This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/hWIPowhULMETPFMJ5-_H_ZNBRis.roa File: hWIPowhULMETPFMJ5-_H_ZNBRis.roa (raw, json) Hash identifier: BNHF5BsMBRRalDPKnOb0xVzO7bSBgF7JDrPzIyr5BeM= Subject key identifier: 85:62:0F:A3:08:54:2C:C1:13:3C:53:09:E7:EF:C7:FD:93:41:46:2B Certificate issuer: /CN=353620da4452ac82aaf4c8c08819eb0b82513b83 Certificate serial: 019B79EBB8770014E8BE6170CDFEAC45D0DA Authority key identifier: 35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/hWIPowhULMETPFMJ5-_H_ZNBRis.roa Signing time: Thu 01 Jan 2026 14:17:29 +0000 ROA not before: Thu 01 Jan 2026 14:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215342 IP address blocks: 87.120.131.0/24 maxlen: 24 87.120.136.0/22 maxlen: 22 87.121.96.0/23 maxlen: 23 185.120.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b8:77:00:14:e8:be:61:70:cd:fe:ac:45:d0:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353620da4452ac82aaf4c8c08819eb0b82513b83 Validity Not Before: Jan 1 14:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85620fa308542cc1133c5309e7efc7fd9341462b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:59:60:4a:f4:96:1e:a1:3d:df:0f:0b:76:82: c1:f7:d9:f1:da:e8:82:b4:2a:2d:ec:dd:69:20:83: 3d:b2:aa:27:69:bc:1e:55:fd:0f:bb:b2:34:55:a4: d6:02:7c:19:2d:8c:7d:20:20:e9:35:64:77:7f:75: 98:a7:6a:57:fa:66:d6:16:c2:8d:7b:80:9e:e1:56: 7d:ca:69:0f:c9:07:9f:d2:94:2d:3e:52:c6:ae:24: b5:a0:53:57:8e:f3:73:15:27:3e:9b:31:90:b7:c0: 58:d8:b9:26:89:19:53:7e:de:cd:34:42:38:53:5a: 2f:7d:83:c1:40:18:81:12:95:ab:a3:d5:98:b6:b8: 28:cc:6a:7d:4b:83:14:9b:b7:87:98:66:e1:05:f6: 96:e2:39:a3:a4:1e:b7:fc:88:c9:06:ac:ff:a6:51: 3a:ca:d1:19:51:0a:9c:f5:e9:40:c2:73:bd:f8:ae: 40:af:17:2a:18:fb:2d:77:54:61:21:c1:53:a2:51: 92:32:47:4f:b6:2d:f1:52:10:c4:1c:e1:0e:03:93: 82:42:bf:46:fc:ba:48:03:44:cb:fc:6b:ff:de:79: 3d:e1:86:5c:01:75:38:3c:85:7f:fb:1b:50:04:a1: 8c:60:71:b3:84:04:7b:f7:59:34:82:3f:29:31:2b: 11:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:62:0F:A3:08:54:2C:C1:13:3C:53:09:E7:EF:C7:FD:93:41:46:2B X509v3 Authority Key Identifier: keyid:35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/hWIPowhULMETPFMJ5-_H_ZNBRis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.131.0/24 87.120.136.0/22 87.121.96.0/23 185.120.180.0/24 Signature Algorithm: sha256WithRSAEncryption 45:a6:de:36:4a:58:90:4e:56:02:e4:69:c4:15:5f:c0:dd:2f: 78:ac:5e:26:c6:d4:12:0c:b4:a0:1e:a0:e8:1a:61:cf:b1:6d: 