This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/HOPT3iuIJW2Ca5RKaQZ_7H8DEUg.roa File: HOPT3iuIJW2Ca5RKaQZ_7H8DEUg.roa (raw, json) Hash identifier: Z7lWxJ3V5i6LgJFHNccxxl1xQSA36VYmA9LTVT4CQFA= Subject key identifier: 1C:E3:D3:DE:2B:88:25:6D:82:6B:94:4A:69:06:7F:EC:7F:03:11:48 Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492 Certificate serial: 019B77C6A1CB497D263CFC6640C08425FDAC Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/HOPT3iuIJW2Ca5RKaQZ_7H8DEUg.roa Signing time: Thu 01 Jan 2026 04:17:44 +0000 ROA not before: Thu 01 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48152 IP address blocks: 80.65.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a1:cb:49:7d:26:3c:fc:66:40:c0:84:25:fd:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492 Validity Not Before: Jan 1 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ce3d3de2b88256d826b944a69067fec7f031148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:44:ba:6c:4f:e0:75:af:ae:40:5e:d2:f1:29: 77:a1:d9:50:be:ac:bd:16:2b:27:ea:06:09:f5:d2: 6f:d1:3e:17:46:88:3d:84:e8:84:2f:af:66:87:b5: 54:c7:ec:8b:39:2d:cb:56:d0:9b:f5:f3:1e:30:35: ba:18:50:d3:28:41:f9:6d:0d:7b:3e:f7:a5:8e:ce: 01:b0:87:c4:0a:19:dd:2a:e0:b7:cd:ee:71:86:ac: fc:1d:fd:53:83:f0:65:17:ca:e6:74:06:1d:35:d0: 22:16:28:0a:0e:66:41:37:e8:12:b9:55:39:54:90: 47:70:18:52:ab:69:bc:3a:67:87:c5:d9:9c:53:0c: 69:ab:74:b8:2d:f4:af:44:36:52:0b:bb:47:6c:44: 4d:78:80:2a:24:82:4c:11:b2:90:ae:55:f3:de:52: df:9f:61:f7:8d:be:09:ca:0e:86:4b:1b:f3:a8:b3: b6:35:c4:89:b1:02:b9:66:b1:ae:be:c1:16:77:1c: a1:8f:61:8d:a4:f2:5e:da:51:ff:61:f5:62:cd:de: 40:f4:ec:65:ee:4c:e6:0a:c1:e6:63:36:66:35:cb: fb:28:20:fb:4a:c4:70:4c:29:26:07:17:f5:bd:fd: ee:8e:32:6a:cd:36:4f:d5:5a:7c:ae:58:ab:67:30: a6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E3:D3:DE:2B:88:25:6D:82:6B:94:4A:69:06:7F:EC:7F:03:11:48 X509v3 Authority Key Identifier: keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/HOPT3iuIJW2Ca5RKaQZ_7H8DEUg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.65.8.0/21 Signature Algorithm: sha256WithRSAEncryption 5e:66:3d:7f:7a:a8:3c:a5:24:5c:f8:0c:a6:11:5e:8c:ac:b5: 86:ff:fc:5b:b2:b1:ad:e1:7d:e5:1b:ff:37:3d:22:5e:bf:15: b0:5c:21:10:c3:dc:63:fa:54:64:f1:84:77:19:fa:fa:06:9c: 2e:05:8a:62:f5:40:56:b2:3f:86:b8:cf:c6:13:cf:12:9e:ab: 47:e7:94:9e:3a:ea:b3:73:98:30:3a:93:a4:1e:08:2b:c5:4a: 78:70:d1:ac:2e:6b:e9:32:25:38:9a:a1:ed:01:fd:5e:95:27: fc:9d:66:2a:e4:da:41:08:9b:98:6a:85:78:c9:76:3f:cb:56: f1:ac:4c:78:29:a6:16:95:82:45:a2:d9:55:e9:1e:85:b0:ce: ef:27:63:5c:db:d3:c8:1c:73:dd:28:3f:01:2a:3d:39:86:e8: 79:e1:64:77:10:2a:c4:12:e6:b0:77:3b:ea:33:c2:69:d1:ca: dc:12:a6:4d:5c:27:ea:03:1b:e1:c1:cf:56:71:c5:a7:33:cf: e6:d0:f6:a3:6a:67:b8:70:84:d0:53:1e:4f:ed:e3:d5:80:cf: c5:87:f9:40:00:4e:1a:30:70:2a:03:8f:f5:91:bf:91:b8:8e: c7:ed:55:6c:91:52:31:e4:7a:ff:b8:df:47:3b:e6:43:07:07: 82:a3:32:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqHLSX0mPPxmQMCEJf2sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMGIwOGU2MDc2NjhlMDYwNTAwODRlZTM3OTI4YTFjMGIw MzU0OTIwHhcNMjYwMTAxMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2UzZDNkZTJiODgyNTZkODI2Yjk0NGE2OTA2N2ZlYzdmMDMxMTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUS6bE/gda+uQF7S8Sl3odlQvqy9 Fisn6gYJ9dJv0T4XRog9hOiEL69mh7VUx+yLOS3LVtCb9fMeMDW6GFDTKEH5bQ17 Pveljs4BsIfEChndKuC3ze5xhqz8Hf1Tg/BlF8rmdAYdNdAiFigKDmZBN+gSuVU5 VJBHcBhSq2m8OmeHxdmcUwxpq3S4LfSvRDZSC7tHbERNeIAqJIJMEbKQrlXz3lLf n2H3jb4Jyg6GSxvzqLO2NcSJsQK5ZrGuvsEWdxyhj2GNpPJe2lH/YfVizd5A9Oxl 7kzmCsHmYzZmNcv7KCD7SsRwTCkmBxf1vf3ujjJqzTZP1Vp8rlirZzCmmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBzj094riCVtgmuUSmkGf+x/AxFIMB8GA1UdIwQY MBaAFNILCOYHZo4GBQCE7jeSihwLA1SSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2Et MDYyYzg4ODJiYTcxLzEvSE9QVDNpdUlKVzJDYTVSS2FRWl83SDhERVVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2EtMDYyYzg4ODJiYTcx LzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUEEIMA0G CSqGSIb3DQEBCwUAA4IBAQBeZj1/eqg8pSRc+AymEV6MrLWG//xbsrGt4X3lG/83 PSJevxWwXCEQw9xj+lRk8YR3Gfr6BpwuBYpi9UBWsj+GuM/GE88SnqtH55SeOuqz c5gwOpOkHggrxUp4cNGsLmvpMiU4mqHtAf1elSf8nWYq5NpBCJuYaoV4yXY/y1bx rEx4KaYWlYJFotlV6R6FsM7vJ2Nc29PIHHPdKD8BKj05huh54WR3ECrEEuawdzvq M8Jp0crcEqZNXCfqAxvhwc9WccWnM8/m0Pajame4cITQUx5P7ePVgM/Fh/lAAE4a MHAqA4/1kb+RuI7H7VVskVIx5Hr/uN9HO+ZDBweCozLc -----END CERTIFICATE-----Generated at Mon Jan 26 16:23:28 2026 by rpki-client