This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/h-KmrUFQix2mPVIgPxijrxKClGw.roa File: h-KmrUFQix2mPVIgPxijrxKClGw.roa (raw, json) Hash identifier: fc8hHRpimWi4M001kIYlHNuSFZw5gckGt8QS97+VBbM= Subject key identifier: 87:E2:A6:AD:41:50:8B:1D:A6:3D:52:20:3F:18:A3:AF:12:82:94:6C Certificate issuer: /CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a Certificate serial: 019B7758FA1CC3030B8001BA5E6560D40247 Authority key identifier: 85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/h-KmrUFQix2mPVIgPxijrxKClGw.roa Signing time: Thu 01 Jan 2026 02:17:58 +0000 ROA not before: Thu 01 Jan 2026 02:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 83.143.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fa:1c:c3:03:0b:80:01:ba:5e:65:60:d4:02:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a Validity Not Before: Jan 1 02:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87e2a6ad41508b1da63d52203f18a3af1282946c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ca:f8:97:de:8b:84:37:84:e8:20:a5:7f:46: df:76:e3:b6:9a:ed:89:be:4c:7b:cc:c7:55:b9:43: 1a:28:a1:33:d3:77:32:af:55:86:5c:8d:41:92:bf: 96:8d:4c:c0:fd:b5:d1:62:f5:d2:83:c4:dc:84:82: e9:a3:02:c9:40:12:ee:97:05:e8:53:05:98:1d:4b: 01:42:a3:59:e0:3c:fa:e0:e7:d6:0d:c4:e5:83:eb: 83:73:c7:fb:fc:a6:e7:1e:6e:60:98:7d:18:84:e3: 81:19:4b:41:a9:c5:74:d9:af:ab:8d:7a:ca:c6:84: cd:76:8a:b1:04:c4:a5:e7:67:27:5a:46:9c:bf:29: b2:76:dd:60:73:0f:ee:2d:37:ce:b5:a2:11:05:9c: c0:d0:33:b3:30:49:57:6d:d8:5d:67:a9:d8:c2:51: 6c:1b:11:e3:2d:d6:a7:9e:25:f8:e8:80:ba:7f:44: 33:0e:ab:94:38:f8:47:7d:b9:09:a4:64:1e:4f:a7: c7:1f:80:4c:8a:67:e5:ad:f7:29:11:b0:45:14:52: 99:c5:4d:43:e9:e1:ed:7e:e8:72:94:42:2c:97:3f: b3:64:33:01:fd:a8:96:45:2d:31:11:ea:da:b0:3b: 02:bd:fc:11:3a:f8:b5:0c:d9:dc:29:73:9e:7b:28: 6e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E2:A6:AD:41:50:8B:1D:A6:3D:52:20:3F:18:A3:AF:12:82:94:6C X509v3 Authority Key Identifier: keyid:85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/h-KmrUFQix2mPVIgPxijrxKClGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.143.16.0/21 Signature Algorithm: sha256WithRSAEncryption 36:a5:d6:90:f2:a4:e7:ba:60:a1:84:c0:24:5e:c5:9b:b0:69: 82:d8:f5:60:fd:fa:9d:fc:99:e5:c0:25:fe:3c:92:68:07:3e: 81:b6:ea:28:0a:c9:6a:6a:e6:8f:16:c0:84:99:cb:7b:41:d8: 63:ee:9e:e5:61:f7:72:d5:d0:75:25:f2:e8:53:32:d8:17:41: ff:94:ee:47:b6:6d:55:91:f1:5b:58:b6:a9:a2:9f:af:fc:7e: f5:b9:6f:cb:41:aa:24:dc:b7:7b:73:db:a0:ec:a2:d6:f8:68: bc:69:2a:bf:8b:25:60:29:7c:9b:4e:65:41:09:ab:dd:4a:ea: 2d:2a:35:ec:5b:02:34:6a:8d:c5:7a:fd:0c:2d:c9:20:39:9d: 23:ac:66:a9:a1:40:22:49:bd:34:eb:3a:d9:82:6e:19:63:b9: b5:1e:ee:98:cc:93:5b:e5:f3:b1:5d:69:eb:05:20:fa:0f:e7: 92:13:a3:23:e5:fc:fa:f7:18:79:e4:00:cb:a9:82:64:93:3e: 8a:50:bd:ba:be:7e:df:78:12:6b:62:45:17:25:70:dc:0d:60: 0a:a1:fb:91:4e:13:28:00:d0:1b:4b:e0:8a:0a:93:f4:9d:fc: 63:7a:51:6b:1f:16:fe:23:65:85:df:d3:4a:62:d0:e9:b7:21: 1e:61:71:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPocwwMLgAG6XmVg1AJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZmI4NWFkZDA5ZjQ4NzZlYTZhYWE4OGQ0ZDg4YzgxY2Ni NmIxMGEwHhcNMjYwMTAxMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2UyYTZhZDQxNTA4YjFkYTYzZDUyMjAzZjE4YTNhZjEyODI5NDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMr4l96LhDeE6CClf0bfduO2mu2J vkx7zMdVuUMaKKEz03cyr1WGXI1Bkr+WjUzA/bXRYvXSg8TchILpowLJQBLulwXo UwWYHUsBQqNZ4Dz64OfWDcTlg+uDc8f7/KbnHm5gmH0YhOOBGUtBqcV02a+rjXrK xoTNdoqxBMSl52cnWkacvymydt1gcw/uLTfOtaIRBZzA0DOzMElXbdhdZ6nYwlFs GxHjLdanniX46IC6f0QzDquUOPhHfbkJpGQeT6fHH4BMimflrfcpEbBFFFKZxU1D 6eHtfuhylEIslz+zZDMB/aiWRS0xEerasDsCvfwROvi1DNncKXOeeyhu7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIfipq1BUIsdpj1SID8Yo68SgpRsMB8GA1UdIwQY MBaAFIX7ha3Qn0h26mqqiNTYjIHMtrEKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGZ1RnJkQ2ZTSGJxYXFxSTFOaU1nY3kyc1FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jZWVhOTEtMGEyYS00YTRlLTkxN2It YzYxNjFjZTM5NWFmLzEvaC1LbXJVRlFpeDJtUFZJZ1B4aWpyeEtDbEd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9jZWVhOTEtMGEyYS00YTRlLTkxN2ItYzYxNjFjZTM5NWFm LzEvaGZ1RnJkQ2ZTSGJxYXFxSTFOaU1nY3kyc1FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDU48QMA0G CSqGSIb3DQEBCwUAA4IBAQA2pdaQ8qTnumChhMAkXsWbsGmC2PVg/fqd/JnlwCX+ PJJoBz6BtuooCslqauaPFsCEmct7Qdhj7p7lYfdy1dB1JfLoUzLYF0H/lO5Htm1V kfFbWLapop+v/H71uW/LQaok3Ld7c9ug7KLW+Gi8aSq/iyVgKXybTmVBCavdSuot KjXsWwI0ao3Fev0MLckgOZ0jrGapoUAiSb006zrZgm4ZY7m1Hu6YzJNb5fOxXWnr BSD6D+eSE6Mj5fz69xh55ADLqYJkkz6KUL26vn7feBJrYkUXJXDcDWAKofuRThMo ANAbS+CKCpP0nfxjelFrHxb+I2WF39NKYtDptyEeYXFx -----END CERTIFICATE-----Generated at Sun Jan 25 13:32:47 2026 by rpki-client