This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/hWTGRtX_3agCTWz-g4m3DDAVtyo.roa File: hWTGRtX_3agCTWz-g4m3DDAVtyo.roa (raw, json) Hash identifier: Ws4zA1omnKhz8kQQW18ZcdEyiBUYouQEtdV1UnGpGZk= Subject key identifier: 85:64:C6:46:D5:FF:DD:A8:02:4D:6C:FE:83:89:B7:0C:30:15:B7:2A Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a Certificate serial: 019B7FF24D1F3BC028D0A56C8EA0C938B7E6 Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/hWTGRtX_3agCTWz-g4m3DDAVtyo.roa Signing time: Fri 02 Jan 2026 18:22:24 +0000 ROA not before: Fri 02 Jan 2026 18:22:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207784 IP address blocks: 84.45.124.0/24 maxlen: 24 109.104.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:4d:1f:3b:c0:28:d0:a5:6c:8e:a0:c9:38:b7:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a Validity Not Before: Jan 2 18:22:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8564c646d5ffdda8024d6cfe8389b70c3015b72a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b4:d3:71:e6:a4:f7:ee:54:cb:c7:39:03:81: 4f:07:be:4d:cc:15:79:5f:8b:fe:0a:3b:e0:ea:8c: 83:6d:56:b2:53:6a:7c:aa:23:f2:e7:43:17:30:83: 61:37:b5:11:e8:e3:71:06:42:76:9c:88:b2:2f:41: f8:57:57:4c:97:29:f4:df:3e:c8:df:c0:b2:2a:64: 78:1d:07:21:72:51:e2:6c:b2:0a:89:6b:c2:36:96: de:de:14:92:67:eb:78:7f:4d:8e:6c:dd:06:88:73: 09:5d:f0:ec:90:8e:e1:65:ef:f6:7c:91:8c:9c:f5: d3:b0:b7:94:34:92:44:45:a1:17:ec:42:da:06:c3: 4d:34:08:10:d2:c5:55:1b:f5:95:f4:7d:e4:52:66: c4:48:a7:eb:9a:72:23:de:9d:2a:e6:42:35:9f:d2: 8e:30:6c:19:f8:db:74:bf:72:dc:fb:d9:4c:5d:eb: 7a:82:76:bc:37:4e:3e:b2:4f:9c:2c:99:99:ae:30: 34:fe:b3:a0:1e:a8:61:53:25:93:81:ce:f7:9a:9b: 3c:b7:29:4a:68:fc:07:57:71:c4:54:ad:de:1e:6e: a3:09:64:20:93:97:93:17:72:44:2b:71:07:5b:f2: 3b:fd:e4:9b:30:c4:d9:8b:52:9c:6c:ba:6b:21:d4: 5f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:64:C6:46:D5:FF:DD:A8:02:4D:6C:FE:83:89:B7:0C:30:15:B7:2A X509v3 Authority Key Identifier: keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/hWTGRtX_3agCTWz-g4m3DDAVtyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.45.124.0/24 109.104.97.0/24 Signature Algorithm: sha256WithRSAEncryption 31:03:0c:06:05:6a:bb:3a:49:c7:8b:4b:6d:59:41:90:3c:65: 3f:b5:03:f5:2b:cf:3b:a5:84:04:12:bc:69:74:61:05:6b:23: db:83:96:f7:bb:6e:68:33:e5:54:2e:d5:87:9e:1f:3e:ef:54: 82:77:32:30:fa:45:41:45:7c:2c:bd:54:fa:12:50:60:1c:7a: b4:43:20:ca:c1:dd:84:ef:c9:00:95:78:3f:49:9c:35:af:06: d7:45:5b:85:15:fe:0f:3c:96:ee:d5:cd:ea:07:d7:27:f8:7d: 15:f8:2e:07:19:c0:53:26:02:ec:db:24:10:e3:b0:2b:11:64: 15:ea:12:1b:5a:4c:03:d1:3a:96:ca:69:d5:ea:0e:6d:aa:30: 03:7c:91:8a:bb:d7:e3:49:b0:23:ee:84:72:8f:52:4b:1d:39: 1a:6c:33:7f:b8:15:9e:52:cf:b3:52:c5:96:d2:4e:79:5e:57: 5e:4c:f3:19:e1:16:e8:d7:8a:98:04:b9:25:1a:3b:ae:31:c2: 57:db:48:8e:35:3a:ad:a2:c7:68:4e:cf:04:e6:5c:ea:91:71: 0d:82:7b:cc:40:66:c6:24:30:33:bc:7a:4b:25:7c:f6:b0:98: 2d:4a:a1:42:07:eb:bd:e5:fb:46:4a:64:cd:cd:bb:b5:21:c5: 37:42:4a:c1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8k0fO8Ao0KVsjqDJOLfmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZDE5MGIyMzhkOTdhZjc5MDBiZGNiZDAyMzA0Yjc4MmZm Y2FmMmEwHhcNMjYwMTAyMTgyMjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTY0YzY0NmQ1ZmZkZGE4MDI0ZDZjZmU4Mzg5YjcwYzMwMTViNzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87TTceak9+5Uy8c5A4FPB75NzBV5 X4v+Cjvg6oyDbVayU2p8qiPy50MXMINhN7UR6ONxBkJ2nIiyL0H4V1dMlyn03z7I 38CyKmR4HQchclHibLIKiWvCNpbe3hSSZ+t4f02ObN0GiHMJXfDskI7hZe/2fJGM nPXTsLeUNJJERaEX7ELaBsNNNAgQ0sVVG/WV9H3kUmbESKfrmnIj3p0q5kI1n9KO MGwZ+Nt0v3Lc+9lMXet6gna8N04+sk+cLJmZrjA0/rOgHqhhUyWTgc73mps8tylK aPwHV3HEVK3eHm6jCWQgk5eTF3JEK3EHW/I7/eSbMMTZi1KcbLprIdRfSQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIVkxkbV/92oAk1s/oOJtwwwFbcqMB8GA1UdIwQY MBaAFGLRkLI42Xr3kAvcvQIwS3gv/K8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTkt MTYzZmI3MDAzZTVkLzEvaFdUR1J0WF8zYWdDVFd6LWc0bTNEREFWdHlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTktMTYzZmI3MDAzZTVk LzEvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVC18AwQA bWhhMA0GCSqGSIb3DQEBCwUAA4IBAQAxAwwGBWq7OknHi0ttWUGQPGU/tQP1K887 pYQEErxpdGEFayPbg5b3u25oM+VULtWHnh8+71SCdzIw+kVBRXwsvVT6ElBgHHq0 QyDKwd2E78kAlXg/SZw1rwbXRVuFFf4PPJbu1c3qB9cn+H0V+C4HGcBTJgLs2yQQ 47ArEWQV6hIbWkwD0TqWymnV6g5tqjADfJGKu9fjSbAj7oRyj1JLHTkabDN/uBWe Us+zUsWW0k55XldeTPMZ4Rbo14qYBLklGjuuMcJX20iONTqtosdoTs8E5lzqkXEN gnvMQGbGJDAzvHpLJXz2sJgtSqFCB+u95ftGSmTNzbu1IcU3QkrB -----END CERTIFICATE-----Generated at Mon Jan 26 02:13:30 2026 by rpki-client