This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/HIq_BdqUCGatF2Rbj9NrkH9Ghjw.roa File: HIq_BdqUCGatF2Rbj9NrkH9Ghjw.roa (raw, json) Hash identifier: 8u28dk9o5BT41xzqo9yKmYyw/VKFKW4yRANeNy2FRA8= Subject key identifier: 1C:8A:BF:05:DA:94:08:66:AD:17:64:5B:8F:D3:6B:90:7F:46:86:3C Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0 Certificate serial: 019B78A2F42372C9C40DA545908F5B1B3202 Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/HIq_BdqUCGatF2Rbj9NrkH9Ghjw.roa Signing time: Thu 01 Jan 2026 08:18:23 +0000 ROA not before: Thu 01 Jan 2026 08:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39702 IP address blocks: 85.190.192.0/19 maxlen: 24 89.106.216.0/21 maxlen: 24 178.251.88.0/21 maxlen: 24 185.5.100.0/22 maxlen: 24 2a01:4d80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 05:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f4:23:72:c9:c4:0d:a5:45:90:8f:5b:1b:32:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0 Validity Not Before: Jan 1 08:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c8abf05da940866ad17645b8fd36b907f46863c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a9:2b:05:aa:32:11:e9:6d:af:65:bb:9a:4b: 05:af:de:3f:8c:1a:ea:af:87:f7:8a:6b:53:2d:f4: 95:e1:f1:5d:49:5f:8f:e6:30:75:83:19:59:40:f8: 52:f4:bf:e0:0e:16:83:4a:ab:f4:ac:b1:0a:a7:f5: 6a:5e:c4:35:ee:90:dd:b2:6f:2c:60:93:a2:fd:d2: 32:29:f6:e0:ba:33:00:36:7f:32:4f:42:86:cc:a9: 8b:39:62:07:73:c0:60:a6:50:9e:d3:e8:4b:e7:4d: 59:05:31:c4:c0:bb:51:65:3f:04:59:84:33:50:da: db:32:b8:c5:2a:74:98:a9:0b:95:08:c0:11:a3:49: 9c:86:0e:60:de:99:0b:3c:f7:e2:74:5c:3e:f7:2f: 82:4f:26:10:00:0d:53:c5:d9:f4:fc:8b:ca:12:f1: 94:55:a4:9f:ad:46:47:1a:e9:80:fc:13:76:91:ae: 07:aa:d2:fe:1b:51:a0:cb:28:a9:67:8f:8a:5f:6c: 5b:70:c7:36:30:df:95:68:8b:e1:b7:c6:f8:74:2d: 36:17:56:0c:f0:b9:f3:f3:be:92:2c:5f:de:be:c5: 5f:9d:d9:df:03:3f:99:26:6a:62:05:7b:45:c7:7c: 49:2d:88:4b:14:f5:8b:7a:5a:8f:da:2a:24:bf:09: bd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8A:BF:05:DA:94:08:66:AD:17:64:5B:8F:D3:6B:90:7F:46:86:3C X509v3 Authority Key Identifier: keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/HIq_BdqUCGatF2Rbj9NrkH9Ghjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.190.192.0/19 89.106.216.0/21 178.251.88.0/21 185.5.100.0/22 IPv6: 2a01:4d80::/32 Signature Algorithm: sha256WithRSAEncryption b3:39:54:df:f2:1f:10:e7:15:c3:62:e4:73:96:83:92:3c:da: 23:bf:54:58:4e:38:ff:ee:cf:65:86:73:ef:91:78:d5:11:be: