This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/hAZrKewTVxZT3GF5DqzKsU9bNKo.roa File: hAZrKewTVxZT3GF5DqzKsU9bNKo.roa (raw, json) Hash identifier: fsGaTWUHmLGtuoOa159GIKQVUnBG8uk4RWTcKenk10M= Subject key identifier: 84:06:6B:29:EC:13:57:16:53:DC:61:79:0E:AC:CA:B1:4F:5B:34:AA Certificate issuer: /CN=490db999ca4ce287c5c92ab167a500902259bb05 Certificate serial: 019B7BA38A193173FB6FDDB18330557380BD Authority key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/hAZrKewTVxZT3GF5DqzKsU9bNKo.roa Signing time: Thu 01 Jan 2026 22:17:53 +0000 ROA not before: Thu 01 Jan 2026 22:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34666 IP address blocks: 81.16.240.0/24 maxlen: 24 81.16.241.0/24 maxlen: 24 81.16.242.0/24 maxlen: 24 81.16.243.0/24 maxlen: 24 81.16.244.0/24 maxlen: 24 81.16.245.0/24 maxlen: 24 81.16.246.0/24 maxlen: 24 81.16.247.0/24 maxlen: 24 81.16.248.0/24 maxlen: 24 81.16.249.0/24 maxlen: 24 81.16.250.0/24 maxlen: 24 81.16.251.0/24 maxlen: 24 81.16.252.0/24 maxlen: 24 81.16.253.0/24 maxlen: 24 81.16.254.0/24 maxlen: 24 81.16.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:8a:19:31:73:fb:6f:dd:b1:83:30:55:73:80:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490db999ca4ce287c5c92ab167a500902259bb05 Validity Not Before: Jan 1 22:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84066b29ec13571653dc61790eaccab14f5b34aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:06:03:3e:51:4d:59:61:1f:e3:b0:e2:3f:7f: 9c:a8:e0:65:57:c3:76:69:a2:28:5c:06:04:66:81: 87:df:6b:4f:7c:e7:f3:9b:27:5e:ca:32:29:f8:1d: e1:f0:18:d0:2a:29:7d:4d:53:b1:bd:42:dd:8e:1d: 83:66:af:2b:fe:7e:6c:ac:e9:5b:be:71:93:d3:df: 52:98:ad:22:36:ad:29:32:97:7a:0f:2e:35:70:a1: b7:99:0f:8d:22:30:5f:09:f4:b8:09:98:50:7b:a3: 89:43:e7:39:70:93:e3:c3:ff:f0:28:59:72:16:1d: 4b:d7:22:ff:2a:c9:2b:24:7f:be:d8:c4:38:48:c5: 04:95:23:c3:f8:28:5f:2e:c9:a9:a8:69:b3:a2:8f: a2:75:00:b2:6c:a9:ca:8b:bf:d1:5b:05:d4:73:4e: 50:d8:14:2a:aa:30:2b:df:02:19:df:99:b8:d0:13: 84:2f:2a:7f:2d:11:b0:26:ee:05:30:81:4f:af:04: 7c:f4:60:0f:65:2f:ae:3d:68:00:0d:88:45:b3:d3: 88:66:9d:43:af:9c:e4:46:0c:3a:ff:0f:e0:1c:7a: 9c:62:4c:21:73:e1:84:29:8b:79:7a:53:db:92:5e: 2f:6b:18:d2:7d:62:3f:fb:15:ab:25:7b:15:38:35: 7a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:06:6B:29:EC:13:57:16:53:DC:61:79:0E:AC:CA:B1:4F:5B:34:AA X509v3 Authority Key Identifier: keyid:49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/hAZrKewTVxZT3GF5DqzKsU9bNKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.16.240.0/20 