This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/hlAbpQnKYaIDHrjCT-1lNBwSXu0.roa File: hlAbpQnKYaIDHrjCT-1lNBwSXu0.roa (raw, json) Hash identifier: BILz2oAMGgMF6vZP6W3jaxaaHIODVkHC+m/GaL33QlM= Subject key identifier: 86:50:1B:A5:09:CA:61:A2:03:1E:B8:C2:4F:ED:65:34:1C:12:5E:ED Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Certificate serial: 019B99075AAFFE249A0A70CD232D1F0BA96E Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/hlAbpQnKYaIDHrjCT-1lNBwSXu0.roa Signing time: Wed 07 Jan 2026 15:15:54 +0000 ROA not before: Wed 07 Jan 2026 15:15:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199404 IP address blocks: 69.57.172.0/24 maxlen: 24 103.118.16.0/24 maxlen: 24 103.118.17.0/24 maxlen: 24 190.92.174.0/24 maxlen: 24 190.92.175.0/24 maxlen: 24 195.250.20.0/24 maxlen: 24 195.250.21.0/24 maxlen: 24 195.250.22.0/24 maxlen: 24 195.250.30.0/24 maxlen: 24 195.250.31.0/24 maxlen: 24 198.38.81.0/24 maxlen: 24 198.38.83.0/24 maxlen: 24 198.38.84.0/24 maxlen: 24 198.38.85.0/24 maxlen: 24 198.38.86.0/24 maxlen: 24 198.38.87.0/24 maxlen: 24 198.38.88.0/24 maxlen: 24 198.38.89.0/24 maxlen: 24 209.42.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:99:07:5a:af:fe:24:9a:0a:70:cd:23:2d:1f:0b:a9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Validity Not Before: Jan 7 15:15:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86501ba509ca61a2031eb8c24fed65341c125eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0e:16:7a:31:7e:b0:73:96:49:a7:3a:87:90: a6:28:ac:26:08:c7:65:18:dc:ff:a7:5f:f7:76:df: 5d:e7:34:00:a6:a4:58:f7:a9:39:05:b5:de:37:18: ac:26:30:04:61:c3:c6:b6:69:f1:93:ea:2b:e6:c4: 57:e2:fc:9f:2d:f2:6b:de:33:87:19:57:27:cb:b9: 4e:f7:41:f5:ca:c2:00:39:2d:81:7d:aa:a7:4d:68: 82:ed:a6:63:11:64:ea:b8:43:c6:b7:ee:21:8e:3b: 4c:39:53:36:2c:96:d2:0b:a7:7b:c8:cd:fe:c0:25: 1a:a6:41:81:8d:d7:db:d3:dd:dc:07:e0:b1:ad:2c: 7f:00:9f:d0:75:84:ae:72:06:93:17:1b:61:e0:a3: 84:5a:25:11:9a:dc:ab:8a:7a:7b:6c:7d:6c:b0:69: 01:73:66:8a:2c:9f:bb:29:f2:e4:f5:7d:83:98:80: f9:1e:a1:4d:14:88:5b:68:c8:59:d9:61:83:9a:bd: 0f:e7:e6:c6:f1:7b:ec:63:e4:54:fd:3b:09:54:98: d3:c4:f5:50:f0:8b:a6:34:70:77:bc:18:f6:c0:7e: c8:74:4c:63:2c:87:75:06:eb:3a:0f:66:70:be:86: 62:2c:f6:27:21:68:23:67:a0:e7:e9:61:96:25:d4: f9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:50:1B:A5:09:CA:61:A2:03:1E:B8:C2:4F:ED:65:34:1C:12:5E:ED X509v3 Authority Key Identifier: keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/hlAbpQnKYaIDHrjCT-1lNBwSXu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.57.172.0/24 