This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa File: hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa (raw, json) Hash identifier: i213vpxqv6sYX5VvcgsgIL3t01XOl6AvFdjwzS3yUxM= Subject key identifier: 84:BA:C0:A2:AE:D1:8C:2D:59:1A:A5:C7:A2:00:F6:C0:16:20:C3:1C Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019B7EA52C144BDAA9E1E24E24966B62C594 Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa Signing time: Fri 02 Jan 2026 12:18:32 +0000 ROA not before: Fri 02 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35773 IP address blocks: 109.160.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:2c:14:4b:da:a9:e1:e2:4e:24:96:6b:62:c5:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Jan 2 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84bac0a2aed18c2d591aa5c7a200f6c01620c31c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7c:96:21:af:5d:8a:c8:da:3b:07:3a:ea:da: 4c:cb:f1:51:95:e5:a2:6a:ca:c9:e0:b5:7e:ec:a3: 43:0b:3f:76:09:9e:e0:87:37:f2:8f:8c:4e:00:d0: 63:8e:65:a4:82:0a:11:6f:9f:ee:0b:a4:b4:56:ed: 4c:f8:9d:2d:34:58:53:83:0e:13:25:9b:30:e6:ae: b2:63:46:65:bb:22:22:75:d9:6c:25:fd:12:ef:18: 75:16:da:45:e7:42:d3:99:ae:1f:ae:35:60:f1:b1: fc:17:eb:57:86:81:9f:b3:be:af:20:3e:f3:86:0a: da:91:59:c5:71:b4:97:f5:58:68:ce:ab:f3:3b:eb: 51:c8:e4:8c:3c:4f:e4:7a:12:08:dd:b0:88:48:82: c8:a7:67:ee:5b:2a:02:2f:08:00:d6:b9:ba:35:bc: 5a:3e:90:da:d8:fe:be:5c:01:2c:22:4d:54:21:6d: 26:51:d4:fb:df:aa:66:0c:9a:ff:9f:a4:e3:ad:71: 0d:10:74:e1:4d:99:99:11:fc:a5:fa:21:af:bd:fd: 7a:51:1f:7d:15:22:73:f3:43:90:fc:88:75:ee:d5: 13:a0:85:a9:e5:33:2d:7c:3a:33:06:b1:58:91:80: e4:1d:3b:77:96:64:f7:50:64:4b:48:7e:47:30:01: a2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BA:C0:A2:AE:D1:8C:2D:59:1A:A5:C7:A2:00:F6:C0:16:20:C3:1C X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.160.112.0/24 Signature Algorithm: sha256WithRSAEncryption 09:64:c5:18:33:9f:b7:2e:14:5c:46:40:08:5c:b6:a1:0b:5e: c2:24:8f:c6:40:71:7f:5f:c0:e6:0e:02:31:4f:62:2c:0e:04: bb:43:da:a8:b5:6c:13:97:af:48:4f:92:eb:49:4e:43:c6:c3: 56:fa:9b:dc:0d:6a:69:cb:b4:4a:c9:37:fa:c2:eb:da:0f:96: 56:8f:02:3b:4c:1c:01:36:f6:a5:19:3b:96:5f:25:a1:0a:b3: ca:18:89:cf:51:d0:ba:4a:2d:ff:91:cd:a6:1d:f4:fc:c5:fd: 19:72:7a:96:42:6e:c8:4b:5d:58:89:37:0f:c1:c0:91:ab:41: aa:6b:d9:ac:a5:36:4a:19:32:36:3a:3e:1b:ea:03:4e:cc:1a: fe:51:b0:04:de:de:bb:58:63:06:a1:32:2b:32:38:02:9c:69: 44:f2:b6:ea:e0:dc:52:8f:31:16:80:74:78:84:2b:37:95:27: ba:88:32:7c:55:54:d1:a6:5f:a6:c3:5b:88:ec:45:ca:b7:30: 5f:00:95:2a:3c:f1:48:8f:f6:23:c1:c9:6e:f9:41:ec:5b:b7: d9:c0:5b:28:bc:c0:ad:ec:89:0d:6f:52:02:60:68:c2:43:be: 90:59:bc:fd:8d:de:e3:13:9f:d4:57:2f:80:a8:b9:f4:a6:cc: 74:2a:27:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pSwUS9qp4eJOJJZrYsWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwMTAyMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGJhYzBhMmFlZDE4YzJkNTkxYWE1YzdhMjAwZjZjMDE2MjBjMzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnyWIa9disjaOwc66tpMy/FRleWi asrJ4LV+7KNDCz92CZ7ghzfyj4xOANBjjmWkggoRb5/uC6S0Vu1M+J0tNFhTgw4T JZsw5q6yY0ZluyIiddlsJf0S7xh1FtpF50LTma4frjVg8bH8F+tXhoGfs76vID7z hgrakVnFcbSX9VhozqvzO+tRyOSMPE/kehII3bCISILIp2fuWyoCLwgA1rm6Nbxa PpDa2P6+XAEsIk1UIW0mUdT736pmDJr/n6TjrXENEHThTZmZEfyl+iGvvf16UR99 FSJz80OQ/Ih17tUToIWp5TMtfDozBrFYkYDkHTt3lmT3UGRLSH5HMAGiMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIS6wKKu0YwtWRqlx6IA9sAWIMMcMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvaExyQW9xN1JqQzFaR3FYSG9nRDJ3Qllnd3h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbaBwMA0G CSqGSIb3DQEBCwUAA4IBAQAJZMUYM5+3LhRcRkAIXLahC17CJI/GQHF/X8DmDgIx T2IsDgS7Q9qotWwTl69IT5LrSU5DxsNW+pvcDWppy7RKyTf6wuvaD5ZWjwI7TBwB NvalGTuWXyWhCrPKGInPUdC6Si3/kc2mHfT8xf0ZcnqWQm7IS11YiTcPwcCRq0Gq a9mspTZKGTI2Oj4b6gNOzBr+UbAE3t67WGMGoTIrMjgCnGlE8rbq4NxSjzEWgHR4 hCs3lSe6iDJ8VVTRpl+mw1uI7EXKtzBfAJUqPPFIj/Yjwclu+UHsW7fZwFsovMCt 7IkNb1ICYGjCQ76QWbz9jd7jE5/UVy+AqLn0psx0KieS -----END CERTIFICATE-----Generated at Tue Jan 20 03:37:20 2026 by rpki-client