This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/hHSi4PfsUyyK5t-rXYcHJcCojHE.roa File: hHSi4PfsUyyK5t-rXYcHJcCojHE.roa (raw, json) Hash identifier: Knyezx/2va6jD7IAu94rMYimek7OiBeNMohqO9LmNvE= Subject key identifier: 84:74:A2:E0:F7:EC:53:2C:8A:E6:DF:AB:5D:87:07:25:C0:A8:8C:71 Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Certificate serial: 019B7B369C3181A2E93210C3DFE4672A484C Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/hHSi4PfsUyyK5t-rXYcHJcCojHE.roa Signing time: Thu 01 Jan 2026 20:18:54 +0000 ROA not before: Thu 01 Jan 2026 20:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42708 IP address blocks: 85.203.44.0/24 maxlen: 24 85.203.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9c:31:81:a2:e9:32:10:c3:df:e4:67:2a:48:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Validity Not Before: Jan 1 20:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8474a2e0f7ec532c8ae6dfab5d870725c0a88c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2c:82:a5:78:d7:37:52:62:b9:10:eb:ee:7f: 4e:9d:4a:cd:01:24:8c:56:c1:f2:ed:d2:23:24:5c: 49:e1:64:0b:26:56:cb:8f:32:a8:ca:c3:a4:5e:9f: d6:2c:5b:e7:bb:54:44:20:02:20:42:1e:86:83:01: 78:73:f2:cd:2f:7b:a1:08:17:94:8a:c9:40:32:db: 06:68:ed:db:0b:27:8a:61:3f:a4:f3:0f:06:11:c4: c2:69:3f:b5:4e:78:ae:3a:73:45:36:ee:70:eb:05: 7c:07:bd:54:a2:ca:17:d0:d0:70:2b:f6:38:d1:51: 30:e3:bb:d7:e3:79:dd:04:6f:5a:cc:a6:cd:7c:f5: 1a:55:98:83:e1:28:fc:6e:c4:d5:9d:09:b3:a4:f9: c7:60:55:e6:52:2f:2f:60:eb:9a:70:27:36:7d:30: d4:ac:95:36:5b:e7:ed:10:30:0b:e2:fd:c1:0f:7e: 68:b6:4b:45:03:61:21:d4:0f:82:4d:64:90:b8:5c: 76:bb:2f:03:d1:f9:7b:51:c4:45:94:18:a0:28:cd: dc:01:40:a1:7f:cf:12:eb:80:a2:b6:4f:2d:c3:38: f5:5d:89:0f:f5:b8:90:c8:0f:8d:88:e7:eb:8c:b4: bf:93:2d:03:20:d4:d7:54:c2:be:99:97:4e:27:f5: 72:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:74:A2:E0:F7:EC:53:2C:8A:E6:DF:AB:5D:87:07:25:C0:A8:8C:71 X509v3 Authority Key Identifier: keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/hHSi4PfsUyyK5t-rXYcHJcCojHE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.203.44.0/24 85.203.47.0/24 Signature Algorithm: sha256WithRSAEncryption 91:77:d6:b2:88:e4:5e:23:a1:a9:cb:1d:d0:dc:c3:5b:9b:a8: c0:af:35:8a:7f:da:cc:9e:46:21:35:d8:fe:d4:fd:32:23:21: a8:3c:be:c0:32:46:50:bc:37:fa:52:94:2a:2c:8d:6d:76:10: eb:b3:0f:0b:b8:bb:d6:f8:df:48:cc:9e:23:3e:7d:0b:f3:94: 95:39:1d:ab:27:b9:a4:39:be:69:34:c6:ad:d3:7e:5d:7e:c5: 9a:41:10:98:bb:dd:93:d8:59:31:16:8c:e3:b0:92:7e:c8:b5: a8:27:93:f9:1b:bf:f9:c4:c6:41:cb:e7:20:a8:04:48:d0:e4: 8b:2b:ea:0a:0f:39:ca:6b:5d:c9:14:85:06:69:b5:ca:6d:59: 52:0f:3d:fe:49:e7:db:63:cb:ef:9d:51:fe:20:38:15:c2:b4: 2c:85:62:cd:7f:13:c1:d0:f8:c0:a7:90:f6:ce:55:5c:5a:f4: 50:d9:34:ba:76:fc:46:da:f5:d6:cc:46:6a:b2:08:7c:51:9a: 62:b8:c0:24:4a:57:04:e9:c5:e4:33:69:ae:d4:a1:6f:85:d2: ac:9d:ab:70:1b:8f:9b:36:bd:84:c4:89:47:4c:df:55:e4:e0: 9e:f9:0e:82:cc:b4:1c:ec:0a:1a:e6:39:29:e7:ea:6f:5c:4f: c4:fe:f2:11 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NpwxgaLpMhDD3+RnKkhMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw MWZiODkwHhcNMjYwMTAxMjAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDc0YTJlMGY3ZWM1MzJjOGFlNmRmYWI1ZDg3MDcyNWMwYTg4YzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiyCpXjXN1JiuRDr7n9OnUrNASSM VsHy7dIjJFxJ4WQLJlbLjzKoysOkXp/WLFvnu1REIAIgQh6GgwF4c/LNL3uhCBeU islAMtsGaO3bCyeKYT+k8w8GEcTCaT+1TniuOnNFNu5w6wV8B71UosoX0NBwK/Y4 0VEw47vX43ndBG9azKbNfPUaVZiD4Sj8bsTVnQmzpPnHYFXmUi8vYOuacCc2fTDU rJU2W+ftEDAL4v3BD35otktFA2Eh1A+CTWSQuFx2uy8D0fl7UcRFlBigKM3cAUCh f88S64Citk8twzj1XYkP9biQyA+NiOfrjLS/ky0DINTXVMK+mZdOJ/VyqwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIR0ouD37FMsiubfq12HByXAqIxxMB8GA1UdIwQY MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt NmFiMTExNTVmNmZiLzEvaEhTaTRQZnNVeXlLNXQtclhZY0hKY0NvakhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVcssAwQA VcsvMA0GCSqGSIb3DQEBCwUAA4IBAQCRd9ayiOReI6Gpyx3Q3MNbm6jArzWKf9rM nkYhNdj+1P0yIyGoPL7AMkZQvDf6UpQqLI1tdhDrsw8LuLvW+N9IzJ4jPn0L85SV OR2rJ7mkOb5pNMat035dfsWaQRCYu92T2FkxFozjsJJ+yLWoJ5P5G7/5xMZBy+cg qARI0OSLK+oKDznKa13JFIUGabXKbVlSDz3+SefbY8vvnVH+IDgVwrQshWLNfxPB 0PjAp5D2zlVcWvRQ2TS6dvxG2vXWzEZqsgh8UZpiuMAkSlcE6cXkM2mu1KFvhdKs natwG4+bNr2ExIlHTN9V5OCe+Q6CzLQc7Aoa5jkp5+pvXE/E/vIR -----END CERTIFICATE-----Generated at Mon Jan 19 17:51:50 2026 by rpki-client