103.118.16.0/23 190.92.174.0/23 195.250.20.0-195.250.22.255 195.250.30.0/23 198.38.81.0/24 198.38.83.0-198.38.89.255 209.42.28.0/24 Signature Algorithm: sha256WithRSAEncryption 48:ba:25:8f:84:ed:3c:52:a9:d0:b5:81:b9:3e:d2:fd:3b:36: 2d:62:ac:9a:bf:be:7f:e1:14:33:f2:42:29:d3:91:4d:cf:08: da:b8:fe:6c:a1:47:d4:2c:7f:d1:76:ba:d9:23:2b:f6:c6:19: d6:33:21:a9:23:f8:99:22:a9:7e:91:96:dd:46:60:85:b5:b7: 7a:25:fd:8e:8d:a7:88:0e:f9:ac:77:3d:1b:6a:c1:89:c3:2c: 8d:e8:66:85:41:1a:59:1d:75:97:dd:31:0a:86:e8:1c:99:7d: 7f:c9:86:e3:c3:27:50:81:04:be:61:9e:f8:da:da:14:66:f5: 1d:36:9d:3e:b2:6a:15:6d:9c:62:92:cc:d6:b0:a5:88:d0:be: 2f:97:09:ed:1d:a9:d9:ef:db:9b:75:a4:a1:24:aa:7d:d4:0d: 26:4c:4e:2b:03:ef:c3:df:e7:b8:94:7e:e3:51:f3:7f:68:6e: 1d:5d:d5:ac:95:64:8d:91:70:74:0c:a9:5f:c0:9e:c3:f1:7b: 94:48:c5:9e:07:1a:68:7e:70:28:6f:9b:12:40:f9:9b:83:08: 35:01:c7:53:66:c5:72:db:18:e6:89:17:0f:99:16:5a:47:3c: be:9f:40:94:48:1d:19:6a:d9:79:01:1f:74:3f:e3:dc:c6:6d: 96:e1:3c:77 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZuZB1qv/iSaCnDNIy0fC6luMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy ZWU4ZGQwHhcNMjYwMTA3MTUxNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjUwMWJhNTA5Y2E2MWEyMDMxZWI4YzI0ZmVkNjUzNDFjMTI1ZWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow4WejF+sHOWSac6h5CmKKwmCMdl GNz/p1/3dt9d5zQApqRY96k5BbXeNxisJjAEYcPGtmnxk+or5sRX4vyfLfJr3jOH GVcny7lO90H1ysIAOS2BfaqnTWiC7aZjEWTquEPGt+4hjjtMOVM2LJbSC6d7yM3+ wCUapkGBjdfb093cB+CxrSx/AJ/QdYSucgaTFxth4KOEWiURmtyrinp7bH1ssGkB c2aKLJ+7KfLk9X2DmID5HqFNFIhbaMhZ2WGDmr0P5+bG8XvsY+RU/TsJVJjTxPVQ 8IumNHB3vBj2wH7IdExjLId1Bus6D2ZwvoZiLPYnIWgjZ6Dn6WGWJdT5XwIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFIZQG6UJymGiAx64wk/tZTQcEl7tMB8GA1UdIwQY MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt Y2NhMzc2MDZiZjE4LzEvaGxBYnBRbktZYUlESHJqQ1QtMWxOQndTWHUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4 LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQARTmsAwQB Z3YQAwQBvlyuMAwDBALD+hQDBADD+hYDBAHD+h4DBADGJlEwDAMEAMYmUwMEAcYm WAMEANEqHDANBgkqhkiG9w0BAQsFAAOCAQEASLolj4TtPFKp0LWBuT7S/Ts2LWKs mr++f+EUM/JCKdORTc8I2rj+bKFH1Cx/0Xa62SMr9sYZ1jMhqSP4mSKpfpGW3UZg hbW3eiX9jo2niA75rHc9G2rBicMsjehmhUEaWR11l90xCoboHJl9f8mG48MnUIEE vmGe+NraFGb1HTadPrJqFW2cYpLM1rCliNC+L5cJ7R2p2e/bm3WkoSSqfdQNJkxO KwPvw9/nuJR+41Hzf2huHV3VrJVkjZFwdAypX8Cew/F7lEjFngcaaH5wKG+bEkD5 m4MINQHHU2bFctsY5okXD5kWWkc8vp9AlEgdGWrZeQEfdD/j3MZtluE8dw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:40 2026 by rpki-client