This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/hFwOd0_YEOVcJRwShM4Rz_JX8w4.roa File: hFwOd0_YEOVcJRwShM4Rz_JX8w4.roa (raw, json) Hash identifier: 2ZVK7MUTm4O+cKvEyp+XBJuaZn8IX75XJYPFZQbyyqo= Subject key identifier: 84:5C:0E:77:4F:D8:10:E5:5C:25:1C:12:84:CE:11:CF:F2:57:F3:0E Certificate issuer: /CN=776405e0283743cf52180d5b13812dfba3ded7fc Certificate serial: 019B77594C0381C61B67012A006D6371DEDE Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/hFwOd0_YEOVcJRwShM4Rz_JX8w4.roa Signing time: Thu 01 Jan 2026 02:18:19 +0000 ROA not before: Thu 01 Jan 2026 02:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57127 IP address blocks: 146.247.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4c:03:81:c6:1b:67:01:2a:00:6d:63:71:de:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc Validity Not Before: Jan 1 02:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=845c0e774fd810e55c251c1284ce11cff257f30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f7:a1:66:88:bd:46:b6:19:32:98:28:57:87: ce:3c:29:64:8a:f0:97:84:b7:69:f3:e9:25:b7:4d: 3b:5e:02:c2:68:ee:3c:d4:c2:52:d3:08:ba:83:48: 76:16:1e:68:73:1f:30:f9:0a:c2:8d:82:4a:82:8e: 5d:60:59:f9:6c:e3:bf:26:96:7a:a9:9c:9d:b6:91: 1b:22:a7:ea:df:f1:b7:6b:07:94:b6:98:52:1f:fa: a5:26:7f:d3:c5:7d:df:56:b5:1a:1f:62:20:7f:ca: 4f:13:78:da:2d:1f:37:c9:7b:94:53:81:5e:f5:4c: 53:6b:ff:eb:60:11:3a:13:78:b8:bb:34:1a:ca:1b: 3c:77:46:57:7a:b0:51:66:fd:f3:52:ed:76:4f:b3: 66:25:4f:1f:35:49:13:ca:c2:91:aa:79:a4:34:0d: c3:68:eb:e6:49:69:4f:08:5a:56:aa:d4:d2:9c:24: 4b:18:8e:4c:20:07:15:e2:b5:0f:74:13:0f:01:e8: b2:2c:05:8a:fb:51:36:a1:c8:da:5d:4e:07:84:dc: f4:08:04:aa:58:bf:6c:9f:98:42:13:54:1b:fe:55: 51:df:0b:ca:3b:fc:9e:83:50:41:84:38:88:d8:80: 30:35:57:96:a1:34:a4:01:dc:25:7a:8a:70:5c:82: 8b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5C:0E:77:4F:D8:10:E5:5C:25:1C:12:84:CE:11:CF:F2:57:F3:0E X509v3 Authority Key Identifier: keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/hFwOd0_YEOVcJRwShM4Rz_JX8w4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.247.24.0/22 Signature Algorithm: sha256WithRSAEncryption d2:b6:1c:6f:bd:ae:af:bd:69:23:66:73:98:2a:f3:9f:42:3a: c7:27:ba:37:a0:0e:1e:b0:8d:ff:c4:9c:71:08:63:91:29:ce: 53:1a:1b:18:10:57:e2:85:fb:e4:ac:cd:7e:33:8b:5f:99:0b: 74:04:59:7e:f8:ee:01:fb:60:2c:4d:69:24:f1:56:05:3a:86: f0:cd:ef:09:3c:12:7e:13:c7:3f:e6:e7:80:7a:3f:95:38:67: ad:b9:94:f2:75:54:06:61:82:0f:56:31:a5:43:23:df:fc:6f: b3:56:41:b8:26:21:44:d6:82:ff:7c:0d:53:3a:da:c6:b5:dc: bf:a8:5d:5e:33:8d:f1:04:3b:d5:17:94:f5:bc:44:e1:86:bf: f2:2c:33:e4:ff:48:96:ea:b1:58:0e:2f:e6:40:b6:4c:38:e3: e8:b5:0c:d5:40:9e:2d:57:c3:7c:61:35:8c:21:2d:3c:a1:1d: b8:e5:42:3b:20:3f:47:b2:3f:b6:72:69:b2:59:83:74:9a:9d: cb:04:e9:72:89:16:ce:5a:73:77:aa:31:c7:b1:f0:bb:fb:60: 57:01:9e:61:09:29:80:33:14:d0:50:fd:35:b2:4b:6d:73:8e: 57:da:63:27:4b:db:f8:37:fa:a5:9b:7b:e7:a9:62:bc:49:eb: 17:01:e8:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WUwDgcYbZwEqAG1jcd7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NjQwNWUwMjgzNzQzY2Y1MjE4MGQ1YjEzODEyZGZiYTNk ZWQ3ZmMwHhcNMjYwMTAxMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDVjMGU3NzRmZDgxMGU1NWMyNTFjMTI4NGNlMTFjZmYyNTdmMzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/ehZoi9RrYZMpgoV4fOPClkivCX hLdp8+klt007XgLCaO481MJS0wi6g0h2Fh5ocx8w+QrCjYJKgo5dYFn5bOO/JpZ6 qZydtpEbIqfq3/G3aweUtphSH/qlJn/TxX3fVrUaH2Igf8pPE3jaLR83yXuUU4Fe 9UxTa//rYBE6E3i4uzQayhs8d0ZXerBRZv3zUu12T7NmJU8fNUkTysKRqnmkNA3D aOvmSWlPCFpWqtTSnCRLGI5MIAcV4rUPdBMPAeiyLAWK+1E2ocjaXU4HhNz0CASq WL9sn5hCE1Qb/lVR3wvKO/yeg1BBhDiI2IAwNVeWoTSkAdwleopwXIKL3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIRcDndP2BDlXCUcEoTOEc/yV/MOMB8GA1UdIwQY MBaAFHdkBeAoN0PPUhgNWxOBLfuj3tf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8zNjM1ODYtOWI4MC00NTdiLWJkZjAt NmNhNTJlMDI5Y2JlLzEvaEZ3T2QwX1lFT1ZjSlJ3U2hNNFJ6X0pYOHc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8zNjM1ODYtOWI4MC00NTdiLWJkZjAtNmNhNTJlMDI5Y2Jl LzEvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkvcYMA0G CSqGSIb3DQEBCwUAA4IBAQDSthxvva6vvWkjZnOYKvOfQjrHJ7o3oA4esI3/xJxx CGORKc5TGhsYEFfihfvkrM1+M4tfmQt0BFl++O4B+2AsTWkk8VYFOobwze8JPBJ+ E8c/5ueAej+VOGetuZTydVQGYYIPVjGlQyPf/G+zVkG4JiFE1oL/fA1TOtrGtdy/ qF1eM43xBDvVF5T1vEThhr/yLDPk/0iW6rFYDi/mQLZMOOPotQzVQJ4tV8N8YTWM IS08oR245UI7ID9Hsj+2cmmyWYN0mp3LBOlyiRbOWnN3qjHHsfC7+2BXAZ5hCSmA MxTQUP01skttc45X2mMnS9v4N/qlm3vnqWK8SesXAegH -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:15 2026 by rpki-client