Signature Algorithm: sha256WithRSAEncryption ac:6f:2a:89:fe:c7:f7:a6:b6:eb:b3:5f:2d:11:f0:63:08:77: 1b:d9:e8:6c:8b:dd:1f:73:8d:e4:68:6d:bf:88:71:e7:3b:e7: 90:78:09:b4:88:4c:2c:3b:c6:92:7a:b1:23:f5:72:08:ef:b7: a5:f6:43:f4:53:eb:32:c6:1c:c5:be:c1:78:9d:17:03:6e:1c: bd:4d:56:c9:26:62:98:2c:ee:ee:8e:b9:97:26:4f:1f:c4:d3: 0c:ec:0d:be:40:e3:18:e8:cb:95:d6:53:1a:f6:75:54:31:5e: 1c:1e:cc:72:93:0a:12:ed:0d:c1:82:fb:63:1b:23:6c:4d:86: 5f:41:d7:56:71:6e:58:ca:25:06:c6:96:dc:58:9a:15:1d:88: 33:d9:0d:11:de:90:17:2b:ef:d5:02:73:2f:33:36:9b:0d:4a: bc:7c:b8:8c:99:f9:39:f5:63:1f:88:8c:d6:ec:30:2c:ea:91: 53:04:d7:cc:2f:ac:28:df:73:b9:65:f9:4b:a1:55:8c:5e:3a: 43:ac:fb:dd:fd:73:57:a8:d8:1a:4d:a7:fd:fe:e0:b9:92:2b: c6:8a:bd:b1:a4:f7:ec:bf:60:26:f3:e0:5c:a3:d1:89:4c:44: 10:ed:5b:d5:79:bd:56:09:b4:9b:5b:6a:ed:3f:fb:b7:d1:d5: 6e:3e:01:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o4oZMXP7b92xgzBVc4C9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MGRiOTk5Y2E0Y2UyODdjNWM5MmFiMTY3YTUwMDkwMjI1 OWJiMDUwHhcNMjYwMTAxMjIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDA2NmIyOWVjMTM1NzE2NTNkYzYxNzkwZWFjY2FiMTRmNWIzNGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQYDPlFNWWEf47DiP3+cqOBlV8N2 aaIoXAYEZoGH32tPfOfzmydeyjIp+B3h8BjQKil9TVOxvULdjh2DZq8r/n5srOlb vnGT099SmK0iNq0pMpd6Dy41cKG3mQ+NIjBfCfS4CZhQe6OJQ+c5cJPjw//wKFly Fh1L1yL/KskrJH++2MQ4SMUElSPD+ChfLsmpqGmzoo+idQCybKnKi7/RWwXUc05Q 2BQqqjAr3wIZ35m40BOELyp/LRGwJu4FMIFPrwR89GAPZS+uPWgADYhFs9OIZp1D r5zkRgw6/w/gHHqcYkwhc+GEKYt5elPbkl4vaxjSfWI/+xWrJXsVODV6zQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIQGaynsE1cWU9xheQ6syrFPWzSqMB8GA1UdIwQY MBaAFEkNuZnKTOKHxckqsWelAJAiWbsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82ZjcxZjMtNjM5OS00OTEzLWI5OGUt OThlMjVlMDQ2OTA4LzEvaEFacktld1RWeFpUM0dGNURxektzVTliTktvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni82ZjcxZjMtNjM5OS00OTEzLWI5OGUtOThlMjVlMDQ2OTA4 LzEvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEURDwMA0G CSqGSIb3DQEBCwUAA4IBAQCsbyqJ/sf3prbrs18tEfBjCHcb2ehsi90fc43kaG2/ iHHnO+eQeAm0iEwsO8aSerEj9XII77el9kP0U+syxhzFvsF4nRcDbhy9TVbJJmKY LO7ujrmXJk8fxNMM7A2+QOMY6MuV1lMa9nVUMV4cHsxykwoS7Q3BgvtjGyNsTYZf QddWcW5YyiUGxpbcWJoVHYgz2Q0R3pAXK+/VAnMvMzabDUq8fLiMmfk59WMfiIzW 7DAs6pFTBNfML6wo33O5ZflLoVWMXjpDrPvd/XNXqNgaTaf9/uC5kivGir2xpPfs v2Am8+Bco9GJTEQQ7VvVeb1WCbSbW2rtP/u30dVuPgFS -----END CERTIFICATE-----Generated at Sun Jan 25 20:49:16 2026 by rpki-client