This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/hzv5P8-u24Jo4ZnjEZZHf0DXE3U.roa File: hzv5P8-u24Jo4ZnjEZZHf0DXE3U.roa (raw, json) Hash identifier: 620+jPUaPa7yHq/TeejUFSVMXiUeE9Ov+iZ5ObpiD/0= Subject key identifier: 87:3B:F9:3F:CF:AE:DB:82:68:E1:99:E3:11:96:47:7F:40:D7:13:75 Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15C59EE690843367D35619A1A42CF6 Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/hzv5P8-u24Jo4ZnjEZZHf0DXE3U.roa Signing time: Fri 02 Jan 2026 14:21:31 +0000 ROA not before: Fri 02 Jan 2026 14:21:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209195 IP address blocks: 195.55.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c5:9e:e6:90:84:33:67:d3:56:19:a1:a4:2c:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=873bf93fcfaedb8268e199e31196477f40d71375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:2a:59:ab:3e:50:b3:6b:74:4c:7b:e9:57: 10:51:a5:25:fc:56:3d:30:11:eb:97:fa:a5:de:3f: 73:4f:29:87:e8:c4:92:6a:0a:51:98:56:07:35:4a: b1:6e:85:03:d9:34:d5:f0:12:d3:f3:8a:42:86:7e: 75:b3:ae:6e:93:8b:80:1e:d6:31:0b:a8:ac:e1:b3: ee:27:c6:77:59:e0:6a:1c:f2:8f:b9:9a:eb:b8:f6: 2d:98:8d:43:d5:52:29:c4:e3:a6:89:19:20:c1:ad: cc:b8:f4:74:8a:ab:01:d6:5d:04:4e:2f:e0:f8:9b: 33:62:e4:06:da:e6:37:35:c0:fe:b8:2d:72:60:aa: c2:5a:e6:7b:1d:25:74:0f:0b:0e:f1:28:cb:7c:10: d9:1d:7e:86:60:8f:7d:33:95:1a:92:2c:a3:02:17: e5:ba:0b:13:94:d5:be:9c:0c:70:4e:72:ab:b0:de: 4f:67:1e:83:ef:4c:f9:b8:33:29:80:aa:b6:ff:8d: f0:f6:fb:6c:e5:0c:ab:2a:bf:d6:84:ee:cd:4b:4b: d4:e3:49:dc:fe:2b:13:e3:a3:4d:68:66:c9:a4:9d: a8:9b:3d:24:21:d0:4f:06:26:f3:1b:d9:3a:e3:9d: 99:41:38:59:ab:a5:8e:ae:4f:65:a9:80:eb:fd:51: 70:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3B:F9:3F:CF:AE:DB:82:68:E1:99:E3:11:96:47:7F:40:D7:13:75 X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/hzv5P8-u24Jo4ZnjEZZHf0DXE3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.55.46.0/24 Signature Algorithm: sha256WithRSAEncryption 76:7e:cd:c3:ca:31:50:fc:6b:7a:77:3e:4c:23:c6:4c:ac:ef: 11:5b:39:44:a9:80:92:92:d0:80:5e:37:98:ce:b4:27:f6:77: 0d:e4:9f:d3:7a:7d:a1:b5:bc:cc:b1:a9:73:c9:81:c3:34:9a: f0:0f:8a:0e:ae:f4:29:64:1e:6d:c3:83:7e:9a:76:2b:d0:b2: 93:69:7f:56:4a:5e:5e:92:bb:bd:8c:d4:60:7a:b1:f5:43:92: 9f:35:c0:cb:77:f1:40:51:01:a9:b0:06:8b:78:8b:dc:3a:d2: 48:4b:89:44:c6:00:ef:f6:60:ce:cd:df:0d:78:71:0c:32:6b: a2:59:d4:eb:2c:cd:1f:bd:eb:5f:99:9a:31:3e:93:e2:9f:71: bd:ce:45:9c:4c:a3:bb:e5:6b:78:79:ca:29:69:5e:96:91:a6: 60:09:1e:20:f0:13:23:c0:51:e8:9a:f4:bc:7c:64:4a:47:eb: 55:ec:30:6a:33:db:a0:10:ca:10:d1:aa:0a:c3:f7:c8:38:24: 63:41:d7:8c:7b:3f:ba:05:03:0d:ba:b6:8c:2c:dc:ea:8e:86: fa:35:ab:bf:27:21:04:a7:1a:ba:ff:17:ee:ea:37:73:9f:3a: 5e:1c:97:2f:65:25:7c:9b:54:a8:58:c3:ed:c5:74:fa:b1:d5: 93:56:60:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FcWe5pCEM2fTVhmhpCz2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzNiZjkzZmNmYWVkYjgyNjhlMTk5ZTMxMTk2NDc3ZjQwZDcxMzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaIqWas+ULNrdEx76VcQUaUl/FY9 MBHrl/ql3j9zTymH6MSSagpRmFYHNUqxboUD2TTV8BLT84pChn51s65uk4uAHtYx C6is4bPuJ8Z3WeBqHPKPuZrruPYtmI1D1VIpxOOmiRkgwa3MuPR0iqsB1l0ETi/g +JszYuQG2uY3NcD+uC1yYKrCWuZ7HSV0DwsO8SjLfBDZHX6GYI99M5UakiyjAhfl ugsTlNW+nAxwTnKrsN5PZx6D70z5uDMpgKq2/43w9vts5QyrKr/WhO7NS0vU40nc /isT46NNaGbJpJ2omz0kIdBPBibzG9k6452ZQThZq6WOrk9lqYDr/VFwmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIc7+T/PrtuCaOGZ4xGWR39A1xN1MB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvaHp2NVA4LXUyNEpvNFpuakVaWkhmMERYRTNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwzcuMA0G CSqGSIb3DQEBCwUAA4IBAQB2fs3DyjFQ/Gt6dz5MI8ZMrO8RWzlEqYCSktCAXjeY zrQn9ncN5J/Ten2htbzMsalzyYHDNJrwD4oOrvQpZB5tw4N+mnYr0LKTaX9WSl5e kru9jNRgerH1Q5KfNcDLd/FAUQGpsAaLeIvcOtJIS4lExgDv9mDOzd8NeHEMMmui WdTrLM0fvetfmZoxPpPin3G9zkWcTKO75Wt4ecopaV6WkaZgCR4g8BMjwFHomvS8 fGRKR+tV7DBqM9ugEMoQ0aoKw/fIOCRjQdeMez+6BQMNuraMLNzqjob6Nau/JyEE pxq6/xfu6jdznzpeHJcvZSV8m1SoWMPtxXT6sdWTVmBq -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:59 2026 by rpki-client