This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/hae0gayGe2g1D03nvSh_u0H2u2s.roa File: hae0gayGe2g1D03nvSh_u0H2u2s.roa (raw, json) Hash identifier: OF2Bvd/NPLRNkpIH3hrjKElY0WK9eslhWgO2CIxPJCw= Subject key identifier: 85:A7:B4:81:AC:86:7B:68:35:0F:4D:E7:BD:28:7F:BB:41:F6:BB:6B Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b Certificate serial: 019B7AC88C2071672C00D1F35162DE1330D6 Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/hae0gayGe2g1D03nvSh_u0H2u2s.roa Signing time: Thu 01 Jan 2026 18:18:41 +0000 ROA not before: Thu 01 Jan 2026 18:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214435 IP address blocks: 151.248.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8c:20:71:67:2c:00:d1:f3:51:62:de:13:30:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b Validity Not Before: Jan 1 18:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85a7b481ac867b68350f4de7bd287fbb41f6bb6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4a:6c:f4:4d:6c:df:83:19:5f:cb:ae:a9:e1: 55:61:10:d0:55:e5:51:09:70:5d:06:e6:6e:c2:a9: f6:99:b5:08:84:b0:fc:8f:30:cb:97:d6:0f:3f:af: 1c:8f:46:52:10:9c:31:2b:5e:67:5c:07:b3:e9:39: 1b:ac:4e:e1:f6:06:10:b7:dd:74:c7:dc:96:c6:38: 1d:82:9e:eb:29:12:bb:87:34:7d:9e:4d:43:e8:e3: 35:d6:94:d6:84:4c:fa:b1:67:f1:b3:6e:8a:9d:e5: 42:ca:f9:1e:56:bd:b6:b8:5e:49:12:4a:fe:11:24: 41:f3:a5:2a:d9:8f:e6:81:b6:a9:fd:17:29:71:71: 1d:86:da:ef:0b:c4:89:75:6c:79:87:04:bc:07:f7: 48:66:c7:f7:dd:5d:e3:d5:f8:63:55:38:88:e4:7f: 72:54:b8:bc:78:e4:d2:e2:a9:d2:f4:5b:1d:ce:c0: 05:64:c5:be:f6:88:bf:9e:f2:31:23:89:f0:ef:c3: c6:64:34:1b:2e:07:ec:87:50:ec:18:67:b1:5b:0c: fb:40:a0:6d:36:b1:3c:90:57:31:55:c8:f1:87:07: 1f:27:e7:01:c6:33:00:35:b0:15:67:d0:33:45:25: f4:50:60:1d:16:cd:ad:4c:5f:3c:c0:1b:4b:6a:ce: 3c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A7:B4:81:AC:86:7B:68:35:0F:4D:E7:BD:28:7F:BB:41:F6:BB:6B X509v3 Authority Key Identifier: keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/hae0gayGe2g1D03nvSh_u0H2u2s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.248.15.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:9e:49:5c:cf:a1:ae:c1:fc:19:7d:55:05:2c:ec:8e:72:f3: 62:9a:8a:2b:5e:29:6a:aa:9d:1f:50:4c:40:55:89:0c:53:a0: 26:8a:60:1e:16:8c:bc:0d:76:16:d7:e0:66:b0:fd:28:de:18: 1c:aa:7a:34:3a:c4:0d:8a:29:a8:a5:30:e9:bf:11:be:92:8b: 5f:27:e7:c4:7e:cf:e1:47:1d:b5:db:ce:a5:b0:ec:a6:65:1a: 5d:3b:01:38:b4:76:c0:f0:3a:c6:a9:3c:17:ee:fd:d4:a8:7a: 32:d3:10:3f:b8:41:2e:16:30:11:f1:07:e9:4d:51:ec:d0:87: e1:53:e7:c9:21:c8:a5:57:ff:34:b4:69:9e:2e:df:2f:30:8a: 0b:a2:89:36:27:6e:84:e2:74:d4:26:d6:f1:72:e1:ca:d0:5e: a3:90:39:a4:0a:a3:88:b1:ab:b5:0a:01:8f:93:c1:1e:45:51: a1:7c:a6:e8:bb:f2:8e:5f:de:fa:92:0e:45:e4:41:29:d6:46: de:9c:b0:2e:f0:55:db:24:fe:0b:a4:29:da:03:9d:bc:cb:6e: bf:b5:d2:9b:eb:3f:f0:df:92:9c:df:88:95:ca:2e:90:fc:49: 3d:51:45:35:69:00:8e:69:ab:a8:09:a5:1f:3e:44:25:4a:4b: 19:44:b0:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yIwgcWcsANHzUWLeEzDWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNWMwYzcxMTFlMmY1N2ZjYWY4MTEzYTQyZTU1NmU4ODJk ZDVjNGIwHhcNMjYwMTAxMTgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWE3YjQ4MWFjODY3YjY4MzUwZjRkZTdiZDI4N2ZiYjQxZjZiYjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUps9E1s34MZX8uuqeFVYRDQVeVR CXBdBuZuwqn2mbUIhLD8jzDLl9YPP68cj0ZSEJwxK15nXAez6TkbrE7h9gYQt910 x9yWxjgdgp7rKRK7hzR9nk1D6OM11pTWhEz6sWfxs26KneVCyvkeVr22uF5JEkr+ ESRB86Uq2Y/mgbap/RcpcXEdhtrvC8SJdWx5hwS8B/dIZsf33V3j1fhjVTiI5H9y VLi8eOTS4qnS9FsdzsAFZMW+9oi/nvIxI4nw78PGZDQbLgfsh1DsGGexWwz7QKBt NrE8kFcxVcjxhwcfJ+cBxjMANbAVZ9AzRSX0UGAdFs2tTF88wBtLas48kwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIWntIGshntoNQ9N570of7tB9rtrMB8GA1UdIwQY MBaAFHJcDHER4vV/yvgROkLlVuiC3VxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYt NzYxMGFhYmFhMjc0LzEvaGFlMGdheUdlMmcxRDAzbnZTaF91MEgydTJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYtNzYxMGFhYmFhMjc0 LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/gPMA0G CSqGSIb3DQEBCwUAA4IBAQBvnklcz6GuwfwZfVUFLOyOcvNimoorXilqqp0fUExA VYkMU6AmimAeFoy8DXYW1+BmsP0o3hgcqno0OsQNiimopTDpvxG+kotfJ+fEfs/h Rx21286lsOymZRpdOwE4tHbA8DrGqTwX7v3UqHoy0xA/uEEuFjAR8QfpTVHs0Ifh U+fJIcilV/80tGmeLt8vMIoLook2J26E4nTUJtbxcuHK0F6jkDmkCqOIsau1CgGP k8EeRVGhfKbou/KOX976kg5F5EEp1kbenLAu8FXbJP4LpCnaA528y26/tdKb6z/w 35Kc34iVyi6Q/Ek9UUU1aQCOaauoCaUfPkQlSksZRLBB -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:30 2026 by rpki-client