This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/HybjzcCSL5dLw3XTLc0lFtVyMmM.roa File: HybjzcCSL5dLw3XTLc0lFtVyMmM.roa (raw, json) Hash identifier: glGuuLpDpEAixLguafxD0xqPcroYBacOuBJaXiYDFqY= Subject key identifier: 1F:26:E3:CD:C0:92:2F:97:4B:C3:75:D3:2D:CD:25:16:D5:72:32:63 Certificate issuer: /CN=6abb17dd7bc7f2099c54eef7867d9f39a7929384 Certificate serial: 019B274116AEB644383D72B8640222B148ED Authority key identifier: 6A:BB:17:DD:7B:C7:F2:09:9C:54:EE:F7:86:7D:9F:39:A7:92:93:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arsX3XvH8gmcVO73hn2fOaeSk4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/HybjzcCSL5dLw3XTLc0lFtVyMmM.roa Signing time: Tue 16 Dec 2025 13:02:15 +0000 ROA not before: Tue 16 Dec 2025 13:02:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208466 IP address blocks: 45.135.84.0/22 maxlen: 22 2a0e:89c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/arsX3XvH8gmcVO73hn2fOaeSk4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/arsX3XvH8gmcVO73hn2fOaeSk4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/arsX3XvH8gmcVO73hn2fOaeSk4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:41:16:ae:b6:44:38:3d:72:b8:64:02:22:b1:48:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6abb17dd7bc7f2099c54eef7867d9f39a7929384 Validity Not Before: Dec 16 13:02:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1f26e3cdc0922f974bc375d32dcd2516d5723263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6a:0b:4e:dd:cd:06:d7:c9:fd:f2:e5:e8:64: 9a:d8:c7:a3:e8:f3:0a:02:b6:84:7a:2a:b0:a0:e1: 4d:53:64:bc:42:e6:59:89:00:ac:c7:6c:c4:3a:28: 4d:dd:77:85:d2:2d:72:c9:1c:e4:e6:6f:95:39:7a: 87:2c:e9:bb:c9:01:7b:cd:15:6d:2a:f5:cf:1b:26: c3:b0:34:b8:47:5e:ab:d4:f3:17:19:03:d1:85:c7: d4:e5:07:fd:97:de:f3:18:d9:7b:47:0b:50:8c:a8: 1e:da:be:0a:e2:ec:71:58:cd:62:c5:ec:e6:38:8e: 6a:4f:42:89:ad:bf:6d:1a:2e:ac:f6:d9:8d:5c:1e: 6b:9a:bb:8f:0e:db:0b:ff:42:2e:b3:89:37:5f:bb: 50:5a:62:2d:be:24:5d:1e:fa:07:77:0d:42:ab:14: 27:05:75:13:46:c3:27:e2:c8:e7:d4:9b:42:0e:d1: 4f:3c:84:ce:35:3c:a8:20:66:1c:8e:cc:97:c6:e2: b0:f8:dc:e6:3f:1c:d3:70:6a:b8:86:e0:bd:78:ec: e3:2c:d6:a2:30:cb:e7:1d:ed:25:9d:ea:59:2f:9c: 6d:d2:74:cc:59:b5:67:32:95:41:4f:98:2e:d2:d3: b7:c0:96:3f:5e:13:9e:87:34:c8:fd:be:51:e1:1e: 30:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:26:E3:CD:C0:92:2F:97:4B:C3:75:D3:2D:CD:25:16:D5:72:32:63 X509v3 Authority Key Identifier: keyid:6A:BB:17:DD:7B:C7:F2:09:9C:54:EE:F7:86:7D:9F:39:A7:92:93:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arsX3XvH8gmcVO73hn2fOaeSk4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/HybjzcCSL5dLw3XTLc0lFtVyMmM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/arsX3XvH8gmcVO73hn2fOaeSk4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.84.0/22 