This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/hvFmobLJgv_FtphUoy5jADPJJnc.roa File: hvFmobLJgv_FtphUoy5jADPJJnc.roa (raw, json) Hash identifier: jnuVvbpAgeJ1NUOXj3up5SgN82P8AgWr5+BqvtU3HaY= Subject key identifier: 86:F1:66:A1:B2:C9:82:FF:C5:B6:98:54:A3:2E:63:00:33:C9:26:77 Certificate issuer: /CN=462767a7375f1ac546691aaf2a511fbb6277031d Certificate serial: 019B79EBD5517D7F9F7E5A83029AFB4C5015 Authority key identifier: 46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/hvFmobLJgv_FtphUoy5jADPJJnc.roa Signing time: Thu 01 Jan 2026 14:17:37 +0000 ROA not before: Thu 01 Jan 2026 14:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3327 IP address blocks: 185.178.204.0/22 maxlen: 22 212.65.85.0/24 maxlen: 24 212.65.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:d5:51:7d:7f:9f:7e:5a:83:02:9a:fb:4c:50:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=462767a7375f1ac546691aaf2a511fbb6277031d Validity Not Before: Jan 1 14:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86f166a1b2c982ffc5b69854a32e630033c92677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:40:79:2e:60:bb:16:f9:25:c4:5d:5f:6c:a0: 6b:3c:d6:fc:06:61:15:48:3a:ad:9b:45:a9:ad:73: f0:9d:e4:bd:ef:f6:d7:44:64:6e:ae:b7:03:85:98: 8f:e0:7a:04:dd:8c:db:c9:75:b6:98:db:09:b4:09: d6:46:76:a3:36:f5:db:73:da:b1:ca:41:62:fb:88: 38:4d:c1:5b:67:e3:48:5a:4b:f5:52:16:5d:44:a1: c3:ab:5c:10:99:40:bc:98:a1:aa:59:c4:8e:52:7a: 39:42:07:a6:0c:de:bb:7a:fc:4d:3b:14:c8:1d:02: 3a:f8:af:9b:ea:c1:a7:7f:d3:70:a7:22:12:c1:7b: 57:52:0d:a5:56:60:96:24:ce:47:25:62:be:3e:5e: 47:ed:41:51:46:b3:7f:bb:18:c6:90:47:73:a0:a7: 7e:7a:71:a8:a0:93:43:29:32:fb:96:85:4d:70:3c: 26:c3:35:8d:53:d1:cf:19:3a:b2:36:b3:b4:aa:da: f6:da:73:5c:e7:eb:15:d5:2a:de:32:dd:1c:9d:60: b6:4d:d7:ad:81:70:ab:12:ea:95:9d:b7:6d:cf:9c: cf:36:30:f3:5d:b4:3d:cc:53:3f:d6:5b:7b:b3:99: 91:56:e0:71:03:2c:94:ff:92:8c:f3:a1:38:cd:6c: 77:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F1:66:A1:B2:C9:82:FF:C5:B6:98:54:A3:2E:63:00:33:C9:26:77 X509v3 Authority Key Identifier: keyid:46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/hvFmobLJgv_FtphUoy5jADPJJnc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.178.204.0/22 212.65.85.0-212.65.87.255 Signature Algorithm: sha256WithRSAEncryption 0d:a0:80:76:d7:c6:5e:03:b9:ef:0a:20:60:51:92:43:a1:1d: ed:3b:69:48:66:f3:76:ac:a0:e8:af:f8:9b:e8:90:bf:89:3c: