This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/hZPjzYi1NIszCBZiSgaOsdUwYKk.roa File: hZPjzYi1NIszCBZiSgaOsdUwYKk.roa (raw, json) Hash identifier: R808nzwYCw+/z3Uv5MD9KZwNHr0axdpppwzNyXGLUmQ= Subject key identifier: 85:93:E3:CD:88:B5:34:8B:33:08:16:62:4A:06:8E:B1:D5:30:60:A9 Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15BE5AC1683CBC3A41D8059368999E Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/hZPjzYi1NIszCBZiSgaOsdUwYKk.roa Signing time: Fri 02 Jan 2026 14:21:30 +0000 ROA not before: Fri 02 Jan 2026 14:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 195.57.88.0/23 maxlen: 23 195.76.240.0/23 maxlen: 23 195.76.240.0/24 maxlen: 24 195.76.241.0/24 maxlen: 24 195.77.198.0/23 maxlen: 23 195.77.198.0/24 maxlen: 24 195.77.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:be:5a:c1:68:3c:bc:3a:41:d8:05:93:68:99:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8593e3cd88b5348b330816624a068eb1d53060a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9d:97:9f:58:4d:43:46:1a:2f:78:3c:e7:67: f0:41:66:51:a7:02:6b:9f:99:75:dd:72:5e:d2:c0: d0:39:03:7c:06:65:88:80:91:35:04:96:ba:20:22: 98:8e:fc:48:96:a0:3d:b8:e0:2f:0a:c0:18:e5:f9: ab:f9:35:aa:6b:13:43:8d:c6:6a:b9:8e:2a:0f:c4: fd:66:b3:7c:1b:8b:5b:9c:45:e2:ef:f9:30:d7:91: f2:7e:dd:7a:d4:fd:b0:4f:11:c0:1a:d3:db:ea:ab: 80:5b:6e:92:05:be:bd:6e:ab:6c:84:35:60:4d:4a: 23:7f:5c:59:c3:44:9b:6c:5b:2f:ce:98:e5:f8:44: b2:a1:64:7a:26:d4:30:b5:73:6e:bb:7c:c8:49:f5: bc:08:c7:23:9e:71:1d:34:0e:f6:3b:14:ec:83:1b: 93:9a:28:e4:02:67:2b:6c:77:78:1a:04:e2:06:a0: f3:7e:fc:bb:6f:7f:bc:28:0e:8c:d0:54:79:78:ba: 21:dc:2b:39:69:9d:f6:3a:dc:e0:ee:a3:9f:9f:9f: aa:e2:ac:e5:70:15:3d:b0:5a:cf:d5:86:f7:f1:a0: 89:fc:75:f1:ac:4c:57:15:41:8c:4c:7c:58:ac:34: 4a:3c:3b:e1:a1:88:ae:84:d4:ef:9a:d2:0e:38:71: 8b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:93:E3:CD:88:B5:34:8B:33:08:16:62:4A:06:8E:B1:D5:30:60:A9 X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/hZPjzYi1NIszCBZiSgaOsdUwYKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.57.88.0/23 195.76.240.0/23 195.77.198.0/23 Signature Algorithm: sha256WithRSAEncryption da:77:69:0d:c8:b5:5e:18:b4:6e:82:ff:bf:c7:96:c1:cc:32: d5:2c:14:33:16:bf:1d:16:db:98:a2:de:d5:0f:3c:2c:c4:de: 83:3f:f5:9d:7a:a2:85:9d:ea:50:2c:51:45:c4:53:e1:ff:56: 21:f0:e0:64:f3:55:9a:4c:35:33:78:aa:47:e8:4d:42:2a:8e: 6f:44:77:5e:62:60:c5:60:8a:1e:fc:f7:ca:8c:d5:42:a5:f0: 89:68:99:b5:f8:89:ec:9c:05:e5:2e:6d:9c:7a:d6:f8:af:06: 8c:84:f7:f0:0f:14:c8:e0:db:e0:5d:a5:0e:42:c0:f0:fb:8d: 81:c5:5e:f9:da:a4:05:7e:a7:80:be:0c:6d:50:b2:53:a4:af: 32:8e:17:1a:8f:ed:23:2e:12:b4:c7:f4:d8:6e:95:58:33:ff: 35:af:37:8d:e2:b5:a3:7b:bd:67:5a:63:3d:ae:77:ee:73:7c: 98:43:52:73:d9:27:cd:e5:5e:d0:18:57:94:f7:0c:99:71:f6: e7:8b:02:58:6c:9d:97:02:59:85:2e:bc:8d:66:c4:8f:0b:53: b3:45:70:d2:28:2b:9b:b6:5d:74:c7:81:dc:7f:24:51:aa:6a: 5c:1e:48:54:a1:33:a4:35:b3:5e:3f:1b:ba:28:a1:c3:2d:c9: c8:f5:8c:27 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/Fb5awWg8vDpB2AWTaJmeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTkzZTNjZDg4YjUzNDhiMzMwODE2NjI0YTA2OGViMWQ1MzA2MGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2J2Xn1hNQ0YaL3g852fwQWZRpwJr n5l13XJe0sDQOQN8BmWIgJE1BJa6ICKYjvxIlqA9uOAvCsAY5fmr+TWqaxNDjcZq uY4qD8T9ZrN8G4tbnEXi7/kw15Hyft161P2wTxHAGtPb6quAW26SBb69bqtshDVg TUojf1xZw0SbbFsvzpjl+ESyoWR6JtQwtXNuu3zISfW8CMcjnnEdNA72OxTsgxuT mijkAmcrbHd4GgTiBqDzfvy7b3+8KA6M0FR5eLoh3Cs5aZ32Otzg7qOfn5+q4qzl cBU9sFrP1Yb38aCJ/HXxrExXFUGMTHxYrDRKPDvhoYiuhNTvmtIOOHGLCwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIWT482ItTSLMwgWYkoGjrHVMGCpMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvaFpQanpZaTFOSXN6Q0JaaVNnYU9zZFV3WUtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwzlYAwQB w0zwAwQBw03GMA0GCSqGSIb3DQEBCwUAA4IBAQDad2kNyLVeGLRugv+/x5bBzDLV LBQzFr8dFtuYot7VDzwsxN6DP/WdeqKFnepQLFFFxFPh/1Yh8OBk81WaTDUzeKpH 6E1CKo5vRHdeYmDFYIoe/PfKjNVCpfCJaJm1+InsnAXlLm2cetb4rwaMhPfwDxTI 4NvgXaUOQsDw+42BxV752qQFfqeAvgxtULJTpK8yjhcaj+0jLhK0x/TYbpVYM/81 rzeN4rWje71nWmM9rnfuc3yYQ1Jz2SfN5V7QGFeU9wyZcfbniwJYbJ2XAlmFLryN ZsSPC1OzRXDSKCubtl10x4HcfyRRqmpcHkhUoTOkNbNePxu6KKHDLcnI9Ywn -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:19 2026 by rpki-client