This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/hHQPymz7nrurWK651cK6wH1WQB4.roa File: hHQPymz7nrurWK651cK6wH1WQB4.roa (raw, json) Hash identifier: dwQ4oAHDFe0oAQKlctscRR06w5cemCjD8MkqMj9iTyk= Subject key identifier: 84:74:0F:CA:6C:FB:9E:BB:AB:58:AE:B9:D5:C2:BA:C0:7D:56:40:1E Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 019B79ED48E39BBE1DEE90C6DBEFFABF1278 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/hHQPymz7nrurWK651cK6wH1WQB4.roa Signing time: Thu 01 Jan 2026 14:19:12 +0000 ROA not before: Thu 01 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210976 IP address blocks: 80.90.179.0/24 maxlen: 24 95.140.146.0/23 maxlen: 24 95.140.152.0/21 maxlen: 24 185.125.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:48:e3:9b:be:1d:ee:90:c6:db:ef:fa:bf:12:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84740fca6cfb9ebbab58aeb9d5c2bac07d56401e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:db:75:a5:6b:a2:63:8e:01:9e:f0:b8:3f:56: 86:79:ce:68:01:f7:2c:ed:35:9f:9a:28:a3:fe:3e: 0b:df:7a:07:53:17:8c:f7:35:c2:5e:c1:cb:0a:62: e6:d2:4b:be:0b:22:e5:59:ea:f5:2d:b4:a9:81:36: 12:62:24:47:82:9f:16:f4:46:eb:72:11:6e:e0:df: 95:95:11:cb:ce:a9:47:10:bb:53:35:bc:29:3f:6e: 70:dd:92:63:a7:17:70:22:02:b6:bf:f9:5e:4e:72: ca:78:f3:93:7b:8e:e3:bd:4b:1d:66:07:fc:39:ea: be:17:63:ff:65:9f:0c:66:da:a3:fb:5b:c9:ce:27: 2c:03:20:75:e5:1c:c9:22:bb:01:21:e8:7d:09:92: 4a:27:37:f7:47:26:60:54:80:d4:73:a8:02:2d:a9: 98:c2:bb:6e:d8:0a:f1:3f:2e:c1:20:92:03:f0:64: 01:a5:93:bb:94:b3:34:0a:15:93:bb:c9:02:d4:32: d9:33:e9:a8:a3:90:8e:28:ab:e0:da:b2:d3:0f:dd: db:16:1d:02:4c:8d:10:aa:78:57:a2:7a:8a:11:52: ae:20:3b:8c:dd:39:a5:98:be:48:16:a8:e2:bc:95: b0:13:ef:13:44:a8:ae:4d:ec:ce:55:ae:37:4c:08: 86:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:74:0F:CA:6C:FB:9E:BB:AB:58:AE:B9:D5:C2:BA:C0:7D:56:40:1E X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/hHQPymz7nrurWK651cK6wH1WQB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.90.179.0/24 95.140.146.0/23 95.140.152.0/21 185.125.200.0/22 Signature Algorithm: sha256WithRSAEncryption 83:e2:72:16:b0:df:e3:fb:98:a4:92:45:17:4f:17:10:d7:c1: 21:da:42:b4:83:1b:0a:69:9f:96:e8:b9:64:42:bd:4e:68:4f: e9:d9:07:27:06:49:bb:54:3c:bc:6c:76:67:b8:50:66:3d:b5: 56:07:86:60:bf:0a:af:dc:3a:ee:34:6e:09:67:06:ab:d0:de: 03:9b:8b:2a:de:33:a3:76:a4:3f:94:5b:4b:2b:4f:cc:20:57: 51:14:ce:12:1d:d5:04:dc:61:eb:70:97:aa:34:ce:45:18:2d: d2:68:df:18:68:67:23:8f:bf:b2:e5:0f:0a:6f:61:46:d0:89: 2b:18:2d:12:e5:50:5d:d1:05:b0:12:ed:bc:d2:cf:ee:18:14: 9d:02:e6:bb:72:00:ab:a9:c1:52:94:b5:b5:68:ad:c1:c3:85: e2:18:5c:9a:53:69:74:b3:bd:35:29:2f:7b:a3:03:7b:0c:8e: 44:91:33:ec:b7:2e:c4:0d:04:43:71:04:28:07:8a:04:51:65: 80:4e:ff:48:c4:4a:45:62:81:58:ec:61:2b:65:d9:cc:23:7c: 0c:f0:34:90:de:9f:4c:ca:95:4a:c2:3c:fe:78:86:a6:7e:18: 32:17:fb:cd:08:a2:20:fc:7f:66:e2:2c:c4:b5:c2:84:1c:9a: 4d:06:61:ac -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt57Ujjm74d7pDG2+/6vxJ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDc0MGZjYTZjZmI5ZWJiYWI1OGFlYjlkNWMyYmFjMDdkNTY0MDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNt1pWuiY44BnvC4P1aGec5oAfcs 7TWfmiij/j4L33oHUxeM9zXCXsHLCmLm0ku+CyLlWer1LbSpgTYSYiRHgp8W9Ebr chFu4N+VlRHLzqlHELtTNbwpP25w3ZJjpxdwIgK2v/leTnLKePOTe47jvUsdZgf8 Oeq+F2P/ZZ8MZtqj+1vJzicsAyB15RzJIrsBIeh9CZJKJzf3RyZgVIDUc6gCLamY wrtu2ArxPy7BIJID8GQBpZO7lLM0ChWTu8kC1DLZM+moo5COKKvg2rLTD93bFh0C TI0QqnhXonqKEVKuIDuM3TmlmL5IFqjivJWwE+8TRKiuTezOVa43TAiGsQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIR0D8ps+567q1iuudXCusB9VkAeMB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvaEhRUHltejducnVyV0s2NTFjSzZ3SDFXUUI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUFqzAwQB X4ySAwQDX4yYAwQCuX3IMA0GCSqGSIb3DQEBCwUAA4IBAQCD4nIWsN/j+5ikkkUX TxcQ18Eh2kK0gxsKaZ+W6LlkQr1OaE/p2QcnBkm7VDy8bHZnuFBmPbVWB4Zgvwqv 3DruNG4JZwar0N4Dm4sq3jOjdqQ/lFtLK0/MIFdRFM4SHdUE3GHrcJeqNM5FGC3S aN8YaGcjj7+y5Q8Kb2FG0IkrGC0S5VBd0QWwEu280s/uGBSdAua7cgCrqcFSlLW1 aK3Bw4XiGFyaU2l0s701KS97owN7DI5EkTPsty7EDQRDcQQoB4oEUWWATv9IxEpF YoFY7GErZdnMI3wM8DSQ3p9MypVKwjz+eIamfhgyF/vNCKIg/H9m4izEtcKEHJpN BmGs -----END CERTIFICATE-----Generated at Wed Jan 21 11:15:13 2026 by rpki-client