This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/_HzxSZR90lf9BYmEm2VupOU1Vas.roa File: _HzxSZR90lf9BYmEm2VupOU1Vas.roa (raw, json) Hash identifier: Ugm9+I27Dta4vBt0cYoky3PGDm0q/WYMbNn8zxEdBlA= Subject key identifier: FC:7C:F1:49:94:7D:D2:57:FD:05:89:84:9B:65:6E:A4:E5:35:55:AB Certificate issuer: /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031 Certificate serial: 019B7A59C11DE2B087BA9D134FCFA00B0ADF Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/_HzxSZR90lf9BYmEm2VupOU1Vas.roa Signing time: Thu 01 Jan 2026 16:17:40 +0000 ROA not before: Thu 01 Jan 2026 16:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29217 IP address blocks: 83.174.64.0/18 maxlen: 18 217.150.160.0/20 maxlen: 20 217.150.161.32/28 maxlen: 28 217.150.165.0/24 maxlen: 24 217.150.171.0/24 maxlen: 24 217.150.175.0/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:c1:1d:e2:b0:87:ba:9d:13:4f:cf:a0:0b:0a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031 Validity Not Before: Jan 1 16:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc7cf149947dd257fd0589849b656ea4e53555ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ad:9e:85:78:89:81:e6:e8:f9:91:75:58:25: da:1d:7d:7f:16:c8:cb:bd:53:c2:07:e4:bb:fe:62: 2c:97:c9:9d:00:da:49:8a:98:45:d2:d3:51:93:c2: c6:f2:29:13:39:92:41:69:bb:0e:81:e0:8d:32:07: a8:58:d7:8a:ea:64:1f:59:46:34:cf:6a:24:26:ca: 19:1e:a6:29:90:7b:91:eb:41:44:bc:5b:2f:44:63: 8c:87:53:a3:db:7b:5e:4b:ea:96:54:d1:71:3f:16: 97:5e:bc:53:14:43:fb:94:9b:d7:1b:94:6d:93:22: 23:bb:b2:80:26:0b:0a:89:75:09:43:fd:64:0f:93: b2:4f:eb:c2:44:3c:f5:91:2a:91:06:20:22:f1:c3: 25:0d:cd:9f:32:82:13:81:33:d3:5c:a7:43:ad:29: 00:63:6b:f5:ef:85:14:f5:eb:51:4f:52:d3:ff:6e: 7c:0e:0a:bd:7d:85:80:1e:da:8c:7e:90:dd:4e:e1: 58:15:6b:d4:d4:a5:3f:72:e5:8e:84:76:12:3e:b8: f5:6a:e6:f9:0b:cd:59:09:88:b7:f0:e6:c4:df:a9: 6b:fa:7c:13:a0:ca:ab:72:d9:30:46:06:79:54:df: 90:f8:5c:ad:08:8d:ed:f5:c5:e4:79:e7:1b:14:f4: 32:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7C:F1:49:94:7D:D2:57:FD:05:89:84:9B:65:6E:A4:E5:35:55:AB X509v3 Authority Key Identifier: keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/_HzxSZR90lf9BYmEm2VupOU1Vas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.174.64.0/18 217.150.160.0/20 Signature Algorithm: sha256WithRSAEncryption 7c:66:66:7d:7a:9e:77:2b:b4:d0:43:13:b8:1a:8c:5a:8e:b7: 03:61:27:f4:8a:48:a6:29:3a:40:8a:e9:66:3d:e7:a8:98:b4: 61:03:21:43:a6:0e:cf:8c:70:35:88:98:29:59:a5:c1:4b:71: 17:9e:77:30:ee:85:15:ce:08:86:92:74:4e:5d:87:74:c3:c6: 2e:44:f8:39:ba:71:bf:43:67:01:27:8d:d1:e8:4c:37:a1:a2: f3:6d:30:af:5f:8d:c2:41:38:80:8b:15:d1:c5:5a:1d:25:0d: 3e:4a:b7:54:c1:6d:fe:7a:7d:7b:75:07:df:e0:5a:a1:b4:58: 32:d2:89:5f:b3:2c:7a:f6:23:b7:90:0c:43:a9:1a:75:0a:9e: 79:f4:88:e1:b8:60:63:f4:3d:bb:ba:19:31:98:a1:2d:04:45: 2e:58:f3:27:b0:93:12:a4:72:10:db:7f:1b:b6:64:f6:57:ca: b2:c4:12:37:74:ea:21:47:f1:f5:66:fe:dc:51:66:81:04:fa: ed:fa:5d:64:02:b1:5d:ef:e2:6e:4a:93:ad:06:9f:e1:d8:33: 87:a5:47:bf:bd:b6:30:0d:75:b4:a4:28:bf:2d:18:71:9a:c4: aa:2f:60:52:74:1b:8e:bb:42:2b:e3:19:44:86:6f:cf:a7:d1: eb:a5:94:f2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WcEd4rCHup0TT8+gCwrfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMTJhYjcwNjNjODVkZmUyMmZhN2E5OWQ5YzZmY2U1ZTYx NjEwMzEwHhcNMjYwMTAxMTYxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzdjZjE0OTk0N2RkMjU3ZmQwNTg5ODQ5YjY1NmVhNGU1MzU1NWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq2ehXiJgebo+ZF1WCXaHX1/FsjL vVPCB+S7/mIsl8mdANpJiphF0tNRk8LG8ikTOZJBabsOgeCNMgeoWNeK6mQfWUY0 z2okJsoZHqYpkHuR60FEvFsvRGOMh1Oj23teS+qWVNFxPxaXXrxTFEP7lJvXG5Rt kyIju7KAJgsKiXUJQ/1kD5OyT+vCRDz1kSqRBiAi8cMlDc2fMoITgTPTXKdDrSkA Y2v174UU9etRT1LT/258Dgq9fYWAHtqMfpDdTuFYFWvU1KU/cuWOhHYSPrj1aub5 C81ZCYi38ObE36lr+nwToMqrctkwRgZ5VN+Q+FytCI3t9cXkeecbFPQywQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPx88UmUfdJX/QWJhJtlbqTlNVWrMB8GA1UdIwQY MBaAFGwSq3BjyF3+Ivp6mdnG/OXmFhAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xMmU2NzktODU2Yy00OGVhLWEwNjIt OTU5ZWJiOTA1YjNhLzEvX0h6eFNaUjkwbGY5QlltRW0yVnVwT1UxVmFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xMmU2NzktODU2Yy00OGVhLWEwNjItOTU5ZWJiOTA1YjNh LzEvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGU65AAwQE 2ZagMA0GCSqGSIb3DQEBCwUAA4IBAQB8ZmZ9ep53K7TQQxO4GoxajrcDYSf0ikim KTpAiulmPeeomLRhAyFDpg7PjHA1iJgpWaXBS3EXnncw7oUVzgiGknROXYd0w8Yu RPg5unG/Q2cBJ43R6Ew3oaLzbTCvX43CQTiAixXRxVodJQ0+SrdUwW3+en17dQff 4FqhtFgy0olfsyx69iO3kAxDqRp1Cp559IjhuGBj9D27uhkxmKEtBEUuWPMnsJMS pHIQ238btmT2V8qyxBI3dOohR/H1Zv7cUWaBBPrt+l1kArFd7+JuSpOtBp/h2DOH pUe/vbYwDXW0pCi/LRhxmsSqL2BSdBuOu0Ir4xlEhm/Pp9HrpZTy -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:22 2026 by rpki-client