This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hSHIj4UWxpZV5CJ62FEUxANmmx4.roa File: hSHIj4UWxpZV5CJ62FEUxANmmx4.roa (raw, json) Hash identifier: DokJgpyiq/4HexdzVhkwpYdCq1bUBWCyEOpnC3xmI30= Subject key identifier: 85:21:C8:8F:85:16:C6:96:55:E4:22:7A:D8:51:14:C4:03:66:9B:1E Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5 Certificate serial: 019B7D5CCDE4E2D84B086DF540F2B8C37755 Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hSHIj4UWxpZV5CJ62FEUxANmmx4.roa Signing time: Fri 02 Jan 2026 06:19:52 +0000 ROA not before: Fri 02 Jan 2026 06:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6768 IP address blocks: 45.14.108.0/22 maxlen: 22 45.14.108.0/23 maxlen: 23 45.14.108.0/24 maxlen: 24 45.14.109.0/24 maxlen: 24 45.14.110.0/23 maxlen: 23 45.14.110.0/24 maxlen: 24 45.14.111.0/24 maxlen: 24 2a01:4a60::/32 maxlen: 32 2a0e:c080::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cd:e4:e2:d8:4b:08:6d:f5:40:f2:b8:c3:77:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854c8176d9c42c704b310913309470351bb599e5 Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8521c88f8516c69655e4227ad85114c403669b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:bf:45:74:76:ad:30:91:be:c4:98:2b:66:25: 8d:f3:51:d3:22:8a:b0:07:ec:3a:30:1e:49:e6:29: 5d:d8:0c:8c:2e:84:2a:ba:8b:8c:30:4c:e1:51:df: f8:75:6a:db:25:d7:65:cd:06:72:8e:4a:bc:f1:85: dc:f7:45:b3:c0:75:64:00:fd:e4:5a:88:fe:4a:ac: 85:45:df:23:e4:d7:c7:bf:f8:8b:57:f9:6f:6f:71: ae:43:12:bf:21:dd:25:55:2d:ae:26:45:eb:db:21: f0:31:f4:27:70:0f:17:63:d1:08:2d:4f:44:d4:8c: 5f:09:cd:f0:88:65:70:8b:e6:30:94:57:d3:92:1e: 29:62:73:d2:1d:0e:4b:15:22:94:c8:8b:46:0b:ca: cf:be:32:53:c3:89:13:96:e8:b7:01:f7:e2:89:6c: 9e:63:83:26:e1:df:84:4c:10:ec:36:e3:42:87:2e: 3c:7c:1a:f7:ed:0a:b0:76:f0:07:8f:0b:89:92:5c: 81:08:94:29:91:49:79:da:ff:f2:47:7b:fe:e7:59: 91:9d:ce:4c:f0:fd:24:47:5b:e0:6c:86:18:c7:43: 01:9a:ac:de:23:8d:0b:48:e0:ac:3d:e1:8c:1a:6b: 09:0a:bb:4f:38:34:aa:06:ae:51:9e:84:11:db:56: 7a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:21:C8:8F:85:16:C6:96:55:E4:22:7A:D8:51:14:C4:03:66:9B:1E X509v3 Authority Key Identifier: keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hSHIj4UWxpZV5CJ62FEUxANmmx4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.108.0/22 IPv6: 2a01:4a60::/32 2a0e:c080::/29 Signature Algorithm: sha256WithRSAEncryption 41:d2:b6:4f:3e:50:8c:08:d8:fd:55:15:9e:ba:60:44:8d:4b: 25:51:4c:53:00:0c:e6:e2:f8:d5:62:31:3e:75:c6:8b:47:79: f4:d8:49:33:f3:7e:c0:ae:45:86:2b:88:4d:bb:94:c1:74:82: bb:de:d1:f2:2b:1b:c1:73:c2:17:29:71:ac:6c:af:47:32:c9: 44:0b:a0:12:dc:0d:b2:5e:17:c5:b3:db:67:0e:16:f5:09:45: db:ec:4a:bd:e2:44:f3:6e:e2:ce:16:f7:fc:f7:03:91:b8:96: 94:04:15:22:ea:19:5c:d2:01:e8:0c:05:2e:5b:d1:f4:4d:38: 93:81:70:48:e1:a8:5a:36:12:3e:58:68:89:72:5c:d6:8a:22: 11:7f:b4:f6:9d:f3:06:35:16:95:95:64:35:62:63:4f:b4:23: 4e:4b:70:7c:bf:07:aa:01:d9:e4:92:13:c4:1c:c8:86:7f:c5: dd:18:0f:ee:38:62:5b:b5:c0:31:29:0f:00:47:4a:67:b8:a2: 03:cc:09:96:0f:1a:06:ec:0f:b9:0d:76:38:ca:45:78:48:2b: 23:44:cd:ae:14:d4:84:58:9a:44:6b:0e:fb:e9:8f:6c:ae:77: b3:d4:17:e1:8a:53:6e:d2:cd:a3:68:0f:2d:1f:bd:ae:3b:76: 47:a2:29:98 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt9XM3k4thLCG31QPK4w3dVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGM4MTc2ZDljNDJjNzA0YjMxMDkxMzMwOTQ3MDM1MWJi NTk5ZTUwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTIxYzg4Zjg1MTZjNjk2NTVlNDIyN2FkODUxMTRjNDAzNjY5YjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7L9FdHatMJG+xJgrZiWN81HTIoqw B+w6MB5J5ild2AyMLoQquouMMEzhUd/4dWrbJddlzQZyjkq88YXc90WzwHVkAP3k Woj+SqyFRd8j5NfHv/iLV/lvb3GuQxK/Id0lVS2uJkXr2yHwMfQncA8XY9EILU9E 1IxfCc3wiGVwi+YwlFfTkh4pYnPSHQ5LFSKUyItGC8rPvjJTw4kTlui3AffiiWye Y4Mm4d+ETBDsNuNChy48fBr37QqwdvAHjwuJklyBCJQpkUl52v/yR3v+51mRnc5M 8P0kR1vgbIYYx0MBmqzeI40LSOCsPeGMGmsJCrtPODSqBq5RnoQR21Z6YQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFIUhyI+FFsaWVeQiethRFMQDZpseMB8GA1UdIwQY MBaAFIVMgXbZxCxwSzEJEzCUcDUbtZnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jZmY2MzAtNmM4YS00M2JkLWFmYjkt YjA3ZjAxNmExNzYyLzEvaFNISWo0VVd4cFpWNUNKNjJGRVV4QU5tbXg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9jZmY2MzAtNmM4YS00M2JkLWFmYjktYjA3ZjAxNmExNzYy LzEvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQCLQ5sMBQE AgACMA4DBQAqAUpgAwUDKg7AgDANBgkqhkiG9w0BAQsFAAOCAQEAQdK2Tz5QjAjY /VUVnrpgRI1LJVFMUwAM5uL41WIxPnXGi0d59NhJM/N+wK5FhiuITbuUwXSCu97R 8isbwXPCFylxrGyvRzLJRAugEtwNsl4XxbPbZw4W9QlF2+xKveJE827izhb3/PcD kbiWlAQVIuoZXNIB6AwFLlvR9E04k4FwSOGoWjYSPlhoiXJc1ooiEX+09p3zBjUW lZVkNWJjT7QjTktwfL8HqgHZ5JITxBzIhn/F3RgP7jhiW7XAMSkPAEdKZ7iiA8wJ lg8aBuwPuQ12OMpFeEgrI0TNrhTUhFiaRGsO++mPbK53s9QX4YpTbtLNo2gPLR+9 rjt2R6IpmA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:35 2026 by rpki-client