This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/HiATVU2zNI436oDNBvlSrS-IiIo.roa File: HiATVU2zNI436oDNBvlSrS-IiIo.roa (raw, json) Hash identifier: 65F3Wcciw7HngFzZ4YANeigLFAEt7ipdC99vCIfMg/k= Subject key identifier: 1E:20:13:55:4D:B3:34:8E:37:EA:80:CD:06:F9:52:AD:2F:88:88:8A Certificate issuer: /CN=43d518d7307788fca3891878490e4f32d9aaf6af Certificate serial: 019B79EC2A7A55525C4086B480F616516B99 Authority key identifier: 43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/HiATVU2zNI436oDNBvlSrS-IiIo.roa Signing time: Thu 01 Jan 2026 14:17:58 +0000 ROA not before: Thu 01 Jan 2026 14:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20592 IP address blocks: 185.178.96.0/22 maxlen: 22 212.115.116.0/23 maxlen: 23 212.115.118.0/24 maxlen: 24 2a11:6f00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:2a:7a:55:52:5c:40:86:b4:80:f6:16:51:6b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d518d7307788fca3891878490e4f32d9aaf6af Validity Not Before: Jan 1 14:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e2013554db3348e37ea80cd06f952ad2f88888a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e4:d1:3f:d2:76:bf:0b:5b:32:0a:49:a3:51: 67:3b:42:50:bf:7c:3b:a2:3b:74:de:2a:f0:99:a8: 7d:72:1c:60:5b:74:60:43:d0:3e:68:11:8f:41:16: 05:ff:b6:47:8a:c0:06:0c:64:d4:ba:ba:50:0f:4b: 73:e5:89:f7:f1:be:1b:35:cf:4b:24:a7:49:f9:3c: 56:83:18:39:9b:88:5d:d5:d4:3b:2b:ad:bf:08:d6: f6:49:ea:11:05:ac:ae:54:13:be:c8:51:dc:80:01: 4c:58:16:69:1f:d8:a7:3c:c3:3a:98:0c:fc:de:64: d0:c9:40:f4:1e:95:93:e8:d1:b4:d9:4d:b4:e2:07: 47:cf:8d:21:56:ef:0f:05:89:e9:d5:12:40:8d:40: 95:48:f5:09:50:07:dd:b8:ca:61:73:fa:cc:f3:c0: f7:0e:d5:66:9c:c5:b3:7a:f3:62:c9:7c:20:87:d3: d5:93:bd:84:67:0b:f4:b7:f9:9e:c4:5d:96:06:4a: 3f:fd:c0:86:fb:ff:8e:db:98:61:27:25:8d:8b:6d: 4c:f2:b0:0f:51:73:e8:af:e2:b0:14:6a:92:09:e4: 58:89:27:fd:ac:d8:0f:a2:3c:b1:f0:04:f6:47:63: c9:a3:a6:af:20:86:6b:d4:03:ed:8c:61:e1:8f:35: 2a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:20:13:55:4D:B3:34:8E:37:EA:80:CD:06:F9:52:AD:2F:88:88:8A X509v3 Authority Key Identifier: keyid:43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/HiATVU2zNI436oDNBvlSrS-IiIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.178.96.0/22 212.115.116.0-212.115.118.255 IPv6: 2a11:6f00::/29 Signature Algorithm: sha256WithRSAEncryption 21:4f:a7:71:b0:2f:f1:72:09:e0:ac:9a:1b:77:7b:89:09:7d: d3:04:04:8c:42:7e:f7:af:4e:9f:49:be:42:fb:40:ef:f3:a7: 