This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/hMXGPmesHafq1ldVlCqzO5jhnK4.roa File: hMXGPmesHafq1ldVlCqzO5jhnK4.roa (raw, json) Hash identifier: atdNH467wE+RBwnetrSvy++hllXan+TQKM5dBpraPhA= Subject key identifier: 84:C5:C6:3E:67:AC:1D:A7:EA:D6:57:55:94:2A:B3:3B:98:E1:9C:AE Certificate issuer: /CN=2fba003756d1013b943eb4f507fb4e7c74778269 Certificate serial: 019B7DCA548D0C9F85E2D94300140A5BEDA0 Authority key identifier: 2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/hMXGPmesHafq1ldVlCqzO5jhnK4.roa Signing time: Fri 02 Jan 2026 08:19:30 +0000 ROA not before: Fri 02 Jan 2026 08:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56380 IP address blocks: 45.83.178.0/24 maxlen: 32 45.83.179.0/24 maxlen: 24 193.36.38.0/24 maxlen: 32 2a0b:bcc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:54:8d:0c:9f:85:e2:d9:43:00:14:0a:5b:ed:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fba003756d1013b943eb4f507fb4e7c74778269 Validity Not Before: Jan 2 08:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84c5c63e67ac1da7ead65755942ab33b98e19cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:64:c1:d0:86:04:71:49:94:c0:32:a9:4c:79: 48:bb:b8:6b:2f:e6:2c:63:62:f1:2e:8c:1f:b3:d3: 55:04:96:97:d6:94:15:13:07:e7:c3:a5:82:0b:3e: 25:30:bf:6d:ca:d4:24:49:81:6c:c5:7b:4c:2d:44: 2f:87:94:70:89:7c:2b:f2:fa:ce:8b:b9:8b:69:6e: 22:43:1e:07:77:c5:ec:8c:6e:dc:2c:d9:e6:e3:be: 32:89:bf:a4:92:15:c0:a2:68:77:43:d1:41:f0:47: d0:0d:14:79:ed:0f:7a:56:6b:f8:ff:8b:36:04:bc: 6d:47:f1:eb:76:d2:f3:48:e4:00:d7:8d:42:da:1c: 35:fa:b3:06:a6:35:00:5e:69:ed:d5:11:f1:4a:e0: 8b:ca:04:8f:a3:0c:ee:e9:bd:08:8d:38:f8:5c:e4: a5:ce:3d:05:47:cc:6e:67:50:24:82:7e:87:be:01: 90:dc:dd:1c:8f:02:a4:aa:2f:70:44:1a:01:02:9c: 32:70:3a:8a:94:fa:07:17:8c:d9:8f:94:92:83:69: ac:cc:ce:8f:3f:36:14:9f:d1:e4:82:4f:f2:77:47: d5:05:57:31:c7:55:96:9d:41:21:94:1c:43:08:cc: 39:b1:db:fa:5f:9c:93:4a:20:b0:57:bd:78:fd:a2: 10:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C5:C6:3E:67:AC:1D:A7:EA:D6:57:55:94:2A:B3:3B:98:E1:9C:AE X509v3 Authority Key Identifier: keyid:2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/hMXGPmesHafq1ldVlCqzO5jhnK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.178.0/23 193.36.38.0/24 IPv6: 2a0b:bcc0::/29 Signature Algorithm: sha256WithRSAEncryption 81:4b:03:d8:d8:8c:e8:a7:36:b2:3e:74:38:39:9c:2e:05:3e: 