This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/HPyUHxxjQD21zBw_1-laG68F_FM.roa File: HPyUHxxjQD21zBw_1-laG68F_FM.roa (raw, json) Hash identifier: zfFvv4NZ2UhldU+XWf+RuLM3pxW1pdjT1IVU+Il8uRw= Subject key identifier: 1C:FC:94:1F:1C:63:40:3D:B5:CC:1C:3F:D7:E9:5A:1B:AF:05:FC:53 Certificate issuer: /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae Certificate serial: 019B78353CF424DAAC48E190CBD3276753F1 Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/HPyUHxxjQD21zBw_1-laG68F_FM.roa Signing time: Thu 01 Jan 2026 06:18:33 +0000 ROA not before: Thu 01 Jan 2026 06:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 109.224.0.0/18 maxlen: 18 109.224.1.0/24 maxlen: 24 109.224.2.0/23 maxlen: 23 109.224.4.0/22 maxlen: 22 109.224.5.0/24 maxlen: 24 109.224.8.0/22 maxlen: 22 109.224.12.0/24 maxlen: 24 109.224.13.0/24 maxlen: 24 109.224.14.0/24 maxlen: 24 109.224.15.0/24 maxlen: 24 109.224.16.0/22 maxlen: 22 109.224.20.0/22 maxlen: 22 109.224.24.0/22 maxlen: 22 109.224.28.0/24 maxlen: 24 109.224.29.0/24 maxlen: 24 109.224.30.0/23 maxlen: 23 109.224.32.0/22 maxlen: 22 109.224.32.0/24 maxlen: 24 109.224.36.0/22 maxlen: 22 109.224.41.0/24 maxlen: 24 109.224.43.0/24 maxlen: 24 109.224.44.0/22 maxlen: 22 109.224.48.0/22 maxlen: 22 109.224.52.0/22 maxlen: 22 109.224.56.0/22 maxlen: 22 109.224.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:3c:f4:24:da:ac:48:e1:90:cb:d3:27:67:53:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae Validity Not Before: Jan 1 06:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cfc941f1c63403db5cc1c3fd7e95a1baf05fc53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:aa:06:59:6f:25:ad:56:2f:65:82:98:c2:09: 2d:78:da:7a:84:de:74:a4:9f:aa:e7:52:fa:59:4b: 21:91:3b:eb:64:63:e4:51:30:5e:6a:c5:f2:b4:85: 83:31:30:94:c1:4e:65:d3:bf:b7:d8:37:4b:e1:3f: 14:7d:a1:a1:ad:92:24:d8:21:1b:98:3c:86:25:ed: a5:a5:88:c2:77:53:e3:f6:5e:95:88:49:9f:50:52: ee:89:73:c9:0c:ed:a1:e6:40:37:db:27:1a:46:95: ae:db:ed:e3:b1:78:69:3a:d0:fa:b1:c0:19:16:61: 43:4f:10:6b:62:09:46:84:cd:be:83:60:26:b8:8a: 4a:22:ef:af:d5:9c:c0:40:2b:65:e3:88:79:83:12: 4d:fd:e5:23:0c:2f:05:e9:b1:60:37:19:76:e5:8e: b2:8c:de:e0:2d:53:fe:d9:35:33:8a:c5:13:2c:c6: c7:8f:18:42:58:ac:8d:6d:7d:a3:b1:25:d0:be:10: 4b:68:5c:67:55:0f:d6:f6:84:03:b0:ea:af:b8:d6: f0:9a:b5:fc:23:0e:38:47:e3:c2:f7:4f:ad:12:85: b8:38:08:b6:0c:3c:03:65:2c:73:a0:40:81:d9:dc: c8:30:95:0d:9a:ba:30:aa:9f:8e:e5:94:09:5b:1f: 17:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FC:94:1F:1C:63:40:3D:B5:CC:1C:3F:D7:E9:5A:1B:AF:05:FC:53 X509v3 Authority Key Identifier: keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/HPyUHxxjQD21zBw_1-laG68F_FM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.224.0.0/18 Signature Algorithm: sha256WithRSAEncryption 9e:31:f9:bf:81:1d:2e:74:90:56:6b:71:f5:21:bb:46:04:d9: 02:76:6e:30:c4:2a:6a:93:be:d5:a1:f2:1a:72:2b:8e:36:af: b5:04:ca:6b:4e:2f:0e:69:23:f4:29:04:05:9f:a1:d3:f9:d2: 97:da:28:05:90:79:6a:8f:93:1b:3e:29:36:f5:e4:5e:fc:d4: 7c:6b:24:df:2e:0e:ac:63:85:8e:2f:52:39:c2:97:e8:8c:cb: 26:c0:45:aa:9a:0c:4b:f7:b3:db:16:c9:d1:1a:36:20:eb:bd: 40:97:20:18:ee:8a:0c:69:d6:63:c1:32:0b:79:cd:0d:c3:09: 3d:08:42:6d:47:94:7b:5c:a0:1a:2d:81:30:ba:c6:ce:59:2b: bd:6f:45:83:05:a2:6f:8c:4a:f0:ce:79:cf:49:bf:89:5e:f3: 82:26:c0:52:17:5c:bd:d0:58:07:7e:2d:ef:95:90:c0:18:1d: 00:37:2f:aa:6d:a9:e1:19:a1:2a:1c:af:67:de:7f:82:d8:fe: 43:9f:2f:51:2a:10:43:a8:61:04:1c:da:24:9e:43:80:f2:6a: 7d:db:e4:e1:0c:c3:2b:4e:3a:b0:29:c4:19:5a:8a:84:11:0f: d4:1a:c4:dd:a9:c6:eb:7e:24:d0:21:e9:ca:19:83:b6:62:6c: 68:46:50:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NTz0JNqsSOGQy9MnZ1PxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmVkNmU0YjVjN2MxOWRiOThjNTc0MzJhZjRkY2Y2MzBi ZjYwYWUwHhcNMjYwMTAxMDYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2ZjOTQxZjFjNjM0MDNkYjVjYzFjM2ZkN2U5NWExYmFmMDVmYzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6oGWW8lrVYvZYKYwgkteNp6hN50 pJ+q51L6WUshkTvrZGPkUTBeasXytIWDMTCUwU5l07+32DdL4T8UfaGhrZIk2CEb mDyGJe2lpYjCd1Pj9l6ViEmfUFLuiXPJDO2h5kA32ycaRpWu2+3jsXhpOtD6scAZ FmFDTxBrYglGhM2+g2AmuIpKIu+v1ZzAQCtl44h5gxJN/eUjDC8F6bFgNxl25Y6y jN7gLVP+2TUzisUTLMbHjxhCWKyNbX2jsSXQvhBLaFxnVQ/W9oQDsOqvuNbwmrX8 Iw44R+PC90+tEoW4OAi2DDwDZSxzoECB2dzIMJUNmrowqp+O5ZQJWx8XewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBz8lB8cY0A9tcwcP9fpWhuvBfxTMB8GA1UdIwQY MBaAFIlu1uS1x8GduYxXQyr03PYwv2CuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVc3VzVMWEh3WjI1akZkREt2VGM5akNfWUs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85MDA0NDQtZGQ0MC00YTA0LWE2MTYt ZGMxZmY2NzQ2ZDJlLzEvSFB5VUh4eGpRRDIxekJ3XzEtbGFHNjhGX0ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC85MDA0NDQtZGQ0MC00YTA0LWE2MTYtZGMxZmY2NzQ2ZDJl LzEvaVc3VzVMWEh3WjI1akZkREt2VGM5akNfWUs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbeAAMA0G CSqGSIb3DQEBCwUAA4IBAQCeMfm/gR0udJBWa3H1IbtGBNkCdm4wxCpqk77VofIa ciuONq+1BMprTi8OaSP0KQQFn6HT+dKX2igFkHlqj5MbPik29eRe/NR8ayTfLg6s Y4WOL1I5wpfojMsmwEWqmgxL97PbFsnRGjYg671AlyAY7ooMadZjwTILec0Nwwk9 CEJtR5R7XKAaLYEwusbOWSu9b0WDBaJvjErwznnPSb+JXvOCJsBSF1y90FgHfi3v lZDAGB0ANy+qbanhGaEqHK9n3n+C2P5Dny9RKhBDqGEEHNoknkOA8mp92+ThDMMr TjqwKcQZWoqEEQ/UGsTdqcbrfiTQIenKGYO2YmxoRlDZ -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:04 2026 by rpki-client