This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/hpcNUKRgDvbT67k4a7u7qFp7VTA.roa File: hpcNUKRgDvbT67k4a7u7qFp7VTA.roa (raw, json) Hash identifier: kvHQUu1O3SvtEY70f4VbT1ECj0gDXBSOXAOig5mq70A= Subject key identifier: 86:97:0D:50:A4:60:0E:F6:D3:EB:B9:38:6B:BB:BB:A8:5A:7B:55:30 Certificate issuer: /CN=7b48945b9d716cd47fbde2860d8100fcda987496 Certificate serial: 019B7EA68C8D6B5F897EF3C22C2E75061C7C Authority key identifier: 7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/hpcNUKRgDvbT67k4a7u7qFp7VTA.roa Signing time: Fri 02 Jan 2026 12:20:02 +0000 ROA not before: Fri 02 Jan 2026 12:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13246 IP address blocks: 95.130.16.0/21 maxlen: 24 95.130.16.0/24 maxlen: 24 95.130.17.0/24 maxlen: 24 95.130.20.0/24 maxlen: 24 95.130.22.0/24 maxlen: 24 185.181.192.0/22 maxlen: 22 185.181.195.0/24 maxlen: 24 2a02:2940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:8c:8d:6b:5f:89:7e:f3:c2:2c:2e:75:06:1c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b48945b9d716cd47fbde2860d8100fcda987496 Validity Not Before: Jan 2 12:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86970d50a4600ef6d3ebb9386bbbbba85a7b5530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c0:bc:1b:ed:9d:e1:f9:0a:3f:4e:2a:ec:d3: ca:7c:b8:10:7a:c0:8b:36:71:0a:eb:5f:14:22:2f: b8:ac:80:d8:b6:0e:3d:4b:11:c9:7e:5a:6f:4a:ef: 3c:4a:2f:ca:79:57:a3:92:5d:ea:14:4e:7c:0b:be: ae:97:98:21:7c:5e:20:e2:58:dc:ce:0a:f3:18:0e: 77:54:ff:6d:a9:6b:74:1c:1b:92:d0:2a:fb:14:12: 81:f7:38:a2:c3:a1:c2:bb:92:8a:e3:44:b2:85:d9: c5:a9:e4:8a:c4:be:ab:8f:a3:a4:ad:ed:2b:7a:04: bc:ec:61:22:58:1d:a6:f9:42:ab:8f:0f:73:db:07: 2f:e9:35:95:bf:79:23:71:e0:9e:04:68:75:20:07: 2b:f7:07:a6:41:d7:7d:f2:60:74:09:8a:24:c3:a5: 18:d2:87:4c:9e:f3:68:36:07:2d:7c:0a:73:5f:f2: 48:b9:3b:2e:2c:22:0b:2e:bb:3c:dd:13:31:17:49: 93:64:dc:d2:7c:b6:a5:a4:bd:74:50:a2:6f:53:d5: 62:04:33:50:a3:2d:c6:a5:9e:16:04:d3:38:d5:c3: 0f:93:d0:07:49:5a:5e:50:66:50:86:28:62:ff:9b: 14:6b:c9:b4:98:1e:bd:fb:ee:d4:a7:e2:d1:06:95: 6c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:97:0D:50:A4:60:0E:F6:D3:EB:B9:38:6B:BB:BB:A8:5A:7B:55:30 X509v3 Authority Key Identifier: keyid:7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/hpcNUKRgDvbT67k4a7u7qFp7VTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.130.16.0/21 185.181.192.0/22 IPv6: 2a02:2940::/32 Signature Algorithm: sha256WithRSAEncryption 4c:de:fa:4b:ba:43:11:bf:e3:7a:aa:a5:0f:f9:66:28:11:02: 