4c:17:4b:ca:d8:13:2c:66:df:16:f3:84:4b:3c:f3:25:23:eb: 73:2d:3d:a8:2c:25:b0:70:06:a0:64:36:e3:a2:25:41:62:03: 86:06:16:c2:e3:1b:db:57:4e:47:d8:6d:86:09:4a:d9:fa:29: 86:49:8a:82:09:d2:57:59:20:eb:88:c2:e0:14:77:2b:85:a2: be:09:c4:04:e4:b1:29:3b:c5:d9:35:62:53:7e:0f:73:64:db: 64:06:cd:1d:3b:cf:25:21:7d:c1:69:23:33:b1:22:fa:50:1f: 1c:ca:f4:6f:e6:75:ab:9e:06:87:27:98:22:e8:c6:8e:07:d4: a6:c9:7d:f5:57:01:4b:90:50:40:e2:d7:f1:1c:d3:f7:80:b5: 56:ed:a8:3d:87:14:0f:b1:81:eb:2a:00:0e:55:55:cd:c2:71: b8:f5:c2:df:bf:36:a8:09:cc:33:cd:d4:70:f7:e4:22:44:a6: 25:1d:99:bb:07:57:da:97:27:9d:64:ca:00:d6:e0:b8:bb:8c: a5:60:a8:db:ee:2f:13:a3:79:7f:52:26:0b:16:d9:fb:27:d8: f7:aa:4c:78:d1:63:70:2c:6c:1f:d2:7f:4c:e1:2c:8e:11:73: 38:23:78:72 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9ylSNDJ+F4tlDABQKW+2gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYmEwMDM3NTZkMTAxM2I5NDNlYjRmNTA3ZmI0ZTdjNzQ3 NzgyNjkwHhcNMjYwMTAyMDgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGM1YzYzZTY3YWMxZGE3ZWFkNjU3NTU5NDJhYjMzYjk4ZTE5Y2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWTB0IYEcUmUwDKpTHlIu7hrL+Ys Y2LxLowfs9NVBJaX1pQVEwfnw6WCCz4lML9tytQkSYFsxXtMLUQvh5RwiXwr8vrO i7mLaW4iQx4Hd8XsjG7cLNnm474yib+kkhXAomh3Q9FB8EfQDRR57Q96Vmv4/4s2 BLxtR/HrdtLzSOQA141C2hw1+rMGpjUAXmnt1RHxSuCLygSPowzu6b0IjTj4XOSl zj0FR8xuZ1Akgn6HvgGQ3N0cjwKkqi9wRBoBApwycDqKlPoHF4zZj5SSg2mszM6P PzYUn9Hkgk/yd0fVBVcxx1WWnUEhlBxDCMw5sdv6X5yTSiCwV714/aIQSQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFITFxj5nrB2n6tZXVZQqszuY4ZyuMB8GA1UdIwQY MBaAFC+6ADdW0QE7lD609Qf7Tnx0d4JpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy82MjJmZGItMGU1Ni00Yzg3LTg2NmIt YjMxZjI1MmYxOTY5LzEvaE1YR1BtZXNIYWZxMWxkVmxDcXpPNWpobks0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy82MjJmZGItMGU1Ni00Yzg3LTg2NmItYjMxZjI1MmYxOTY5 LzEvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBLVOyAwQA wSQmMA0EAgACMAcDBQMqC7zAMA0GCSqGSIb3DQEBCwUAA4IBAQCBSwPY2Izopzay PnQ4OZwuBT5MF0vK2BMsZt8W84RLPPMlI+tzLT2oLCWwcAagZDbjoiVBYgOGBhbC 4xvbV05H2G2GCUrZ+imGSYqCCdJXWSDriMLgFHcrhaK+CcQE5LEpO8XZNWJTfg9z ZNtkBs0dO88lIX3BaSMzsSL6UB8cyvRv5nWrngaHJ5gi6MaOB9SmyX31VwFLkFBA 4tfxHNP3gLVW7ag9hxQPsYHrKgAOVVXNwnG49cLfvzaoCcwzzdRw9+QiRKYlHZm7 B1falyedZMoA1uC4u4ylYKjb7i8To3l/UiYLFtn7J9j3qkx40WNwLGwf0n9M4SyO EXM4I3hy -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:44 2026 by rpki-client