b1:5f:aa:0e:af:bd:bc:37:32:51:aa:30:8d:84:bf:8a:f4:c9: e6:36:d3:68:2d:11:6e:c6:75:b6:67:df:68:f6:57:63:0f:7c: 6e:14:9a:a6:1f:8e:ec:13:db:9b:cc:eb:90:5f:79:90:c4:2d: 5e:75:19:56:8d:18:f2:ad:ea:9b:46:19:22:70:31:ef:4a:7f: 79:fb:2d:eb:3c:80:66:cd:62:b1:1b:bf:c8:e0:1f:9a:27:8f: ac:dc:f4:e7:30:a2:15:1e:63:4e:e7:9b:a4:35:a9:32:c6:3f: dc:d1:75:81:d7:bb:11:f6:ab:50:70:c7:bc:f4:9c:40:0d:c0: e1:23:ab:7e:bb:93:68:d6:dd:5b:99:76:72:ae:5c:5a:3c:04: ee:68:90:36:ac:02:91:9b:e1:69:d8:a0:46:d6:50:ef:99:3d: be:3b:31:2c:ea:7f:cb:8d:59:30:12:82:14:ba:e5:0f:85:dd: d6:93:f5:89:7d:28:14:29:b8:61:07:b6:16:d8:44:62:6b:68: cf:91:cc:63:b3:d2:37:ba:92:b1:7f:49:fb:47:10:f8:1f:97: 3c:fb:e7:1c -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt4ovQjcsnEDaVFkI9bGzICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NTMxNjZhNmYxZjMzZTQ3MjBlNjdkMjRkZDMyZTQ0NTgw MzUyZjAwHhcNMjYwMTAxMDgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzhhYmYwNWRhOTQwODY2YWQxNzY0NWI4ZmQzNmI5MDdmNDY4NjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16krBaoyEeltr2W7mksFr94/jBrq r4f3imtTLfSV4fFdSV+P5jB1gxlZQPhS9L/gDhaDSqv0rLEKp/VqXsQ17pDdsm8s YJOi/dIyKfbgujMANn8yT0KGzKmLOWIHc8BgplCe0+hL501ZBTHEwLtRZT8EWYQz UNrbMrjFKnSYqQuVCMARo0mchg5g3pkLPPfidFw+9y+CTyYQAA1Txdn0/IvKEvGU VaSfrUZHGumA/BN2ka4HqtL+G1GgyyipZ4+KX2xbcMc2MN+VaIvht8b4dC02F1YM 8Lnz876SLF/evsVfndnfAz+ZJmpiBXtFx3xJLYhLFPWLelqP2iokvwm9DQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFByKvwXalAhmrRdkW4/Ta5B/RoY8MB8GA1UdIwQY MBaAFLZTFmpvHzPkcg5n0k3TLkRYA1LwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGxNV2FtOGZNLVJ5RG1mU1RkTXVSRmdEVXZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hZWI4YmMtODg0Yy00MDRmLWJjYjIt ZmNkMzdmMjYwNDdmLzEvSElxX0JkcVVDR2F0RjJSYmo5TnJrSDlHaGp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9hZWI4YmMtODg0Yy00MDRmLWJjYjItZmNkMzdmMjYwNDdm LzEvdGxNV2FtOGZNLVJ5RG1mU1RkTXVSRmdEVXZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFVb7AAwQD WWrYAwQDsvtYAwQCuQVkMA0EAgACMAcDBQAqAU2AMA0GCSqGSIb3DQEBCwUAA4IB AQCzOVTf8h8Q5xXDYuRzloOSPNojv1RYTjj/7s9lhnPvkXjVEb6xX6oOr728NzJR qjCNhL+K9MnmNtNoLRFuxnW2Z99o9ldjD3xuFJqmH47sE9ubzOuQX3mQxC1edRlW jRjyreqbRhkicDHvSn95+y3rPIBmzWKxG7/I4B+aJ4+s3PTnMKIVHmNO55ukNaky xj/c0XWB17sR9qtQcMe89JxADcDhI6t+u5No1t1bmXZyrlxaPATuaJA2rAKRm+Fp 2KBG1lDvmT2+OzEs6n/LjVkwEoIUuuUPhd3Wk/WJfSgUKbhhB7YW2ERia2jPkcxj s9I3upKxf0n7RxD4H5c8++cc -----END CERTIFICATE-----Generated at Tue Jan 27 12:42:33 2026 by rpki-client