This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/hIbrwFSisf2h-dr2yXD0dZ8eyb4.roa File: hIbrwFSisf2h-dr2yXD0dZ8eyb4.roa (raw, json) Hash identifier: M3Mtg3zx7J5utY91jrM2A9ukNWuOabpf3WxUFDwDfrs= Subject key identifier: 84:86:EB:C0:54:A2:B1:FD:A1:F9:DA:F6:C9:70:F4:75:9F:1E:C9:BE Certificate issuer: /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60 Certificate serial: 019B7B35E7B6E623CEB0D5783BF807B624B9 Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/hIbrwFSisf2h-dr2yXD0dZ8eyb4.roa Signing time: Thu 01 Jan 2026 20:18:08 +0000 ROA not before: Thu 01 Jan 2026 20:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 45.155.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 23:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e7:b6:e6:23:ce:b0:d5:78:3b:f8:07:b6:24:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60 Validity Not Before: Jan 1 20:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8486ebc054a2b1fda1f9daf6c970f4759f1ec9be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c1:a6:dc:0b:9f:5e:3f:1a:ad:07:fa:3a:5c: d6:ca:5f:25:aa:e1:3e:18:cc:65:fa:fa:ca:8d:13: 1a:eb:d1:dc:48:8b:89:bf:56:26:67:f0:5b:10:01: 98:9f:3a:2f:58:0e:d6:f6:1f:e0:a2:3e:60:9e:40: 1e:37:a2:cb:ff:8b:9e:e0:25:2c:a2:52:1a:7c:6a: 57:ba:3e:a3:81:b9:5d:f4:12:04:b0:8f:bd:dc:bc: 90:16:0a:d8:27:30:5a:b8:66:9a:29:8a:1b:a1:f0: 00:8c:04:6f:a0:11:67:5e:db:d9:d4:bb:cc:3c:48: 51:83:0c:7d:c7:f5:8a:ea:7b:fb:40:d8:f2:4b:64: c4:28:a9:88:f1:e9:65:7e:a2:15:90:b8:86:d9:41: 5b:d9:8f:dd:ae:7a:a7:0c:54:64:62:0d:c9:ed:20: 50:02:63:2f:b7:93:e9:39:5b:e9:21:81:fd:a0:79: 9d:59:d6:55:1f:d5:3e:93:94:8e:88:08:36:58:e2: 49:31:d5:a3:a3:cf:93:14:22:0f:73:5f:a5:7f:42: 16:b6:80:45:87:e2:9a:36:4f:ac:b6:5c:38:ea:dd: 5e:c8:25:6e:fe:da:4f:e8:83:83:8d:f5:db:a7:38: 72:f4:e6:c4:4f:31:7b:bf:16:dd:91:55:53:cb:56: f7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:86:EB:C0:54:A2:B1:FD:A1:F9:DA:F6:C9:70:F4:75:9F:1E:C9:BE X509v3 Authority Key Identifier: keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/hIbrwFSisf2h-dr2yXD0dZ8eyb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.196.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:f5:93:9b:50:7d:3f:da:d7:a9:3e:67:0d:93:ff:51:65:3d: 11:c7:da:9a:50:32:6b:b5:40:d0:08:6b:68:2a:df:b7:91:29: 3c:92:f2:2a:9d:eb:9c:bf:94:c3:4b:3a:38:a1:22:0e:a1:fa: a6:aa:8c:41:ad:3a:10:2b:92:7c:5a:6d:64:81:1f:1d:2c:7c: 39:03:da:8a:d5:a7:dc:9c:a0:a6:b8:3c:30:26:d4:fc:ec:8e: 01:80:e1:08:13:a4:7f:1c:de:0a:08:5a:04:3d:02:15:99:18: f0:9d:5a:33:00:cb:41:5e:b2:bb:4c:ea:0d:ea:1d:dd:3d:c3: 79:cd:8a:e7:8c:a6:6b:86:89:c3:98:80:ed:23:51:bf:4c:d1: 5b:5d:16:ff:81:87:c5:9b:f3:7c:3d:c8:51:9b:fc:5d:f8:f1: a8:73:fe:0a:77:b8:f2:18:10:f9:15:c8:66:78:59:d5:e1:0b: 61:0f:3c:5a:8d:60:94:cc:d3:41:65:18:56:2a:ce:1a:be:a7: 8f:58:99:f6:b9:5f:ac:eb:c3:29:79:92:25:76:b2:a8:86:e8: 76:b1:d4:40:90:a7:64:f6:ba:45:ae:f7:37:9c:c7:39:7c:0b: 6b:d7:d9:62:7b:1e:85:81:d4:65:62:27:a8:13:f2:79:c6:a4: c4:3f:f5:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nee25iPOsNV4O/gHtiS5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZmQ1NThhNjRlOTc1ODZhNDNkYzdlZTUwYThkNmIyOTIz NjViNjAwHhcNMjYwMTAxMjAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDg2ZWJjMDU0YTJiMWZkYTFmOWRhZjZjOTcwZjQ3NTlmMWVjOWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMGm3AufXj8arQf6OlzWyl8lquE+ GMxl+vrKjRMa69HcSIuJv1YmZ/BbEAGYnzovWA7W9h/goj5gnkAeN6LL/4ue4CUs olIafGpXuj6jgbld9BIEsI+93LyQFgrYJzBauGaaKYobofAAjARvoBFnXtvZ1LvM PEhRgwx9x/WK6nv7QNjyS2TEKKmI8ellfqIVkLiG2UFb2Y/drnqnDFRkYg3J7SBQ AmMvt5PpOVvpIYH9oHmdWdZVH9U+k5SOiAg2WOJJMdWjo8+TFCIPc1+lf0IWtoBF h+KaNk+stlw46t1eyCVu/tpP6IODjfXbpzhy9ObETzF7vxbdkVVTy1b3ewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFISG68BUorH9ofna9slw9HWfHsm+MB8GA1UdIwQY MBaAFBL9VYpk6XWGpD3H7lCo1rKSNltgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMt MjRkOGU3NDdjMzhmLzEvaElicndGU2lzZjJoLWRyMnlYRDBkWjhleWI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMtMjRkOGU3NDdjMzhm LzEvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZvEMA0G CSqGSIb3DQEBCwUAA4IBAQAu9ZObUH0/2tepPmcNk/9RZT0Rx9qaUDJrtUDQCGto Kt+3kSk8kvIqneucv5TDSzo4oSIOofqmqoxBrToQK5J8Wm1kgR8dLHw5A9qK1afc nKCmuDwwJtT87I4BgOEIE6R/HN4KCFoEPQIVmRjwnVozAMtBXrK7TOoN6h3dPcN5 zYrnjKZrhonDmIDtI1G/TNFbXRb/gYfFm/N8PchRm/xd+PGoc/4Kd7jyGBD5Fchm eFnV4QthDzxajWCUzNNBZRhWKs4avqePWJn2uV+s68MpeZIldrKohuh2sdRAkKdk 9rpFrvc3nMc5fAtr19liex6FgdRlYieoE/J5xqTEP/UF -----END CERTIFICATE-----Generated at Fri Jan 9 08:22:21 2026 by rpki-client