This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/hMyApwMrzeADs4JM-qIwJsPE4j4.roa File: hMyApwMrzeADs4JM-qIwJsPE4j4.roa (raw, json) Hash identifier: N+rY5dKbfdkSmOrM2ag355sQkPNPr9/XUkupxhQWn1w= Subject key identifier: 84:CC:80:A7:03:2B:CD:E0:03:B3:82:4C:FA:A2:30:26:C3:C4:E2:3E Certificate issuer: /CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764 Certificate serial: 019B7F84F928AFBDD681910983D42EA58DDE Authority key identifier: A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/hMyApwMrzeADs4JM-qIwJsPE4j4.roa Signing time: Fri 02 Jan 2026 16:22:59 +0000 ROA not before: Fri 02 Jan 2026 16:22:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208961 IP address blocks: 45.12.84.0/24 maxlen: 24 45.12.85.0/24 maxlen: 24 45.12.86.0/24 maxlen: 24 45.12.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f9:28:af:bd:d6:81:91:09:83:d4:2e:a5:8d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764 Validity Not Before: Jan 2 16:22:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84cc80a7032bcde003b3824cfaa23026c3c4e23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ac:3c:b3:eb:f5:44:0c:e7:b8:3a:0e:e1:95: 32:fd:c4:da:a9:72:53:a9:bf:4e:d6:37:2a:41:7a: 8d:b2:fb:16:64:5e:29:8c:2b:72:b8:8f:c8:11:1a: 5d:84:d8:c1:7d:a0:20:15:41:83:3e:f2:ca:4a:3e: 55:be:86:3a:43:1c:75:2e:1a:0c:aa:63:24:dd:8c: 17:cd:9c:f1:87:c5:67:0c:fd:0b:d7:9e:24:de:ce: 82:46:5c:9b:1e:86:eb:c3:41:93:8e:31:d7:85:1f: 38:4e:ed:94:af:56:a9:7b:33:d5:71:fc:4c:76:88: 6c:10:50:7c:f1:bd:be:39:dd:c1:fe:89:5f:fd:c1: d8:79:8a:b7:ea:99:69:76:84:0e:25:8c:2a:91:73: d9:fd:e3:9f:fb:f4:01:35:71:18:3f:2a:26:ea:05: bb:f5:d0:77:84:a3:6a:d1:36:2b:b5:a3:de:5a:07: 04:49:9b:28:73:8a:5b:02:7e:83:4b:81:78:ac:8c: 52:3c:7a:f1:07:cf:fc:09:81:6e:53:f9:ee:22:80: 62:6c:49:00:15:79:8d:04:a1:ed:f8:c6:df:71:d6: 64:5e:35:1e:f2:89:42:93:fd:ef:83:9c:bc:6d:72: df:70:58:73:4c:50:f1:2a:56:d5:0f:c8:ff:23:9c: d7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CC:80:A7:03:2B:CD:E0:03:B3:82:4C:FA:A2:30:26:C3:C4:E2:3E X509v3 Authority Key Identifier: keyid:A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/hMyApwMrzeADs4JM-qIwJsPE4j4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.84.0/22 Signature Algorithm: sha256WithRSAEncryption c9:36:c2:ee:31:58:fa:00:19:22:5c:ec:5d:0c:e8:d2:ee:1a: 6a:4e:1f:9b:38:74:2e:fe:fb:70:06:48:ed:ed:f9:59:71:e4: 65:62:4d:ac:3e:aa:90:f4:55:47:0f:3d:da:05:9f:1f:84:2b: 5f:70:c7:d7:18:36:2b:cd:79:8f:4d:50:90:6b:9e:f8:77:8d: ba:6b:3c:cf:cf:c8:e8:0d:45:9a:2b:e0:0f:43:e0:da:62:cd: c7:95:c0:67:25:dc:89:40:e4:95:8c:43:13:c8:1b:55:86:e4: 07:45:2c:7d:0d:13:3a:ca:01:38:83:0d:4e:cd:14:3b:24:a9: b5:f7:3f:5b:f5:4d:84:31:39:c7:bb:d0:58:25:ac:c5:3c:43: 62:6a:47:45:ca:d8:c3:af:b6:1d:33:6c:a6:7b:89:6e:a0:a5: 63:90:f0:cf:8b:a5:b2:50:f2:f1:48:07:11:af:3e:56:e1:db: 6d:ea:37:39:b3:16:95:0b:94:bc:ac:4f:3b:c3:4c:0d:97:a2: 48:5a:ba:7c:34:d8:cb:f0:97:22:bb:c3:1f:b9:eb:da:87:6b: 6e:bf:c3:8f:9b:eb:bd:6c:7c:38:37:4f:95:f7:ed:cd:0e:c7: 44:6c:ed:f6:a3:29:a3:22:3e:76:5e:b7:71:da:a0:6e:65:8c: 31:0c:e3:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hPkor73WgZEJg9QupY3eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OWRhMmE1YmQ4Nzc4ZGI2MjIxZDdiZjY2MTJkYjBlMGZl ZjE3NjQwHhcNMjYwMTAyMTYyMjU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGNjODBhNzAzMmJjZGUwMDNiMzgyNGNmYWEyMzAyNmMzYzRlMjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6w8s+v1RAznuDoO4ZUy/cTaqXJT qb9O1jcqQXqNsvsWZF4pjCtyuI/IERpdhNjBfaAgFUGDPvLKSj5VvoY6Qxx1LhoM qmMk3YwXzZzxh8VnDP0L154k3s6CRlybHobrw0GTjjHXhR84Tu2Ur1apezPVcfxM dohsEFB88b2+Od3B/olf/cHYeYq36plpdoQOJYwqkXPZ/eOf+/QBNXEYPyom6gW7 9dB3hKNq0TYrtaPeWgcESZsoc4pbAn6DS4F4rIxSPHrxB8/8CYFuU/nuIoBibEkA FXmNBKHt+MbfcdZkXjUe8olCk/3vg5y8bXLfcFhzTFDxKlbVD8j/I5zXgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFITMgKcDK83gA7OCTPqiMCbDxOI+MB8GA1UdIwQY MBaAFKedoqW9h3jbYiHXv2YS2w4P7xdkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDUyaXBiMkhlTnRpSWRlX1poTGJEZ192RjJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82Yjg0MTUtYzg3Ni00NmM2LWE5ZjYt ZTZiYmVmNWQ1ZTNlLzEvaE15QXB3TXJ6ZUFEczRKTS1xSXdKc1BFNGo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82Yjg0MTUtYzg3Ni00NmM2LWE5ZjYtZTZiYmVmNWQ1ZTNl LzEvcDUyaXBiMkhlTnRpSWRlX1poTGJEZ192RjJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQxUMA0G CSqGSIb3DQEBCwUAA4IBAQDJNsLuMVj6ABkiXOxdDOjS7hpqTh+bOHQu/vtwBkjt 7flZceRlYk2sPqqQ9FVHDz3aBZ8fhCtfcMfXGDYrzXmPTVCQa574d426azzPz8jo DUWaK+APQ+DaYs3HlcBnJdyJQOSVjEMTyBtVhuQHRSx9DRM6ygE4gw1OzRQ7JKm1 9z9b9U2EMTnHu9BYJazFPENiakdFytjDr7YdM2yme4luoKVjkPDPi6WyUPLxSAcR rz5W4dtt6jc5sxaVC5S8rE87w0wNl6JIWrp8NNjL8Jciu8Mfuevah2tuv8OPm+u9 bHw4N0+V9+3NDsdEbO32oymjIj52Xrdx2qBuZYwxDOOt -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:46 2026 by rpki-client