This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/hvSBwCaj_tJ_7ZE6Ma831F6v3xQ.roa File: hvSBwCaj_tJ_7ZE6Ma831F6v3xQ.roa (raw, json) Hash identifier: JWw3/L4UCUSDwP9XiLbzJj8Sl5rwZU+IUTS89T822ZM= Subject key identifier: 86:F4:81:C0:26:A3:FE:D2:7F:ED:91:3A:31:AF:37:D4:5E:AF:DF:14 Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019B7C8083F29F6B7CCE699761DC3C074400 Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/hvSBwCaj_tJ_7ZE6Ma831F6v3xQ.roa Signing time: Fri 02 Jan 2026 02:19:15 +0000 ROA not before: Fri 02 Jan 2026 02:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209535 IP address blocks: 212.163.20.0/22 maxlen: 24 212.163.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:83:f2:9f:6b:7c:ce:69:97:61:dc:3c:07:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Jan 2 02:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86f481c026a3fed27fed913a31af37d45eafdf14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:60:d4:ce:bd:8b:07:a1:61:74:07:a2:3d:36: 0e:97:dc:c2:67:13:20:0a:17:e8:d3:ea:e0:e7:21: 70:f2:bb:8a:32:d2:ff:92:b6:af:ec:d8:bb:76:46: 19:53:9e:16:31:be:12:08:be:3d:13:ce:77:95:b8: 03:fe:ac:84:f0:7f:51:a1:5c:88:51:c0:c2:7a:64: ce:8c:8b:ef:58:be:f8:72:36:d2:73:74:60:75:bc: 7e:d9:9d:51:ba:b8:44:f9:b7:f6:7c:e1:3d:af:db: a2:5f:a6:6d:43:c4:99:b8:7d:73:e6:79:ba:ae:08: 9f:d4:ad:b2:b6:54:ce:ae:98:ff:c3:81:41:12:cb: 7a:ec:aa:41:32:af:d5:5f:7e:7c:8c:a7:9c:4a:bd: 8c:63:7b:44:4d:fb:c1:66:22:85:8a:2f:ac:bf:77: 74:73:18:2c:49:a0:7a:dd:eb:4f:67:65:cd:84:6e: 53:e5:56:42:38:bb:f3:37:04:20:16:a7:57:2a:a9: 18:6c:49:39:0f:ee:b4:29:2d:a5:29:e6:6a:61:e5: 05:02:45:35:85:31:61:4d:ad:e1:5e:5a:d9:17:16: fd:5c:4c:94:97:85:9d:be:ef:ad:95:a0:8a:2d:cd: 9e:4e:47:4d:06:bb:ab:4b:bc:be:04:c2:e6:fb:60: 39:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F4:81:C0:26:A3:FE:D2:7F:ED:91:3A:31:AF:37:D4:5E:AF:DF:14 X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/hvSBwCaj_tJ_7ZE6Ma831F6v3xQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.163.20.0/22 212.163.36.0/22 Signature Algorithm: sha256WithRSAEncryption e5:27:e4:1c:bc:81:2a:70:83:46:8f:22:45:1b:fa:25:91:ab: c3:33:d2:ee:7a:dd:6f:62:e9:32:28:5b:51:ae:35:6c:d3:d4: 7e:0a:a5:f4:20:a9:a1:16:30:28:c9:da:a6:0b:eb:f9:52:ea: ab:0a:7c:19:43:14:c2:07:df:8d:b3:56:5d:23:48:d9:ba:b7: 54:92:f1:10:6d:86:b1:e8:e8:6b:99:88:2c:2c:3a:d0:1b:e5: 99:56:d5:55:70:00:ef:68:99:3a:c5:64:59:10:9c:ba:c4:0a: 3d:0c:4e:7c:16:12:bc:42:de:61:5e:4d:43:55:bd:de:08:16: 45:22:54:07:8a:9a:aa:e8:ac:49:c5:0e:9b:62:eb:76:ca:71: b0:7e:5a:81:b4:2b:9f:98:b8:ca:04:f5:cb:25:db:63:20:9f: 8b:87:87:8c:90:ff:6e:bb:c1:3f:e1:95:8c:83:3a:73:1c:86: c8:81:43:9a:8e:a0:63:9d:bd:4c:af:b5:1a:e9:82:30:dd:f8: 1e:8a:22:62:35:14:7d:8e:e6:cd:78:36:ef:8b:47:d1:85:2c: 11:3f:e3:50:aa:da:42:db:c3:40:d2:53:39:07:2c:38:b9:b5: 22:18:00:b2:3d:df:bc:4d:b4:14:33:20:75:45:51:9c:91:3b: 56:5b:af:27 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gIPyn2t8zmmXYdw8B0QAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjYwMTAyMDIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmY0ODFjMDI2YTNmZWQyN2ZlZDkxM2EzMWFmMzdkNDVlYWZkZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGDUzr2LB6FhdAeiPTYOl9zCZxMg Chfo0+rg5yFw8ruKMtL/krav7Ni7dkYZU54WMb4SCL49E853lbgD/qyE8H9RoVyI UcDCemTOjIvvWL74cjbSc3Rgdbx+2Z1RurhE+bf2fOE9r9uiX6ZtQ8SZuH1z5nm6 rgif1K2ytlTOrpj/w4FBEst67KpBMq/VX358jKecSr2MY3tETfvBZiKFii+sv3d0 cxgsSaB63etPZ2XNhG5T5VZCOLvzNwQgFqdXKqkYbEk5D+60KS2lKeZqYeUFAkU1 hTFhTa3hXlrZFxb9XEyUl4Wdvu+tlaCKLc2eTkdNBrurS7y+BMLm+2A5KQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIb0gcAmo/7Sf+2ROjGvN9Rer98UMB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvaHZTQndDYWpfdEpfN1pFNk1hODMxRjZ2M3hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC1KMUAwQC 1KMkMA0GCSqGSIb3DQEBCwUAA4IBAQDlJ+QcvIEqcINGjyJFG/olkavDM9Luet1v YukyKFtRrjVs09R+CqX0IKmhFjAoydqmC+v5UuqrCnwZQxTCB9+Ns1ZdI0jZurdU kvEQbYax6OhrmYgsLDrQG+WZVtVVcADvaJk6xWRZEJy6xAo9DE58FhK8Qt5hXk1D Vb3eCBZFIlQHipqq6KxJxQ6bYut2ynGwflqBtCufmLjKBPXLJdtjIJ+Lh4eMkP9u u8E/4ZWMgzpzHIbIgUOajqBjnb1Mr7Ua6YIw3fgeiiJiNRR9jubNeDbvi0fRhSwR P+NQqtpC28NA0lM5Byw4ubUiGACyPd+8TbQUMyB1RVGckTtWW68n -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:24 2026 by rpki-client