IPv6: 2a0e:89c0::/29 Signature Algorithm: sha256WithRSAEncryption 7c:41:fe:bc:ac:59:c2:ca:24:48:f0:95:85:7d:b9:51:ff:55: 86:17:9b:b1:b3:ad:79:db:3e:18:70:f0:8b:e0:35:53:4c:e8: 74:23:fb:c5:bc:54:73:72:bf:5a:27:33:a4:ef:80:e0:c4:5b: 9e:fb:ad:6e:c2:ed:44:61:2d:ad:33:a0:34:da:fb:1d:4a:84: 38:98:2f:b6:9e:bb:39:37:a8:fd:c5:d9:97:3d:70:36:eb:33: 5a:7a:94:ce:f3:62:99:09:b0:47:e5:3a:eb:5b:ae:ec:15:1c: ea:a7:38:2b:f8:a5:0b:27:91:fd:a3:4b:b7:d2:fa:6c:f9:6e: 05:50:4b:32:21:8c:06:a6:02:4a:50:5d:cf:b3:98:ca:18:e6: 17:b0:cd:70:24:55:f0:e1:c8:f7:bb:57:99:20:0c:75:81:c7: 02:5e:e0:d9:14:eb:20:7e:1e:aa:cf:a3:69:15:50:b5:de:b9: 04:85:74:0c:2a:88:3b:5f:76:9e:87:af:a9:0a:85:44:78:5c: 87:a1:28:fa:d4:32:e6:ec:32:a8:00:e5:be:cc:07:2b:54:c7: fd:66:5b:ad:43:aa:9a:3f:3d:bf:c3:52:38:2a:6d:82:06:3e: ca:df:61:2f:76:64:18:e0:3a:28:37:fc:14:2e:eb:8a:51:e9: 74:b8:19:de -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZsnQRautkQ4PXK4ZAIisUjtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYmIxN2RkN2JjN2YyMDk5YzU0ZWVmNzg2N2Q5ZjM5YTc5 MjkzODQwHhcNMjUxMjE2MTMwMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjI2ZTNjZGMwOTIyZjk3NGJjMzc1ZDMyZGNkMjUxNmQ1NzIzMjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmoLTt3NBtfJ/fLl6GSa2Mej6PMK AraEeiqwoOFNU2S8QuZZiQCsx2zEOihN3XeF0i1yyRzk5m+VOXqHLOm7yQF7zRVt KvXPGybDsDS4R16r1PMXGQPRhcfU5Qf9l97zGNl7RwtQjKge2r4K4uxxWM1ixezm OI5qT0KJrb9tGi6s9tmNXB5rmruPDtsL/0Ius4k3X7tQWmItviRdHvoHdw1CqxQn BXUTRsMn4sjn1JtCDtFPPITONTyoIGYcjsyXxuKw+NzmPxzTcGq4huC9eOzjLNai MMvnHe0lnepZL5xt0nTMWbVnMpVBT5gu0tO3wJY/XhOehzTI/b5R4R4w1wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFB8m483Aki+XS8N10y3NJRbVcjJjMB8GA1UdIwQY MBaAFGq7F917x/IJnFTu94Z9nzmnkpOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXJzWDNYdkg4Z21jVk83M2huMmZPYWVTazRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82MjYxZGQtYTVkYS00NTBkLTlhNzIt N2YxODYxN2VhNjM4LzEvSHlianpjQ1NMNWRMdzNYVExjMGxGdFZ5TW1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny82MjYxZGQtYTVkYS00NTBkLTlhNzItN2YxODYxN2VhNjM4 LzEvYXJzWDNYdkg4Z21jVk83M2huMmZPYWVTazRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLYdUMA0E AgACMAcDBQMqDonAMA0GCSqGSIb3DQEBCwUAA4IBAQB8Qf68rFnCyiRI8JWFfblR /1WGF5uxs6152z4YcPCL4DVTTOh0I/vFvFRzcr9aJzOk74DgxFue+61uwu1EYS2t M6A02vsdSoQ4mC+2nrs5N6j9xdmXPXA26zNaepTO82KZCbBH5TrrW67sFRzqpzgr +KULJ5H9o0u30vps+W4FUEsyIYwGpgJKUF3Ps5jKGOYXsM1wJFXw4cj3u1eZIAx1 gccCXuDZFOsgfh6qz6NpFVC13rkEhXQMKog7X3aeh6+pCoVEeFyHoSj61DLm7DKo AOW+zAcrVMf9ZlutQ6qaPz2/w1I4Km2CBj7K32EvdmQY4DooN/wULuuKUel0uBne -----END CERTIFICATE-----Generated at Fri Dec 26 17:18:23 2025 by rpki-client