This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HihShuZx8bggD8G6DJvwb7oDjFw.roa File: HihShuZx8bggD8G6DJvwb7oDjFw.roa (raw, json) Hash identifier: 2iR4kgyZaQIbkULwV9PfzmPCoe4AmLEGbjAh2CM4ZRE= Subject key identifier: 1E:28:52:86:E6:71:F1:B8:20:0F:C1:BA:0C:9B:F0:6F:BA:03:8C:5C Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AC1AEA1192FE33A32B1EB098913D5 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HihShuZx8bggD8G6DJvwb7oDjFw.roa Signing time: Thu 01 Jan 2026 16:18:46 +0000 ROA not before: Thu 01 Jan 2026 16:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209474 IP address blocks: 212.38.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c1:ae:a1:19:2f:e3:3a:32:b1:eb:09:89:13:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e285286e671f1b8200fc1ba0c9bf06fba038c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:51:23:a7:95:db:92:24:6d:b9:9c:f7:62:8a: 38:a6:91:ee:51:0e:5f:c7:0b:2f:8c:73:24:01:df: b0:64:15:c8:e5:98:2e:fa:4e:d5:ee:8d:a2:50:4a: 6e:bf:36:2e:3d:aa:e0:31:45:1b:8d:75:ca:43:4a: 05:95:02:09:67:ab:03:a9:f0:b6:39:90:eb:a1:77: 36:61:22:a0:dc:37:74:1a:5d:4b:35:8a:c8:f9:d4: c5:9e:20:82:17:65:6b:76:97:ee:48:eb:8b:11:bf: 33:27:06:1c:11:89:1b:f1:fc:6a:51:9c:22:2a:0d: ae:1c:84:21:78:9f:a8:1a:8a:99:7b:17:6c:62:2a: e5:63:1e:5c:8e:f1:58:48:ee:f3:57:55:d4:ec:9b: 0e:e2:d2:82:ae:04:a6:44:14:ac:16:12:bd:86:78: bc:e6:56:37:fe:a8:9d:39:a3:e0:ca:13:1b:64:e0: a7:68:7b:1e:52:3d:fe:ac:c8:61:aa:62:77:ef:e0: 4e:05:63:df:0c:b3:6b:de:ab:63:fa:14:e3:f8:87: 43:39:24:04:67:ae:15:9b:b5:dc:c9:37:66:a3:22: bc:30:22:11:4c:2d:38:b1:f3:3b:ea:9f:98:15:43: 9a:02:8e:3c:fb:7c:70:53:05:9a:a8:81:ec:df:60: df:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:28:52:86:E6:71:F1:B8:20:0F:C1:BA:0C:9B:F0:6F:BA:03:8C:5C X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HihShuZx8bggD8G6DJvwb7oDjFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.38.88.0/24 Signature Algorithm: sha256WithRSAEncryption 26:63:6b:0d:e1:86:43:69:3e:53:97:7b:26:59:e4:76:25:29: 18:f8:9b:e9:29:13:40:5e:37:86:ec:80:cf:df:32:5d:17:ca: 98:9f:6d:ac:f7:28:04:16:a5:72:52:f4:5d:d7:7c:e7:5a:06: 05:19:25:a0:32:43:36:71:59:d6:6f:71:86:25:a8:19:8e:f7: 19:bc:9c:ae:aa:88:ea:9f:60:4e:4c:55:f4:51:59:89:3b:5e: d0:53:e9:cb:39:0d:bd:0e:38:f8:d2:3c:1c:38:6c:ed:be:49: 7b:e2:08:b2:83:75:cf:45:2a:17:a6:ae:34:aa:70:74:70:b8: 35:9b:96:3e:4a:29:d1:6e:8d:ee:2d:6c:d4:fc:3e:ea:cf:da: cd:1b:5a:c3:88:3b:47:35:3c:41:d8:54:19:9f:c4:45:1b:f1: 52:cb:6a:32:34:df:0e:5e:06:55:ba:3e:b5:de:1d:df:a3:0c: ca:f6:09:30:37:da:6b:b8:29:11:5e:c4:17:e1:4e:87:f1:b1: 12:53:37:9f:5d:8a:67:31:cd:85:e0:51:ca:6b:d0:d0:37:e8: bf:97:fd:12:5e:58:ea:d6:f7:2c:d2:23:ff:9a:01:3b:d3:dd: 12:ab:4f:27:b5:18:d6:0f:a2:f6:68:71:6f:65:ae:58:71:51: 45:a2:1a:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WsGuoRkv4zoysesJiRPVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTI4NTI4NmU2NzFmMWI4MjAwZmMxYmEwYzliZjA2ZmJhMDM4YzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVEjp5XbkiRtuZz3Yoo4ppHuUQ5f xwsvjHMkAd+wZBXI5Zgu+k7V7o2iUEpuvzYuPargMUUbjXXKQ0oFlQIJZ6sDqfC2 OZDroXc2YSKg3Dd0Gl1LNYrI+dTFniCCF2VrdpfuSOuLEb8zJwYcEYkb8fxqUZwi Kg2uHIQheJ+oGoqZexdsYirlYx5cjvFYSO7zV1XU7JsO4tKCrgSmRBSsFhK9hni8 5lY3/qidOaPgyhMbZOCnaHseUj3+rMhhqmJ37+BOBWPfDLNr3qtj+hTj+IdDOSQE Z64Vm7XcyTdmoyK8MCIRTC04sfM76p+YFUOaAo48+3xwUwWaqIHs32Df8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB4oUobmcfG4IA/Bugyb8G+6A4xcMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvSGloU2h1Wng4YmdnRDhHNkRKdndiN29EakZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1CZYMA0G CSqGSIb3DQEBCwUAA4IBAQAmY2sN4YZDaT5Tl3smWeR2JSkY+JvpKRNAXjeG7IDP 3zJdF8qYn22s9ygEFqVyUvRd13znWgYFGSWgMkM2cVnWb3GGJagZjvcZvJyuqojq n2BOTFX0UVmJO17QU+nLOQ29Djj40jwcOGztvkl74giyg3XPRSoXpq40qnB0cLg1 m5Y+SinRbo3uLWzU/D7qz9rNG1rDiDtHNTxB2FQZn8RFG/FSy2oyNN8OXgZVuj61 3h3fowzK9gkwN9pruCkRXsQX4U6H8bESUzefXYpnMc2F4FHKa9DQN+i/l/0SXljq 1vcs0iP/mgE7090Sq08ntRjWD6L2aHFvZa5YcVFFohoc -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:19 2026 by rpki-client