This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/HJxNhM0gSWGM0ae4MTa4K5pRmXM.roa File: HJxNhM0gSWGM0ae4MTa4K5pRmXM.roa (raw, json) Hash identifier: QKBEmBvWsD7j11AgMLUINm7gJ7viiBslONQ/N4Vz6/0= Subject key identifier: 1C:9C:4D:84:CD:20:49:61:8C:D1:A7:B8:31:36:B8:2B:9A:51:99:73 Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F845DCA489BDAB5ED9C7F13F5D6CAED Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/HJxNhM0gSWGM0ae4MTa4K5pRmXM.roa Signing time: Fri 02 Jan 2026 16:22:19 +0000 ROA not before: Fri 02 Jan 2026 16:22:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31541 IP address blocks: 212.252.204.0/24 maxlen: 24 212.252.205.0/24 maxlen: 24 212.252.206.0/24 maxlen: 24 212.252.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:5d:ca:48:9b:da:b5:ed:9c:7f:13:f5:d6:ca:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c9c4d84cd2049618cd1a7b83136b82b9a519973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:22:79:55:7a:7e:c6:16:e4:c0:3a:b0:2f:b9: c0:5e:ba:c9:6c:3c:14:7d:d0:13:c9:45:09:5a:07: 17:ad:d2:b4:81:9a:4a:b0:8c:ec:bb:53:0c:65:5b: fd:b8:c1:91:90:0c:14:2c:a6:0a:ba:36:b7:96:86: 3a:72:b7:cf:60:b9:c1:d8:c6:ca:41:15:94:2f:7d: 66:b0:fa:5b:cd:6e:2d:b4:e7:66:d7:48:be:d7:23: 10:9d:bc:06:74:97:67:dd:f4:15:ee:21:d8:2f:9b: cf:80:b4:95:b3:e4:e8:dc:4a:a6:3a:68:cb:e1:ea: f4:c5:8b:92:1f:00:8f:0b:35:ad:08:ec:f9:98:01: a6:1f:17:ac:3a:1b:5a:48:97:99:1d:bc:3d:56:63: 8d:2b:dd:f8:95:86:8e:35:82:03:9c:e9:7a:06:e9: 71:a2:5f:54:0c:6b:b8:5f:76:ce:95:fc:3d:d5:cb: a2:86:bc:21:30:ac:3d:56:00:59:e1:a4:70:87:a5: cb:5a:c8:1d:d8:8a:a8:a0:87:cf:db:66:e2:df:3f: b4:1f:44:84:94:28:a7:22:aa:f5:a7:95:97:db:e2: 34:43:27:d0:3b:34:9c:33:71:4b:07:ed:bf:da:c6: 72:f0:3d:06:d6:55:ed:41:2b:37:81:ac:83:77:13: a3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9C:4D:84:CD:20:49:61:8C:D1:A7:B8:31:36:B8:2B:9A:51:99:73 X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/HJxNhM0gSWGM0ae4MTa4K5pRmXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.252.204.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:69:8b:a9:69:57:4a:1e:d6:22:77:79:0a:1a:d9:16:b2:f7: dc:9a:c0:7d:ec:5d:ab:a9:dc:45:b0:d2:f6:67:3c:b9:26:0b: c9:bb:17:e1:d9:51:24:e1:81:f6:5b:d4:20:8e:99:5f:e3:d2: 51:c0:0d:87:16:48:c3:aa:11:8f:9e:54:3a:b5:b2:f3:64:97: 8e:31:65:f7:f6:90:e5:1c:a9:85:35:2b:f7:cb:3f:73:89:69: 60:b1:9f:8a:34:24:ab:e5:a2:65:25:05:26:6d:a6:ad:8f:74: 08:47:90:d0:b6:33:28:a9:e2:16:2c:83:cc:c0:ce:eb:5d:8b: 05:c7:c5:53:9f:5a:51:c1:cf:13:c4:23:fd:29:0a:d4:25:46: 24:7b:2e:ac:d5:5b:6e:b3:50:26:57:3e:48:2f:d3:f7:95:39: fe:2b:91:5c:7a:3e:36:1f:a0:b1:90:97:a0:7a:84:36:b5:a4: ec:cf:e6:54:4b:ab:e9:0f:af:79:57:43:f3:e4:e0:4e:f6:b3: 80:1f:eb:51:13:a1:59:36:64:99:f1:df:98:b9:7a:54:f9:f8: 21:89:b2:91:80:07:83:55:bd:b5:5d:4a:94:2c:71:61:43:af: bd:72:5a:6a:b4:c5:78:57:45:ba:df:1b:a9:b1:cc:c2:83:2d: b5:1a:ce:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hF3KSJvate2cfxP11srtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzljNGQ4NGNkMjA0OTYxOGNkMWE3YjgzMTM2YjgyYjlhNTE5OTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSJ5VXp+xhbkwDqwL7nAXrrJbDwU fdATyUUJWgcXrdK0gZpKsIzsu1MMZVv9uMGRkAwULKYKuja3loY6crfPYLnB2MbK QRWUL31msPpbzW4ttOdm10i+1yMQnbwGdJdn3fQV7iHYL5vPgLSVs+To3EqmOmjL 4er0xYuSHwCPCzWtCOz5mAGmHxesOhtaSJeZHbw9VmONK934lYaONYIDnOl6Bulx ol9UDGu4X3bOlfw91cuihrwhMKw9VgBZ4aRwh6XLWsgd2IqooIfP22bi3z+0H0SE lCinIqr1p5WX2+I0QyfQOzScM3FLB+2/2sZy8D0G1lXtQSs3gayDdxOjiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBycTYTNIElhjNGnuDE2uCuaUZlzMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvSEp4TmhNMGdTV0dNMGFlNE1UYTRLNXBSbVhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1PzMMA0G CSqGSIb3DQEBCwUAA4IBAQBeaYupaVdKHtYid3kKGtkWsvfcmsB97F2rqdxFsNL2 Zzy5JgvJuxfh2VEk4YH2W9Qgjplf49JRwA2HFkjDqhGPnlQ6tbLzZJeOMWX39pDl HKmFNSv3yz9ziWlgsZ+KNCSr5aJlJQUmbaatj3QIR5DQtjMoqeIWLIPMwM7rXYsF x8VTn1pRwc8TxCP9KQrUJUYkey6s1Vtus1AmVz5IL9P3lTn+K5Fcej42H6CxkJeg eoQ2taTsz+ZUS6vpD695V0Pz5OBO9rOAH+tRE6FZNmSZ8d+YuXpU+fghibKRgAeD Vb21XUqULHFhQ6+9clpqtMV4V0W63xupsczCgy21Gs5f -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:49 2026 by rpki-client