This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hVs5RaBPm_G6mjAEA1BYXsPLf2M.roa File: hVs5RaBPm_G6mjAEA1BYXsPLf2M.roa (raw, json) Hash identifier: r5Jn+4bRKbif6/7HfzBxaO0i/dlOWcYdLqS7q7nFZgM= Subject key identifier: 85:5B:39:45:A0:4F:9B:F1:BA:9A:30:04:03:50:58:5E:C3:CB:7F:63 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783472A0F8F1EA3BA89EB8E89A75CFBF Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hVs5RaBPm_G6mjAEA1BYXsPLf2M.roa Signing time: Thu 01 Jan 2026 06:17:41 +0000 ROA not before: Thu 01 Jan 2026 06:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61162 IP address blocks: 192.71.254.0/23 maxlen: 24 192.176.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:72:a0:f8:f1:ea:3b:a8:9e:b8:e8:9a:75:cf:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=855b3945a04f9bf1ba9a30040350585ec3cb7f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:60:2a:f0:6b:ae:ff:7a:64:b4:eb:54:c6:4b: f2:8f:c9:45:60:26:5a:c2:d6:a3:63:ac:18:c5:60: 84:0b:32:21:92:fc:c9:d3:07:a7:59:67:39:5b:cd: f3:af:4c:29:f8:71:da:42:63:cf:f7:d9:70:71:ca: 00:50:81:85:2c:6b:90:4b:06:43:3d:33:3a:3a:71: c2:07:2f:b5:39:0e:7d:0f:fe:91:48:3a:b5:2c:c9: af:82:81:02:0c:6e:c4:79:9b:3b:ba:20:6d:9f:7e: 98:7f:3a:85:82:5d:22:01:94:4a:ef:fc:ee:46:85: f4:e6:f3:d9:a6:3f:70:24:bb:e6:01:ba:44:73:70: 2e:00:a5:eb:19:e5:03:95:05:0e:eb:f1:eb:f6:ef: 64:ca:f0:03:3a:d5:a8:87:12:19:ac:83:7f:d7:11: a6:a5:59:98:51:29:d0:4a:58:21:ef:a0:e8:e5:b5: e7:ad:6b:7d:fb:9f:86:1d:5a:e5:d3:2d:df:c2:fe: 78:c7:bd:08:2b:dd:b9:19:09:0e:51:c1:ca:80:c8: 92:3d:1d:7d:54:b8:ad:1c:63:c2:59:eb:59:72:83: 1c:54:1b:3a:ce:a7:bd:74:03:07:37:40:fd:1f:06: 34:a1:f8:0f:ed:03:e9:89:7a:df:ca:4d:c8:d7:be: 19:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5B:39:45:A0:4F:9B:F1:BA:9A:30:04:03:50:58:5E:C3:CB:7F:63 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hVs5RaBPm_G6mjAEA1BYXsPLf2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.71.254.0/23 192.176.43.0/24 Signature Algorithm: sha256WithRSAEncryption a9:92:db:61:5a:79:10:3f:a8:77:94:c6:63:c9:f5:be:d5:a7: d0:31:f7:da:59:a7:14:c7:cb:e3:64:c8:d5:5a:f9:5c:02:44: 75:1a:40:cd:2e:cc:f9:62:82:70:e4:91:5b:92:d1:ec:32:fa: c8:3f:f0:8c:cd:8b:04:1d:80:99:93:02:cd:90:0d:20:0f:ca: c0:62:ab:37:04:31:a0:5d:0c:2e:7f:aa:99:6b:07:77:5d:4e: 9c:41:9b:79:d6:29:18:50:dd:e2:6e:8b:fb:82:fc:a1:a1:fc: 4d:8b:07:1c:a9:1a:ea:db:a8:8c:94:d4:d6:95:1e:e5:61:ac: bc:ec:f4:43:2c:82:2c:2a:be:e5:fc:ad:e9:93:9a:44:54:5e: c1:58:fe:0e:9a:1b:16:93:5c:a1:08:35:69:b2:e8:e4:19:9e: 9d:8b:02:b0:a7:bd:f9:21:29:c7:61:0d:8e:1a:5f:8a:72:e9: 23:26:6b:b1:4e:e8:a5:ff:0a:04:ea:c1:65:46:ed:55:23:bb: 44:8d:f3:03:33:28:56:47:2d:8e:68:8f:17:1b:6e:1a:04:9c: 95:3a:9a:79:92:0f:bd:bd:15:6a:0e:b8:ca:c2:f0:20:d6:63: 69:83:30:20:98:b0:2b:9e:6b:c7:0d:27:8b:e8:e4:21:fd:e1: 58:1b:76:10 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NHKg+PHqO6ieuOiadc+/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTViMzk0NWEwNGY5YmYxYmE5YTMwMDQwMzUwNTg1ZWMzY2I3ZjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GAq8Guu/3pktOtUxkvyj8lFYCZa wtajY6wYxWCECzIhkvzJ0wenWWc5W83zr0wp+HHaQmPP99lwccoAUIGFLGuQSwZD PTM6OnHCBy+1OQ59D/6RSDq1LMmvgoECDG7EeZs7uiBtn36YfzqFgl0iAZRK7/zu RoX05vPZpj9wJLvmAbpEc3AuAKXrGeUDlQUO6/Hr9u9kyvADOtWohxIZrIN/1xGm pVmYUSnQSlgh76Do5bXnrWt9+5+GHVrl0y3fwv54x70IK925GQkOUcHKgMiSPR19 VLitHGPCWetZcoMcVBs6zqe9dAMHN0D9HwY0ofgP7QPpiXrfyk3I174ZXwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIVbOUWgT5vxupowBANQWF7Dy39jMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvaFZzNVJhQlBtX0c2bWpBRUExQllYc1BMZjJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwEf+AwQA wLArMA0GCSqGSIb3DQEBCwUAA4IBAQCpktthWnkQP6h3lMZjyfW+1afQMffaWacU x8vjZMjVWvlcAkR1GkDNLsz5YoJw5JFbktHsMvrIP/CMzYsEHYCZkwLNkA0gD8rA Yqs3BDGgXQwuf6qZawd3XU6cQZt51ikYUN3ibov7gvyhofxNiwccqRrq26iMlNTW lR7lYay87PRDLIIsKr7l/K3pk5pEVF7BWP4OmhsWk1yhCDVpsujkGZ6diwKwp735 ISnHYQ2OGl+KcukjJmuxTuil/woE6sFlRu1VI7tEjfMDMyhWRy2OaI8XG24aBJyV Opp5kg+9vRVqDrjKwvAg1mNpgzAgmLArnmvHDSeL6OQh/eFYG3YQ -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:42 2026 by rpki-client