bd:02:0a:15:ff:0b:f7:c2:c8:ff:8a:e7:15:72:8c:ad:27:4c: 11:40:ca:87:2d:87:2a:56:a3:ca:ff:ad:a8:88:18:4c:48:04: 13:36:41:af:2e:a9:53:57:d6:b9:e5:4e:18:43:e7:7c:b8:e7: a3:12:73:3a:83:a1:4a:43:9d:d9:c8:57:48:c5:9b:64:2c:d5: 05:19:bb:d7:07:ac:48:c4:d7:0f:4c:f4:24:20:53:93:1d:d7: 38:c3:33:58:02:06:2d:ba:6e:14:fd:cf:fb:9e:89:26:df:8a: 8a:ba:23:c6:d5:ef:c5:6b:00:7c:28:c6:2a:15:78:b1:31:85: 8b:b0:7e:8b:32:25:22:52:dd:99:15:24:5f:0b:f4:53:1f:64: 02:3e:af:71:8b:7e:64:dd:59:6a:00:1a:3b:4b:bb:9a:8a:1b: 7b:fd:fb:0b:be:a0:4d:0c:68:20:09:39:26:c3:e8:5d:0a:22: 6d:2d:cf:37:bd:e9:c4:8b:44:47:c6:45:52:30:87:17:31:06: 72:bc:df:15:2a:39:ff:b8:26:e8:2a:0a:5d:4f:7a:70:60:cc: cf:c5:19:49 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt569VRfX+fflqDApr7TFAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2Mjc2N2E3Mzc1ZjFhYzU0NjY5MWFhZjJhNTExZmJiNjI3 NzAzMWQwHhcNMjYwMTAxMTQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmYxNjZhMWIyYzk4MmZmYzViNjk4NTRhMzJlNjMwMDMzYzkyNjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30B5LmC7FvklxF1fbKBrPNb8BmEV SDqtm0WprXPwneS97/bXRGRurrcDhZiP4HoE3YzbyXW2mNsJtAnWRnajNvXbc9qx ykFi+4g4TcFbZ+NIWkv1UhZdRKHDq1wQmUC8mKGqWcSOUno5QgemDN67evxNOxTI HQI6+K+b6sGnf9NwpyISwXtXUg2lVmCWJM5HJWK+Pl5H7UFRRrN/uxjGkEdzoKd+ enGooJNDKTL7loVNcDwmwzWNU9HPGTqyNrO0qtr22nNc5+sV1SreMt0cnWC2Tdet gXCrEuqVnbdtz5zPNjDzXbQ9zFM/1lt7s5mRVuBxAyyU/5KM86E4zWx3nwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFIbxZqGyyYL/xbaYVKMuYwAzySZ3MB8GA1UdIwQY MBaAFEYnZ6c3XxrFRmkarypRH7tidwMdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmlkbnB6ZGZHc1ZHYVJxdktsRWZ1MkozQXgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9hOTAyNGQtYmJkOC00ZGVlLWEzMjMt MDA1MGVhMzZjMjk2LzEvaHZGbW9iTEpndl9GdHBoVW95NWpBRFBKSm5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9hOTAyNGQtYmJkOC00ZGVlLWEzMjMtMDA1MGVhMzZjMjk2 LzEvUmlkbnB6ZGZHc1ZHYVJxdktsRWZ1MkozQXgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCubLMMAwD BADUQVUDBAPUQVAwDQYJKoZIhvcNAQELBQADggEBAA2ggHbXxl4Due8KIGBRkkOh He07aUhm83asoOiv+JvokL+JPL0CChX/C/fCyP+K5xVyjK0nTBFAyocthypWo8r/ raiIGExIBBM2Qa8uqVNX1rnlThhD53y456MSczqDoUpDndnIV0jFm2Qs1QUZu9cH rEjE1w9M9CQgU5Md1zjDM1gCBi26bhT9z/ueiSbfioq6I8bV78VrAHwoxioVeLEx hYuwfosyJSJS3ZkVJF8L9FMfZAI+r3GLfmTdWWoAGjtLu5qKG3v9+wu+oE0MaCAJ OSbD6F0KIm0tzze96cSLREfGRVIwhxcxBnK83xUqOf+4JugqCl1PenBgzM/FGUk= -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:55 2026 by rpki-client