This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/hAkeq7GRn7BJ9C2KAa5e_cpADdo.roa File: hAkeq7GRn7BJ9C2KAa5e_cpADdo.roa (raw, json) Hash identifier: Np2uhqI5h6brKBft17+MzN85jTcWcCkVrose4xwa1iM= Subject key identifier: 84:09:1E:AB:B1:91:9F:B0:49:F4:2D:8A:01:AE:5E:FD:CA:40:0D:DA Certificate issuer: /CN=1ab7a257e2617897749952fe56df1940c9a38659 Certificate serial: 019B7DC9B488339A931060AEE84500728FAD Authority key identifier: 1A:B7:A2:57:E2:61:78:97:74:99:52:FE:56:DF:19:40:C9:A3:86:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/hAkeq7GRn7BJ9C2KAa5e_cpADdo.roa Signing time: Fri 02 Jan 2026 08:18:49 +0000 ROA not before: Fri 02 Jan 2026 08:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208457 IP address blocks: 45.135.172.0/22 maxlen: 22 2a0a:36c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:b4:88:33:9a:93:10:60:ae:e8:45:00:72:8f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ab7a257e2617897749952fe56df1940c9a38659 Validity Not Before: Jan 2 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84091eabb1919fb049f42d8a01ae5efdca400dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:17:68:b4:c3:c8:3d:0d:fb:8c:cc:29:d9:24: 7f:e5:21:da:7c:88:62:af:43:5f:97:6b:d0:88:26: ce:f7:f1:52:33:be:25:bd:67:f0:83:c2:a4:97:c1: ea:6d:8f:34:fb:20:3b:e4:01:11:51:75:e8:e5:07: 7d:8d:9e:d7:ed:49:70:44:4c:0f:3d:3c:02:fc:3d: 0e:b0:57:e8:2e:4a:51:dc:12:8e:b2:56:2d:84:93: 3f:88:c1:fa:77:c7:b5:b2:24:fe:ca:fb:d4:14:4c: ee:c9:82:74:b5:7c:be:ad:b6:eb:95:06:40:64:1f: ff:91:4d:f3:a6:b6:48:8e:83:90:3d:84:e8:7d:ea: 96:af:a2:72:45:d7:ae:97:4a:1e:80:67:f0:66:b9: ce:f8:aa:5a:ce:3b:1b:4b:17:6d:2e:eb:ee:3a:39: 00:a3:1f:3f:86:a9:44:34:1e:0c:60:17:9d:ae:21: 56:0a:c5:9c:0f:0a:f6:8e:ed:2f:f7:ff:ea:b6:2a: 6a:72:dc:77:81:13:d2:1f:4f:7e:d6:a9:25:67:e3: 19:b7:de:5c:c0:c6:a3:1e:66:4c:4d:68:31:94:f3: 09:d8:9c:00:66:d5:bc:5e:8f:e1:2e:a6:60:b4:0d: 46:88:88:73:44:91:69:2b:18:d9:ff:58:e6:90:df: 3c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:09:1E:AB:B1:91:9F:B0:49:F4:2D:8A:01:AE:5E:FD:CA:40:0D:DA X509v3 Authority Key Identifier: keyid:1A:B7:A2:57:E2:61:78:97:74:99:52:FE:56:DF:19:40:C9:A3:86:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/hAkeq7GRn7BJ9C2KAa5e_cpADdo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.172.0/22 IPv6: 2a0a:36c0::/29 Signature Algorithm: sha256WithRSAEncryption 12:a9:6c:02:9d:c3:89:76:8a:56:32:a2:e7:a5:bd:dc:47:34: ce:e2:d3:43:8f:c1:07:f2:da:d8:c1:63:42:fc:7a:c9:c2:7f: