This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/hIfe-hRZvEEf-2p1XlFmt18PilM.roa File: hIfe-hRZvEEf-2p1XlFmt18PilM.roa (raw, json) Hash identifier: znHeKgDZO7t2NBi72cNO/6mHRuUTcZ2Y1GocU+87TpI= Subject key identifier: 84:87:DE:FA:14:59:BC:41:1F:FB:6A:75:5E:51:66:B7:5F:0F:8A:53 Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d Certificate serial: 019BA26C71167AADD4D53CFF3182AAFC3EFB Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/hIfe-hRZvEEf-2p1XlFmt18PilM.roa Signing time: Fri 09 Jan 2026 11:02:54 +0000 ROA not before: Fri 09 Jan 2026 11:02:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401783 IP address blocks: 45.92.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:6c:71:16:7a:ad:d4:d5:3c:ff:31:82:aa:fc:3e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d Validity Not Before: Jan 9 11:02:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8487defa1459bc411ffb6a755e5166b75f0f8a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e8:89:13:34:84:12:29:b0:12:ed:ed:be:88: 25:64:7b:4a:ab:21:9a:fd:82:f0:c6:2b:b5:d5:98: 45:1e:d4:ef:7b:15:b1:68:69:3f:6a:4d:ed:c5:2d: f8:a4:7f:30:d4:7a:02:c5:2b:7c:26:93:2c:ec:37: 9a:e0:ee:b9:1b:2a:d7:2f:93:f3:e8:bb:6c:37:94: f8:9c:bb:e6:c0:e6:31:d5:e9:84:0e:88:50:3f:a3: d4:ec:67:f1:26:a6:12:16:aa:7a:5b:c7:f7:67:2d: 0e:03:a2:f3:ee:f6:4b:ce:a2:57:59:fb:1f:40:ef: 13:86:e3:5b:a6:9d:42:a3:f7:8e:af:71:ea:ac:f3: 8c:2c:85:f2:0d:ae:64:08:13:cc:56:2c:75:63:f8: 31:2c:f1:f6:6b:9c:e1:80:53:02:f1:dc:f6:59:5b: ba:27:18:dd:89:e8:45:80:6d:61:dc:ef:a8:15:f4: 73:12:63:f9:fe:bd:e8:82:38:87:2b:e8:d1:d3:39: e8:9a:ec:1f:c7:48:d7:5d:5a:08:7c:40:52:89:e3: fc:a8:9a:7d:3b:84:01:75:8c:a4:de:7d:3f:d2:f6: b4:3a:98:56:ab:a1:58:d0:47:7d:15:9e:22:ba:b3: 34:0e:a0:98:fc:1d:3c:9c:5d:43:7a:24:2e:ec:a5: 5a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:87:DE:FA:14:59:BC:41:1F:FB:6A:75:5E:51:66:B7:5F:0F:8A:53 X509v3 Authority Key Identifier: keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/hIfe-hRZvEEf-2p1XlFmt18PilM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.208.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:4d:b9:19:29:b8:d5:9e:85:73:1d:7f:82:0a:72:36:4f:27: 19:9a:41:33:ec:4b:7c:61:89:d8:32:3f:3e:e5:52:4f:43:06: 18:3f:aa:4c:1a:f8:fc:6c:8c:59:cb:ad:8b:80:b8:16:7b:a9: a4:ab:68:a5:69:db:14:04:96:30:e2:94:1a:8c:50:54:9b:fd: e0:58:65:f0:51:b2:21:49:1d:ae:d5:89:c6:af:35:d4:e4:86: d0:a3:2c:6d:28:61:d6:42:7e:0b:a3:fc:50:cb:5b:5a:6f:d6: b0:ef:1d:38:fb:bc:67:fe:db:0c:e4:4c:f5:be:bc:fe:5c:a0: 9d:54:16:e8:d7:85:93:50:fc:a3:88:a5:e0:e4:7f:b1:61:0e: 4a:b2:5e:57:d1:54:fa:b9:06:77:eb:b6:b1:3b:eb:1b:94:d1: 99:0f:92:1f:dc:d8:80:57:3f:35:5e:46:05:69:01:17:1e:30: bb:82:9b:5b:40:f6:9e:b3:11:97:8a:89:dc:2c:c3:de:40:c9: fd:cd:ab:97:8d:b6:87:21:4b:30:51:db:c7:bf:80:78:02:36: 5f:ca:49:3c:8a:a6:80:f4:7d:6d:7c:47:87:14:16:de:15:0d: 33:ec:90:2f:58:fc:e1:06:6d:30:06:29:91:90:10:5f:5c:1e: dd:62:e5:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuibHEWeq3U1Tz/MYKq/D77MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODA5YTdlNmNhMTRkMGExYTk3NjY3M2UwMzE5ZTM0ZTk1 NmVkM2QwHhcNMjYwMTA5MTEwMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDg3ZGVmYTE0NTliYzQxMWZmYjZhNzU1ZTUxNjZiNzVmMGY4YTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuiJEzSEEimwEu3tvoglZHtKqyGa /YLwxiu11ZhFHtTvexWxaGk/ak3txS34pH8w1HoCxSt8JpMs7Dea4O65GyrXL5Pz 6LtsN5T4nLvmwOYx1emEDohQP6PU7GfxJqYSFqp6W8f3Zy0OA6Lz7vZLzqJXWfsf QO8ThuNbpp1Co/eOr3HqrPOMLIXyDa5kCBPMVix1Y/gxLPH2a5zhgFMC8dz2WVu6 JxjdiehFgG1h3O+oFfRzEmP5/r3ogjiHK+jR0znomuwfx0jXXVoIfEBSieP8qJp9 O4QBdYyk3n0/0va0OphWq6FY0Ed9FZ4iurM0DqCY/B08nF1DeiQu7KVa1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFISH3voUWbxBH/tqdV5RZrdfD4pTMB8GA1UdIwQY MBaAFL+Amn5soU0KGpdmc+AxnjTpVu09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRDYWZteWhUUW9hbDJaejRER2VOT2xXN1QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zYTM4MmEtM2RkYS00Nzk2LWIzMjAt M2ZkZmI0MTQwZjI0LzEvaElmZS1oUlp2RUVmLTJwMVhsRm10MThQaWxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS8zYTM4MmEtM2RkYS00Nzk2LWIzMjAtM2ZkZmI0MTQwZjI0 LzEvdjRDYWZteWhUUW9hbDJaejRER2VOT2xXN1QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVzQMA0G CSqGSIb3DQEBCwUAA4IBAQAtTbkZKbjVnoVzHX+CCnI2TycZmkEz7Et8YYnYMj8+ 5VJPQwYYP6pMGvj8bIxZy62LgLgWe6mkq2iladsUBJYw4pQajFBUm/3gWGXwUbIh SR2u1YnGrzXU5IbQoyxtKGHWQn4Lo/xQy1tab9aw7x04+7xn/tsM5Ez1vrz+XKCd VBbo14WTUPyjiKXg5H+xYQ5Ksl5X0VT6uQZ367axO+sblNGZD5If3NiAVz81XkYF aQEXHjC7gptbQPaesxGXioncLMPeQMn9zauXjbaHIUswUdvHv4B4AjZfykk8iqaA 9H1tfEeHFBbeFQ0z7JAvWPzhBm0wBimRkBBfXB7dYuUq -----END CERTIFICATE-----Generated at Mon Jan 19 11:22:31 2026 by rpki-client