This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/hmCtBUuCkauU2_IY-wwBD-dHNn4.roa File: hmCtBUuCkauU2_IY-wwBD-dHNn4.roa (raw, json) Hash identifier: VrbTuIE35TjWUc90AcxCbco0X8PP2t5+oA2IC1ydn0I= Subject key identifier: 86:60:AD:05:4B:82:91:AB:94:DB:F2:18:FB:0C:01:0F:E7:47:36:7E Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C6951EE649BB145DD023E4D817700E Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/hmCtBUuCkauU2_IY-wwBD-dHNn4.roa Signing time: Thu 01 Jan 2026 04:17:41 +0000 ROA not before: Thu 01 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203499 IP address blocks: 5.154.98.0/24 maxlen: 24 109.167.46.0/24 maxlen: 24 151.237.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:95:1e:e6:49:bb:14:5d:d0:23:e4:d8:17:70:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8660ad054b8291ab94dbf218fb0c010fe747367e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:52:78:6c:92:e4:8b:a2:f5:c7:fc:9d:3f:9d: c9:a5:9b:bd:d6:1d:da:a5:63:65:1d:a3:4f:76:2b: 2e:9e:45:f3:62:b9:e8:3b:57:3b:54:4f:98:39:8f: 62:19:20:9c:8a:f6:8e:ba:5b:0c:99:61:e0:67:1d: 91:17:93:14:75:3e:1d:d6:3a:57:43:6f:8c:1c:4c: 12:35:34:1c:41:1c:5e:a4:68:92:76:6e:68:fb:28: 8a:2e:f9:5f:85:c2:5e:c7:2b:15:69:b6:2c:fb:c3: 48:e2:c6:49:4e:c1:3a:3d:37:df:ea:5b:a7:4d:ae: 5e:87:8c:0e:f9:6c:9c:7f:40:a4:f3:a9:5b:47:99: fe:9e:e1:9f:89:64:9c:40:d5:cd:9a:55:b7:96:6b: 7f:5a:06:39:b2:a9:94:74:37:2c:85:eb:3d:99:38: 4a:ca:0f:68:c4:c3:5a:f8:0a:22:fb:4b:c2:db:a1: 44:70:dd:f7:e9:b0:30:51:d3:43:5e:29:3d:e2:b1: 2a:10:a0:87:6f:52:0c:d2:a4:0c:e5:3b:af:54:bc: f6:e3:0d:d7:a9:38:df:18:f5:37:c2:de:41:98:d1: e4:16:95:f4:84:68:cb:ba:02:36:05:ee:c9:48:94: 6d:a7:9f:47:0d:87:23:04:c5:80:f4:56:1c:cd:00: 7f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:60:AD:05:4B:82:91:AB:94:DB:F2:18:FB:0C:01:0F:E7:47:36:7E X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/hmCtBUuCkauU2_IY-wwBD-dHNn4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.98.0/24 109.167.46.0/24 151.237.198.0/24 Signature Algorithm: sha256WithRSAEncryption b3:c4:74:bf:f8:e4:44:49:23:d9:d3:58:64:20:4a:1d:85:58: 9c:5c:50:e0:40:31:9a:6b:f0:53:2b:91:39:ee:3c:ed:f6:45: 1c:6f:a7:74:61:f7:13:b0:49:64:f4:26:23:63:92:d9:2d:67: 8d:37:75:9d:bc:61:0f:18:91:12:89:7c:70:0d:81:63:50:1c: 87:c8:08:8e:a1:f8:aa:24:04:7c:af:31:5f:45:46:b8:af:48: 2f:1b:f9:cf:82:91:bf:18:3a:9d:f6:54:e3:f0:48:cc:1e:ac: 0a:9c:16:c9:25:2c:9a:7f:ba:4b:b3:be:ee:46:36:25:2f:d7: b1:a0:e7:42:77:b2:6e:6b:e2:73:65:6e:36:3e:0e:d6:96:fb: 4b:fa:be:ca:8b:83:28:3b:b7:6f:58:13:2a:8d:27:23:1f:5c: fe:93:b0:32:60:dd:ce:28:48:e5:28:d3:c8:44:76:46:3b:be: 47:60:3c:42:b4:2b:3e:e4:5d:3d:38:f5:fe:49:5b:eb:69:9c: e1:a4:cd:09:6a:61:61:9d:1f:8e:d3:c5:a8:83:13:86:53:c6: 71:37:62:8b:7b:30:1d:a8:74:ca:b1:a3:48:ff:38:5a:68:b5: 3c:e3:4c:e0:3e:33:4e:34:70:d0:20:f8:f6:81:07:77:bb:a5: d9:e7:dc:44 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xpUe5km7FF3QI+TYF3AOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjYwYWQwNTRiODI5MWFiOTRkYmYyMThmYjBjMDEwZmU3NDczNjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VJ4bJLki6L1x/ydP53JpZu91h3a pWNlHaNPdisunkXzYrnoO1c7VE+YOY9iGSCcivaOulsMmWHgZx2RF5MUdT4d1jpX Q2+MHEwSNTQcQRxepGiSdm5o+yiKLvlfhcJexysVabYs+8NI4sZJTsE6PTff6lun Ta5eh4wO+Wycf0Ck86lbR5n+nuGfiWScQNXNmlW3lmt/WgY5sqmUdDcshes9mThK yg9oxMNa+Aoi+0vC26FEcN336bAwUdNDXik94rEqEKCHb1IM0qQM5TuvVLz24w3X qTjfGPU3wt5BmNHkFpX0hGjLugI2Be7JSJRtp59HDYcjBMWA9FYczQB/cwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIZgrQVLgpGrlNvyGPsMAQ/nRzZ+MB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvaG1DdEJVdUNrYXVVMl9JWS13d0JELWRITm40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABZpiAwQA bacuAwQAl+3GMA0GCSqGSIb3DQEBCwUAA4IBAQCzxHS/+ORESSPZ01hkIEodhVic XFDgQDGaa/BTK5E57jzt9kUcb6d0YfcTsElk9CYjY5LZLWeNN3WdvGEPGJESiXxw DYFjUByHyAiOofiqJAR8rzFfRUa4r0gvG/nPgpG/GDqd9lTj8EjMHqwKnBbJJSya f7pLs77uRjYlL9exoOdCd7Jua+JzZW42Pg7WlvtL+r7Ki4MoO7dvWBMqjScjH1z+ k7AyYN3OKEjlKNPIRHZGO75HYDxCtCs+5F09OPX+SVvraZzhpM0JamFhnR+O08Wo gxOGU8ZxN2KLezAdqHTKsaNI/zhaaLU840zgPjNONHDQIPj2gQd3u6XZ59xE -----END CERTIFICATE-----Generated at Sun Jan 25 10:21:55 2026 by rpki-client