This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/C-hiHL_GzbD5a_s8Sar_hmP-Vyw.roa File: C-hiHL_GzbD5a_s8Sar_hmP-Vyw.roa (raw, json) Hash identifier: hyN/ftVawg2QF6kkYn1VlnFyi9JVIm7PN5l5sJloEAU= Subject key identifier: 0B:E8:62:1C:BF:C6:CD:B0:F9:6B:FB:3C:49:AA:FF:86:63:FE:57:2C Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Certificate serial: 019B7F843C9116299ABA99E8AA385C49F6C0 Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/C-hiHL_GzbD5a_s8Sar_hmP-Vyw.roa Signing time: Fri 02 Jan 2026 16:22:11 +0000 ROA not before: Fri 02 Jan 2026 16:22:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214724 IP address blocks: 85.222.162.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:3c:91:16:29:9a:ba:99:e8:aa:38:5c:49:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Validity Not Before: Jan 2 16:22:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0be8621cbfc6cdb0f96bfb3c49aaff8663fe572c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1d:90:2f:8b:32:79:32:ec:32:56:a1:6c:2e: 19:ee:e0:ce:35:5c:41:b7:21:ac:6b:4e:e6:18:77: 9b:39:e5:9c:39:d4:95:45:c5:cb:3e:43:90:2d:1f: 48:b6:a1:1f:6f:9f:21:97:6c:ae:47:fc:af:81:43: 8e:e2:01:90:0b:eb:08:73:da:9d:a7:4a:41:30:5c: fe:55:a2:92:25:c7:3b:ec:1b:cd:a1:24:f4:87:cb: 1a:0f:ab:36:c4:63:ae:cb:f7:f6:86:7b:70:88:c7: d5:53:4e:5f:dd:be:e8:4c:88:7b:4b:e3:9c:04:c4: 41:4c:81:30:f6:2c:76:cf:fa:6b:23:6c:df:75:2a: f7:a0:fe:89:87:8f:90:bf:4f:fc:42:c7:74:7b:fa: 00:db:d8:25:c8:37:3b:69:1b:15:74:bf:71:e7:89: a9:b5:76:68:d3:e5:8d:f6:60:12:b9:85:6c:51:d2: 2c:b1:14:1f:a5:59:b0:e5:60:e9:22:7c:77:8b:2e: 4a:9e:99:99:08:cc:54:33:5c:f2:17:0b:78:74:75: 48:cc:c8:ad:df:c2:a0:86:42:c0:9c:83:7c:92:33: 60:56:2d:1c:55:fb:e7:4c:64:95:e4:2c:bf:90:d7: 50:57:45:cc:eb:8b:84:f6:00:fc:9e:cc:a9:d5:68: 84:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E8:62:1C:BF:C6:CD:B0:F9:6B:FB:3C:49:AA:FF:86:63:FE:57:2C X509v3 Authority Key Identifier: keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/C-hiHL_GzbD5a_s8Sar_hmP-Vyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.222.162.0/23 Signature Algorithm: sha256WithRSAEncryption 76:6c:5c:c0:d0:14:b0:69:a4:be:c7:ba:9e:f6:a7:72:c0:7d: d4:07:7e:12:aa:47:63:ad:ef:66:47:99:9b:c6:25:48:e1:d5: c3:e3:e9:d7:b1:11:3d:fd:86:39:96:eb:16:da:35:51:a3:c1: f3:4e:61:64:26:f1:9e:eb:b7:c3:4e:e3:0e:4f:1b:47:b0:07: f9:ac:1d:e8:9d:cf:26:a9:ce:7e:8e:af:93:59:35:73:ba:f0: 84:b4:ee:55:8e:3c:89:69:8a:ee:ef:26:87:3a:28:57:c0:9a: e3:65:b2:a0:95:6c:41:97:93:ce:d8:b8:de:a8:2b:22:ce:35: af:88:29:a2:f8:bf:a1:19:f5:48:d1:64:2c:2b:a8:35:11:6d: a9:1e:25:66:09:3e:3f:18:77:b7:dc:3c:00:94:55:8f:0c:a2: a0:ef:58:c1:b9:2e:1c:14:35:2c:a5:e2:bb:c2:66:d8:e6:0e: 94:37:6a:56:7e:1f:3a:dc:23:df:fa:f8:1b:05:30:b4:85:f6: b4:19:05:2c:97:f0:e6:8a:cf:fb:f4:bf:43:cd:65:e3:83:eb: 92:e2:13:80:1c:25:5c:57:9a:9c:a6:aa:48:5a:a6:fc:90:ed: 79:96:c0:1e:04:ec:08:90:1d:a5:63:13:0a:29:1d:29:6e:d8: 2c:df:48:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hDyRFimaupnoqjhcSfbAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZDc4ZGUwMjM0ZTZmOTk3MDE1OTJmNTM2ZTQ1ZjVmNTU5 NGVlYzMwHhcNMjYwMTAyMTYyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmU4NjIxY2JmYzZjZGIwZjk2YmZiM2M0OWFhZmY4NjYzZmU1NzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB2QL4syeTLsMlahbC4Z7uDONVxB tyGsa07mGHebOeWcOdSVRcXLPkOQLR9ItqEfb58hl2yuR/yvgUOO4gGQC+sIc9qd p0pBMFz+VaKSJcc77BvNoST0h8saD6s2xGOuy/f2hntwiMfVU05f3b7oTIh7S+Oc BMRBTIEw9ix2z/prI2zfdSr3oP6Jh4+Qv0/8Qsd0e/oA29glyDc7aRsVdL9x54mp tXZo0+WN9mASuYVsUdIssRQfpVmw5WDpInx3iy5KnpmZCMxUM1zyFwt4dHVIzMit 38KghkLAnIN8kjNgVi0cVfvnTGSV5Cy/kNdQV0XM64uE9gD8nsyp1WiERwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAvoYhy/xs2w+Wv7PEmq/4Zj/lcsMB8GA1UdIwQY MBaAFKfXjeAjTm+ZcBWS9TbkX19VlO7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2Mt MjhkNWI2MDdhNDdmLzEvQy1oaUhMX0d6YkQ1YV9zOFNhcl9obVAtVnl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2MtMjhkNWI2MDdhNDdm LzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVd6iMA0G CSqGSIb3DQEBCwUAA4IBAQB2bFzA0BSwaaS+x7qe9qdywH3UB34Sqkdjre9mR5mb xiVI4dXD4+nXsRE9/YY5lusW2jVRo8HzTmFkJvGe67fDTuMOTxtHsAf5rB3onc8m qc5+jq+TWTVzuvCEtO5VjjyJaYru7yaHOihXwJrjZbKglWxBl5PO2LjeqCsizjWv iCmi+L+hGfVI0WQsK6g1EW2pHiVmCT4/GHe33DwAlFWPDKKg71jBuS4cFDUspeK7 wmbY5g6UN2pWfh863CPf+vgbBTC0hfa0GQUsl/Dmis/79L9DzWXjg+uS4hOAHCVc V5qcpqpIWqb8kO15lsAeBOwIkB2lYxMKKR0pbtgs30hE -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:40 2026 by rpki-client