2f:ab:0a:30:50:46:df:2e:44:cf:6d:62:82:1d:74:9a:a1:f5: 01:ad:3c:5a:8a:72:b7:15:42:d1:07:e8:4a:cb:24:a0:4f:59: b7:2b:d9:6d:2f:47:e6:ac:1d:d2:24:ba:3c:80:62:52:b0:23: be:41:35:e8:bf:fb:33:89:b1:1a:4d:5e:f5:61:c9:6a:bf:54: 06:ab:5b:d0:f8:96:32:08:2b:a9:a6:ad:ef:d0:4e:1a:3f:eb: d5:e3:c1:31:d3:21:a3:74:f7:35:1c:7e:b6:cd:e7:4f:69:0e: 71:4d:63:17:bf:b7:0a:a6:0f:d1:25:a7:22:04:24:6c:ff:ee: a7:47:a0:f3:b5:6a:bb:40:ff:89:d0:2f:6b:73:31:c2:61:bf: ab:9a:d2:fb:93:60:d2:3b:d3:23:71:a6:51:bc:c6:a8:29:f5: 8a:b4:26:68:69:9f:0b:9c:96:66:ae:25:40:50:ac:fc:77:e0: b7:bf:b1:60:4d:d8:70:04:f2:70:ff:2b:82:d2:90:23:6d:1f: 8e:68:bf:26:2e:ed:00:aa:b0:7f:db:1d:7a:42:f2:61:65:60: 1c:21:7d:45:57:4e:fb:78:31:75:75:f9:0b:4d:d5:1f:60:4a: c2:1f:cb:e5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+poyNa1+JfvPCLC51Bhx8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNDg5NDViOWQ3MTZjZDQ3ZmJkZTI4NjBkODEwMGZjZGE5 ODc0OTYwHhcNMjYwMTAyMTIyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Njk3MGQ1MGE0NjAwZWY2ZDNlYmI5Mzg2YmJiYmJhODVhN2I1NTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MC8G+2d4fkKP04q7NPKfLgQesCL NnEK618UIi+4rIDYtg49SxHJflpvSu88Si/KeVejkl3qFE58C76ul5ghfF4g4ljc zgrzGA53VP9tqWt0HBuS0Cr7FBKB9ziiw6HCu5KK40SyhdnFqeSKxL6rj6Okre0r egS87GEiWB2m+UKrjw9z2wcv6TWVv3kjceCeBGh1IAcr9wemQdd98mB0CYokw6UY 0odMnvNoNgctfApzX/JIuTsuLCILLrs83RMxF0mTZNzSfLalpL10UKJvU9ViBDNQ oy3GpZ4WBNM41cMPk9AHSVpeUGZQhihi/5sUa8m0mB69++7Up+LRBpVsEQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIaXDVCkYA720+u5OGu7u6hae1UwMB8GA1UdIwQY MBaAFHtIlFudcWzUf73ihg2BAPzamHSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTBpVVc1MXhiTlJfdmVLR0RZRUFfTnFZZEpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS81YjZiMDYtOWFmNi00MDI2LWI0N2Mt NGU4NTg5N2YzMDljLzEvaHBjTlVLUmdEdmJUNjdrNGE3dTdxRnA3VlRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS81YjZiMDYtOWFmNi00MDI2LWI0N2MtNGU4NTg5N2YzMDlj LzEvZTBpVVc1MXhiTlJfdmVLR0RZRUFfTnFZZEpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDX4IQAwQC ubXAMA0EAgACMAcDBQAqAilAMA0GCSqGSIb3DQEBCwUAA4IBAQBM3vpLukMRv+N6 qqUP+WYoEQIvqwowUEbfLkTPbWKCHXSaofUBrTxainK3FULRB+hKyySgT1m3K9lt L0fmrB3SJLo8gGJSsCO+QTXov/szibEaTV71Yclqv1QGq1vQ+JYyCCuppq3v0E4a P+vV48Ex0yGjdPc1HH62zedPaQ5xTWMXv7cKpg/RJaciBCRs/+6nR6DztWq7QP+J 0C9rczHCYb+rmtL7k2DSO9MjcaZRvMaoKfWKtCZoaZ8LnJZmriVAUKz8d+C3v7Fg TdhwBPJw/yuC0pAjbR+OaL8mLu0AqrB/2x16QvJhZWAcIX1FV077eDF1dfkLTdUf YErCH8vl -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:16 2026 by rpki-client