74:bf:21:8b:92:b5:63:11:a5:7e:e0:14:62:e2:c0:d4:5e:c7: 23:2b:0b:79:e8:d6:3d:61:c2:6b:88:4f:13:06:90:fc:3f:c1: d1:e8:a2:c5:c0:e9:55:02:0c:1e:7e:f3:ae:61:19:7e:bd:49: 61:c0:49:f9:70:3f:7f:f7:89:1d:48:47:e9:cb:a8:4a:49:10: dd:22:c4:18:ec:c0:7d:dc:c9:9d:03:25:fc:50:b9:9f:81:1f: 44:31:1b:17:1f:fd:af:99:5b:cd:f6:f0:c1:2a:4c:68:da:3d: e9:a6:30:d0:fa:63:5a:17:e3:ea:24:dc:84:e6:2d:4c:34:03: 5e:9b:13:44:28:81:b3:ef:eb:f2:7a:c1:1e:16:ef:73:e5:3b: e8:13:e2:1e:b5:35:0b:ae:e0:c1:5b:b0:ec:f8:8a:b8:b4:f2: b7:13:94:6f:f6:c7:31:46:13:82:df:5c:8d:f3:e2:5f:cd:a0: 18:c1:7b:dd:1b:a7:02:1e:9f:01:3f:e3:fd:2e:82:9d:83:81: 37:26:22:a3:ac:d3:b0:f0:a4:39:94:87:c0:06:42:64:3d:1a: 1f:44:0d:0c -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt567h3ABTovmFwzf6sRdDaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MzYyMGRhNDQ1MmFjODJhYWY0YzhjMDg4MTllYjBiODI1 MTNiODMwHhcNMjYwMTAxMTQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTYyMGZhMzA4NTQyY2MxMTMzYzUzMDllN2VmYzdmZDkzNDE0NjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1lgSvSWHqE93w8LdoLB99nx2uiC tCot7N1pIIM9sqonabweVf0Pu7I0VaTWAnwZLYx9ICDpNWR3f3WYp2pX+mbWFsKN e4Ce4VZ9ymkPyQef0pQtPlLGriS1oFNXjvNzFSc+mzGQt8BY2LkmiRlTft7NNEI4 U1ovfYPBQBiBEpWro9WYtrgozGp9S4MUm7eHmGbhBfaW4jmjpB63/IjJBqz/plE6 ytEZUQqc9elAwnO9+K5ArxcqGPstd1RhIcFTolGSMkdPti3xUhDEHOEOA5OCQr9G /LpIA0TL/Gv/3nk94YZcAXU4PIV/+xtQBKGMYHGzhAR791k0gj8pMSsR7QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIViD6MIVCzBEzxTCefvx/2TQUYrMB8GA1UdIwQY MBaAFDU2INpEUqyCqvTIwIgZ6wuCUTuDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlRZZzJrUlNySUtxOU1qQWlCbnJDNEpSTzRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iZjI2MzEtY2ZhYy00YTg3LWEzN2It NTUxNTg0ZTVjMGE0LzEvaFdJUG93aFVMTUVUUEZNSjUtX0hfWk5CUmlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9iZjI2MzEtY2ZhYy00YTg3LWEzN2ItNTUxNTg0ZTVjMGE0 LzEvTlRZZzJrUlNySUtxOU1qQWlCbnJDNEpSTzRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAV3iDAwQC V3iIAwQBV3lgAwQAuXi0MA0GCSqGSIb3DQEBCwUAA4IBAQBFpt42SliQTlYC5GnE FV/A3S94rF4mxtQSDLSgHqDoGmHPsW10vyGLkrVjEaV+4BRi4sDUXscjKwt56NY9 YcJriE8TBpD8P8HR6KLFwOlVAgwefvOuYRl+vUlhwEn5cD9/94kdSEfpy6hKSRDd IsQY7MB93MmdAyX8ULmfgR9EMRsXH/2vmVvN9vDBKkxo2j3ppjDQ+mNaF+PqJNyE 5i1MNANemxNEKIGz7+vyesEeFu9z5TvoE+IetTULruDBW7Ds+Iq4tPK3E5Rv9scx RhOC31yN8+JfzaAYwXvdG6cCHp8BP+P9LoKdg4E3JiKjrNOw8KQ5lIfABkJkPRof RA0M -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:36 2026 by rpki-client