This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/Hhm4DnDPBgZDnzS_n_5iKji_VSo.roa File: Hhm4DnDPBgZDnzS_n_5iKji_VSo.roa (raw, json) Hash identifier: FJuxABjvPtim7sn898zyARxoysAttjj41coyq99PNXU= Subject key identifier: 1E:19:B8:0E:70:CF:06:06:43:9F:34:BF:9F:FE:62:2A:38:BF:55:2A Certificate issuer: /CN=4eeb86abd5374e553098209075b9afecabef333a Certificate serial: 019B7BA53F25A2A074EA0EB9E78E323319E5 Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/Hhm4DnDPBgZDnzS_n_5iKji_VSo.roa Signing time: Thu 01 Jan 2026 22:19:45 +0000 ROA not before: Thu 01 Jan 2026 22:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46562 IP address blocks: 78.40.59.0/24 maxlen: 24 185.230.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:3f:25:a2:a0:74:ea:0e:b9:e7:8e:32:33:19:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a Validity Not Before: Jan 1 22:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e19b80e70cf0606439f34bf9ffe622a38bf552a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2b:86:80:94:ae:b9:ef:c5:85:0d:b7:c6:ae: d7:39:93:90:30:13:ae:68:18:26:88:2b:5b:cd:c6: 27:d7:24:09:7f:2d:b9:3b:a2:17:ee:4f:6a:a7:c4: 97:09:4a:39:60:27:eb:e7:6f:30:33:2f:8d:dd:88: 09:00:73:24:8e:e0:72:e1:80:d1:2f:4a:83:c1:85: 17:f9:99:bb:cf:51:57:74:8b:a1:a9:eb:1e:6f:16: 31:eb:46:44:86:3d:16:8e:96:96:be:4f:b0:8a:99: 3f:a0:46:8a:f1:24:f6:0c:6a:85:6c:05:0e:17:c7: 2c:84:bc:2b:b6:37:79:4b:61:9d:e8:41:5b:76:86: 7c:7d:8e:af:b0:d3:b8:a1:37:60:28:f9:33:91:60: a5:3f:c0:4a:7e:44:74:a1:25:be:04:e6:b4:ff:04: e8:43:b1:55:de:72:c1:e3:35:7c:58:23:16:5f:8c: f7:8b:a0:e6:f1:95:41:f4:a0:87:ce:f5:0c:cb:9b: b4:59:2b:40:5f:21:27:83:37:d5:53:3f:92:bd:f4: 48:98:15:04:bc:34:0f:14:6a:47:c3:3a:1b:b9:90: 71:33:14:e0:f0:0d:fe:0a:73:02:0a:8f:b5:0c:05: 92:8f:a9:59:05:a8:ba:cb:8a:00:89:d3:12:f1:8d: bb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:19:B8:0E:70:CF:06:06:43:9F:34:BF:9F:FE:62:2A:38:BF:55:2A X509v3 Authority Key Identifier: keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/Hhm4DnDPBgZDnzS_n_5iKji_VSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.59.0/24 185.230.222.0/24 Signature Algorithm: sha256WithRSAEncryption 02:36:c7:d6:82:9b:19:4e:d8:cd:bb:ed:93:89:6f:68:18:e2: 63:b2:70:20:75:18:1d:ad:6b:81:5e:cb:22:bd:dd:06:46:46: 2e:c9:d9:2a:39:e6:9a:e1:6b:a7:25:3d:22:4d:b6:31:63:2a: fe:a4:45:44:e2:33:fd:32:99:1b:9d:4a:77:f2:cd:b7:3f:51: a8:22:53:3c:23:5c:9c:1a:ec:29:fe:2e:32:cb:b2:13:8d:c8: d3:c9:25:3e:80:7a:4d:ef:14:11:ca:bc:c8:5f:69:64:e1:f6: a6:45:98:44:c1:65:ee:ae:34:b9:21:db:a9:ca:71:85:90:47: e9:f0:85:6e:50:9a:25:93:5a:5b:76:99:8e:32:a4:f0:37:ef: 17:4d:6c:df:d9:4c:9f:79:f8:32:53:bb:15:a5:32:1e:39:65: 4f:43:02:35:d4:79:4e:9f:78:91:4f:92:76:24:c9:37:23:86: 99:b7:da:b2:8f:26:45:56:e3:a1:45:66:22:96:24:a8:ef:ff: ac:5d:dc:5b:44:69:13:40:68:94:ea:42:f9:f7:f9:88:31:c3: 62:1d:44:83:b2:39:16:80:99:d2:30:09:2f:80:f3:36:5a:ec: 9b:db:db:c1:9b:57:a5:6b:a1:64:cf:85:e1:ee:d0:60:4d:42: d7:8d:39:75 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pT8loqB06g65544yMxnlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWI4NmFiZDUzNzRlNTUzMDk4MjA5MDc1YjlhZmVjYWJl ZjMzM2EwHhcNMjYwMTAxMjIxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTE5YjgwZTcwY2YwNjA2NDM5ZjM0YmY5ZmZlNjIyYTM4YmY1NTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiuGgJSuue/FhQ23xq7XOZOQMBOu aBgmiCtbzcYn1yQJfy25O6IX7k9qp8SXCUo5YCfr528wMy+N3YgJAHMkjuBy4YDR L0qDwYUX+Zm7z1FXdIuhqesebxYx60ZEhj0WjpaWvk+wipk/oEaK8ST2DGqFbAUO F8cshLwrtjd5S2Gd6EFbdoZ8fY6vsNO4oTdgKPkzkWClP8BKfkR0oSW+BOa0/wTo Q7FV3nLB4zV8WCMWX4z3i6Dm8ZVB9KCHzvUMy5u0WStAXyEngzfVUz+SvfRImBUE vDQPFGpHwzobuZBxMxTg8A3+CnMCCo+1DAWSj6lZBai6y4oAidMS8Y27twIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB4ZuA5wzwYGQ580v5/+Yio4v1UqMB8GA1UdIwQY MBaAFE7rhqvVN05VMJggkHW5r+yr7zM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHV1R3E5VTNUbFV3bUNDUWRibXY3S3Z2TXpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zZTVjOTYtN2U5NS00Nzk3LWFhNmEt YTg5NzhlM2FhZTk4LzEvSGhtNERuRFBCZ1pEbnpTX25fNWlLamlfVlNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zZTVjOTYtN2U5NS00Nzk3LWFhNmEtYTg5NzhlM2FhZTk4 LzEvVHV1R3E5VTNUbFV3bUNDUWRibXY3S3Z2TXpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATig7AwQA uebeMA0GCSqGSIb3DQEBCwUAA4IBAQACNsfWgpsZTtjNu+2TiW9oGOJjsnAgdRgd rWuBXssivd0GRkYuydkqOeaa4WunJT0iTbYxYyr+pEVE4jP9MpkbnUp38s23P1Go IlM8I1ycGuwp/i4yy7ITjcjTySU+gHpN7xQRyrzIX2lk4famRZhEwWXurjS5Idup ynGFkEfp8IVuUJolk1pbdpmOMqTwN+8XTWzf2UyfefgyU7sVpTIeOWVPQwI11HlO n3iRT5J2JMk3I4aZt9qyjyZFVuOhRWYiliSo7/+sXdxbRGkTQGiU6kL59/mIMcNi HUSDsjkWgJnSMAkvgPM2Wuyb29vBm1ela6Fkz4Xh7tBgTULXjTl1 -----END CERTIFICATE-----Generated at Fri Jan 2 13:02:01 2026 by rpki-client