This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Hyzg3n1VS6Nh9YUr4__c8pq_VgA.roa File: Hyzg3n1VS6Nh9YUr4__c8pq_VgA.roa (raw, json) Hash identifier: wyKZHvnK91JXCITO3Flu97plrf+bisrMffBG+ItzBx4= Subject key identifier: 1F:2C:E0:DE:7D:55:4B:A3:61:F5:85:2B:E3:FF:DC:F2:9A:BF:56:00 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA5670E7E1BB28B6D0AEB9A0766B7A8 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Hyzg3n1VS6Nh9YUr4__c8pq_VgA.roa Signing time: Thu 01 Jan 2026 22:19:55 +0000 ROA not before: Thu 01 Jan 2026 22:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400696 IP address blocks: 45.84.214.0/24 maxlen: 24 45.94.29.0/24 maxlen: 24 45.94.30.0/24 maxlen: 24 45.95.240.0/24 maxlen: 24 45.130.142.0/24 maxlen: 24 2a0f:15c0::/32 maxlen: 48 2a0f:15c2::/32 maxlen: 32 2a0f:15c3::/32 maxlen: 32 2a0f:15c4::/32 maxlen: 32 2a0f:15c5::/32 maxlen: 32 2a0f:15c6::/32 maxlen: 32 2a0f:15c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:67:0e:7e:1b:b2:8b:6d:0a:eb:9a:07:66:b7:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f2ce0de7d554ba361f5852be3ffdcf29abf5600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:77:0b:d9:70:fc:26:6e:97:0c:82:c1:bc:46: 51:7e:58:d2:bb:de:1b:11:18:9d:12:90:44:ec:b2: 89:1f:4a:60:92:d4:a2:4e:09:64:86:88:ab:f0:be: 65:dd:3e:93:98:e8:1b:a2:aa:c7:34:22:ef:db:0d: 4d:fb:bf:74:fe:5a:ba:d0:b6:c5:ad:f4:f2:66:07: 24:28:b6:20:a3:1a:df:f4:86:f0:13:1d:6a:2a:6c: cc:97:09:0d:48:94:00:8f:d5:0f:30:a5:a9:27:c9: 91:73:2d:d7:a5:fb:4b:77:48:97:d1:0f:db:52:24: f3:ae:79:d5:05:51:da:e3:78:9b:13:3d:79:98:36: f9:60:31:83:a6:a9:31:51:9e:e7:ff:82:b2:37:27: 0a:ae:de:6c:1d:76:51:fc:cf:4c:8b:24:88:fe:1f: 3c:24:3e:a7:8f:3b:f9:44:4e:99:ac:71:75:77:20: 89:57:f1:05:97:0d:f8:df:f5:f0:d5:e0:81:9b:39: 13:7c:16:ab:f8:91:d8:d4:22:d7:ff:32:23:6e:90: 69:50:69:69:e1:e0:b5:1b:4f:8f:90:b9:53:6e:c4: ff:13:67:01:91:b4:a9:4b:cb:c3:00:5e:68:ae:d8: 1a:07:90:10:11:f4:c9:e4:b6:c3:ae:da:39:d3:23: 7d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2C:E0:DE:7D:55:4B:A3:61:F5:85:2B:E3:FF:DC:F2:9A:BF:56:00 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Hyzg3n1VS6Nh9YUr4__c8pq_VgA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.214.0/24 45.94.29.0-45.94.30.255 45.95.240.0/24 45.130.142.0/24 IPv6: 2a0f:15c0::/32 2a0f:15c2::-2a0f:15c7:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3f:73:64:9b:20:4f:44:74:b1:14:8a:f8:ce:79:50:ee:fc:14: 79:23:3c:dd:f6:c1:9e:f7:59:97:67:db:8f:63:bd:4e:64:1a: a8:a0:88:a0:b3:0c:80:5d:af:cf:f8:dc:3a:40:f7:50:cd:bb: 36:d8:5c:8a:67:11:37:34:b0:cc:00:9d:e9:2a:8a:f9:89:03: ce:4d:1d:4f:a0:a6:b1:a7:53:a4:0f:c6:c2:c7:4f:e3:04:83: e8:35:7f:58:ff:6e:5f:e0:49:1a:b1:63:c3:8f:1d:64:50:46: e8:52:69:c8:5f:83:ff:54:15:51:c8:6f:f1:52:4c:69:f4:65: 80:26:59:6d:66:08:e2:c1:38:8b:5b:39:60:4e:5e:8c:04:99: 0a:48:4d:8f:f7:9e:05:ff:70:ca:73:55:5e:d6:84:57:0a:cb: ca:1f:f9:7f:ab:00:cb:8c:75:f5:78:b2:9d:08:b4:b5:8a:cc: 7f:c2:a3:b1:b6:2b:cb:8b:51:d2:26:a5:f7:37:94:f4:9c:f0: b0:91:59:03:df:84:3e:05:d3:e7:a2:cf:09:af:4a:3e:aa:29: 15:a8:66:35:e8:33:d3:b3:19:c9:cb:9e:75:17:80:a0:71:55: 01:50:ac:ea:70:10:53:19:3b:80:06:51:95:26:4f:d7:92:c7: 6b:52:cd:06 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt7pWcOfhuyi20K65oHZreoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjJjZTBkZTdkNTU0YmEzNjFmNTg1MmJlM2ZmZGNmMjlhYmY1NjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3cL2XD8Jm6XDILBvEZRfljSu94b ERidEpBE7LKJH0pgktSiTglkhoir8L5l3T6TmOgboqrHNCLv2w1N+790/lq60LbF rfTyZgckKLYgoxrf9IbwEx1qKmzMlwkNSJQAj9UPMKWpJ8mRcy3XpftLd0iX0Q/b UiTzrnnVBVHa43ibEz15mDb5YDGDpqkxUZ7n/4KyNycKrt5sHXZR/M9MiySI/h88 JD6njzv5RE6ZrHF1dyCJV/EFlw343/Xw1eCBmzkTfBar+JHY1CLX/zIjbpBpUGlp 4eC1G0+PkLlTbsT/E2cBkbSpS8vDAF5ortgaB5AQEfTJ5LbDrto50yN9NQIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFB8s4N59VUujYfWFK+P/3PKav1YAMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvSHl6ZzNuMVZTNk5oOVlVcjRfX2M4cHFfVmdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzAmBAIAATAgAwQALVTWMAwD BAAtXh0DBAAtXh4DBAAtX/ADBAAtgo4wHQQCAAIwFwMFACoPFcAwDgMFASoPFcID BQMqDxXAMA0GCSqGSIb3DQEBCwUAA4IBAQA/c2SbIE9EdLEUivjOeVDu/BR5Izzd 9sGe91mXZ9uPY71OZBqooIigswyAXa/P+Nw6QPdQzbs22FyKZxE3NLDMAJ3pKor5 iQPOTR1PoKaxp1OkD8bCx0/jBIPoNX9Y/25f4EkasWPDjx1kUEboUmnIX4P/VBVR yG/xUkxp9GWAJlltZgjiwTiLWzlgTl6MBJkKSE2P954F/3DKc1Ve1oRXCsvKH/l/ qwDLjHX1eLKdCLS1isx/wqOxtivLi1HSJqX3N5T0nPCwkVkD34Q+BdPnos8Jr0o+ qikVqGY16DPTsxnJy551F4CgcVUBUKzqcBBTGTuABlGVJk/XksdrUs0G -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:57 2026 by rpki-client