This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/hMm1g6WmEatVanwLdPNAJjOfuFw.roa File: hMm1g6WmEatVanwLdPNAJjOfuFw.roa (raw, json) Hash identifier: C+YMY5cANBjGv2vp0AL0f23JPUShhtTWhv6wBgRBui4= Subject key identifier: 84:C9:B5:83:A5:A6:11:AB:55:6A:7C:0B:74:F3:40:26:33:9F:B8:5C Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F14FE70A5892D05925CEE450EE70B1D Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/hMm1g6WmEatVanwLdPNAJjOfuFw.roa Signing time: Fri 02 Jan 2026 14:20:40 +0000 ROA not before: Fri 02 Jan 2026 14:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56466 IP address blocks: 87.107.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:fe:70:a5:89:2d:05:92:5c:ee:45:0e:e7:0b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84c9b583a5a611ab556a7c0b74f34026339fb85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:65:9f:6b:f9:62:aa:ca:a2:c8:0a:58:7c: 8d:c2:ab:dd:d8:a0:9f:a0:60:c6:85:bc:36:ee:f0: 15:b7:46:a3:5a:04:96:56:a0:f5:4e:ac:66:23:50: 28:d1:ee:77:41:f7:59:81:96:0b:ae:86:b4:2c:56: c6:46:bb:86:b7:f0:9c:c7:16:ef:81:09:4c:7c:76: 21:f6:b4:82:d7:60:02:99:6f:0e:f3:07:f4:68:aa: 50:d5:78:0a:41:2b:c9:fe:73:c5:95:59:6b:71:11: 37:23:e7:3f:dc:44:01:ce:d2:69:f5:40:89:bd:21: 56:65:b5:64:7d:c9:ae:0b:e8:bb:ac:4e:1e:57:e3: c0:3f:da:7d:b9:9f:c5:23:c3:f3:c4:0c:e6:19:29: dc:fa:d7:b8:4d:27:1e:63:c0:ae:f8:1a:d2:d7:1c: 2c:31:bc:6b:4b:d8:61:a7:20:4d:db:5b:10:a1:4c: 6f:6b:60:0c:9c:47:c5:55:fd:14:2c:ac:58:07:dc: 0d:43:fb:e6:bb:62:49:88:9a:8f:d6:83:aa:57:5a: 07:48:4d:03:39:a5:73:61:aa:1f:91:b5:0e:06:2b: cf:cf:87:b7:80:8a:5c:55:3f:28:eb:eb:50:50:ea: 02:b3:5a:45:41:a5:30:27:e4:3c:5c:f9:8d:1d:93: 68:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C9:B5:83:A5:A6:11:AB:55:6A:7C:0B:74:F3:40:26:33:9F:B8:5C X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/hMm1g6WmEatVanwLdPNAJjOfuFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.107.141.0/24 Signature Algorithm: sha256WithRSAEncryption 28:ad:2d:6e:fd:f7:08:d4:20:fe:98:a2:54:5f:0d:6a:8a:ab: 81:15:7e:ce:d2:60:fe:a6:86:06:8a:69:d5:a6:66:e9:63:10: 03:bd:34:b8:be:f0:53:52:9d:9f:d7:40:90:72:62:f9:00:ad: 8f:50:de:2d:f6:94:04:f3:22:a3:8a:f0:88:1e:32:d1:83:02: ea:ee:c8:65:a2:33:23:be:ae:05:2f:e7:37:c8:f3:6b:6e:0e: af:b7:68:85:d6:fc:e4:12:40:d4:3c:74:59:fa:bc:53:08:39: bc:33:b9:cf:6d:c6:58:13:bf:b0:3e:38:40:58:ce:a5:8f:fd: 7f:15:5d:ee:4a:c6:ec:05:d3:58:8b:80:c2:5e:13:1e:e3:85: 07:62:22:7a:a7:0a:a3:e9:bd:b6:13:77:55:02:bc:bf:56:4b: e8:88:41:9e:2f:5d:a6:47:a5:f2:e8:d7:ce:7f:2f:b1:cd:9a: 6b:d3:37:d8:8a:03:da:3f:22:13:3a:96:14:27:dc:0e:9a:e4: a5:87:80:50:d9:72:6d:10:9a:f3:8a:63:b5:60:93:d5:34:20: 9e:0f:7d:07:ed:a0:aa:f1:a6:69:50:5b:b3:5b:7c:d0:71:4f: 84:fc:48:29:99:fb:95:d1:bb:3e:01:8d:25:f4:a2:da:6d:5f: 70:c9:e3:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FP5wpYktBZJc7kUO5wsdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGM5YjU4M2E1YTYxMWFiNTU2YTdjMGI3NGYzNDAyNjMzOWZiODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXFln2v5YqrKosgKWHyNwqvd2KCf oGDGhbw27vAVt0ajWgSWVqD1TqxmI1Ao0e53QfdZgZYLroa0LFbGRruGt/Ccxxbv gQlMfHYh9rSC12ACmW8O8wf0aKpQ1XgKQSvJ/nPFlVlrcRE3I+c/3EQBztJp9UCJ vSFWZbVkfcmuC+i7rE4eV+PAP9p9uZ/FI8PzxAzmGSnc+te4TSceY8Cu+BrS1xws MbxrS9hhpyBN21sQoUxva2AMnEfFVf0ULKxYB9wNQ/vmu2JJiJqP1oOqV1oHSE0D OaVzYaofkbUOBivPz4e3gIpcVT8o6+tQUOoCs1pFQaUwJ+Q8XPmNHZNoyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFITJtYOlphGrVWp8C3TzQCYzn7hcMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvaE1tMWc2V21FYXRWYW53TGRQTkFKak9mdUZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV2uNMA0G CSqGSIb3DQEBCwUAA4IBAQAorS1u/fcI1CD+mKJUXw1qiquBFX7O0mD+poYGimnV pmbpYxADvTS4vvBTUp2f10CQcmL5AK2PUN4t9pQE8yKjivCIHjLRgwLq7shlojMj vq4FL+c3yPNrbg6vt2iF1vzkEkDUPHRZ+rxTCDm8M7nPbcZYE7+wPjhAWM6lj/1/ FV3uSsbsBdNYi4DCXhMe44UHYiJ6pwqj6b22E3dVAry/VkvoiEGeL12mR6Xy6NfO fy+xzZpr0zfYigPaPyITOpYUJ9wOmuSlh4BQ2XJtEJrzimO1YJPVNCCeD30H7aCq 8aZpUFuzW3zQcU+E/EgpmfuV0bs+AY0l9KLabV9wyeMZ -----END CERTIFICATE-----Generated at Mon Jan 26 23:22:49 2026 by rpki-client