This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/hm3gGC28KbFEA58Cbf-ewSmP5Tk.roa File: hm3gGC28KbFEA58Cbf-ewSmP5Tk.roa (raw, json) Hash identifier: GOzaCaLKpBPV6Z5Ubsc0U7DtlnRyTCch0fT1/rt/tY4= Subject key identifier: 86:6D:E0:18:2D:BC:29:B1:44:03:9F:02:6D:FF:9E:C1:29:8F:E5:39 Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e Certificate serial: 019B7EA61B0971805BF71C4507429638B74C Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/hm3gGC28KbFEA58Cbf-ewSmP5Tk.roa Signing time: Fri 02 Jan 2026 12:19:33 +0000 ROA not before: Fri 02 Jan 2026 12:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214996 IP address blocks: 152.53.31.0/24 maxlen: 24 152.53.36.0/22 maxlen: 24 152.53.52.0/22 maxlen: 22 152.53.68.0/24 maxlen: 24 152.53.80.0/22 maxlen: 22 152.53.88.0/22 maxlen: 22 152.53.164.0/22 maxlen: 22 152.53.168.0/22 maxlen: 22 152.53.192.0/20 maxlen: 32 152.53.201.0/24 maxlen: 24 152.53.208.0/20 maxlen: 22 152.53.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:1b:09:71:80:5b:f7:1c:45:07:42:96:38:b7:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e Validity Not Before: Jan 2 12:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=866de0182dbc29b144039f026dff9ec1298fe539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:f5:d7:eb:71:08:07:ee:86:a3:ee:8c:97: 95:6d:f2:72:02:61:69:8d:19:52:56:a4:dc:e7:76: 0a:7d:be:59:67:ce:03:73:85:f4:c6:42:d6:e5:f6: 01:e9:83:a4:04:d4:5a:2d:1e:1d:43:5e:f1:e7:92: c4:9d:bf:94:29:00:3c:07:a4:91:b4:ae:0b:42:f3: 62:fe:a8:6f:6a:26:4e:db:66:d5:c2:d0:4e:b4:cf: ca:71:2c:60:27:ed:ca:dd:1e:e9:ee:64:cb:0a:1d: 73:d0:6f:e1:33:e7:85:ff:f2:f2:3f:a3:7c:b2:ff: 37:dc:23:3e:d4:a1:08:49:a2:4e:f1:37:f5:12:f0: 82:ff:50:d4:30:f1:f4:fd:47:76:27:0c:49:37:e7: aa:bf:6c:85:45:f5:97:4d:7a:f1:ed:1a:d6:2e:1b: b2:19:27:d7:0e:c2:fe:22:a5:e2:40:4d:41:2c:fd: 93:ef:14:c6:fe:a0:44:c7:18:b6:59:db:f4:83:06: 2a:61:ea:fb:28:b1:a8:8b:a8:54:ed:84:0e:07:e4: 01:18:36:45:01:7f:72:80:cc:f7:94:b9:2c:44:08: de:87:d3:9a:40:1e:de:cd:39:d7:00:e9:9c:c1:c1: 9b:ab:ef:f5:af:c6:26:75:ec:91:f2:51:c2:e7:36: d8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6D:E0:18:2D:BC:29:B1:44:03:9F:02:6D:FF:9E:C1:29:8F:E5:39 X509v3 Authority Key Identifier: keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/hm3gGC28KbFEA58Cbf-ewSmP5Tk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.53.31.0/24 152.53.36.0/22 152.53.52.0/22 152.53.68.0/24 152.53.80.0/22 152.53.88.0/22 152.53.164.0-152.53.171.255 152.53.192.0/19 152.53.240.