This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/hoZI_9EArI1Si7uz13Ke8OnteiE.roa File: hoZI_9EArI1Si7uz13Ke8OnteiE.roa (raw, json) Hash identifier: LayP+QLnOj4vcYwwGf7M4XCZtnOUkpFaK8bKqcrT3zA= Subject key identifier: 86:86:48:FF:D1:00:AC:8D:52:8B:BB:B3:D7:72:9E:F0:E9:ED:7A:21 Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b Certificate serial: 019B7F858DCB2713748F453BC6B994A59D0C Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/hoZI_9EArI1Si7uz13Ke8OnteiE.roa Signing time: Fri 02 Jan 2026 16:23:37 +0000 ROA not before: Fri 02 Jan 2026 16:23:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 87.254.96.0/24 maxlen: 24 87.254.97.0/24 maxlen: 24 87.254.98.0/24 maxlen: 24 87.254.99.0/24 maxlen: 24 87.254.100.0/24 maxlen: 24 87.254.101.0/24 maxlen: 24 87.254.102.0/24 maxlen: 24 87.254.103.0/24 maxlen: 24 87.254.104.0/24 maxlen: 24 87.254.105.0/24 maxlen: 24 87.254.106.0/24 maxlen: 24 87.254.107.0/24 maxlen: 24 87.254.108.0/24 maxlen: 24 87.254.109.0/24 maxlen: 24 87.254.110.0/24 maxlen: 24 87.254.111.0/24 maxlen: 24 87.254.112.0/24 maxlen: 24 87.254.113.0/24 maxlen: 24 87.254.114.0/24 maxlen: 24 87.254.115.0/24 maxlen: 24 87.254.116.0/24 maxlen: 24 87.254.117.0/24 maxlen: 24 87.254.118.0/24 maxlen: 24 87.254.119.0/24 maxlen: 24 87.254.120.0/24 maxlen: 24 87.254.121.0/24 maxlen: 24 87.254.122.0/24 maxlen: 24 87.254.123.0/24 maxlen: 24 87.254.124.0/24 maxlen: 24 87.254.125.0/24 maxlen: 24 87.254.126.0/24 maxlen: 24 87.254.127.0/24 maxlen: 24 185.69.216.0/24 maxlen: 24 185.69.217.0/24 maxlen: 24 185.69.218.0/24 maxlen: 24 185.69.219.0/24 maxlen: 24 195.137.228.0/24 maxlen: 24 195.137.229.0/24 maxlen: 24 212.24.192.0/24 maxlen: 24 212.24.193.0/24 maxlen: 24 212.24.194.0/24 maxlen: 24 212.24.195.0/24 maxlen: 24 212.24.196.0/24 maxlen: 24 212.24.197.0/24 maxlen: 24 212.24.198.0/24 maxlen: 24 212.24.199.0/24 maxlen: 24 212.24.200.0/24 maxlen: 24 212.24.201.0/24 maxlen: 24 212.24.202.0/24 maxlen: 24 212.24.203.0/24 maxlen: 24 212.24.204.0/24 maxlen: 24 212.24.205.0/24 maxlen: 24 212.24.206.0/24 maxlen: 24 212.24.207.0/24 maxlen: 24 212.24.208.0/24 maxlen: 24 212.24.209.0/24 maxlen: 24 212.24.210.0/24 maxlen: 24 212.24.211.0/24 maxlen: 24 212.24.212.0/24 maxlen: 24 212.24.213.0/24 maxlen: 24 212.24.214.0/24 maxlen: 24 212.24.215.0/24 maxlen: 24 212.24.216.0/24 maxlen: 24 212.24.217.0/24 maxlen: 24 212.24.218.0/24 maxlen: 24 212.24.219.0/24 maxlen: 24 212.24.220.0/24 maxlen: 24 212.24.221.0/24 maxlen: 24 212.24.222.0/24 maxlen: 24 212.24.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:8d:cb:27:13:74:8f:45:3b:c6:b9:94:a5:9d:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca37843f0752224459e6034569a217c8b611564b Validity Not Before: Jan 2 16:23:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=868648ffd100ac8d528bbbb3d7729ef0e9ed7a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:01:cd:04:68:3f:76:3e:e3:0d:f8:50:a4:30: 5b:67:45:1d:48:01:07:0c:e8:69:fe:b1:ef:7f:20: b3:54:24:d1:3e:89:05:b8:ee:ab:d7:f2:76:b9:ce: 58:51:39:64:bb:d4:7f:29:fc:ef:98:28:76:61:09: 6b:54:5a:4b:7f:c8:a5:20:f5:eb:f8:b5:6c:03:7f: 3c:34:47:69:8a:52:47:86:bb:32:e6:97:a3:0d:bb: 86:19:1b:ee:ee:83:f2:67:fd:e5:43:30:5d:08:f0: 01:6f:e9:0a:4d:fe:c2:13:ca:d0:2f:09:b8:20:46: 32:0c:c7:96:e9:c3:45:46:05:46:ae:1c:36:af:82: 