This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/hk1oju7a85YLrK-xOi3Dwyc514s.roa File: hk1oju7a85YLrK-xOi3Dwyc514s.roa (raw, json) Hash identifier: 47y67aqLovE6XQVviNUqEv8Eh2I5vqgHfxxqdx3QVxs= Subject key identifier: 86:4D:68:8E:EE:DA:F3:96:0B:AC:AF:B1:3A:2D:C3:C3:27:39:D7:8B Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Certificate serial: 019B7758EF20D7CCA9D67D1A7EFF13573A51 Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/hk1oju7a85YLrK-xOi3Dwyc514s.roa Signing time: Thu 01 Jan 2026 02:17:55 +0000 ROA not before: Thu 01 Jan 2026 02:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50635 IP address blocks: 217.113.10.0/23 maxlen: 23 217.113.10.0/24 maxlen: 24 217.113.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ef:20:d7:cc:a9:d6:7d:1a:7e:ff:13:57:3a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Validity Not Before: Jan 1 02:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=864d688eeedaf3960bacafb13a2dc3c32739d78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:89:c3:a1:4b:ad:26:eb:e5:f1:5f:e5:6f:e8: b0:b8:10:87:d9:12:66:f6:68:d5:56:bb:b5:a0:23: f1:a2:b5:3c:76:0d:05:70:ae:a7:84:4d:60:32:6e: 35:2e:fd:e7:5d:51:05:ff:31:18:b8:c0:4c:36:ca: 1d:36:0a:60:49:38:91:a2:9e:0e:c6:b8:02:47:c6: c9:11:6a:5c:2a:cd:c0:d6:b2:65:0c:d2:f2:62:f2: 2c:15:6c:37:40:04:96:39:27:14:3f:2d:b1:32:e5: 04:6e:af:86:65:de:3e:53:15:a4:d1:33:9d:a0:67: a2:ed:07:3a:91:97:b0:73:8a:cf:a5:bc:9a:6f:3e: c3:c5:16:9d:e2:0d:c8:c7:43:eb:47:de:b3:a2:33: df:67:e1:a6:cd:c4:e5:4d:ad:ac:f9:98:f1:28:a1: 85:f4:e1:a8:59:b4:3d:f7:c8:ec:74:5d:78:a6:12: ed:04:0c:15:ed:44:9f:55:bd:56:78:c4:d5:0a:bd: d3:79:2a:73:77:d1:66:56:b1:92:bd:be:83:08:19: 28:f6:e0:dd:2c:e8:ee:ef:7f:17:98:b8:0a:24:b7: 59:e9:7e:9b:dc:e9:8f:8b:1b:8e:f4:0d:9d:78:77: 5e:5a:66:63:c5:01:a1:ec:69:1a:77:a9:6b:c9:3f: 03:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4D:68:8E:EE:DA:F3:96:0B:AC:AF:B1:3A:2D:C3:C3:27:39:D7:8B X509v3 Authority Key Identifier: keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/hk1oju7a85YLrK-xOi3Dwyc514s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.113.10.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:0d:cd:da:bc:a2:4e:ea:ff:4e:eb:c5:43:44:39:28:ec:89: 67:4c:d6:ea:ac:6e:6a:36:b1:82:c1:48:99:f5:20:b7:ab:42: 66:48:cd:ed:52:07:56:47:48:0a:d7:ed:08:8a:11:ae:3b:a4: 3a:7c:a6:39:78:f4:26:be:73:c9:71:18:63:76:57:c3:15:bd: 1a:ea:0f:2d:f7:a0:13:86:c2:0e:63:19:28:84:a4:4a:70:0a: 08:a6:12:54:cf:1c:37:46:9a:d9:86:08:dc:38:fb:91:d9:78: de:26:4d:10:d3:54:2d:40:85:7d:1b:28:c4:30:34:5b:d7:31: 62:f9:e5:dd:9a:62:27:23:73:69:3c:f6:52:50:ed:8a:3f:ec: d8:86:38:6a:09:20:c0:b8:f5:de:e6:47:22:c4:6a:e7:e8:ee: d2:34:c3:cc:92:81:28:61:89:d1:d5:7e:b0:3c:0a:54:98:dd: 25:06:65:51:96:0b:98:e0:7d:48:43:16:c7:f0:13:66:e6:17: be:b0:c0:07:90:27:53:a4:88:ad:4a:50:c8:d9:ff:fd:b5:28: aa:15:c1:49:fe:63:30:7a:38:4c:e5:4f:75:3d:de:ab:8c:71: e8:1d:e6:c1:c8:4c:fc:de:7b:7f:a0:a2:33:0b:0e:d0:58:2a: 20:2b:3e:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WO8g18yp1n0afv8TVzpRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1 ZjU2NzQwHhcNMjYwMTAxMDIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjRkNjg4ZWVlZGFmMzk2MGJhY2FmYjEzYTJkYzNjMzI3MzlkNzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYnDoUutJuvl8V/lb+iwuBCH2RJm 9mjVVru1oCPxorU8dg0FcK6nhE1gMm41Lv3nXVEF/zEYuMBMNsodNgpgSTiRop4O xrgCR8bJEWpcKs3A1rJlDNLyYvIsFWw3QASWOScUPy2xMuUEbq+GZd4+UxWk0TOd oGei7Qc6kZewc4rPpbyabz7DxRad4g3Ix0PrR96zojPfZ+GmzcTlTa2s+ZjxKKGF 9OGoWbQ998jsdF14phLtBAwV7USfVb1WeMTVCr3TeSpzd9FmVrGSvb6DCBko9uDd LOju738XmLgKJLdZ6X6b3OmPixuO9A2deHdeWmZjxQGh7Gkad6lryT8DFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIZNaI7u2vOWC6yvsTotw8MnOdeLMB8GA1UdIwQY MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt MWZjMTllYTczYTJhLzEvaGsxb2p1N2E4NVlMcksteE9pM0R3eWM1MTRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2XEKMA0G CSqGSIb3DQEBCwUAA4IBAQCLDc3avKJO6v9O68VDRDko7IlnTNbqrG5qNrGCwUiZ 9SC3q0JmSM3tUgdWR0gK1+0IihGuO6Q6fKY5ePQmvnPJcRhjdlfDFb0a6g8t96AT hsIOYxkohKRKcAoIphJUzxw3RprZhgjcOPuR2XjeJk0Q01QtQIV9GyjEMDRb1zFi +eXdmmInI3NpPPZSUO2KP+zYhjhqCSDAuPXe5kcixGrn6O7SNMPMkoEoYYnR1X6w PApUmN0lBmVRlguY4H1IQxbH8BNm5he+sMAHkCdTpIitSlDI2f/9tSiqFcFJ/mMw ejhM5U91Pd6rjHHoHebByEz83nt/oKIzCw7QWCogKz60 -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:16 2026 by rpki-client