b3:4a:bf:bf:6d:22:63:d2:2f:91:39:03:85:48:67:84:65:b3: bc:70:d7:85:d6:ef:52:0b:35:ef:fe:8f:e9:ec:e6:23:ec:bb: 8e:36:03:be:97:11:9f:82:77:f8:cd:2d:be:db:53:12:ab:32: 33:4a:c6:21:9d:29:d8:df:23:67:7e:ab:cd:54:22:62:67:fc: 8f:39:ba:8d:95:8c:26:1b:d4:ad:39:1c:5c:52:63:3e:c0:2b: f9:16:c3:80:e9:57:ed:8c:1d:ac:20:31:25:29:f4:7d:53:10: 25:3a:7d:ec:52:fd:10:c7:a3:8d:6b:c2:14:a9:7f:46:1e:e9: 30:b5:66:1b:24:ba:f0:05:74:b8:5b:ca:f7:c5:68:09:6d:8e: 08:9a:73:e9:e8:31:4d:10:21:e6:c3:49:a6:fc:c2:cd:8d:5e: 63:1d:6c:8b:fe:65:3b:66:29:29:8e:35:93:a1:40:3e:3a:a2: 01:4a:7d:31:73:53:2b:8a:aa:c1:c4:f1:cb:56:0c:85:cd:ad: eb:6f:35:45:84:5b:8b:74:f6:5a:26:ff:0f:b6:fc:e7:04:e0: 83:43:e5:ad -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9ybSIM5qTEGCu6EUAco+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYjdhMjU3ZTI2MTc4OTc3NDk5NTJmZTU2ZGYxOTQwYzlh Mzg2NTkwHhcNMjYwMTAyMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDA5MWVhYmIxOTE5ZmIwNDlmNDJkOGEwMWFlNWVmZGNhNDAwZGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxdotMPIPQ37jMwp2SR/5SHafIhi r0Nfl2vQiCbO9/FSM74lvWfwg8Kkl8HqbY80+yA75AERUXXo5Qd9jZ7X7UlwREwP PTwC/D0OsFfoLkpR3BKOslYthJM/iMH6d8e1siT+yvvUFEzuyYJ0tXy+rbbrlQZA ZB//kU3zprZIjoOQPYTofeqWr6JyRdeul0oegGfwZrnO+KpazjsbSxdtLuvuOjkA ox8/hqlENB4MYBedriFWCsWcDwr2ju0v9//qtipqctx3gRPSH09+1qklZ+MZt95c wMajHmZMTWgxlPMJ2JwAZtW8Xo/hLqZgtA1GiIhzRJFpKxjZ/1jmkN88rQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIQJHquxkZ+wSfQtigGuXv3KQA3aMB8GA1UdIwQY MBaAFBq3olfiYXiXdJlS/lbfGUDJo4ZZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3JlaVYtSmhlSmQwbVZMLVZ0OFpRTW1qaGxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9jM2RhZjktMzcyMS00NTkxLTg4OTAt MWU3YTUwNTg2NGJhLzEvaEFrZXE3R1JuN0JKOUMyS0FhNWVfY3BBRGRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9jM2RhZjktMzcyMS00NTkxLTg4OTAtMWU3YTUwNTg2NGJh LzEvR3JlaVYtSmhlSmQwbVZMLVZ0OFpRTW1qaGxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLYesMA0E AgACMAcDBQMqCjbAMA0GCSqGSIb3DQEBCwUAA4IBAQASqWwCncOJdopWMqLnpb3c RzTO4tNDj8EH8trYwWNC/HrJwn+zSr+/bSJj0i+ROQOFSGeEZbO8cNeF1u9SCzXv /o/p7OYj7LuONgO+lxGfgnf4zS2+21MSqzIzSsYhnSnY3yNnfqvNVCJiZ/yPObqN lYwmG9StORxcUmM+wCv5FsOA6VftjB2sIDElKfR9UxAlOn3sUv0Qx6ONa8IUqX9G HukwtWYbJLrwBXS4W8r3xWgJbY4ImnPp6DFNECHmw0mm/MLNjV5jHWyL/mU7Zikp jjWToUA+OqIBSn0xc1MriqrBxPHLVgyFza3rbzVFhFuLdPZaJv8PtvznBOCDQ+Wt -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:46 2026 by rpki-client