This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/hJm1nDRsIFd4oM3IecS9DbzdQqA.roa File: hJm1nDRsIFd4oM3IecS9DbzdQqA.roa (raw, json) Hash identifier: qZGephqqhr8wfMf15paKbsU/Vh7J0ohAnvLexhyh6V8= Subject key identifier: 84:99:B5:9C:34:6C:20:57:78:A0:CD:C8:79:C4:BD:0D:BC:DD:42:A0 Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e Certificate serial: 019B797EA5820E616560A3C58A9200C35ED9 Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/hJm1nDRsIFd4oM3IecS9DbzdQqA.roa Signing time: Thu 01 Jan 2026 12:18:21 +0000 ROA not before: Thu 01 Jan 2026 12:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9051 IP address blocks: 45.155.132.0/22 maxlen: 22 45.155.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a5:82:0e:61:65:60:a3:c5:8a:92:00:c3:5e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e Validity Not Before: Jan 1 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8499b59c346c205778a0cdc879c4bd0dbcdd42a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:78:e2:27:4a:87:db:21:38:a4:1c:a1:4f:9a: 9f:1c:c0:cd:88:b7:b1:99:d9:66:7b:b5:8a:d8:2b: 71:a8:db:13:98:20:e3:36:d9:4f:34:b0:7f:5a:8b: 04:33:e9:10:6d:d6:55:97:53:6a:fb:c7:4f:eb:20: 54:cf:b3:d0:63:bc:9a:a0:2a:d3:ab:59:45:db:47: 4a:81:38:ca:28:6a:ad:6d:93:b6:de:c2:78:f0:33: dd:0c:4c:0f:6a:ef:10:1c:cb:6d:ab:a9:93:f3:55: 5d:f6:a8:0b:a4:94:53:75:cd:a3:9b:10:8f:ef:06: 79:37:eb:ee:07:ad:0b:46:91:5e:ab:37:47:07:56: de:05:ce:b4:f1:53:07:bc:0a:a8:21:67:42:87:04: 6a:be:5f:4e:82:16:76:b8:7d:88:8d:60:3c:69:e9: 0e:e7:ae:07:15:b2:4d:38:c1:f6:c9:8f:5e:0b:1a: a3:b8:38:d6:e2:57:73:fe:60:ec:76:2d:37:11:66: 75:a2:ec:31:f9:20:ea:db:37:14:25:54:9d:e3:ae: 14:83:81:24:2f:4d:35:08:42:c8:28:e4:f5:51:55: ad:8e:22:64:14:31:af:f3:bf:88:d5:43:70:a5:6c: 72:49:4f:ff:a3:6e:49:f6:c1:d1:e2:fd:4e:20:ad: e8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:99:B5:9C:34:6C:20:57:78:A0:CD:C8:79:C4:BD:0D:BC:DD:42:A0 X509v3 Authority Key Identifier: keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/hJm1nDRsIFd4oM3IecS9DbzdQqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.132.0/22 Signature Algorithm: sha256WithRSAEncryption 36:54:20:a7:9c:66:44:94:84:8b:e1:bd:aa:ea:70:27:3e:7e: 27:98:fe:2b:4f:d9:a1:18:4b:56:61:f6:f0:d5:8e:bb:d6:34: 97:ed:82:71:6e:be:dc:e0:0d:6d:45:f6:65:ab:a0:e9:ce:80: e3:c6:ae:b8:72:0d:04:e4:77:a3:12:e0:a3:03:b3:99:d9:c9: 47:22:66:8a:6d:4c:1c:57:cb:4a:c5:e2:98:ec:ca:d4:97:4b: 05:43:2d:44:d8:27:5f:11:5c:41:d5:36:55:4b:92:c8:d5:80: be:48:98:22:3e:08:b8:64:48:e3:c4:3c:7a:43:63:2a:fd:6d: 74:ad:b1:64:44:57:13:60:3d:3e:30:0c:0e:46:e0:5b:84:69: 61:d8:95:8d:01:ed:9c:12:ec:46:3a:27:4a:8e:07:6a:d2:32: af:cb:54:d3:8d:3a:da:6f:a5:02:19:cf:3c:d1:c3:e1:41:82: 53:9c:87:9c:f5:d1:80:19:c6:a8:2c:46:a5:d2:8c:6f:e9:5b: 73:83:05:51:2d:00:e9:02:cf:e0:af:74:c2:39:7a:5f:93:29: dc:95:8e:34:0f:e8:a1:0b:9c:ed:1c:98:c6:3b:87:0a:72:31: cc:ed:8a:c9:d2:68:f6:41:92:dd:42:6e:a4:64:fc:60:98:bd: 44:e5:a3:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fqWCDmFlYKPFipIAw17ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MjZkOWIzYTc4NTQzYjY5NjQzMzVlZTE5NDFjYTI5NzFj NTY5NGUwHhcNMjYwMTAxMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDk5YjU5YzM0NmMyMDU3NzhhMGNkYzg3OWM0YmQwZGJjZGQ0MmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHjiJ0qH2yE4pByhT5qfHMDNiLex mdlme7WK2CtxqNsTmCDjNtlPNLB/WosEM+kQbdZVl1Nq+8dP6yBUz7PQY7yaoCrT q1lF20dKgTjKKGqtbZO23sJ48DPdDEwPau8QHMttq6mT81Vd9qgLpJRTdc2jmxCP 7wZ5N+vuB60LRpFeqzdHB1beBc608VMHvAqoIWdChwRqvl9OghZ2uH2IjWA8aekO 564HFbJNOMH2yY9eCxqjuDjW4ldz/mDsdi03EWZ1ouwx+SDq2zcUJVSd464Ug4Ek L001CELIKOT1UVWtjiJkFDGv87+I1UNwpWxySU//o25J9sHR4v1OIK3oUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFISZtZw0bCBXeKDNyHnEvQ283UKgMB8GA1UdIwQY MBaAFEQm2bOnhUO2lkM17hlByilxxWlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQt MGRlNzk2YTRhMzMyLzEvaEptMW5EUnNJRmQ0b00zSWVjUzlEYnpkUXFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQtMGRlNzk2YTRhMzMy LzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZuEMA0G CSqGSIb3DQEBCwUAA4IBAQA2VCCnnGZElISL4b2q6nAnPn4nmP4rT9mhGEtWYfbw 1Y671jSX7YJxbr7c4A1tRfZlq6DpzoDjxq64cg0E5HejEuCjA7OZ2clHImaKbUwc V8tKxeKY7MrUl0sFQy1E2CdfEVxB1TZVS5LI1YC+SJgiPgi4ZEjjxDx6Q2Mq/W10 rbFkRFcTYD0+MAwORuBbhGlh2JWNAe2cEuxGOidKjgdq0jKvy1TTjTrab6UCGc88 0cPhQYJTnIec9dGAGcaoLEal0oxv6VtzgwVRLQDpAs/gr3TCOXpfkynclY40D+ih C5ztHJjGO4cKcjHM7YrJ0mj2QZLdQm6kZPxgmL1E5aPc -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:47 2026 by rpki-client