This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/hPKkrsj0FX97l8P5hhDoNCNjeqE.roa File: hPKkrsj0FX97l8P5hhDoNCNjeqE.roa (raw, json) Hash identifier: pR+tDQOXzEiJ05cgUzQGiwCXhXXy4kL5jERdGJNHgJ4= Subject key identifier: 84:F2:A4:AE:C8:F4:15:7F:7B:97:C3:F9:86:10:E8:34:23:63:7A:A1 Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 019B7EA704D4921072B00B4703FBE93F5E85 Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/hPKkrsj0FX97l8P5hhDoNCNjeqE.roa Signing time: Fri 02 Jan 2026 12:20:33 +0000 ROA not before: Fri 02 Jan 2026 12:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.156.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 23:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:04:d4:92:10:72:b0:0b:47:03:fb:e9:3f:5e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Jan 2 12:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84f2a4aec8f4157f7b97c3f98610e83423637aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d7:81:5a:56:92:72:14:8e:63:af:e2:39:fe: f3:ca:dc:76:be:6e:e4:53:3b:d9:bb:65:e8:70:cb: df:0c:15:73:dd:43:be:54:6d:44:91:13:b3:45:28: f2:84:9b:fe:fe:b7:b1:4a:22:1c:d5:77:ef:78:65: a1:47:45:15:21:a0:89:69:32:b0:0c:f4:4b:06:01: 99:92:c8:06:b6:d5:46:cf:83:65:c9:70:3e:9f:20: c1:38:31:0a:52:f4:d2:97:52:74:a9:46:6c:53:0d: 3a:67:e0:34:ed:3f:9b:92:ca:30:61:c1:ff:39:49: 63:54:60:5b:94:ca:b1:ab:04:d6:b9:63:e6:f1:e8: af:19:b9:8c:5b:7a:85:a4:d1:04:03:d7:83:61:02: 1c:88:df:09:fa:99:7c:98:9a:b4:0a:4c:3a:a7:9c: ad:b9:8c:93:68:a9:b0:2e:ee:0c:07:fc:17:95:48: ce:e1:89:a7:50:90:f1:65:5e:4a:04:f7:bf:14:e2: 3b:0d:f1:f5:5d:65:83:88:b1:e8:51:57:9c:88:ce: 37:58:39:b4:49:db:86:1a:21:d2:47:06:37:05:3a: 90:cb:8c:a7:66:13:47:5b:3a:ad:de:b7:c3:9a:b4: 9a:6d:99:05:fa:dc:60:8d:0f:ab:7c:15:7e:94:76: 8d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F2:A4:AE:C8:F4:15:7F:7B:97:C3:F9:86:10:E8:34:23:63:7A:A1 X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/hPKkrsj0FX97l8P5hhDoNCNjeqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.144.0/24 Signature Algorithm: sha256WithRSAEncryption 22:26:ac:ad:8f:82:75:6e:33:13:95:ca:f4:5e:c9:75:44:dc: af:c6:87:48:59:dc:20:5e:94:98:df:59:42:b1:1a:4d:1c:a1: a2:62:26:b7:3c:6b:36:4a:ce:81:39:05:af:91:dd:98:d0:6e: e3:d9:d7:4a:f2:e9:69:fc:ea:f2:82:c6:7a:cd:a5:35:f9:bf: 7c:d0:d3:8f:ff:66:a6:dd:70:f6:c1:aa:12:50:ca:f0:78:c5: 50:63:d4:f6:0e:d0:6c:1f:47:c3:8c:13:35:f8:6b:bf:f1:d9: 3a:07:71:34:90:3b:a7:5d:00:54:c8:23:41:e3:dc:4c:e5:a2: 96:b2:f8:81:c8:75:61:fa:09:68:72:47:05:81:54:13:cc:8c: 5e:6e:a4:c3:f9:2f:96:63:51:41:18:86:2b:8a:c8:77:5f:59: ae:69:e0:3a:1d:e3:a5:5b:f6:38:2d:a1:2d:39:ca:8f:cf:81: 75:4e:79:f4:c5:24:d7:81:23:0a:ab:a6:7d:8d:ca:8e:8e:47: a6:1a:32:d2:06:2f:b8:f9:1d:03:5a:5f:0e:b8:7d:f3:e1:7f: 92:35:72:31:83:2d:fc:a4:58:90:15:80:98:e7:59:dd:09:fd: 82:b9:c0:81:a2:a6:a5:03:03:ec:1a:06:72:08:5b:9c:92:c0: 57:1f:71:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pwTUkhBysAtHA/vpP16FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYwMTAyMTIyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGYyYTRhZWM4ZjQxNTdmN2I5N2MzZjk4NjEwZTgzNDIzNjM3YWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoteBWlaSchSOY6/iOf7zytx2vm7k UzvZu2XocMvfDBVz3UO+VG1EkROzRSjyhJv+/rexSiIc1XfveGWhR0UVIaCJaTKw DPRLBgGZksgGttVGz4NlyXA+nyDBODEKUvTSl1J0qUZsUw06Z+A07T+bksowYcH/ OUljVGBblMqxqwTWuWPm8eivGbmMW3qFpNEEA9eDYQIciN8J+pl8mJq0Ckw6p5yt uYyTaKmwLu4MB/wXlUjO4YmnUJDxZV5KBPe/FOI7DfH1XWWDiLHoUVeciM43WDm0 SduGGiHSRwY3BTqQy4ynZhNHWzqt3rfDmrSabZkF+txgjQ+rfBV+lHaNvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFITypK7I9BV/e5fD+YYQ6DQjY3qhMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvaFBLa3JzajBGWDk3bDhQNWhoRG9OQ05qZXFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZyQMA0G CSqGSIb3DQEBCwUAA4IBAQAiJqytj4J1bjMTlcr0Xsl1RNyvxodIWdwgXpSY31lC sRpNHKGiYia3PGs2Ss6BOQWvkd2Y0G7j2ddK8ulp/OrygsZ6zaU1+b980NOP/2am 3XD2waoSUMrweMVQY9T2DtBsH0fDjBM1+Gu/8dk6B3E0kDunXQBUyCNB49xM5aKW sviByHVh+glockcFgVQTzIxebqTD+S+WY1FBGIYrish3X1muaeA6HeOlW/Y4LaEt OcqPz4F1Tnn0xSTXgSMKq6Z9jcqOjkemGjLSBi+4+R0DWl8OuH3z4X+SNXIxgy38 pFiQFYCY51ndCf2CucCBoqalAwPsGgZyCFucksBXH3GE -----END CERTIFICATE-----Generated at Mon Jan 5 05:02:03 2026 by rpki-client