This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/hB5dwzE-8jl9eMnVeqctFOx2T7M.roa File: hB5dwzE-8jl9eMnVeqctFOx2T7M.roa (raw, json) Hash identifier: aOmUGLttRikI04KddCkVaiXTdQZBZHrIgCYCo3rRy5k= Subject key identifier: 84:1E:5D:C3:31:3E:F2:39:7D:78:C9:D5:7A:A7:2D:14:EC:76:4F:B3 Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 019B797EF0E41F6878C1F3B699151D8A1E6F Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/hB5dwzE-8jl9eMnVeqctFOx2T7M.roa Signing time: Thu 01 Jan 2026 12:18:40 +0000 ROA not before: Thu 01 Jan 2026 12:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60199 IP address blocks: 84.239.96.0/22 maxlen: 22 141.101.60.0/22 maxlen: 24 2a00:6900:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f0:e4:1f:68:78:c1:f3:b6:99:15:1d:8a:1e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Jan 1 12:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=841e5dc3313ef2397d78c9d57aa72d14ec764fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:45:80:5f:65:ea:57:aa:08:9c:82:fd:43:a1: ff:f9:0a:3d:5a:8d:73:d0:79:f7:44:74:e9:a2:05: b7:48:7a:21:e7:d2:f8:40:db:fc:0a:a6:7f:8f:4f: b6:e7:a5:5c:c6:10:66:30:45:d6:24:f9:a6:e9:17: 65:80:de:44:96:1b:ad:0c:dc:5a:3d:ab:52:c9:34: a6:bd:64:df:8d:ab:42:c9:84:58:dc:81:21:7c:a8: 03:04:54:88:aa:8b:4d:59:ff:7d:bb:8d:ba:82:cb: 79:18:8a:44:3a:d9:df:96:2d:35:3d:77:7c:6b:2a: 4d:3d:60:77:3a:6b:e8:8f:08:af:9e:84:e0:73:18: 6a:2d:5e:f3:26:9a:28:63:38:15:55:b1:e7:ef:60: f7:3c:e7:4c:6d:9c:f5:5f:ce:52:8f:ee:21:db:c0: b1:f8:68:34:ba:bf:d8:88:8c:26:30:03:c5:2a:d4: bc:a2:5e:03:87:41:11:5a:e0:ee:a6:1b:58:fe:de: b7:f2:92:e7:9b:1d:b9:db:12:81:7a:06:c6:df:ae: c1:bd:39:0f:e4:18:55:2b:27:c7:4c:79:78:f2:80: 39:f0:35:5f:d1:2e:c1:b1:e3:e1:17:1c:2e:71:5c: 2c:c1:66:15:96:f5:dc:c1:20:25:ff:f5:11:91:f8: 3d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1E:5D:C3:31:3E:F2:39:7D:78:C9:D5:7A:A7:2D:14:EC:76:4F:B3 X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/hB5dwzE-8jl9eMnVeqctFOx2T7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.239.96.0/22 141.101.60.0/22 IPv6: 2a00:6900:10::/48 Signature Algorithm: sha256WithRSAEncryption 29:f0:97:7c:c2:e4:3e:1a:c9:52:37:ec:23:8a:d5:9e:82:c0: 18:ea:ad:db:31:16:f1:5f:a4:9d:7a:5f:5f:b9:56:25:6a:cf: d6:62:26:32:23:ee:19:22:5e:b8:bf:1d:2b:5e:7f:d0:5a:18: 2d:c1:6a:13:52:c9:61:b2:77:ce:06:73:cb:7c:d0:02:1b:7b: f0:52:f7:ae:0b:4e:bb:c2:ef:c3:51:13:45:68:c2:21:b3:a6: fd:38:9b:a3:3f:ed:28:31:ee:63:4f:13:e6:97:28:f6:63:fb: 76:f6:02:a9:a7:02:fe:cf:81:6a:b8:08:03:57:4b:2f:82:f5: b6:4d:8d:66:c5:d5:fd:81:5c:d6:72:88:60:06:c6:76:ec:a1: 60:b0:e1:43:bf:b6:ce:e7:b3:92:17:14:3d:e5:15:82:48:63: d8:47:71:9e:e5:fd:22:84:3c:90:bf:f0:0c:55:96:a6:59:fc: 01:8b:f8:b9:3d:5f:12:df:5a:12:ad:c5:de:c4:43:1e:64:42: 9a:35:77:9f:e3:30:89:2f:39:71:30:d1:46:db:43:76:cb:03: 32:06:e9:3e:83:15:1f:c9:7c:89:81:05:b3:67:f4:cb:17:1b: d8:54:f6:a6:da:a6:ab:45:f6:ce:79:1e:98:96:99:e8:4b:ed: 8b:f3:f4:fb -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5fvDkH2h4wfO2mRUdih5vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjYwMTAxMTIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDFlNWRjMzMxM2VmMjM5N2Q3OGM5ZDU3YWE3MmQxNGVjNzY0ZmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0WAX2XqV6oInIL9Q6H/+Qo9Wo1z 0Hn3RHTpogW3SHoh59L4QNv8CqZ/j0+256VcxhBmMEXWJPmm6RdlgN5ElhutDNxa PatSyTSmvWTfjatCyYRY3IEhfKgDBFSIqotNWf99u426gst5GIpEOtnfli01PXd8 aypNPWB3OmvojwivnoTgcxhqLV7zJpooYzgVVbHn72D3POdMbZz1X85Sj+4h28Cx +Gg0ur/YiIwmMAPFKtS8ol4Dh0ERWuDuphtY/t638pLnmx252xKBegbG367BvTkP 5BhVKyfHTHl48oA58DVf0S7BsePhFxwucVwswWYVlvXcwSAl//URkfg90wIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFIQeXcMxPvI5fXjJ1XqnLRTsdk+zMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvaEI1ZHd6RS04amw5ZU1uVmVxY3RGT3gyVDdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCVO9gAwQC jWU8MA8EAgACMAkDBwAqAGkAABAwDQYJKoZIhvcNAQELBQADggEBACnwl3zC5D4a yVI37COK1Z6CwBjqrdsxFvFfpJ16X1+5ViVqz9ZiJjIj7hkiXri/HStef9BaGC3B ahNSyWGyd84Gc8t80AIbe/BS964LTrvC78NRE0VowiGzpv04m6M/7Sgx7mNPE+aX KPZj+3b2AqmnAv7PgWq4CANXSy+C9bZNjWbF1f2BXNZyiGAGxnbsoWCw4UO/ts7n s5IXFD3lFYJIY9hHcZ7l/SKEPJC/8AxVlqZZ/AGL+Lk9XxLfWhKtxd7EQx5kQpo1 d5/jMIkvOXEw0UbbQ3bLAzIG6T6DFR/JfImBBbNn9MsXG9hU9qbapqtF9s55HpiW mehL7Yvz9Ps= -----END CERTIFICATE-----Generated at Mon Jan 26 13:46:25 2026 by rpki-client