This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/HP5vxDtKtwCDfs6BQB76Wev5z1g.roa File: HP5vxDtKtwCDfs6BQB76Wev5z1g.roa (raw, json) Hash identifier: JBqv9H1vhnDV1/7jpMHZRDfH8t8fODjKdebQA7UXUqA= Subject key identifier: 1C:FE:6F:C4:3B:4A:B7:00:83:7E:CE:81:40:1E:FA:59:EB:F9:CF:58 Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642 Certificate serial: 019B7F15D4ABDD9EB6C403BE63E3C2FE4D99 Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/HP5vxDtKtwCDfs6BQB76Wev5z1g.roa Signing time: Fri 02 Jan 2026 14:21:35 +0000 ROA not before: Fri 02 Jan 2026 14:21:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 87.192.0.0/18 maxlen: 22 87.192.81.0/24 maxlen: 24 87.192.82.0/23 maxlen: 23 87.192.84.0/22 maxlen: 22 87.192.216.0/22 maxlen: 22 87.192.222.0/23 maxlen: 23 87.232.192.0/24 maxlen: 24 87.232.194.0/23 maxlen: 23 87.232.196.0/22 maxlen: 22 87.232.225.0/24 maxlen: 24 87.232.228.0/22 maxlen: 22 89.124.1.0/24 maxlen: 24 89.124.2.0/23 maxlen: 23 89.124.4.0/22 maxlen: 22 89.124.240.0/23 maxlen: 23 89.124.245.0/24 maxlen: 24 89.127.0.0/17 maxlen: 22 89.127.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d4:ab:dd:9e:b6:c4:03:be:63:e3:c2:fe:4d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642 Validity Not Before: Jan 2 14:21:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cfe6fc43b4ab700837ece81401efa59ebf9cf58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2b:e8:1a:6d:78:30:51:7e:bb:b5:d1:9d:5e: 05:10:c7:3c:06:be:fb:c2:81:15:a7:86:c1:18:d6: 6f:72:d3:92:1f:fa:32:9b:0e:c7:64:0e:f4:a9:f3: 3d:f2:f2:4b:30:06:cf:f3:aa:bc:59:f6:28:ed:21: de:15:cd:b4:80:f4:db:e8:01:07:40:74:aa:b9:50: 86:04:bb:1c:d8:2c:d6:10:75:bb:f7:d2:ab:da:bf: 47:8f:ef:86:3a:0d:72:52:2b:72:ad:14:f4:ad:b9: ce:42:f5:9f:1f:09:ce:54:ec:4e:03:b7:e7:80:56: 7e:b1:01:26:47:bb:5e:19:3d:7b:50:e9:a0:09:d0: 47:29:95:1e:81:f1:4e:e4:a8:6f:da:c8:8a:d0:80: ce:f1:66:04:6f:c6:e0:f6:a6:1e:47:79:72:f9:60: e7:6a:d7:21:9e:a5:e5:ab:fd:27:1f:83:43:7d:07: ff:be:f9:56:b5:12:05:aa:28:18:f4:b8:91:8b:ce: dc:94:98:6d:dc:66:1b:88:73:32:7c:77:d6:75:03: a6:e8:23:f7:b4:04:e9:f6:89:ae:8f:ff:be:73:a5: 45:e7:9f:78:c2:e1:aa:29:96:02:1e:c5:37:23:8e: 3f:8e:2d:10:db:5a:eb:f2:32:3a:46:cc:b7:ba:f3: 43:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FE:6F:C4:3B:4A:B7:00:83:7E:CE:81:40:1E:FA:59:EB:F9:CF:58 X509v3 Authority Key Identifier: keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/HP5vxDtKtwCDfs6BQB76Wev5z1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.192.0.0/18 87.192.81.0-87.192.87.255 87.192.216.0/22 87.192.222.0/23 87.232.192.0/24 87.232.194.0-87.232.199.255 87.232.225.0/24 87.232.228.0/22 89.124.1.0-89.124.7.255 89.124.240.0/23 89.124.245.0/24 89.127.0.0/17 89.127.248.