This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hIasL83I0lDV8GJUNKN_-PnU4pA.roa File: hIasL83I0lDV8GJUNKN_-PnU4pA.roa (raw, json) Hash identifier: mTiqG3rps8YcnCUqYrCDBv64EcWt/5ONz4TtcJQ/4rw= Subject key identifier: 84:86:AC:2F:CD:C8:D2:50:D5:F0:62:54:34:A3:7F:F8:F9:D4:E2:90 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA52FEFF21F7EC819ABE3D95A664702 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hIasL83I0lDV8GJUNKN_-PnU4pA.roa Signing time: Thu 01 Jan 2026 22:19:41 +0000 ROA not before: Thu 01 Jan 2026 22:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31287 IP address blocks: 62.73.100.0/24 maxlen: 24 95.43.236.0/24 maxlen: 24 95.43.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:2f:ef:f2:1f:7e:c8:19:ab:e3:d9:5a:66:47:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8486ac2fcdc8d250d5f0625434a37ff8f9d4e290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:6a:dd:ec:dc:ff:4b:f4:67:69:67:86:79:5c: 91:f6:01:07:f9:d9:6b:6d:27:56:2c:a1:64:08:e0: 37:33:83:7e:14:20:00:01:ed:ee:db:c1:58:f4:96: 62:47:ae:c2:f6:49:0a:71:60:81:99:41:aa:a0:fd: 91:76:55:89:ce:db:67:bd:0b:6f:84:75:ed:ea:9f: a1:f1:05:4a:c9:db:61:1b:0d:a6:7c:8b:1f:db:04: b8:58:f2:ea:8a:c4:52:83:a3:62:4a:38:41:b5:75: b5:3e:d0:b7:d6:19:98:38:1c:f7:6d:4a:f1:25:4e: ad:6b:50:6c:07:28:1e:7f:5d:9f:2e:0b:a6:c7:c1: 72:10:b6:ab:2b:86:89:7b:a1:1d:88:83:8f:8d:fa: 06:59:75:18:61:78:14:71:a7:e0:ce:0d:dd:f1:70: b8:4b:5a:38:f4:81:2d:01:f5:3d:69:67:1f:a9:9d: ed:d5:b6:cd:66:95:b0:35:6a:62:92:ea:0e:3f:ac: 15:91:1a:c1:bb:66:c8:48:04:74:3b:e2:c4:7b:c6: 9d:47:e8:60:92:7f:4d:2b:9f:d9:9a:96:3e:f5:cd: 86:72:ed:2c:14:43:4c:d6:47:89:7f:51:f9:3b:1e: 75:c7:20:c7:47:51:f4:55:94:48:01:65:db:bf:57: a1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:86:AC:2F:CD:C8:D2:50:D5:F0:62:54:34:A3:7F:F8:F9:D4:E2:90 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hIasL83I0lDV8GJUNKN_-PnU4pA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.73.100.0/24 95.43.236.0/24 95.43.239.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:d7:5a:35:31:01:d0:1b:59:16:fe:f5:78:e4:b7:f8:bb:ee: 46:39:27:de:66:d9:c3:c8:87:f2:7d:f1:fc:c6:be:c1:cd:e4: 18:97:2c:91:fe:0e:6f:3b:fc:e8:27:21:44:73:de:38:cc:59: ea:9e:47:dd:ac:a4:c5:53:e7:85:e7:f2:46:5b:e8:ac:2b:57: 80:bc:29:9e:10:e9:26:9a:60:4b:cd:d4:25:ca:e7:f2:3f:6e: 30:04:b4:79:c4:6d:ee:03:8d:d0:95:3d:6f:74:79:80:b1:73: ab:09:ab:e3:01:59:95:69:f4:28:7a:3d:c2:95:94:99:50:b4: 97:d0:f9:7d:e9:b2:57:b6:2b:3d:31:67:75:78:1f:3b:b5:91: 8a:1e:cd:56:5c:6c:72:39:cc:9f:fc:65:94:38:9a:90:3e:fa: fc:32:26:2d:dd:ac:e0:93:02:da:f7:1d:59:e4:ef:10:08:b0: bb:7e:a0:f6:3d:a4:88:ce:41:cb:55:e7:be:84:f6:aa:0b:fc: f8:f4:21:1d:74:bf:0c:b0:bb:02:da:c1:e1:90:71:cb:0d:63: 5c:c5:d3:fd:c3:86:0e:55:ff:d7:c0:22:5c:04:c6:5c:22:3b: 60:a6:9a:cb:a9:60:ca:ed:9d:90:7c:10:d6:38:86:91:3c:9f: 44:96:17:e6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pS/v8h9+yBmr49laZkcCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDg2YWMyZmNkYzhkMjUwZDVmMDYyNTQzNGEzN2ZmOGY5ZDRlMjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9mrd7Nz/S/RnaWeGeVyR9gEH+dlr bSdWLKFkCOA3M4N+FCAAAe3u28FY9JZiR67C9kkKcWCBmUGqoP2RdlWJzttnvQtv hHXt6p+h8QVKydthGw2mfIsf2wS4WPLqisRSg6NiSjhBtXW1PtC31hmYOBz3bUrx JU6ta1BsBygef12fLgumx8FyELarK4aJe6EdiIOPjfoGWXUYYXgUcafgzg3d8XC4 S1o49IEtAfU9aWcfqZ3t1bbNZpWwNWpikuoOP6wVkRrBu2bISAR0O+LEe8adR+hg kn9NK5/ZmpY+9c2Gcu0sFENM1keJf1H5Ox51xyDHR1H0VZRIAWXbv1ehtwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFISGrC/NyNJQ1fBiVDSjf/j51OKQMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvaElhc0w4M0kwbERWOEdKVU5LTl8tUG5VNHBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPklkAwQA XyvsAwQAXyvvMA0GCSqGSIb3DQEBCwUAA4IBAQAd11o1MQHQG1kW/vV45Lf4u+5G OSfeZtnDyIfyffH8xr7BzeQYlyyR/g5vO/zoJyFEc944zFnqnkfdrKTFU+eF5/JG W+isK1eAvCmeEOkmmmBLzdQlyufyP24wBLR5xG3uA43QlT1vdHmAsXOrCavjAVmV afQoej3ClZSZULSX0Pl96bJXtis9MWd1eB87tZGKHs1WXGxyOcyf/GWUOJqQPvr8 MiYt3azgkwLa9x1Z5O8QCLC7fqD2PaSIzkHLVee+hPaqC/z49CEddL8MsLsC2sHh kHHLDWNcxdP9w4YOVf/XwCJcBMZcIjtgpprLqWDK7Z2QfBDWOIaRPJ9Elhfm -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:47 2026 by rpki-client