This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/HJJKjlD8w6pwUXxhSyRU-4S7rcs.roa File: HJJKjlD8w6pwUXxhSyRU-4S7rcs.roa (raw, json) Hash identifier: ijFhOfJ/0CwOhPEkrD+B1c1Juz952plWRqWilLY1GJ0= Subject key identifier: 1C:92:4A:8E:50:FC:C3:AA:70:51:7C:61:4B:24:54:FB:84:BB:AD:CB Certificate issuer: /CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a Certificate serial: 019B77C6E64E3EABCAA6D6C43FD1FE005931 Authority key identifier: 66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/HJJKjlD8w6pwUXxhSyRU-4S7rcs.roa Signing time: Thu 01 Jan 2026 04:18:02 +0000 ROA not before: Thu 01 Jan 2026 04:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41019 IP address blocks: 45.84.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e6:4e:3e:ab:ca:a6:d6:c4:3f:d1:fe:00:59:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a Validity Not Before: Jan 1 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c924a8e50fcc3aa70517c614b2454fb84bbadcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:08:7c:53:9a:c6:13:4e:76:7a:ab:0f:10:d1: 73:ed:d0:24:15:9d:53:4f:ad:ce:31:30:1e:0f:e1: 3f:52:29:53:49:85:a1:0d:3b:b3:22:b4:dd:bd:04: 6a:dc:77:f0:81:3f:19:5d:4b:66:a5:82:18:0f:53: 8c:9a:24:3c:17:14:ef:2c:d1:0c:29:f2:bf:65:46: 96:47:a9:c1:72:b6:f6:7a:f0:0c:5f:50:3e:1c:e0: 73:6f:92:d9:00:7a:74:90:1d:ac:fa:cd:2f:37:08: d6:74:34:26:7d:70:20:9f:4c:42:62:7f:f4:cd:fd: e3:64:0b:21:df:3c:01:e6:5c:c8:e3:b3:1d:26:07: cf:e1:27:be:67:98:2a:6e:43:36:64:3d:ba:04:0b: 97:11:0c:0b:37:90:b0:cc:64:47:8f:a6:7f:d4:4e: a4:86:80:15:5e:b3:2c:52:d3:48:0c:cb:43:05:76: cc:1d:72:58:57:36:53:ca:da:a8:53:80:50:6f:00: 93:b6:4d:e0:b6:7a:de:a6:66:6f:1b:0a:9b:85:e6: 29:be:a6:74:3e:17:67:07:60:c1:18:5f:1c:04:08: 7d:09:49:74:55:98:3b:22:27:b0:f7:25:15:03:f3: bd:c5:90:ab:8c:da:fc:1c:56:7d:40:65:8b:fb:71: 86:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:92:4A:8E:50:FC:C3:AA:70:51:7C:61:4B:24:54:FB:84:BB:AD:CB X509v3 Authority Key Identifier: keyid:66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/HJJKjlD8w6pwUXxhSyRU-4S7rcs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.184.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:d8:1c:cb:c9:50:2b:5b:b7:19:8e:62:af:32:78:87:d1:a4: 3f:7c:ce:27:69:53:8e:e7:da:54:1b:e0:6f:d1:5f:17:e8:0d: 47:22:10:eb:92:1a:2d:70:34:45:80:17:20:a9:f7:00:48:25: 3c:56:8a:db:88:38:64:7d:dc:5a:8a:ad:07:ab:66:06:b7:71: 2f:7b:92:2e:77:c2:14:97:65:c8:be:0a:3d:13:86:64:61:fb: 84:81:13:6c:e5:ba:2c:2f:db:cd:21:0f:37:d3:f3:3d:30:1b: 5f:28:1a:a5:50:a0:ae:87:7c:9a:86:d5:52:a3:ab:fa:b9:07: 5b:55:e6:b1:ee:37:33:7f:c8:2b:28:12:83:64:f8:fd:b3:b5: 42:0a:e9:7a:4d:f8:94:24:51:83:05:93:37:ed:2e:8a:f4:29: ba:4e:03:e2:59:7c:64:b2:6c:8c:9f:cf:b0:53:12:0b:33:ca: 9b:5f:3c:1e:eb:86:34:7f:b6:4f:84:a5:d0:60:4c:29:7e:61: 09:4e:91:fd:ce:88:2d:54:41:07:79:d2:0e:a7:a3:05:c0:95: 7c:e1:04:b0:24:77:f5:1b:60:5c:3c:95:9d:11:6e:e6:12:e8: 58:93:f4:48:c7:4b:6b:66:b2:b9:4d:f1:2f:29:11:04:86:18: 4c:63:1a:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xuZOPqvKptbEP9H+AFkxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDVlNWNkN2QwMzc1ZGUyNTI3NDA1NDY0MTJiODhiYTVi Y2ZhN2EwHhcNMjYwMTAxMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzkyNGE4ZTUwZmNjM2FhNzA1MTdjNjE0YjI0NTRmYjg0YmJhZGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQh8U5rGE052eqsPENFz7dAkFZ1T T63OMTAeD+E/UilTSYWhDTuzIrTdvQRq3HfwgT8ZXUtmpYIYD1OMmiQ8FxTvLNEM KfK/ZUaWR6nBcrb2evAMX1A+HOBzb5LZAHp0kB2s+s0vNwjWdDQmfXAgn0xCYn/0 zf3jZAsh3zwB5lzI47MdJgfP4Se+Z5gqbkM2ZD26BAuXEQwLN5CwzGRHj6Z/1E6k hoAVXrMsUtNIDMtDBXbMHXJYVzZTytqoU4BQbwCTtk3gtnrepmZvGwqbheYpvqZ0 PhdnB2DBGF8cBAh9CUl0VZg7Iiew9yUVA/O9xZCrjNr8HFZ9QGWL+3GG1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBySSo5Q/MOqcFF8YUskVPuEu63LMB8GA1UdIwQY MBaAFGbV5c19A3XeJSdAVGQSuIulvPp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRYbHpYMERkZDRsSjBCVVpCSzRpNlc4LW5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zZGI4ZDMtMzQwNC00NWVmLTg0MDkt ODZiOTBmMTk3ZWRlLzEvSEpKS2psRDh3NnB3VVh4aFN5UlUtNFM3cmNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8zZGI4ZDMtMzQwNC00NWVmLTg0MDktODZiOTBmMTk3ZWRl LzEvWnRYbHpYMERkZDRsSjBCVVpCSzRpNlc4LW5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVS4MA0G CSqGSIb3DQEBCwUAA4IBAQAv2BzLyVArW7cZjmKvMniH0aQ/fM4naVOO59pUG+Bv 0V8X6A1HIhDrkhotcDRFgBcgqfcASCU8VorbiDhkfdxaiq0Hq2YGt3Eve5Iud8IU l2XIvgo9E4ZkYfuEgRNs5bosL9vNIQ830/M9MBtfKBqlUKCuh3yahtVSo6v6uQdb Veax7jczf8grKBKDZPj9s7VCCul6TfiUJFGDBZM37S6K9Cm6TgPiWXxksmyMn8+w UxILM8qbXzwe64Y0f7ZPhKXQYEwpfmEJTpH9zogtVEEHedIOp6MFwJV84QSwJHf1 G2BcPJWdEW7mEuhYk/RIx0trZrK5TfEvKREEhhhMYxoC -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:58 2026 by rpki-client