This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/HfrLlB4hKtVM_U8ec59MAiKWNM0.roa File: HfrLlB4hKtVM_U8ec59MAiKWNM0.roa (raw, json) Hash identifier: vvyUfIqwDg/vVPERqoykgaE3kPhLAXeAghrpbLhVekI= Subject key identifier: 1D:FA:CB:94:1E:21:2A:D5:4C:FD:4F:1E:73:9F:4C:02:22:96:34:CD Certificate issuer: /CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9 Certificate serial: 019B7758D2DF39483B06B3DC159CAEE66EBF Authority key identifier: B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/HfrLlB4hKtVM_U8ec59MAiKWNM0.roa Signing time: Thu 01 Jan 2026 02:17:48 +0000 ROA not before: Thu 01 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35122 IP address blocks: 45.146.140.0/22 maxlen: 22 85.255.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d2:df:39:48:3b:06:b3:dc:15:9c:ae:e6:6e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9 Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dfacb941e212ad54cfd4f1e739f4c02229634cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4c:a7:e8:25:6d:f8:14:fc:29:ac:91:74:91: 25:f7:0d:5e:13:e5:cb:7f:58:a0:be:8b:9f:ce:0b: d3:9e:29:92:83:1f:a7:a6:ab:78:03:d9:8c:1c:74: b3:56:2a:37:17:17:32:08:3c:33:c6:2c:7b:43:69: 3e:ae:f2:f6:c5:6e:16:fd:06:51:99:7b:e6:7b:33: 8e:74:57:9e:80:6f:28:54:08:0d:4c:f1:3b:d6:8d: aa:bd:18:e9:e4:66:3f:51:4f:c8:e8:fc:ff:fb:9d: 9d:e4:29:85:91:3f:fa:78:7e:73:b6:cd:bf:e2:ce: c7:c7:23:93:27:97:43:77:d1:c9:76:c9:40:0e:a8: cb:9c:e2:2f:1a:d7:44:bb:83:ba:29:7c:4f:28:f5: 32:35:10:a3:f8:26:af:14:17:73:5b:78:0c:7b:fb: 2a:4f:43:a6:2c:64:92:99:73:d4:84:f9:2f:7a:70: 93:db:c1:3e:16:da:89:40:54:25:78:c9:ca:43:fd: 60:b9:d9:d9:b8:d3:dc:13:04:16:32:b4:b5:ba:1b: 97:be:6c:81:e6:b0:59:57:82:01:e6:a3:11:54:f5: ee:03:12:97:75:ea:76:84:01:aa:84:48:0e:88:e9: 1c:38:27:17:e9:1e:e2:7d:88:a5:b5:8c:8f:cc:f7: c0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FA:CB:94:1E:21:2A:D5:4C:FD:4F:1E:73:9F:4C:02:22:96:34:CD X509v3 Authority Key Identifier: keyid:B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/HfrLlB4hKtVM_U8ec59MAiKWNM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.140.0/22 85.255.160.0/20 Signature Algorithm: sha256WithRSAEncryption 75:fe:ea:50:88:4c:d4:c4:73:20:92:0e:3e:d7:7f:68:87:97: 39:9f:73:e7:12:15:ca:02:39:86:b2:47:37:4a:bc:e6:49:20: 90:ef:10:41:5f:11:8d:39:ad:27:2f:a5:d4:51:29:1c:a6:7c: 4f:cb:88:e7:b0:29:ac:cb:d6:13:f5:55:85:5f:55:19:d9:95: 8a:17:e7:77:fe:2b:b9:0b:ce:ab:7d:7a:37:fb:b9:00:c1:3e: d4:ce:0b:f4:c4:7f:3e:be:5d:64:29:2f:ed:ee:a2:71:08:0d: 39:6b:d6:0f:d3:00:10:17:44:23:bf:73:38:cb:99:c9:91:1e: 76:97:55:ee:75:f5:01:2a:40:b8:ce:ab:72:fe:e8:72:08:66: 18:c6:de:ad:58:08:3c:09:d0:9d:71:67:c1:59:fd:ff:bb:ba: 04:71:4e:f7:d9:00:86:3e:25:c4:1e:08:c6:e2:62:51:de:76: e4:8f:b6:9f:13:23:68:79:2c:64:85:7a:25:2a:ff:a0:bc:b2: 18:a5:c0:af:ac:64:2b:e5:ba:8a:c8:df:71:57:ef:79:7d:81: 71:7a:f3:5a:49:d3:45:d6:46:f6:5e:e2:26:fc:3e:af:19:bf: 04:74:a0:af:55:a1:2e:d6:98:fb:e0:36:4d:fd:99:b0:d9:44: 09:1b:4d:a0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WNLfOUg7BrPcFZyu5m6/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMDQwYzdmNDUxYzYxNGQ3ZWViYTgyYzMyYTM5OGU4N2Rl M2I4YzkwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGZhY2I5NDFlMjEyYWQ1NGNmZDRmMWU3MzlmNGMwMjIyOTYzNGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Uyn6CVt+BT8KayRdJEl9w1eE+XL f1igvoufzgvTnimSgx+npqt4A9mMHHSzVio3FxcyCDwzxix7Q2k+rvL2xW4W/QZR mXvmezOOdFeegG8oVAgNTPE71o2qvRjp5GY/UU/I6Pz/+52d5CmFkT/6eH5zts2/ 4s7HxyOTJ5dDd9HJdslADqjLnOIvGtdEu4O6KXxPKPUyNRCj+CavFBdzW3gMe/sq T0OmLGSSmXPUhPkvenCT28E+FtqJQFQleMnKQ/1gudnZuNPcEwQWMrS1uhuXvmyB 5rBZV4IB5qMRVPXuAxKXdep2hAGqhEgOiOkcOCcX6R7ifYiltYyPzPfAjQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB36y5QeISrVTP1PHnOfTAIiljTNMB8GA1UdIwQY MBaAFLMEDH9FHGFNfuuoLDKjmOh947jJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3dRTWYwVWNZVTEtNjZnc01xT1k2SDNqdU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82NjZlNjctMTU0Ni00MTNjLWI2YTEt NWE3OGJhNjA5MWMxLzEvSGZyTGxCNGhLdFZNX1U4ZWM1OU1BaUtXTk0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS82NjZlNjctMTU0Ni00MTNjLWI2YTEtNWE3OGJhNjA5MWMx LzEvc3dRTWYwVWNZVTEtNjZnc01xT1k2SDNqdU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZKMAwQE Vf+gMA0GCSqGSIb3DQEBCwUAA4IBAQB1/upQiEzUxHMgkg4+139oh5c5n3PnEhXK AjmGskc3SrzmSSCQ7xBBXxGNOa0nL6XUUSkcpnxPy4jnsCmsy9YT9VWFX1UZ2ZWK F+d3/iu5C86rfXo3+7kAwT7Uzgv0xH8+vl1kKS/t7qJxCA05a9YP0wAQF0Qjv3M4 y5nJkR52l1XudfUBKkC4zqty/uhyCGYYxt6tWAg8CdCdcWfBWf3/u7oEcU732QCG PiXEHgjG4mJR3nbkj7afEyNoeSxkhXolKv+gvLIYpcCvrGQr5bqKyN9xV+95fYFx evNaSdNF1kb2XuIm/D6vGb8EdKCvVaEu1pj74DZN/Zmw2UQJG02g -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:26 2026 by rpki-client