This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/hQjM_kfrNcmziZNp3dS3dVTcWQg.roa File: hQjM_kfrNcmziZNp3dS3dVTcWQg.roa (raw, json) Hash identifier: 7Img7nOCsZGXCyMuGVQnUnTQzFC5NzgthKFgO50X3go= Subject key identifier: 85:08:CC:FE:47:EB:35:C9:B3:89:93:69:DD:D4:B7:75:54:DC:59:08 Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e Certificate serial: 019B7AC897D7143ED4CEF8FA3703BC289D47 Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/hQjM_kfrNcmziZNp3dS3dVTcWQg.roa Signing time: Thu 01 Jan 2026 18:18:44 +0000 ROA not before: Thu 01 Jan 2026 18:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206814 IP address blocks: 77.247.197.0/24 maxlen: 24 2a12:b540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:97:d7:14:3e:d4:ce:f8:fa:37:03:bc:28:9d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e Validity Not Before: Jan 1 18:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8508ccfe47eb35c9b3899369ddd4b77554dc5908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:be:5e:76:54:95:a2:e0:05:a1:22:0f:1e:57: a1:91:7c:9c:05:58:05:79:a3:5f:a0:61:8d:a4:47: 75:2f:71:e6:e0:55:2a:c9:a0:d8:8a:cb:0a:ae:0e: 5f:e6:21:bc:de:89:3d:31:63:0c:27:2b:74:55:58: 2f:4c:e5:d1:e1:10:38:3f:68:55:a0:51:b1:59:9c: 89:84:25:ed:93:48:73:b6:0d:af:8f:bb:38:95:0e: cb:d5:f4:13:d3:08:03:8b:cd:a5:74:c3:a0:8c:64: 2e:14:0d:f3:68:fb:69:79:f3:9f:8f:1d:fa:02:99: c1:26:58:ac:8e:10:4b:a6:33:d0:57:dd:2f:1b:9a: 36:da:78:5f:4f:a9:a9:79:eb:02:ad:02:86:3a:33: 67:12:38:d3:16:05:02:e1:dc:c7:50:f8:82:8f:08: d9:25:e8:ca:24:1c:16:6e:08:e8:75:ab:f4:00:54: 59:31:e7:d9:76:5a:a9:59:30:0d:65:56:51:d1:66: 22:2a:2a:b4:01:58:57:bb:68:08:3b:1f:b7:37:f0: 74:1a:49:84:0b:f7:04:b5:95:e7:55:e5:27:76:08: 79:c3:84:0b:52:0e:43:80:99:e1:98:e7:33:a7:1a: cf:6c:e6:c0:db:80:a8:23:85:51:1b:17:a1:09:53: f1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:08:CC:FE:47:EB:35:C9:B3:89:93:69:DD:D4:B7:75:54:DC:59:08 X509v3 Authority Key Identifier: keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/hQjM_kfrNcmziZNp3dS3dVTcWQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.247.197.0/24 IPv6: 2a12:b540::/29 Signature Algorithm: sha256WithRSAEncryption 5b:df:52:6d:00:af:9f:57:f1:c2:ae:f5:85:21:ea:e8:87:f1: 0f:2d:59:c2:61:84:8b:28:0c:53:85:1b:3c:3b:59:1a:c2:d5: 1f:22:09:86:7a:47:37:8c:68:1c:5b:5c:fe:05:9e:ec:96:d0: 96:66:31:ea:1f:cd:8f:62:b5:4f:61:c0:d6:a9:34:16:20:65: 7d:86:83:85:01:9d:6b:8f:97:52:05:b3:9a:1d:48:8a:39:f0: 6e:96:25:a2:4f:3e:09:ad:a6:cf:38:aa:06:f7:34:d7:f9:e4: d8:7b:c6:aa:8b:5d:40:e6:50:6a:3a:97:0d:e8:53:a4:74:a7: 1b:de:89:17:fe:59:fd:ab:a8:44:d4:28:40:98:fe:b2:7a:4c: eb:be:11:fa:b4:11:10:d4:65:bb:76:a9:6c:cb:08:c5:3c:71: ca:20:f0:22:b3:dc:2e:6d:21:b7:3d:b1:40:d9:25:38:a3:40: c1:a6:20:16:82:3f:82:72:9b:16:0a:ba:9b:80:ff:39:91:8e: 63:83:a6:4a:46:fe:fe:73:36:fa:7a:4d:f5:66:f8:53:b4:a6: 39:ac:43:22:d2:39:43:59:08:38:41:d3:20:3d:02:c9:5f:62: 11:e4:ae:ff:2a:89:83:02:4a:f9:ea:55:34:a0:29:54:74:ea: 9d:07:f7:e8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yJfXFD7Uzvj6NwO8KJ1HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkOTE5NzZhYjA2YmZmYWYzZTI4Zjg0Mjg2ZGIzZWUyMDNl MDdkNWUwHhcNMjYwMTAxMTgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTA4Y2NmZTQ3ZWIzNWM5YjM4OTkzNjlkZGQ0Yjc3NTU0ZGM1OTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr5edlSVouAFoSIPHlehkXycBVgF eaNfoGGNpEd1L3Hm4FUqyaDYissKrg5f5iG83ok9MWMMJyt0VVgvTOXR4RA4P2hV oFGxWZyJhCXtk0hztg2vj7s4lQ7L1fQT0wgDi82ldMOgjGQuFA3zaPtpefOfjx36 ApnBJlisjhBLpjPQV90vG5o22nhfT6mpeesCrQKGOjNnEjjTFgUC4dzHUPiCjwjZ JejKJBwWbgjodav0AFRZMefZdlqpWTANZVZR0WYiKiq0AVhXu2gIOx+3N/B0GkmE C/cEtZXnVeUndgh5w4QLUg5DgJnhmOczpxrPbObA24CoI4VRGxehCVPxAQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIUIzP5H6zXJs4mTad3Ut3VU3FkIMB8GA1UdIwQY MBaAFE2Rl2qwa/+vPij4QobbPuID4H1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82ZDdjOWYtM2MwZC00ZjhkLTk4YTAt NDg2YzA2ZWRlZmVhLzEvaFFqTV9rZnJOY216aVpOcDNkUzNkVlRjV1FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi82ZDdjOWYtM2MwZC00ZjhkLTk4YTAtNDg2YzA2ZWRlZmVh LzEvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQATffFMA0E AgACMAcDBQMqErVAMA0GCSqGSIb3DQEBCwUAA4IBAQBb31JtAK+fV/HCrvWFIero h/EPLVnCYYSLKAxThRs8O1kawtUfIgmGekc3jGgcW1z+BZ7sltCWZjHqH82PYrVP YcDWqTQWIGV9hoOFAZ1rj5dSBbOaHUiKOfBuliWiTz4JrabPOKoG9zTX+eTYe8aq i11A5lBqOpcN6FOkdKcb3okX/ln9q6hE1ChAmP6yekzrvhH6tBEQ1GW7dqlsywjF PHHKIPAis9wubSG3PbFA2SU4o0DBpiAWgj+CcpsWCrqbgP85kY5jg6ZKRv7+czb6 ek31ZvhTtKY5rEMi0jlDWQg4QdMgPQLJX2IR5K7/KomDAkr56lU0oClUdOqdB/fo -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:23 2026 by rpki-client