This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/hIyRTGN4bqnLKJCwc1F2Eg7MBmc.roa File: hIyRTGN4bqnLKJCwc1F2Eg7MBmc.roa (raw, json) Hash identifier: VGcdVOE9BIoWHNOMBje5zrVkxvWhg/+tqscfV1XcAU8= Subject key identifier: 84:8C:91:4C:63:78:6E:A9:CB:28:90:B0:73:51:76:12:0E:CC:06:67 Certificate issuer: /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08 Certificate serial: 019B7BA5433377E694DC065F2C9DE9D6428E Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/hIyRTGN4bqnLKJCwc1F2Eg7MBmc.roa Signing time: Thu 01 Jan 2026 22:19:46 +0000 ROA not before: Thu 01 Jan 2026 22:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 31.15.120.0/22 maxlen: 22 46.30.128.0/23 maxlen: 23 185.74.172.0/23 maxlen: 23 185.74.175.0/24 maxlen: 24 193.200.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:43:33:77:e6:94:dc:06:5f:2c:9d:e9:d6:42:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08 Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=848c914c63786ea9cb2890b0735176120ecc0667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:05:58:bd:9e:01:6d:0f:c2:7a:77:e6:46:29: 68:fd:e9:5c:05:8a:7f:32:3d:40:7a:c2:57:92:ad: bc:6a:72:e2:d8:e5:57:54:16:e7:6c:b5:80:8b:97: 74:8f:d9:f1:9d:e1:49:c2:e3:61:47:3c:85:e6:f9: 5b:d9:0b:e8:4b:60:5a:6c:7d:ed:3b:d6:e0:ec:e2: 42:51:d9:28:ba:b6:bb:a5:de:97:04:ee:91:a8:e3: a7:2c:1a:67:41:6f:9b:cd:45:08:ac:ef:51:2d:9c: d0:7d:61:65:0f:89:ce:97:d8:44:db:d5:ed:5a:44: 1f:df:2a:0b:2d:74:3e:7b:06:3e:af:88:65:3c:d0: 3f:da:c9:e6:e1:f2:ec:0a:98:b6:b4:6e:ab:25:e1: a6:6e:c9:48:9b:ec:57:72:49:83:5a:ac:18:e1:9c: 7c:78:ab:e7:6b:2c:96:0e:99:a8:a6:c5:a4:21:76: 4e:35:f4:70:0d:f9:ad:df:e9:58:a8:c2:e4:6d:f9: 71:b6:47:76:f7:2f:0a:62:77:7f:74:66:fc:ad:99: b8:8d:21:8e:97:d7:a0:08:e5:8c:ef:7f:d3:e3:bc: d8:5b:74:e9:b1:b9:68:fc:7e:98:73:d1:5f:80:d7: 89:07:0a:d3:49:da:2b:4c:ac:f8:d9:74:97:38:5a: 46:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8C:91:4C:63:78:6E:A9:CB:28:90:B0:73:51:76:12:0E:CC:06:67 X509v3 Authority Key Identifier: keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/hIyRTGN4bqnLKJCwc1F2Eg7MBmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.15.120.0/22 46.30.128.0/23 185.74.172.0/23 185.74.175.0/24 193.200.56.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:c1:3d:ad:68:31:23:4b:37:88:54:89:58:62:42:8b:9e:68: d5:a7:37:54:24:03:28:ab:c0:61:e2:54:83:eb:42:bc:f7:60: 0a:57:32:42:be:e8:fa:a3:35:24:66:e5:04:f4:30:fa:5a:80: 0e:1e:a0:83:50:51:e6:7c:0e:15:c2:7e:3a:f4:0f:15:88:07: da:ed:8d:73:39:36:db:15:5b:48:45:88:e6:31:e2:4d:3f:cb: c4:fc:95:11:e0:e3:98:c3:66:e5:6b:92:8f:1c:47:61:c7:14: 08:63:2d:4c:ae:f2:ed:7a:be:1c:93:58:49:b3:5e:ba:85:58: d1:b1:1c:59:5e:79:53:da:5d:ff:fb:66:8b:bd:f1:5e:d3:75: 5d:69:c5:49:7e:8c:56:49:0e:37:fc:5c:8e:81:ea:b9:9e:22: e2:77:f8:ca:d1:28:d0:b3:5b:45:09:25:dc:58:8e:33:3b:6c: e1:74:b4:62:33:24:fb:38:3c:e4:a8:62:b1:92:97:87:16:ea: bc:80:32:5b:ec:7e:89:35:8c:ef:de:fc:c9:d7:4c:75:96:8c: cd:81:fd:91:10:c4:af:28:78:13:c5:30:1a:f8:a5:72:89:92: 75:e9:2c:8c:a8:f3:58:63:fd:99:87:5d:01:7b:bb:2c:2c:96: 97:50:9c:2e -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt7pUMzd+aU3AZfLJ3p1kKOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjdmYjRhMGI2NzdiODM3NzkwN2I4MmZiMWZiODgxMGEy ZmVmMDgwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDhjOTE0YzYzNzg2ZWE5Y2IyODkwYjA3MzUxNzYxMjBlY2MwNjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAVYvZ4BbQ/CenfmRilo/elcBYp/ Mj1AesJXkq28anLi2OVXVBbnbLWAi5d0j9nxneFJwuNhRzyF5vlb2QvoS2BabH3t O9bg7OJCUdkoura7pd6XBO6RqOOnLBpnQW+bzUUIrO9RLZzQfWFlD4nOl9hE29Xt WkQf3yoLLXQ+ewY+r4hlPNA/2snm4fLsCpi2tG6rJeGmbslIm+xXckmDWqwY4Zx8 eKvnayyWDpmopsWkIXZONfRwDfmt3+lYqMLkbflxtkd29y8KYnd/dGb8rZm4jSGO l9egCOWM73/T47zYW3Tpsblo/H6Yc9FfgNeJBwrTSdorTKz42XSXOFpGWQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFISMkUxjeG6pyyiQsHNRdhIOzAZnMB8GA1UdIwQY MBaAFIJn+0oLZ3uDd5B7gvsfuIEKL+8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUt NjM5ZTE0ZDA0ZGU2LzEvaEl5UlRHTjRicW5MS0pDd2MxRjJFZzdNQm1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUtNjM5ZTE0ZDA0ZGU2 LzEvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCHw94AwQB Lh6AAwQBuUqsAwQAuUqvAwQBwcg4MA0GCSqGSIb3DQEBCwUAA4IBAQBNwT2taDEj SzeIVIlYYkKLnmjVpzdUJAMoq8Bh4lSD60K892AKVzJCvuj6ozUkZuUE9DD6WoAO HqCDUFHmfA4Vwn469A8ViAfa7Y1zOTbbFVtIRYjmMeJNP8vE/JUR4OOYw2bla5KP HEdhxxQIYy1MrvLter4ck1hJs166hVjRsRxZXnlT2l3/+2aLvfFe03VdacVJfoxW SQ43/FyOgeq5niLid/jK0SjQs1tFCSXcWI4zO2zhdLRiMyT7ODzkqGKxkpeHFuq8 gDJb7H6JNYzv3vzJ10x1lozNgf2REMSvKHgTxTAa+KVyiZJ16SyMqPNYY/2Zh10B e7ssLJaXUJwu -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:47 2026 by rpki-client