This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/hfprXCBpnFrhOcgbOxaLAEbTxfI.roa File: hfprXCBpnFrhOcgbOxaLAEbTxfI.roa (raw, json) Hash identifier: 6UR8szHiJ/KEg5Ja8O1IjjnAfjsFGNkqyNi647qq+qk= Subject key identifier: 85:FA:6B:5C:20:69:9C:5A:E1:39:C8:1B:3B:16:8B:00:46:D3:C5:F2 Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15BC7E701DB770CCA3D4D9A68BE32B Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/hfprXCBpnFrhOcgbOxaLAEbTxfI.roa Signing time: Fri 02 Jan 2026 14:21:29 +0000 ROA not before: Fri 02 Jan 2026 14:21:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57117 IP address blocks: 195.53.82.0/24 maxlen: 24 195.235.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:bc:7e:70:1d:b7:70:cc:a3:d4:d9:a6:8b:e3:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85fa6b5c20699c5ae139c81b3b168b0046d3c5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a9:4e:06:d9:12:bd:50:4c:df:53:ee:5f:b3: 34:47:4d:dd:a9:3f:32:dd:37:3b:2f:3b:b4:59:e4: e6:b8:d4:ae:c4:62:da:3b:b2:96:cf:82:4b:56:5c: 6b:46:1f:c3:84:88:92:eb:90:a1:c4:cb:f8:42:e6: 5e:5b:da:5c:36:9c:15:bc:b6:80:23:fa:f7:09:a7: 1d:4c:4d:c7:e3:f0:22:50:51:59:12:62:a5:09:c1: cd:36:4a:b4:cf:3c:3d:a3:44:2b:fc:47:57:a6:5f: b3:e2:d7:72:35:e2:eb:7e:d6:bd:c5:29:68:12:6b: e1:0f:14:aa:45:a1:d6:0f:a4:65:73:2f:26:76:a9: b5:19:a9:b0:56:1d:9f:58:a2:2d:9c:43:bc:a8:67: a4:9e:ae:40:5c:70:a8:bc:96:0d:36:00:96:b6:5a: 1e:79:39:4b:8b:75:63:db:a6:9a:b9:6e:90:c4:b9: 80:58:fc:64:3f:63:9a:e6:f1:de:32:5c:0b:81:b6: b9:0e:c5:fe:db:14:fd:82:35:44:b7:8f:8d:f7:79: 25:99:b7:15:81:7f:da:44:e0:eb:bb:29:6c:47:c7: 53:9d:4c:ae:f7:8d:db:79:ab:89:b4:2a:e5:47:08: 16:b6:9c:f8:99:30:fe:0b:3d:54:15:28:62:ae:6a: 40:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FA:6B:5C:20:69:9C:5A:E1:39:C8:1B:3B:16:8B:00:46:D3:C5:F2 X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/hfprXCBpnFrhOcgbOxaLAEbTxfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.53.82.0/24 195.235.162.0/24 Signature Algorithm: sha256WithRSAEncryption 05:c4:41:1e:0f:93:8a:90:cc:9d:e3:fd:31:d8:cd:45:b5:a0: 65:36:6f:1a:2c:e2:00:df:9c:d9:1c:45:14:d5:10:6c:87:5f: 5f:96:ee:3a:23:74:49:3e:fd:c0:a6:07:e0:54:45:71:99:8a: ee:bf:dc:a6:8f:b9:0a:10:49:0a:1a:79:7a:4b:2f:05:3b:48: 77:9e:07:36:3a:2c:c3:0a:6c:11:8b:df:1e:03:cf:b6:74:e1: 68:b2:79:a3:d5:65:0a:f7:07:b8:bc:1b:e2:39:e3:8a:98:49: 24:57:ba:5a:7a:14:3c:26:d5:78:53:82:d7:88:92:89:e6:bb: 0a:0e:ed:9d:8e:7d:c4:7c:5b:b3:b6:cf:fd:b9:20:78:77:28: 58:7c:62:a7:68:90:09:c5:8d:56:cb:71:68:09:51:d4:2b:8c: c3:65:92:6f:2d:e1:3d:f1:e9:74:7b:eb:8f:2e:2f:0f:0c:83: 7d:e2:84:e5:04:fa:48:9b:79:1b:f8:73:2d:af:23:27:a2:ef: 1d:af:a5:c7:e7:11:37:57:8e:76:71:8b:38:76:bf:80:38:b1: 5f:e8:86:82:6b:38:0b:69:ea:bf:da:a4:60:71:19:f3:50:21: 48:85:03:9c:24:3a:4b:40:80:f4:2b:32:f7:66:63:a0:7d:3d: 5f:57:19:53 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/Fbx+cB23cMyj1Nmmi+MrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWZhNmI1YzIwNjk5YzVhZTEzOWM4MWIzYjE2OGIwMDQ2ZDNjNWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKlOBtkSvVBM31PuX7M0R03dqT8y 3Tc7Lzu0WeTmuNSuxGLaO7KWz4JLVlxrRh/DhIiS65ChxMv4QuZeW9pcNpwVvLaA I/r3CacdTE3H4/AiUFFZEmKlCcHNNkq0zzw9o0Qr/EdXpl+z4tdyNeLrfta9xSlo EmvhDxSqRaHWD6Rlcy8mdqm1GamwVh2fWKItnEO8qGeknq5AXHCovJYNNgCWtloe eTlLi3Vj26aauW6QxLmAWPxkP2Oa5vHeMlwLgba5DsX+2xT9gjVEt4+N93klmbcV gX/aRODruylsR8dTnUyu943beauJtCrlRwgWtpz4mTD+Cz1UFShirmpAOQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIX6a1wgaZxa4TnIGzsWiwBG08XyMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvaGZwclhDQnBuRnJoT2NnYk94YUxBRWJUeGZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwzVSAwQA w+uiMA0GCSqGSIb3DQEBCwUAA4IBAQAFxEEeD5OKkMyd4/0x2M1FtaBlNm8aLOIA 35zZHEUU1RBsh19flu46I3RJPv3ApgfgVEVxmYruv9ymj7kKEEkKGnl6Sy8FO0h3 ngc2OizDCmwRi98eA8+2dOFosnmj1WUK9we4vBviOeOKmEkkV7paehQ8JtV4U4LX iJKJ5rsKDu2djn3EfFuzts/9uSB4dyhYfGKnaJAJxY1Wy3FoCVHUK4zDZZJvLeE9 8el0e+uPLi8PDIN94oTlBPpIm3kb+HMtryMnou8dr6XH5xE3V452cYs4dr+AOLFf 6IaCazgLaeq/2qRgcRnzUCFIhQOcJDpLQID0KzL3ZmOgfT1fVxlT -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:22 2026 by rpki-client