This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/HbGW1bIuKJtcKHzffUf-4COhdZM.roa File: HbGW1bIuKJtcKHzffUf-4COhdZM.roa (raw, json) Hash identifier: XbWavlk3zf17or5OmaUS0jVlWZ00ZlHjNhNZCQ7iW5c= Subject key identifier: 1D:B1:96:D5:B2:2E:28:9B:5C:28:7C:DF:7D:47:FE:E0:23:A1:75:93 Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87 Certificate serial: 019B7DCAB36CA6DA835FC9B1F15D704D0FA8 Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/HbGW1bIuKJtcKHzffUf-4COhdZM.roa Signing time: Fri 02 Jan 2026 08:19:54 +0000 ROA not before: Fri 02 Jan 2026 08:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 80.82.0.0/24 maxlen: 24 80.82.1.0/24 maxlen: 24 80.82.2.0/24 maxlen: 24 80.82.3.0/24 maxlen: 24 80.82.4.0/24 maxlen: 24 80.82.5.0/24 maxlen: 24 80.82.6.0/24 maxlen: 24 80.82.7.0/24 maxlen: 24 80.82.8.0/24 maxlen: 24 80.82.9.0/24 maxlen: 24 80.82.10.0/24 maxlen: 24 80.82.11.0/24 maxlen: 24 80.82.12.0/24 maxlen: 24 80.82.13.0/24 maxlen: 24 80.82.14.0/24 maxlen: 24 80.82.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b3:6c:a6:da:83:5f:c9:b1:f1:5d:70:4d:0f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87 Validity Not Before: Jan 2 08:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1db196d5b22e289b5c287cdf7d47fee023a17593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f5:e6:71:16:08:d5:fb:0f:50:6e:7a:e6:0f: c9:02:69:35:51:ea:c0:9a:ed:97:b5:66:35:61:ee: bb:1d:6e:2a:ae:09:3d:e6:61:34:30:3b:16:4b:97: 78:a5:6b:ce:61:65:9e:44:bb:d6:34:fe:6f:a0:b0: d7:68:10:64:ef:6b:72:3c:b2:01:0e:20:71:f2:43: f5:b8:14:7c:e1:88:81:7d:6e:5e:0d:35:ca:a0:89: a9:15:69:45:aa:89:f4:15:fa:7e:cf:1e:05:76:1e: d0:69:f0:f3:0c:cb:4e:9e:eb:1f:de:03:73:53:c9: 96:c1:24:28:00:6d:2c:be:29:39:af:94:f6:17:5b: 82:2c:92:c8:3e:24:78:68:a2:1c:ad:ed:08:b0:cb: 2f:87:6b:68:24:f0:9a:33:2b:21:12:5a:7e:49:e8: 07:95:4a:16:33:df:c2:c7:6c:a0:65:da:0d:0e:de: bb:2f:ed:5a:fc:09:f6:22:2c:66:16:4d:59:3b:04: a5:5c:50:40:32:94:7c:d5:1b:48:8d:7b:47:fa:50: 36:ba:8f:83:c0:60:ce:28:8a:21:0f:c6:b6:7d:7a: ab:0b:89:82:11:eb:96:dc:47:8e:f8:59:24:ee:55: 84:f1:91:68:e5:36:11:0b:5e:8c:bb:49:ce:b8:9e: fe:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B1:96:D5:B2:2E:28:9B:5C:28:7C:DF:7D:47:FE:E0:23:A1:75:93 X509v3 Authority Key Identifier: keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/HbGW1bIuKJtcKHzffUf-4COhdZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.82.0.0/20 Signature