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:29:61:a8:3b:86:4c:9f:a2:6d:41:31:5c:48:d3:8d:63:3c: 14:a7:6f:23:41:de:6c:62:07:8c:44:b8:29:4b:d7:d6:75:4c: c8:b0:3f:00:1c:e9:e5:12:a8:3a:c5:42:03:33:45:7f:d2:32: ff:4b:30:a3:fb:80:dd:3e:68:49:85:7f:bb:08:8b:64:54:fc: 1d:b7:c5:cb:9b:9b:6b:dd:31:59:fe:a2:45:a4:6e:aa:8c:ea: 9b:04:c4:a7:ff:a3:a5:2c:e6:a8:15:39:b0:09:34:d3:8a:e3: f2:44:77:c4:03:e6:c7:53:7e:b7:0b:40:21:b1:9a:b0:d2:ce: de:6d:aa:b5:d8:cf:dd:30:6f:13:cd:13:91:14:92:a3:7c:29: d8:ce:19:71:2c:49:2d:87:80:f8:c8:8e:b1:d0:bd:96:51:91: 42:35:92:6d:e2:64:4b:d6:40:07:14:5f:c4:35:8c:8c:21:b0: 6c:ca:54:15:c2:33:a8:8e:fe:0f:98:93:80:78:af:bc:e5:61: 18:77:31:1c:45:97:ad:fe:e1:46:ac:f8:e1:8c:e9:4a:14:f7: 29:20:be:cb:23:94:c7:fa:54:4a:55:3c:92:11:66:ca:59:d6: b9:cd:3e:42:d6:f1:77:d8:81:3d:e1:2e:74:c9:52:7c:fb:57: a4:c8:a7:64 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt+phsJcYBb9xxFB0KWOLdMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMGIzN2I2ZjRiNDQ1NjQ1ZTY5OTNhOWM1ZWM2MDg0OTI0 MjVmMGUwHhcNMjYwMTAyMTIxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjZkZTAxODJkYmMyOWIxNDQwMzlmMDI2ZGZmOWVjMTI5OGZlNTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj/11+txCAfuhqPujJeVbfJyAmFp jRlSVqTc53YKfb5ZZ84Dc4X0xkLW5fYB6YOkBNRaLR4dQ17x55LEnb+UKQA8B6SR tK4LQvNi/qhvaiZO22bVwtBOtM/KcSxgJ+3K3R7p7mTLCh1z0G/hM+eF//LyP6N8 sv833CM+1KEISaJO8Tf1EvCC/1DUMPH0/Ud2JwxJN+eqv2yFRfWXTXrx7RrWLhuy GSfXDsL+IqXiQE1BLP2T7xTG/qBExxi2Wdv0gwYqYer7KLGoi6hU7YQOB+QBGDZF AX9ygMz3lLksRAjeh9OaQB7ezTnXAOmcwcGbq+/1r8YmdeyR8lHC5zbYCwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFIZt4BgtvCmxRAOfAm3/nsEpj+U5MB8GA1UdIwQY MBaAFNALN7b0tEVkXmmTqcXsYISSQl8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEt N2RiNjg2OGQ4NDc0LzEvaG0zZ0dDMjhLYkZFQTU4Q2JmLWV3U21QNVRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEtN2RiNjg2OGQ4NDc0 LzEvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAmDUfAwQC mDUkAwQCmDU0AwQAmDVEAwQCmDVQAwQCmDVYMAwDBAKYNaQDBAKYNagDBAWYNcAD BAKYNfAwDQYJKoZIhvcNAQELBQADggEBAG4pYag7hkyfom1BMVxI041jPBSnbyNB 3mxiB4xEuClL19Z1TMiwPwAc6eUSqDrFQgMzRX/SMv9LMKP7gN0+aEmFf7sIi2RU /B23xcubm2vdMVn+okWkbqqM6psExKf/o6Us5qgVObAJNNOK4/JEd8QD5sdTfrcL QCGxmrDSzt5tqrXYz90wbxPNE5EUkqN8KdjOGXEsSS2HgPjIjrHQvZZRkUI1km3i ZEvWQAcUX8Q1jIwhsGzKVBXCM6iO/g+Yk4B4r7zlYRh3MRxFl63+4Uas+OGM6UoU 9ykgvssjlMf6VEpVPJIRZspZ1rnNPkLW8XfYgT3hLnTJUnz7V6TIp2Q= -----END CERTIFICATE-----Generated at Mon Jan 26 16:21:59 2026 by rpki-client