This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hbJh_O9AECMAlnPMwjw6C_kOwU0.roa File: hbJh_O9AECMAlnPMwjw6C_kOwU0.roa (raw, json) Hash identifier: iwywWcsuCMC9Q3oG8oiyCNLHPpPXC3OYrEj1np2l4Bk= Subject key identifier: 85:B2:61:FC:EF:40:10:23:00:96:73:CC:C2:3C:3A:0B:F9:0E:C1:4D Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84D42A59DE4A730173AC2292977BA6 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hbJh_O9AECMAlnPMwjw6C_kOwU0.roa Signing time: Fri 02 Jan 2026 16:22:49 +0000 ROA not before: Fri 02 Jan 2026 16:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216169 IP address blocks: 217.60.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d4:2a:59:de:4a:73:01:73:ac:22:92:97:7b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85b261fcef401023009673ccc23c3a0bf90ec14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:59:a5:8d:f3:1c:5d:ff:90:e1:72:32:f5:bb: 3d:be:fc:46:98:d7:90:c1:22:03:45:99:47:a8:a9: 69:ec:67:bb:17:df:45:e6:9c:e3:03:44:e1:d3:03: bd:69:c0:ca:bc:3b:e4:d4:e1:3d:ae:1f:90:3a:70: f6:af:5a:e4:74:28:15:18:45:ac:8b:c7:51:74:26: e4:2f:a0:7b:2e:61:49:8a:20:39:f0:f2:93:31:c9: 98:25:4b:4d:b6:7e:17:d6:8d:37:57:97:fd:9c:1d: 9c:1a:83:5c:09:0d:05:6b:a3:2d:6d:22:01:ed:43: ee:12:51:aa:b9:bb:3f:23:7a:2f:2d:e4:60:2a:14: 50:c0:6b:f3:12:36:d6:a9:06:83:cf:42:5e:d6:af: 46:67:a9:91:f8:b5:9f:53:ef:7c:65:c6:19:6d:76: 8e:21:25:49:52:a2:7b:50:3d:17:6c:03:c5:67:e1: c6:21:5b:40:ec:95:30:ad:77:d9:5b:2e:15:25:5e: 1f:27:52:f8:9a:3c:d7:4e:06:1a:48:2d:d7:7c:c1: f3:03:81:6d:2c:e8:e2:03:37:e0:b9:48:ed:80:80: 90:d0:ba:12:b8:f1:46:aa:ed:d3:2c:21:c9:9c:4c: 3f:99:d5:83:8c:63:d5:c7:7c:f1:e5:a2:a4:c5:e9: 1c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B2:61:FC:EF:40:10:23:00:96:73:CC:C2:3C:3A:0B:F9:0E:C1:4D X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hbJh_O9AECMAlnPMwjw6C_kOwU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.60.243.0/24 Signature Algorithm: sha256WithRSAEncryption 50:2d:70:72:8f:4f:78:f2:7c:c4:f9:43:63:de:ef:4f:ad:54: b4:d0:ff:dd:f8:3b:63:27:8c:c8:a8:32:43:02:d2:04:95:d6: 88:56:ab:3e:14:1c:3f:8d:8d:39:c6:c9:9a:48:c3:ef:a7:b4: f9:23:09:8e:d5:17:b2:38:16:3b:33:59:64:3a:7a:be:8b:b7: 93:36:0a:54:cf:3a:a2:87:25:7b:85:ab:e7:24:ab:87:0d:40: 4b:bf:3d:a5:35:04:12:e1:cd:a4:e3:90:09:3d:3f:6b:5b:bc: d3:3e:ed:c8:b3:5e:bb:2b:b4:e3:88:2e:0a:68:f1:75:80:af: 63:4e:11:65:5f:c6:57:51:5b:8f:bc:07:f3:ae:f8:c1:c3:31: 99:d9:f1:71:02:e5:52:bc:63:73:e6:df:a1:e4:39:6e:9d:6e: bc:b0:9d:f9:4b:61:e7:4b:ec:59:50:c1:a8:15:06:cb:bd:49: a7:ad:86:bb:c9:24:ca:3c:be:bd:18:fa:a2:67:bf:44:b8:bb: 97:be:48:f5:df:53:eb:d1:a7:e4:e9:b7:1f:67:b8:fb:c0:b9: 9b:42:2a:3c:fa:ff:8e:a5:e6:dd:07:7a:75:6e:0b:c5:48:94: 17:15:2e:8f:50:60:36:bf:28:a7:1a:be:6a:85:f8:95:be:d3: 40:82:bc:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNQqWd5KcwFzrCKSl3umMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWIyNjFmY2VmNDAxMDIzMDA5NjczY2NjMjNjM2EwYmY5MGVjMTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVmljfMcXf+Q4XIy9bs9vvxGmNeQ wSIDRZlHqKlp7Ge7F99F5pzjA0Th0wO9acDKvDvk1OE9rh+QOnD2r1rkdCgVGEWs i8dRdCbkL6B7LmFJiiA58PKTMcmYJUtNtn4X1o03V5f9nB2cGoNcCQ0Fa6MtbSIB 7UPuElGqubs/I3ovLeRgKhRQwGvzEjbWqQaDz0Je1q9GZ6mR+LWfU+98ZcYZbXaO ISVJUqJ7UD0XbAPFZ+HGIVtA7JUwrXfZWy4VJV4fJ1L4mjzXTgYaSC3XfMHzA4Ft LOjiAzfguUjtgICQ0LoSuPFGqu3TLCHJnEw/mdWDjGPVx3zx5aKkxekc7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIWyYfzvQBAjAJZzzMI8Ogv5DsFNMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvaGJKaF9POUFFQ01BbG5QTXdqdzZDX2tPd1UwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2TzzMA0G CSqGSIb3DQEBCwUAA4IBAQBQLXByj0948nzE+UNj3u9PrVS00P/d+DtjJ4zIqDJD AtIEldaIVqs+FBw/jY05xsmaSMPvp7T5IwmO1ReyOBY7M1lkOnq+i7eTNgpUzzqi hyV7havnJKuHDUBLvz2lNQQS4c2k45AJPT9rW7zTPu3Is167K7TjiC4KaPF1gK9j ThFlX8ZXUVuPvAfzrvjBwzGZ2fFxAuVSvGNz5t+h5DlunW68sJ35S2HnS+xZUMGo FQbLvUmnrYa7ySTKPL69GPqiZ79EuLuXvkj131Pr0afk6bcfZ7j7wLmbQio8+v+O pebdB3p1bgvFSJQXFS6PUGA2vyinGr5qhfiVvtNAgrzJ -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:52 2026 by rpki-client