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:b2:0b:9c:8a:d8:69:cb:39:90:ec:07:1c:b3:bf:1c:7b:70: c8:a5:4e:f7:5c:99:1f:77:b4:a8:31:b1:62:a1:d8:a4:4c:9a: d6:ec:96:3d:93:93:c8:ac:d1:42:ba:f9:50:d7:1a:6d:ca:0c: 18:fc:a6:31:50:fb:37:2a:42:e1:d3:96:7e:5f:62:df:18:0b: 41:3c:94:13:49:2d:01:35:0c:9a:0c:6d:0d:1e:0f:2d:fd:d2: 39:5c:9b:8e:6c:3e:8e:dd:9b:e9:d1:10:fc:60:49:1c:29:ff: 83:69:37:4a:27:6d:36:b1:a5:a1:03:96:8a:9a:31:63:4b:09: a0:25:62:92:51:dc:be:b5:47:43:58:7d:94:9a:69:af:ae:11: f6:7a:08:44:f2:37:0c:28:a3:3f:b2:b1:0c:8f:df:00:a8:96: 24:b9:16:10:33:83:d0:d9:0f:c9:6c:ce:77:7d:e9:f2:7d:4f: e6:41:9c:81:39:25:23:33:65:93:71:93:ec:6d:b5:8b:0a:18: 08:59:f4:d5:59:9a:22:d6:89:34:a2:46:17:f2:55:00:c9:8c: 3b:1f:07:c7:27:9b:e0:6e:5a:43:66:f5:f3:1b:8f:d9:b6:c4: 03:2e:33:98:26:0f:17:5c:61:d0:15:3e:2e:29:07:d4:2f:b5: 2c:f2:93:0c -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZt/FdSr3Z62xAO+Y+PC/k2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYTFjZmQ3NTdmNTFmMmZlYjc0NTA5ZTljMzliZTQ2ODA2 YmU2NDIwHhcNMjYwMTAyMTQyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2ZlNmZjNDNiNGFiNzAwODM3ZWNlODE0MDFlZmE1OWViZjljZjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCvoGm14MFF+u7XRnV4FEMc8Br77 woEVp4bBGNZvctOSH/oymw7HZA70qfM98vJLMAbP86q8WfYo7SHeFc20gPTb6AEH QHSquVCGBLsc2CzWEHW799Kr2r9Hj++GOg1yUityrRT0rbnOQvWfHwnOVOxOA7fn gFZ+sQEmR7teGT17UOmgCdBHKZUegfFO5Khv2siK0IDO8WYEb8bg9qYeR3ly+WDn atchnqXlq/0nH4NDfQf/vvlWtRIFqigY9LiRi87clJht3GYbiHMyfHfWdQOm6CP3 tATp9omuj/++c6VF5594wuGqKZYCHsU3I44/ji0Q21rr8jI6Rsy3uvNDaQIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFBz+b8Q7SrcAg37OgUAe+lnr+c9YMB8GA1UdIwQY MBaAFCuhz9dX9R8v63RQnpw5vkaAa+ZCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUt NTc4OWRlNDI0YTQyLzEvSFA1dnhEdEt0d0NEZnM2QlFCNzZXZXY1ejFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUtNTc4OWRlNDI0YTQy LzEvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQGV8AAMAwD BABXwFEDBANXwFADBAJXwNgDBAFXwN4DBABX6MAwDAMEAVfowgMEA1fowAMEAFfo 4QMEAlfo5DAMAwQAWXwBAwQDWXwAAwQBWXzwAwQAWXz1AwQHWX8AAwQCWX/4MA0G CSqGSIb3DQEBCwUAA4IBAQBdsgucithpyzmQ7Accs78ce3DIpU73XJkfd7SoMbFi odikTJrW7JY9k5PIrNFCuvlQ1xptygwY/KYxUPs3KkLh05Z+X2LfGAtBPJQTSS0B NQyaDG0NHg8t/dI5XJuObD6O3Zvp0RD8YEkcKf+DaTdKJ202saWhA5aKmjFjSwmg JWKSUdy+tUdDWH2UmmmvrhH2eghE8jcMKKM/srEMj98AqJYkuRYQM4PQ2Q/JbM53 fenyfU/mQZyBOSUjM2WTcZPsbbWLChgIWfTVWZoi1ok0okYX8lUAyYw7HwfHJ5vg blpDZvXzG4/ZtsQDLjOYJg8XXGHQFT4uKQfUL7Us8pMM -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:18 2026 by rpki-client