This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/hbF5ZzHsgcMp5iCgolJMPYy0iCk.roa File: hbF5ZzHsgcMp5iCgolJMPYy0iCk.roa (raw, json) Hash identifier: 7SFeRpPNNir0THQNHogkPoRqinwuTC1jSrURc0Ccc1k= Subject key identifier: 85:B1:79:67:31:EC:81:C3:29:E6:20:A0:A2:52:4C:3D:8C:B4:88:29 Certificate issuer: /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787 Certificate serial: 019B7C8067C7B6AC9EA9024865E914C2654B Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/hbF5ZzHsgcMp5iCgolJMPYy0iCk.roa Signing time: Fri 02 Jan 2026 02:19:08 +0000 ROA not before: Fri 02 Jan 2026 02:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62232 IP address blocks: 91.250.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:67:c7:b6:ac:9e:a9:02:48:65:e9:14:c2:65:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787 Validity Not Before: Jan 2 02:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85b1796731ec81c329e620a0a2524c3d8cb48829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:da:c9:1e:15:13:e5:29:06:9f:f6:6f:4a:27: db:cc:7b:78:26:2e:c4:c4:0a:ad:22:47:31:8d:24: 7f:f9:e4:50:72:48:8b:d5:33:92:47:cc:df:28:a8: e8:6e:51:56:b6:bb:c2:28:7c:e4:1f:3e:83:69:17: 96:ad:d4:a9:bd:a6:83:2e:a5:77:d9:cf:24:34:a4: 77:6b:11:72:b3:8a:61:7f:ff:e3:32:44:b5:2e:47: 02:c9:cb:67:79:1a:48:72:a7:6b:cc:21:06:4a:27: d7:17:c5:97:08:73:9b:5c:97:b3:31:8a:35:16:4e: 48:83:26:56:9a:cd:b2:36:1f:c3:a7:e8:0a:be:52: c5:0c:0d:92:ed:5b:7b:22:fa:c8:75:b3:53:b6:d7: 4c:7a:f5:f9:84:e7:df:68:9e:4e:5d:4a:cd:e2:2c: 19:dd:c0:80:c7:db:88:f9:68:38:b5:57:29:eb:75: 0b:47:ea:30:2b:68:6b:35:59:3a:b0:99:3b:a6:26: a1:61:ed:a5:44:00:2f:3b:c8:ea:c0:64:ff:04:06: 3c:3f:44:21:e2:cb:aa:1f:fe:a6:2f:10:d2:dc:54: 61:75:e8:5e:ab:c6:df:82:fd:ac:3b:a9:69:bd:b1: 59:be:bb:75:22:de:d2:cc:50:b5:dc:78:ec:a9:d0: 55:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B1:79:67:31:EC:81:C3:29:E6:20:A0:A2:52:4C:3D:8C:B4:88:29 X509v3 Authority Key Identifier: keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/hbF5ZzHsgcMp5iCgolJMPYy0iCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.250.245.0/24 Signature Algorithm: sha256WithRSAEncryption 13:9c:e3:2f:cb:aa:96:5b:12:4b:c3:eb:24:91:65:46:a8:b0: bc:e7:08:2f:71:0c:95:bf:55:43:12:2a:d6:5b:6c:4c:28:c1: 20:e0:73:6e:47:ce:0d:4a:70:7d:2f:48:52:48:a8:75:0d:d4: 01:c1:ec:ed:17:1b:8d:48:1b:61:13:01:f3:d4:0e:16:7f:b1: 3d:7e:72:05:6e:fc:e6:02:b2:9f:30:bc:5e:ef:84:b7:a9:6c: b8:c7:33:07:41:75:3b:68:79:8b:09:1d:2f:65:81:36:2b:6a: b6:bb:67:39:e2:8c:5e:c5:14:a6:31:7f:03:03:27:6c:07:e4: 87:40:66:ca:29:ab:43:2a:52:42:d2:97:ef:e7:4f:3a:b6:f5: e1:29:fa:4d:6a:6f:5b:b0:e1:21:e2:ab:bf:d3:72:63:89:b3: 7b:56:ed:de:4c:0b:8c:bb:fb:ce:10:e8:e2:2a:e4:3e:f4:ae: 8c:79:b1:58:70:3c:63:18:47:1b:25:da:cc:dc:b3:ad:d4:60: 8d:a2:18:27:ff:45:27:63:81:8c:86:97:8e:25:b3:58:5c:9c: 95:d2:c4:27:6c:8c:68:59:9a:f9:9c:54:f7:6c:b3:58:32:06: 88:28:c8:e3:6b:a2:a6:d1:61:a4:ef:a3:f2:88:b5:94:70:6b: 0d:bc:41:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGfHtqyeqQJIZekUwmVLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwM2MzMDJjMmY1MjI3N2UzZDBhYjY4NDJmNjhhYTVmOGQw ZDc3ODcwHhcNMjYwMTAyMDIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWIxNzk2NzMxZWM4MWMzMjllNjIwYTBhMjUyNGMzZDhjYjQ4ODI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9rJHhUT5SkGn/ZvSifbzHt4Ji7E xAqtIkcxjSR/+eRQckiL1TOSR8zfKKjoblFWtrvCKHzkHz6DaReWrdSpvaaDLqV3 2c8kNKR3axFys4phf//jMkS1LkcCyctneRpIcqdrzCEGSifXF8WXCHObXJezMYo1 Fk5IgyZWms2yNh/Dp+gKvlLFDA2S7Vt7IvrIdbNTttdMevX5hOffaJ5OXUrN4iwZ 3cCAx9uI+Wg4tVcp63ULR+owK2hrNVk6sJk7piahYe2lRAAvO8jqwGT/BAY8P0Qh 4suqH/6mLxDS3FRhdeheq8bfgv2sO6lpvbFZvrt1It7SzFC13HjsqdBV+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIWxeWcx7IHDKeYgoKJSTD2MtIgpMB8GA1UdIwQY MBaAFLA8MCwvUid+PQq2hC9oql+NDXeHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2Et NmY3MDI0YzNhYWQ3LzEvaGJGNVp6SHNnY01wNWlDZ29sSk1QWXkwaUNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2EtNmY3MDI0YzNhYWQ3 LzEvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/r1MA0G CSqGSIb3DQEBCwUAA4IBAQATnOMvy6qWWxJLw+skkWVGqLC85wgvcQyVv1VDEirW W2xMKMEg4HNuR84NSnB9L0hSSKh1DdQBweztFxuNSBthEwHz1A4Wf7E9fnIFbvzm ArKfMLxe74S3qWy4xzMHQXU7aHmLCR0vZYE2K2q2u2c54oxexRSmMX8DAydsB+SH QGbKKatDKlJC0pfv5086tvXhKfpNam9bsOEh4qu/03JjibN7Vu3eTAuMu/vOEOji KuQ+9K6MebFYcDxjGEcbJdrM3LOt1GCNohgn/0UnY4GMhpeOJbNYXJyV0sQnbIxo WZr5nFT3bLNYMgaIKMjja6Km0WGk76PyiLWUcGsNvEHI -----END CERTIFICATE-----Generated at Mon Jan 26 05:05:11 2026 by rpki-client