Algorithm: sha256WithRSAEncryption 50:9f:bd:70:f8:1f:26:9e:7e:88:13:9b:47:a5:a4:6b:f7:01: bf:be:3a:d9:2b:c9:b6:58:67:40:6a:16:07:d8:ea:ff:cd:e0: bd:91:f4:81:23:60:a4:e7:81:74:4a:36:62:f1:a6:a0:75:eb: e1:a7:3e:17:48:f7:5a:62:a4:0a:bf:d8:3c:01:40:bd:38:4a: 6e:b7:75:56:8a:e7:e6:b3:fa:d3:1e:c9:02:fe:0e:5b:dc:b1: 06:db:c2:01:43:77:09:26:b1:c2:9a:b8:22:43:98:0f:4a:4e: a5:52:6b:8f:5d:50:11:ad:8e:49:58:1e:a1:1a:72:cd:97:b3: 9a:54:aa:77:b0:91:b6:98:69:e6:7d:f1:23:45:43:07:5b:88: f1:81:d9:49:64:27:a1:55:6e:46:d0:04:d0:9a:2e:ea:25:7b: 48:f4:68:9e:a1:93:42:36:08:d3:9c:88:bb:40:c7:a2:4c:a4: 30:11:c3:74:b1:29:95:28:10:a9:ce:be:13:48:4c:24:8c:39: aa:5b:b1:b2:69:b3:91:86:39:73:8b:66:4c:a8:3a:30:b8:33: a0:4c:bd:70:4c:6f:e2:06:e3:e3:47:8b:9a:f0:71:9b:56:86: 15:c4:66:13:e8:51:21:30:66:3c:24:0a:66:6e:e2:bb:d7:ab: 09:a9:72:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yrNsptqDX8mx8V1wTQ+oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYTZkNmIwODc0NjFmZGVjNmE1YjlkNTJkMjk4MzJkOGYy OTljODcwHhcNMjYwMTAyMDgxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGIxOTZkNWIyMmUyODliNWMyODdjZGY3ZDQ3ZmVlMDIzYTE3NTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vXmcRYI1fsPUG565g/JAmk1UerA mu2XtWY1Ye67HW4qrgk95mE0MDsWS5d4pWvOYWWeRLvWNP5voLDXaBBk72tyPLIB DiBx8kP1uBR84YiBfW5eDTXKoImpFWlFqon0Ffp+zx4Fdh7QafDzDMtOnusf3gNz U8mWwSQoAG0svik5r5T2F1uCLJLIPiR4aKIcre0IsMsvh2toJPCaMyshElp+SegH lUoWM9/Cx2ygZdoNDt67L+1a/An2IixmFk1ZOwSlXFBAMpR81RtIjXtH+lA2uo+D wGDOKIohD8a2fXqrC4mCEeuW3EeO+Fkk7lWE8ZFo5TYRC16Mu0nOuJ7+0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB2xltWyLiibXCh8331H/uAjoXWTMB8GA1UdIwQY MBaAFKCm1rCHRh/exqW51S0pgy2PKZyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yZDc2MDktMjE0Mi00YTAzLWIxMWUt MTE0OGZkZTdhZWY3LzEvSGJHVzFiSXVLSnRjS0h6ZmZVZi00Q09oZFpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8yZDc2MDktMjE0Mi00YTAzLWIxMWUtMTE0OGZkZTdhZWY3 LzEvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUFIAMA0G CSqGSIb3DQEBCwUAA4IBAQBQn71w+B8mnn6IE5tHpaRr9wG/vjrZK8m2WGdAahYH 2Or/zeC9kfSBI2Ck54F0SjZi8aagdevhpz4XSPdaYqQKv9g8AUC9OEput3VWiufm s/rTHskC/g5b3LEG28IBQ3cJJrHCmrgiQ5gPSk6lUmuPXVARrY5JWB6hGnLNl7Oa VKp3sJG2mGnmffEjRUMHW4jxgdlJZCehVW5G0ATQmi7qJXtI9GieoZNCNgjTnIi7 QMeiTKQwEcN0sSmVKBCpzr4TSEwkjDmqW7GyabORhjlzi2ZMqDowuDOgTL1wTG/i BuPjR4ua8HGbVoYVxGYT6FEhMGY8JApmbuK716sJqXI0 -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:20 2026 by rpki-client