This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/hzKtJYmQx2VKDR4are4X8Q6MlNE.roa File: hzKtJYmQx2VKDR4are4X8Q6MlNE.roa (raw, json) Hash identifier: Juf71zJJbJe4QMMrbX8fLK426s9dmhQKiIlkp/1nubQ= Subject key identifier: 87:32:AD:25:89:90:C7:65:4A:0D:1E:1A:AD:EE:17:F1:0E:8C:94:D1 Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Certificate serial: 019B78A21B8F127F497E2B1FBCCF70AA4C4E Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/hzKtJYmQx2VKDR4are4X8Q6MlNE.roa Signing time: Thu 01 Jan 2026 08:17:28 +0000 ROA not before: Thu 01 Jan 2026 08:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 37.140.244.0/24 maxlen: 24 94.103.177.0/24 maxlen: 24 212.46.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 11:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:1b:8f:12:7f:49:7e:2b:1f:bc:cf:70:aa:4c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Validity Not Before: Jan 1 08:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8732ad258990c7654a0d1e1aadee17f10e8c94d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:55:e3:82:4f:e4:ed:a7:a8:61:41:a6:27:9b: 19:49:72:2b:c1:93:89:36:50:0b:20:69:a2:44:7c: 56:60:3d:6d:99:6e:cd:f8:6a:ef:7d:ee:39:d3:23: d3:77:be:fe:12:0c:c8:52:db:9e:75:41:ac:8d:41: d9:70:af:1c:38:8c:62:bb:7d:31:c7:82:a3:4b:5a: 62:66:31:de:0f:b0:a9:8f:fc:37:cb:d0:9d:fd:a0: da:d5:dc:fc:0a:1b:e5:65:4c:c0:92:18:ab:25:a4: 1a:9d:c7:9c:90:98:cf:eb:57:74:c7:9f:75:33:14: 95:a0:63:ae:cd:85:75:32:d5:37:f2:68:29:c7:b3: 7e:cf:3c:b6:52:c5:2a:90:f2:5b:e4:d0:56:3f:cf: c3:99:c0:43:e5:14:03:9d:51:04:38:15:09:1b:81: 90:7f:cf:40:30:b5:d7:95:cc:fd:9c:5b:ac:d0:e4: ec:6a:b5:b6:0e:b1:bf:ff:a7:1b:10:e4:a2:68:3f: 1a:4f:46:f8:51:43:0c:fe:f5:bf:dd:c8:35:5d:db: e9:98:94:67:2d:22:97:7d:2a:80:3a:c4:18:fa:c9: ad:45:c8:87:d1:89:59:8a:06:ff:df:ee:36:b7:76: 72:e9:23:11:42:c0:1f:70:7b:b0:40:63:40:af:6e: 25:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:32:AD:25:89:90:C7:65:4A:0D:1E:1A:AD:EE:17:F1:0E:8C:94:D1 X509v3 Authority Key Identifier: keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/hzKtJYmQx2VKDR4are4X8Q6MlNE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.140.244.0/24 94.103.177.0/24 212.46.35.0/24 Signature Algorithm: sha256WithRSAEncryption 07:48:69:69:89:b7:8e:b9:0f:b7:33:e9:6a:ab:0e:f9:d9:dc: fe:f8:7d:2b:44:0c:b3:6b:ea:f5:b4:db:56:e1:4d:56:2e:87: 15:1c:6d:b5:82:c2:0f:f3:62:06:b1:7c:23:85:ea:d5:74:13: d1:1e:c4:f6:fd:e3:ca:f3:24:fd:5c:f0:2f:fd:d2:3d:47:98: 01:d3:a5:af:9c:2b:c0:9e:1a:91:68:9c:c2:50:a0:9e:19:46: be:96:85:89:9e:2e:37:e6:51:e3:24:6c:79:6a:1b:5f:7f:ee: ce:05:d3:b5:c4:02:e8:99:f4:e0:9c:ab:3d:99:48:d6:26:09: cc:f1:1d:ba:7d:49:bc:72:e3:1e:e8:2d:8b:5e:74:25:3e:4b: 49:0b:64:91:e0:a9:35:90:d6:9d:df:25:1d:87:84:58:f0:8b: 65:19:af:c0:91:bc:99:be:90:02:b5:c6:1e:9c:10:fe:f5:e5: df:fb:17:20:f6:56:e8:3b:37:12:61:59:51:f9:9b:bc:1c:d3: db:df:7f:ae:78:b7:18:5b:6a:ab:1f:c8:bb:25:b8:d2:5d:f8: 92:84:9f:f5:5f:72:7c:1a:11:d4:be:c6:99:da:fa:82:77:89: 9a:00:42:6f:54:66:dc:4d:38:91:c1:c7:22:19:a8:8f:b4:6d: db:fe:64:81 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4ohuPEn9JfisfvM9wqkxOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy NjhmNTQwHhcNMjYwMTAxMDgxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzMyYWQyNTg5OTBjNzY1NGEwZDFlMWFhZGVlMTdmMTBlOGM5NGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1Xjgk/k7aeoYUGmJ5sZSXIrwZOJ NlALIGmiRHxWYD1tmW7N+Grvfe450yPTd77+EgzIUtuedUGsjUHZcK8cOIxiu30x x4KjS1piZjHeD7Cpj/w3y9Cd/aDa1dz8ChvlZUzAkhirJaQanceckJjP61d0x591 MxSVoGOuzYV1MtU38mgpx7N+zzy2UsUqkPJb5NBWP8/DmcBD5RQDnVEEOBUJG4GQ f89AMLXXlcz9nFus0OTsarW2DrG//6cbEOSiaD8aT0b4UUMM/vW/3cg1XdvpmJRn LSKXfSqAOsQY+smtRciH0YlZigb/3+42t3Zy6SMRQsAfcHuwQGNAr24lPQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIcyrSWJkMdlSg0eGq3uF/EOjJTRMB8GA1UdIwQY MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt N2FhN2ZjMzU5NjU1LzEvaHpLdEpZbVF4MlZLRFI0YXJlNFg4UTZNbE5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1 LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJYz0AwQA XmexAwQA1C4jMA0GCSqGSIb3DQEBCwUAA4IBAQAHSGlpibeOuQ+3M+lqqw752dz+ +H0rRAyza+r1tNtW4U1WLocVHG21gsIP82IGsXwjherVdBPRHsT2/ePK8yT9XPAv /dI9R5gB06WvnCvAnhqRaJzCUKCeGUa+loWJni435lHjJGx5ahtff+7OBdO1xALo mfTgnKs9mUjWJgnM8R26fUm8cuMe6C2LXnQlPktJC2SR4Kk1kNad3yUdh4RY8Itl Ga/AkbyZvpACtcYenBD+9eXf+xcg9lboOzcSYVlR+Zu8HNPb33+ueLcYW2qrH8i7 JbjSXfiShJ/1X3J8GhHUvsaZ2vqCd4maAEJvVGbcTTiRwcciGaiPtG3b/mSB -----END CERTIFICATE-----Generated at Fri Jan 2 14:42:29 2026 by rpki-client