This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/hvYamUzrt8l5XxKg3jQF1nquOy8.roa File: hvYamUzrt8l5XxKg3jQF1nquOy8.roa (raw, json) Hash identifier: xNuK7FrZEwKLbPgJUKdky1f1LSPyUxxPzAOoMN9Fs90= Subject key identifier: 86:F6:1A:99:4C:EB:B7:C9:79:5F:12:A0:DE:34:05:D6:7A:AE:3B:2F Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 019B78A2A066D701A87DBAE5D534A8B94B0C Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/hvYamUzrt8l5XxKg3jQF1nquOy8.roa Signing time: Thu 01 Jan 2026 08:18:02 +0000 ROA not before: Thu 01 Jan 2026 08:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35913 IP address blocks: 45.83.112.0/22 maxlen: 24 80.254.232.0/22 maxlen: 24 185.161.252.0/22 maxlen: 24 185.181.56.0/22 maxlen: 24 192.144.52.0/22 maxlen: 24 193.9.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a0:66:d7:01:a8:7d:ba:e5:d5:34:a8:b9:4b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Jan 1 08:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86f61a994cebb7c9795f12a0de3405d67aae3b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:82:0f:fd:67:88:fd:a7:d3:83:8a:2a:df: b8:38:04:88:c8:0f:18:25:a3:d9:0d:b8:e6:f5:b6: 42:d2:94:87:db:0f:a9:d2:e7:0b:85:83:0b:4d:38: a7:d0:bd:05:18:d1:de:55:02:b7:39:3f:b1:0d:38: 6e:0e:ff:06:83:e3:5d:a8:df:c7:3f:1e:32:b4:20: 2c:8f:31:0e:30:f9:64:41:67:d0:6b:c8:13:38:4c: fd:24:bf:87:08:12:0b:5a:76:fc:aa:54:9f:4b:17: 4b:f2:31:32:39:ae:6e:b4:9c:15:04:97:96:7b:40: 5e:5a:f9:3e:71:28:cb:e9:1c:83:3a:b3:e0:f4:4e: 6e:1f:1a:bb:f2:39:ad:b5:cb:97:3d:2d:df:52:e4: d8:7f:da:82:f3:06:6e:6b:0f:50:12:a1:48:f6:07: 8d:b7:c1:5a:f0:a5:34:f7:73:b9:c9:e2:2d:a7:a9: 7c:b0:47:75:a7:c7:8c:bf:b5:7b:dc:6b:ed:61:d8: e2:ef:45:02:18:3f:d3:fb:7c:06:7e:8e:54:b1:d0: e2:bd:7a:33:3b:92:52:36:48:e9:9c:2f:85:33:50: e4:84:f4:ff:6d:ba:8a:12:ed:67:00:a1:3c:71:bc: 89:80:b5:f0:3b:56:d9:17:78:4b:15:05:29:59:02: 12:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F6:1A:99:4C:EB:B7:C9:79:5F:12:A0:DE:34:05:D6:7A:AE:3B:2F X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/hvYamUzrt8l5XxKg3jQF1nquOy8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.112.0/22 80.254.232.0/22 185.161.252.0/22 185.181.56.0/22 192.144.52.0/22 193.9.40.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:bf:c0:da:9d:90:67:fc:be:ec:fa:89:67:13:fd:c7:a5:9d: 29:98:3e:a4:7b:03:5b:38:83:51:b1:56:33:8d:07:7f:e5:a5: d7:a2:9c:0e:06:d7:e9:49:42:54:21:a0:3e:35:ac:0d:a5:22: 13:e0:da:13:ae:49:fd:5b:9a:06:23:e2:b8:98:05:e5:1b:2a: 4c:ec:73:b0:28:ef:09:c0:ba:56:41:b3:d0:b2:db:74:8c:a8: 38:82:f3:a0:90:7c:58:ae:b5:78:e9:7e:c5:1d:6f:a4:fb:f7: 7e:d9:95:35:cf:ff:9c:ea:26:33:9b:84:34:7c:04:ac:f1:03: 88:e8:30:6b:ea:46:58:0c:ae:5e:20:f1:6b:25:74:9e:2f:54: 7d:fa:f2:38:97:c5:5a:cc:68:c5:0d:99:37:97:28:46:2e:0c: ae:e8:4e:18:3c:a3:15:b7:ef:9f:b3:23:8d:a8:2e:30:f5:84: 6e:d4:95:50:44:99:63:78:49:ae:56:57:3d:69:72:88:cd:4f: f0:b6:d0:9e:b8:8b:2e:cd:cc:13:36:5e:58:35:65:09:24:51: e0:29:e6:ae:02:d1:95:39:fe:3d:db:aa:63:01:37:1b:9a:f3: be:a3:09:59:24:eb:d6:3a:6d:a4:b0:cb:74:18:1a:96:4f:d1: 5b:8b:84:00 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt4oqBm1wGofbrl1TSouUsMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjYwMTAxMDgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmY2MWE5OTRjZWJiN2M5Nzk1ZjEyYTBkZTM0MDVkNjdhYWUzYjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNeCD/1niP2n04OKKt+4OASIyA8Y JaPZDbjm9bZC0pSH2w+p0ucLhYMLTTin0L0FGNHeVQK3OT+xDThuDv8Gg+NdqN/H Px4ytCAsjzEOMPlkQWfQa8gTOEz9JL+HCBILWnb8qlSfSxdL8jEyOa5utJwVBJeW e0BeWvk+cSjL6RyDOrPg9E5uHxq78jmttcuXPS3fUuTYf9qC8wZuaw9QEqFI9geN t8Fa8KU093O5yeItp6l8sEd1p8eMv7V73GvtYdji70UCGD/T+3wGfo5UsdDivXoz O5JSNkjpnC+FM1DkhPT/bbqKEu1nAKE8cbyJgLXwO1bZF3hLFQUpWQISwwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFIb2GplM67fJeV8SoN40BdZ6rjsvMB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvaHZZYW1VenJ0OGw1WHhLZzNqUUYxbnF1T3k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCLVNwAwQC UP7oAwQCuaH8AwQCubU4AwQCwJA0AwQCwQkoMA0GCSqGSIb3DQEBCwUAA4IBAQA6 v8DanZBn/L7s+olnE/3HpZ0pmD6kewNbOINRsVYzjQd/5aXXopwOBtfpSUJUIaA+ NawNpSIT4NoTrkn9W5oGI+K4mAXlGypM7HOwKO8JwLpWQbPQstt0jKg4gvOgkHxY rrV46X7FHW+k+/d+2ZU1z/+c6iYzm4Q0fASs8QOI6DBr6kZYDK5eIPFrJXSeL1R9 +vI4l8VazGjFDZk3lyhGLgyu6E4YPKMVt++fsyONqC4w9YRu1JVQRJljeEmuVlc9 aXKIzU/wttCeuIsuzcwTNl5YNWUJJFHgKeauAtGVOf4926pjATcbmvO+owlZJOvW Om2ksMt0GBqWT9Fbi4QA -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:03 2026 by rpki-client