7d:ca:84:74:37:50:fa:67:5b:f9:d2:1f:44:57:46: 9c:82:1e:9a:11:ad:9a:23:39:0e:53:01:f8:dc:20: 9b:69:34:7c:60:bc:cf:16:8a:fc:12:5d:ff:20:3f: de:be:69:29:0e:7e:5e:99:da:67:e1:a5:98:1a:d9: f2:66:99:b1:fb:29:47:de:48:61:cf:da:de:a7:4e: 5e:b7:fb:f3:37:1c:ab:93:bb:07:88:8c:29:f5:a6: 3b:27:7c:37:f8:66:d4:cc:3d:32:bb:e4:1a:68:57: b3:fd:70:96:de:42:21:97:ad:c4:32:ff:bc:15:04: 0a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:86:48:FF:D1:00:AC:8D:52:8B:BB:B3:D7:72:9E:F0:E9:ED:7A:21 X509v3 Authority Key Identifier: keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/hoZI_9EArI1Si7uz13Ke8OnteiE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.254.96.0/19 185.69.216.0/22 195.137.228.0/23 212.24.192.0/19 Signature Algorithm: sha256WithRSAEncryption 68:45:e3:fe:91:19:3b:ab:60:3c:27:c6:3f:d1:5a:7d:50:2f: 7f:a3:29:aa:58:1f:e4:fa:b7:fc:d0:dd:e4:32:a0:16:6a:80: f8:8b:ee:ef:50:59:0e:4f:c8:95:bf:12:ec:6c:12:17:19:50: 25:33:87:08:93:52:92:27:f9:c8:07:dc:8c:d9:04:c2:7e:57: db:65:c8:61:a6:99:50:cd:03:26:78:9e:ed:3d:9e:5a:21:af: e1:17:97:52:65:53:1d:df:6b:ab:f8:a5:07:ec:92:17:16:b1: e1:94:8f:bf:82:47:24:c3:c7:a8:d1:88:83:96:48:25:0b:15: b8:88:2c:ea:59:02:49:67:a4:c9:54:0e:ed:64:65:ba:59:ef: 38:6e:bb:2b:15:bd:71:9c:17:1c:c0:82:d6:2c:bf:6f:bd:33: 13:66:97:d2:0b:db:a5:1e:a3:65:6e:03:88:63:bb:c9:5b:10: 8e:f7:ed:41:fd:7a:72:4d:6a:a6:09:12:00:af:b9:30:68:e3: 73:4b:8c:2a:af:49:e1:0d:7b:8d:7b:d5:c5:d6:59:2a:8b:1e: 09:eb:e2:17:04:1a:19:e7:ad:32:f2:e3:10:8c:0f:2d:2a:72: 5f:9b:0b:5c:b0:13:d3:28:eb:55:95:0c:e3:3b:6e:8e:14:7e: 78:e0:92:89 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hY3LJxN0j0U7xrmUpZ0MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzc4NDNmMDc1MjIyNDQ1OWU2MDM0NTY5YTIxN2M4YjYx MTU2NGIwHhcNMjYwMTAyMTYyMzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Njg2NDhmZmQxMDBhYzhkNTI4YmJiYjNkNzcyOWVmMGU5ZWQ3YTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgHNBGg/dj7jDfhQpDBbZ0UdSAEH DOhp/rHvfyCzVCTRPokFuO6r1/J2uc5YUTlku9R/KfzvmCh2YQlrVFpLf8ilIPXr +LVsA388NEdpilJHhrsy5pejDbuGGRvu7oPyZ/3lQzBdCPABb+kKTf7CE8rQLwm4 IEYyDMeW6cNFRgVGrhw2r4J9yoR0N1D6Z1v50h9EV0acgh6aEa2aIzkOUwH43CCb aTR8YLzPFor8El3/ID/evmkpDn5emdpn4aWYGtnyZpmx+ylH3khhz9rep05et/vz Nxyrk7sHiIwp9aY7J3w3+GbUzD0yu+QaaFez/XCW3kIhl63EMv+8FQQKeQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIaGSP/RAKyNUou7s9dynvDp7XohMB8GA1UdIwQY MBaAFMo3hD8HUiJEWeYDRWmiF8i2EVZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWplRVB3ZFNJa1JaNWdORmFhSVh5TFlSVmtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNzE2Y2QtZDc5Zi00NDg0LTk2ODUt OGZlNzg0ZTMxZTVkLzEvaG9aSV85RUFySTFTaTd1ejEzS2U4T250ZWlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9kNzE2Y2QtZDc5Zi00NDg0LTk2ODUtOGZlNzg0ZTMxZTVk LzEveWplRVB3ZFNJa1JaNWdORmFhSVh5TFlSVmtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFV/5gAwQC uUXYAwQBw4nkAwQF1BjAMA0GCSqGSIb3DQEBCwUAA4IBAQBoReP+kRk7q2A8J8Y/ 0Vp9UC9/oymqWB/k+rf80N3kMqAWaoD4i+7vUFkOT8iVvxLsbBIXGVAlM4cIk1KS J/nIB9yM2QTCflfbZchhpplQzQMmeJ7tPZ5aIa/hF5dSZVMd32ur+KUH7JIXFrHh lI+/gkckw8eo0YiDlkglCxW4iCzqWQJJZ6TJVA7tZGW6We84brsrFb1xnBccwILW LL9vvTMTZpfSC9ulHqNlbgOIY7vJWxCO9+1B/XpyTWqmCRIAr7kwaONzS4wqr0nh DXuNe9XF1lkqix4J6+IXBBoZ560y8uMQjA8tKnJfmwtcsBPTKOtVlQzjO26OFH54 4JKJ -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:47 2026 by rpki-client