This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/hRhNZPtmJg0KwdjuoZkk93sBP2c.roa File: hRhNZPtmJg0KwdjuoZkk93sBP2c.roa (raw, json) Hash identifier: Iux9M/ga92AaPnB9SKUAzQYgctGbOPAarQ3+UfPCjro= Subject key identifier: 85:18:4D:64:FB:66:26:0D:0A:C1:D8:EE:A1:99:24:F7:7B:01:3F:67 Certificate issuer: /CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc Certificate serial: 019B7A5B9F59DD76B04863E5EA77726C99D1 Authority key identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/hRhNZPtmJg0KwdjuoZkk93sBP2c.roa Signing time: Thu 01 Jan 2026 16:19:43 +0000 ROA not before: Thu 01 Jan 2026 16:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204896 IP address blocks: 217.74.80.0/20 maxlen: 20 2a02:dd80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9f:59:dd:76:b0:48:63:e5:ea:77:72:6c:99:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc Validity Not Before: Jan 1 16:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85184d64fb66260d0ac1d8eea19924f77b013f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:59:20:5d:39:f8:17:78:9c:ee:e1:26:0f:1e: 1d:2f:cf:49:2e:23:f7:38:54:36:2c:5f:ef:0d:dd: 97:7f:c4:99:a1:bf:04:aa:f1:36:d1:9f:6b:4d:56: 70:93:d8:f6:55:cc:1e:ed:d7:b3:86:34:34:3a:66: b5:4a:1c:5a:bc:a0:96:00:85:5c:92:3b:83:0a:06: 96:53:42:e7:e2:0f:2b:11:0d:78:db:1f:e0:25:b4: 20:d6:73:a3:fb:cc:c7:8a:09:39:aa:ba:5a:9a:59: f7:98:98:55:55:4a:3f:d6:aa:b7:22:82:e4:d8:76: 73:8b:96:68:c5:71:eb:ea:79:fa:c4:d8:29:b2:5e: fb:63:96:52:66:be:62:61:0e:19:e4:c4:75:e4:2e: 53:21:33:a8:96:12:95:3e:3a:2c:41:d4:8f:7e:be: da:53:f9:f4:07:b9:44:80:2c:e8:c0:19:e0:3a:ca: 93:2c:7f:42:f7:46:73:e1:41:3b:06:36:77:82:a4: 4a:83:fc:51:de:a1:c4:e3:b5:a1:4f:92:07:7d:2c: 11:ca:ac:6a:d7:43:70:32:57:07:a7:e7:72:01:1e: b8:cb:a0:a4:01:e4:6b:0e:47:f3:c3:94:b4:c3:ba: e9:42:52:70:00:c0:90:ca:38:2b:5f:8a:f2:9e:4f: 40:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:18:4D:64:FB:66:26:0D:0A:C1:D8:EE:A1:99:24:F7:7B:01:3F:67 X509v3 Authority Key Identifier: keyid:BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/hRhNZPtmJg0KwdjuoZkk93sBP2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.74.80.0/20 IPv6: 2a02:dd80::/29 Signature Algorithm: sha256WithRSAEncryption 6a:ec:8b:54:71:ae:e0:78:7f:79:b0:c8:6e:3b:73:b2:29:6c: f9:00:0f:2c:f0:58:3f:c6:0e:38:36:43:42:98:fd:78:21:6f: 13:31:d3:8c:c7:28:94:da:a2:36:34:55:8a:87:7a:e4:6a:8c: c6:cb:f8:cb:e7:1a:36:73:ca:94:3a:7f:ce:d2:8b:f1:2b:51: 73:40:04:00:31:d9:7c:ad:18:a5:2f:f5:8e:ed:36:64:0b:da: 71:dd:55:c8:b3:75:5a:22:88:4b:79:40:cd:79:f3:aa:a7:00: b4:37:66:7b:f1:50:85:13:7b:be:29:3b:17:ed:06:27:03:9f: 6a:8e:a0:9d:32:ec:f4:10:8d:6a:c2:c8:fe:73:c7:72:36:51: 31:3c:88:a8:23:10:a1:7e:30:d1:6b:cb:c8:60:29:4c:8e:fe: c7:d6:28:7c:62:56:97:88:ee:18:c1:18:69:33:b2:f5:c6:d9: 37:90:25:b9:d2:2f:8b:81:fc:1d:71:ad:30:cc:26:48:cb:9a: 4d:6b:22:e2:b9:2e:1c:07:2c:41:95:b3:87:cd:59:be:7a:fc: f3:f2:bd:47:32:92:bb:f2:70:26:00:76:98:a6:89:07:56:e6: 61:92:a8:8a:80:27:94:7a:c4:b7:80:b6:8c:b0:60:cb:63:dd: 21:12:6d:5e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6W59Z3XawSGPl6ndybJnRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYWQwOGFjODYyZGI2YWUwYmIwYjg4MGFlYzA1NWVkYmNi YjgyZmMwHhcNMjYwMTAxMTYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTE4NGQ2NGZiNjYyNjBkMGFjMWQ4ZWVhMTk5MjRmNzdiMDEzZjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFkgXTn4F3ic7uEmDx4dL89JLiP3 OFQ2LF/vDd2Xf8SZob8EqvE20Z9rTVZwk9j2Vcwe7dezhjQ0Oma1ShxavKCWAIVc kjuDCgaWU0Ln4g8rEQ142x/gJbQg1nOj+8zHigk5qrpamln3mJhVVUo/1qq3IoLk 2HZzi5ZoxXHr6nn6xNgpsl77Y5ZSZr5iYQ4Z5MR15C5TITOolhKVPjosQdSPfr7a U/n0B7lEgCzowBngOsqTLH9C90Zz4UE7BjZ3gqRKg/xR3qHE47WhT5IHfSwRyqxq 10NwMlcHp+dyAR64y6CkAeRrDkfzw5S0w7rpQlJwAMCQyjgrX4rynk9AZwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIUYTWT7ZiYNCsHY7qGZJPd7AT9nMB8GA1UdIwQY MBaAFL+tCKyGLbauC7C4gK7AVe28u4L8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNWRjNjEtODgyYi00NjM2LWFmZjEt MWZiM2Y4MTc2MDhmLzEvaFJoTlpQdG1KZzBLd2RqdW9aa2s5M3NCUDJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kNWRjNjEtODgyYi00NjM2LWFmZjEtMWZiM2Y4MTc2MDhm LzEvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQE2UpQMA0E AgACMAcDBQMqAt2AMA0GCSqGSIb3DQEBCwUAA4IBAQBq7ItUca7geH95sMhuO3Oy KWz5AA8s8Fg/xg44NkNCmP14IW8TMdOMxyiU2qI2NFWKh3rkaozGy/jL5xo2c8qU On/O0ovxK1FzQAQAMdl8rRilL/WO7TZkC9px3VXIs3VaIohLeUDNefOqpwC0N2Z7 8VCFE3u+KTsX7QYnA59qjqCdMuz0EI1qwsj+c8dyNlExPIioIxChfjDRa8vIYClM jv7H1ih8YlaXiO4YwRhpM7L1xtk3kCW50i+Lgfwdca0wzCZIy5pNayLiuS4cByxB lbOHzVm+evzz8r1HMpK78nAmAHaYpokHVuZhkqiKgCeUesS3gLaMsGDLY90hEm1e -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:12 2026 by rpki-client