This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/hieYljUxWV_urT3FVt4VHwUYJHA.roa File: hieYljUxWV_urT3FVt4VHwUYJHA.roa (raw, json) Hash identifier: uaNQn7nDi6rwH6tpmG6o5xOJwukq6sKOWsUOpBkHxN0= Subject key identifier: 86:27:98:96:35:31:59:5F:EE:AD:3D:C5:56:DE:15:1F:05:18:24:70 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019B78349C98349EB1C3CFE6B096184CC5FB Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/hieYljUxWV_urT3FVt4VHwUYJHA.roa Signing time: Thu 01 Jan 2026 06:17:52 +0000 ROA not before: Thu 01 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46805 IP address blocks: 23.92.112.0/24 maxlen: 24 23.92.113.0/24 maxlen: 24 23.92.114.0/24 maxlen: 24 104.160.0.0/24 maxlen: 24 104.160.5.0/24 maxlen: 24 104.160.8.0/24 maxlen: 24 104.160.22.0/24 maxlen: 24 104.160.23.0/24 maxlen: 24 104.160.24.0/24 maxlen: 24 104.160.25.0/24 maxlen: 24 104.160.26.0/24 maxlen: 24 104.160.27.0/24 maxlen: 24 107.150.80.0/24 maxlen: 24 107.150.92.0/24 maxlen: 24 192.40.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9c:98:34:9e:b1:c3:cf:e6:b0:96:18:4c:c5:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Jan 1 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=862798963531595feead3dc556de151f05182470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:99:82:ea:0b:e5:07:6b:43:b5:08:f5:f2:1c: 12:1d:ad:98:1c:ae:a4:f0:41:3a:01:36:a0:bb:a9: a4:59:eb:25:cb:7f:52:5f:fb:6e:ae:b0:0c:13:10: de:27:24:6f:51:e4:b0:92:14:22:62:9b:86:a3:f7: 87:70:15:66:f2:73:0b:71:b0:d5:f9:03:a9:86:d4: 53:64:79:64:e3:e7:ef:4a:4b:09:b3:84:dc:c4:c9: 04:ad:c1:de:cd:76:83:1f:fc:c4:bf:9e:27:0e:b6: df:e2:3f:37:4d:91:1d:f0:d6:34:c9:20:ac:69:38: 6d:0c:29:ae:0f:09:89:a6:b4:89:2b:06:b8:08:08: 05:f2:c1:17:33:77:1e:45:1f:92:ea:9e:e9:2d:a9: ac:bf:76:19:a2:f4:e3:a7:1f:8d:cf:54:da:13:1b: e3:aa:22:65:21:d2:ec:fd:c3:68:b9:f0:d4:3f:44: 27:53:ad:b3:0a:58:63:02:60:a3:2f:2a:a1:f5:e4: 9a:0a:93:01:6d:20:41:09:cf:11:3e:1f:76:07:14: b3:e0:7e:cc:61:90:9d:e7:2e:4f:47:60:31:ae:b4: f6:62:81:0a:13:01:4d:f9:ce:b0:20:27:a9:a7:4f: d9:24:8a:6f:7e:cb:75:45:38:0a:93:08:fc:e4:d3: ff:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:27:98:96:35:31:59:5F:EE:AD:3D:C5:56:DE:15:1F:05:18:24:70 X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/hieYljUxWV_urT3FVt4VHwUYJHA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.92.112.0-23.92.114.255 104.160.0.0/24 104.160.5.0/24 104.160.8.0/24 104.160.22.0-104.160.27.255 107.150.80.0/24 107.150.92.0/24 192.40.95.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:43:87:7b:ae:fb:cc:94:81:33:78:a4:f2:c3:1c:be:29:04: aa:ba:46:c3:71:8a:55:ab:c0:91:fe:a6:22:08:b9:73:85:a0: 2b:ad:b1:df:0e:7a:9d:99:c0:2b:d7:6d:52:11:45:2e:25:58: b6:c1:28:5c:fd:6c:ab:9b:7e:6d:79:e4:65:de:6e:7d:44:09: a9:09:5e:60:46:a9:92:6a:7a:0a:92:4f:1f:43:15:2a:47:1b: ed:2c:84:44:2e:a3:9a:93:11:48:7c:e6:c3:bc:5b:47:d3:ec: 74:d9:92:9c:37:7f:c6:dd:13:48:f7:a6:48:b2:b9:87:25:33: a7:59:2c:29:44:00:79:be:54:f9:1a:8a:10:e3:92:a6:bc:0a: 01:47:13:c1:38:1b:38:60:ef:d2:bc:09:00:00:bd:f8:6c:62: 41:2e:14:af:ab:bd:60:2f:71:9b:b6:78:2c:5b:7e:92:63:ef: c4:c0:4f:89:e2:da:de:06:36:70:22:52:dc:be:f6:10:cf:79: 09:b2:bf:fe:d4:f9:27:f9:3b:19:a0:45:8a:74:9a:7c:5b:ba: 0a:7a:87:ee:8a:d3:01:44:61:02:ad:fd:31:1d:3e:8b:15:84: c8:68:9e:3b:9a:e5:b1:31:fe:24:31:34:6c:e3:c1:e0:17:a6: 54:c0:8a:7c -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt4NJyYNJ6xw8/msJYYTMX7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjYwMTAxMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjI3OTg5NjM1MzE1OTVmZWVhZDNkYzU1NmRlMTUxZjA1MTgyNDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpmC6gvlB2tDtQj18hwSHa2YHK6k 8EE6ATagu6mkWesly39SX/turrAMExDeJyRvUeSwkhQiYpuGo/eHcBVm8nMLcbDV +QOphtRTZHlk4+fvSksJs4TcxMkErcHezXaDH/zEv54nDrbf4j83TZEd8NY0ySCs aThtDCmuDwmJprSJKwa4CAgF8sEXM3ceRR+S6p7pLamsv3YZovTjpx+Nz1TaExvj qiJlIdLs/cNoufDUP0QnU62zClhjAmCjLyqh9eSaCpMBbSBBCc8RPh92BxSz4H7M YZCd5y5PR2AxrrT2YoEKEwFN+c6wICepp0/ZJIpvfst1RTgKkwj85NP//wIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFIYnmJY1MVlf7q09xVbeFR8FGCRwMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvaGllWWxqVXhXVl91clQzRlZ0NFZId1VZSkhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAMAwDBAQXXHAD BAAXXHIDBABooAADBABooAUDBABooAgwDAMEAWigFgMEAmigGAMEAGuWUAMEAGuW XAMEAMAoXzANBgkqhkiG9w0BAQsFAAOCAQEAP0OHe677zJSBM3ik8sMcvikEqrpG w3GKVavAkf6mIgi5c4WgK62x3w56nZnAK9dtUhFFLiVYtsEoXP1sq5t+bXnkZd5u fUQJqQleYEapkmp6CpJPH0MVKkcb7SyERC6jmpMRSHzmw7xbR9PsdNmSnDd/xt0T SPemSLK5hyUzp1ksKUQAeb5U+RqKEOOSprwKAUcTwTgbOGDv0rwJAAC9+GxiQS4U r6u9YC9xm7Z4LFt+kmPvxMBPieLa3gY2cCJS3L72EM95CbK//tT5J/k7GaBFinSa fFu6CnqH7orTAURhAq39MR0+ixWEyGieO5rlsTH+JDE0bOPB4BemVMCKfA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:49:04 2026 by rpki-client