This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/HGlsVrHEnVUZTxnltUDYgtbddII.roa File: HGlsVrHEnVUZTxnltUDYgtbddII.roa (raw, json) Hash identifier: PRTqegkFaXBSmjlIahMPcYyZ0ftS890tO/2pjXR1d6s= Subject key identifier: 1C:69:6C:56:B1:C4:9D:55:19:4F:19:E5:B5:40:D8:82:D6:DD:74:82 Certificate issuer: /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8 Certificate serial: 019B7CEE41A0A9A4CB4903F1B58CD2BD2C7C Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/HGlsVrHEnVUZTxnltUDYgtbddII.roa Signing time: Fri 02 Jan 2026 04:19:07 +0000 ROA not before: Fri 02 Jan 2026 04:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204582 IP address blocks: 45.89.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:41:a0:a9:a4:cb:49:03:f1:b5:8c:d2:bd:2c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8 Validity Not Before: Jan 2 04:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c696c56b1c49d55194f19e5b540d882d6dd7482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d4:67:ff:fe:39:f6:6a:24:4e:ac:fc:97:9c: 92:2a:6c:36:de:f4:09:b0:e8:e7:ba:72:7e:96:98: 0a:7c:be:ad:95:7f:4a:e7:f3:26:3d:f8:0e:40:f0: 6e:f9:7b:d8:a5:a5:22:4a:91:d0:32:73:e7:de:c6: 0f:cb:04:fb:97:43:48:cf:ee:c4:75:a7:76:81:07: bf:b3:58:fb:e3:69:eb:2b:84:10:97:a9:1e:b7:6f: b5:12:54:5a:44:4c:d2:82:4e:94:57:04:68:01:70: 48:ab:b9:11:a9:e0:db:0f:6c:9e:8c:eb:32:2c:eb: b4:07:fa:25:16:62:4e:a8:d4:21:2f:61:b1:a4:a1: f5:80:47:50:c2:d2:b7:c2:7e:fd:c8:d3:99:1b:31: b5:54:9e:c4:c3:e4:41:fc:b6:29:a8:7f:75:38:31: cf:be:8d:f9:2a:24:ad:b0:2f:06:6b:4b:87:96:0d: 01:44:a1:92:c2:9c:31:87:4f:99:84:19:39:37:2d: 9c:fa:79:41:d3:a7:48:13:79:a4:fe:cf:78:60:ba: ab:96:9a:d7:fe:07:34:57:7e:ea:8a:17:05:3b:83: 18:fd:a5:7c:2e:21:3e:c9:bc:f9:48:7e:b9:f1:6e: 0b:11:75:4e:da:38:cc:65:53:de:11:0e:c1:f3:62: f6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:69:6C:56:B1:C4:9D:55:19:4F:19:E5:B5:40:D8:82:D6:DD:74:82 X509v3 Authority Key Identifier: keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/HGlsVrHEnVUZTxnltUDYgtbddII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.22.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:30:64:71:93:04:33:5d:09:37:c9:5b:24:af:52:76:2a:92: ac:46:a4:4f:53:2d:3d:05:62:cd:03:68:78:f0:75:8a:07:2f: db:9a:b5:57:0f:e4:5b:e0:1b:a5:ea:f2:12:d1:1f:2d:c4:0b: 48:45:6d:25:60:68:4d:09:75:55:eb:82:e8:b3:ee:a5:88:f6: fb:14:6c:0b:c5:3b:d8:a3:5a:8d:b5:bb:73:ec:c7:c5:99:bd: d2:85:24:ee:07:58:a8:62:9c:c0:f4:2b:55:19:71:af:61:c8: 26:6c:89:b7:b1:5c:88:1c:6c:13:a9:d5:f0:de:ff:50:c7:0f: 6f:a1:72:c0:3a:60:d6:38:95:d2:26:4e:84:47:93:22:f3:c6: bd:42:5b:19:14:49:77:64:d5:a9:38:06:c0:f6:c6:c7:dc:a0: 24:07:95:d5:23:5b:04:79:80:ea:62:70:80:8e:49:d9:7c:fe: 50:56:5b:e1:52:c3:d8:05:c8:45:90:34:77:12:bc:8d:5c:33: 85:02:7f:c2:fb:f4:24:63:34:c0:83:85:e3:24:e5:20:23:1e: 93:b9:de:c8:0c:18:7e:6a:c8:59:8b:e6:4b:f1:69:cf:4d:98: db:d7:1f:4c:bf:49:e1:9c:7a:b8:73:ee:84:c9:5d:9b:6f:72: 08:b9:cb:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87kGgqaTLSQPxtYzSvSx8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZmZkOWRmNDU2YWRiZTNiMWU2NjFlZTE1NjI2ODY1ZmUx Njg4YzgwHhcNMjYwMTAyMDQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzY5NmM1NmIxYzQ5ZDU1MTk0ZjE5ZTViNTQwZDg4MmQ2ZGQ3NDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9Rn//459mokTqz8l5ySKmw23vQJ sOjnunJ+lpgKfL6tlX9K5/MmPfgOQPBu+XvYpaUiSpHQMnPn3sYPywT7l0NIz+7E dad2gQe/s1j742nrK4QQl6ket2+1ElRaREzSgk6UVwRoAXBIq7kRqeDbD2yejOsy LOu0B/olFmJOqNQhL2GxpKH1gEdQwtK3wn79yNOZGzG1VJ7Ew+RB/LYpqH91ODHP vo35KiStsC8Ga0uHlg0BRKGSwpwxh0+ZhBk5Ny2c+nlB06dIE3mk/s94YLqrlprX /gc0V37qihcFO4MY/aV8LiE+ybz5SH658W4LEXVO2jjMZVPeEQ7B82L2oQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBxpbFaxxJ1VGU8Z5bVA2ILW3XSCMB8GA1UdIwQY MBaAFID/2d9FatvjseZh7hViaGX+FojIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi85MDBjZWYtNjQ4MS00ZmY4LThlMDQt M2NiOGQ4MTdlMDI3LzEvSEdsc1ZySEVuVlVaVHhubHRVRFlndGJkZElJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi85MDBjZWYtNjQ4MS00ZmY4LThlMDQtM2NiOGQ4MTdlMDI3 LzEvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVkWMA0G CSqGSIb3DQEBCwUAA4IBAQBPMGRxkwQzXQk3yVskr1J2KpKsRqRPUy09BWLNA2h4 8HWKBy/bmrVXD+Rb4Bul6vIS0R8txAtIRW0lYGhNCXVV64Los+6liPb7FGwLxTvY o1qNtbtz7MfFmb3ShSTuB1ioYpzA9CtVGXGvYcgmbIm3sVyIHGwTqdXw3v9Qxw9v oXLAOmDWOJXSJk6ER5Mi88a9QlsZFEl3ZNWpOAbA9sbH3KAkB5XVI1sEeYDqYnCA jknZfP5QVlvhUsPYBchFkDR3EryNXDOFAn/C+/QkYzTAg4XjJOUgIx6Tud7IDBh+ ashZi+ZL8WnPTZjb1x9Mv0nhnHq4c+6EyV2bb3IIucvk -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:07 2026 by rpki-client