcrImphAAyqyK5hxrzExbRa0W7EHbko6hSvqTsacCvIfcOxUOHxr+e4qB7tGZX a9ntL75ZISDOCQRuWANDMlSoAc0OaQkNgpmV4ykXuOT4iW8eYAvpzKKHFXQSr1N5 z2g3LATQcrEUqZJMBw8qkEyslunHwwET48oBgznSHlOW781+4RYTsGlu/EhC5mcL RUJLy9MAAepDrGeIKyqV81H1IssfJ+VU691tbLwkUq4dDZ7QcXGQvYz/q4FJogyQ 6dQoZ26nHoDW3IKA8kE4/wCn76fIXfB761ceUPc+kfkMobRuuWu86qvxsNm5 -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:30 2026 by rpki-client