44:46:52:6f:80:4e:e9:41:95:92:a3:57:73:ae:cb:9c:34:f1: 8c:f7:34:a1:01:e0:fe:2b:85:3a:77:a5:4c:f0:dd:15:05:b6: 65:58:de:4e:82:a8:d0:c4:33:60:8e:b9:b4:b7:31:bc:00:cf: 36:1c:15:17:4b:97:6e:3f:e0:95:b0:ea:1f:8d:f7:9c:85:07: 02:38:24:1b:ca:a7:43:7f:bd:d9:9c:06:33:43:97:cc:96:8a: c5:b9:3f:75:1e:cc:15:19:fe:a2:0e:ea:4e:2a:64:cc:c9:37: 7e:80:1a:95:c4:be:ac:1f:dd:28:77:5f:f0:9a:d9:4b:df:4e: 01:01:02:28:38:53:e1:38:35:8d:69:8a:93:f3:a6:50:40:b5: 03:48:c9:e9:55:89:bd:88:6a:a4:d5:bd:05:20:81:8a:bb:0a: e2:4e:02:b6:71:27:1a:92:77:6d:70:2d:dd:c1:af:be:80:57: 8e:9b:fb:57:1e:e7:c7:7d:88:90:92:b2:47:7f:9b:39:09:cf: 5f:73:94:36:6c:ab:06:98:a8:b0:dc:af:7f:7c:3f:da:1c:58: f2:78:09:61 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt57Cp6VVJcQIa0gPYWUWuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDUxOGQ3MzA3Nzg4ZmNhMzg5MTg3ODQ5MGU0ZjMyZDlh YWY2YWYwHhcNMjYwMTAxMTQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTIwMTM1NTRkYjMzNDhlMzdlYTgwY2QwNmY5NTJhZDJmODg4ODhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eTRP9J2vwtbMgpJo1FnO0JQv3w7 ojt03irwmah9chxgW3RgQ9A+aBGPQRYF/7ZHisAGDGTUurpQD0tz5Yn38b4bNc9L JKdJ+TxWgxg5m4hd1dQ7K62/CNb2SeoRBayuVBO+yFHcgAFMWBZpH9inPMM6mAz8 3mTQyUD0HpWT6NG02U204gdHz40hVu8PBYnp1RJAjUCVSPUJUAfduMphc/rM88D3 DtVmnMWzevNiyXwgh9PVk72EZwv0t/mexF2WBko//cCG+/+O25hhJyWNi21M8rAP UXPor+KwFGqSCeRYiSf9rNgPojyx8AT2R2PJo6avIIZr1APtjGHhjzUq9wIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFB4gE1VNszSON+qAzQb5Uq0viIiKMB8GA1UdIwQY MBaAFEPVGNcwd4j8o4kYeEkOTzLZqvavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlVWTF6QjNpUHlqaVJoNFNRNVBNdG1xOXE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9hYjdjYWEtOGJjNS00YmNlLWExMzAt ZWRkZjMyMGQ1MGUyLzEvSGlBVFZVMnpOSTQzNm9ETkJ2bFNyUy1JaUlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9hYjdjYWEtOGJjNS00YmNlLWExMzAtZWRkZjMyMGQ1MGUy LzEvUTlVWTF6QjNpUHlqaVJoNFNRNVBNdG1xOXE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQCubJgMAwD BALUc3QDBADUc3YwDQQCAAIwBwMFAyoRbwAwDQYJKoZIhvcNAQELBQADggEBACFP p3GwL/FyCeCsmht3e4kJfdMEBIxCfvevTp9JvkL7QO/zp0RGUm+ATulBlZKjV3Ou y5w08Yz3NKEB4P4rhTp3pUzw3RUFtmVY3k6CqNDEM2COubS3MbwAzzYcFRdLl24/ 4JWw6h+N95yFBwI4JBvKp0N/vdmcBjNDl8yWisW5P3UezBUZ/qIO6k4qZMzJN36A GpXEvqwf3Sh3X/Ca2UvfTgEBAig4U+E4NY1pipPzplBAtQNIyelVib2IaqTVvQUg gYq7CuJOArZxJxqSd21wLd3Br76AV46b+1ce58d9iJCSskd/mzkJz19zlDZsqwaY qLDcr398P9ocWPJ4CWE= -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:20 2026 by rpki-client