This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/hbHoK0o2p6Bt0sMLz48Nn7EIEws.roa File: hbHoK0o2p6Bt0sMLz48Nn7EIEws.roa (raw, json) Hash identifier: AabyFao1094cA8E0S9PcCwFVPGA7d1c7Y+W9MYMaIkQ= Subject key identifier: 85:B1:E8:2B:4A:36:A7:A0:6D:D2:C3:0B:CF:8F:0D:9F:B1:08:13:0B Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 019BC394AC815084FFA073DA54461A878F17 Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/hbHoK0o2p6Bt0sMLz48Nn7EIEws.roa Signing time: Thu 15 Jan 2026 21:34:19 +0000 ROA not before: Thu 15 Jan 2026 21:34:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395839 IP address blocks: 72.56.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c3:94:ac:81:50:84:ff:a0:73:da:54:46:1a:87:8f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: Jan 15 21:34:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85b1e82b4a36a7a06dd2c30bcf8f0d9fb108130b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8e:3e:be:f1:2e:7c:29:22:48:fc:3b:8c:5b: 65:2b:4a:c3:d6:4c:66:54:3e:08:84:63:ae:b5:dd: 2c:93:5b:12:a7:84:93:fb:44:b9:27:88:98:eb:96: bd:69:d9:59:2d:15:7e:6c:b9:d9:05:9b:25:93:9c: 58:85:3a:ac:7e:b4:73:96:88:07:28:ba:50:eb:da: 74:b2:29:99:0d:f8:8a:8b:7f:b8:d7:14:b9:26:cd: 5d:b2:c6:8f:b4:e1:64:73:7e:48:b7:1d:76:fa:f6: 8f:96:66:61:2b:ae:60:f9:7f:62:ee:87:e5:c0:47: 65:da:3d:44:d7:9a:7a:cb:37:97:48:9b:62:d2:1d: 7f:5e:8c:ea:54:8b:9d:76:2b:28:69:08:3b:79:19: ad:b4:67:e5:d4:6b:01:3c:5a:8e:06:7c:04:6d:9b: 38:31:09:57:10:78:ce:00:b7:da:d4:b7:20:26:ec: a1:02:a7:ee:79:1c:a0:bb:67:d3:58:b8:dc:ee:7d: 5d:3d:f4:25:cd:e2:ac:b2:b6:f2:bc:dd:e5:96:84: 4a:94:4e:26:1c:85:ff:17:82:4f:d0:6b:94:9f:f6: a2:ce:4e:c5:c9:13:27:83:bc:4c:bd:1a:ad:cd:0c: de:f6:88:0e:15:13:d9:cc:a6:03:91:9f:ce:93:e2: 03:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B1:E8:2B:4A:36:A7:A0:6D:D2:C3:0B:CF:8F:0D:9F:B1:08:13:0B X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/hbHoK0o2p6Bt0sMLz48Nn7EIEws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.56.54.0/24 Signature Algorithm: sha256WithRSAEncryption 69:d3:db:40:c1:c0:0f:21:85:64:1a:01:77:f9:5f:35:80:f6: 60:e3:b1:04:84:30:87:53:10:86:e4:ef:72:ab:73:6b:6b:da: 37:2b:80:21:2b:0c:df:90:17:81:c4:94:3e:fc:ab:3a:58:34: fc:ee:4a:e1:f2:e1:ef:82:b5:77:f7:44:b2:26:59:6b:87:6d: 77:be:97:bb:79:5b:b0:60:52:be:e3:81:b8:12:ed:11:de:a9: ee:ef:43:49:a8:a5:98:c5:f1:51:a5:85:58:1f:08:28:c2:06: 37:c4:94:32:0c:63:f6:fd:15:1d:08:cd:40:c9:d2:a5:95:b7: bb:f9:31:98:4d:dd:76:ff:d8:04:18:c6:d8:cc:aa:de:e9:5a: 5f:e6:0d:2a:ea:04:74:96:5a:c9:64:a6:60:e9:5c:59:a4:0e: ca:ad:4d:a4:24:cc:a5:f0:8a:c0:d2:fd:76:b9:4c:b8:cb:f2: 10:fb:c5:1c:92:9b:de:8d:7c:d0:6e:09:79:37:cd:64:25:5b: dd:14:b2:8c:4c:b1:30:89:95:e2:55:dc:ba:f0:76:7b:cc:b4: 3e:b4:f4:7e:e4:48:72:14:f6:ad:bb:c1:46:86:17:cd:a5:65: 7a:58:ad:09:c1:e0:e0:6e:3a:7d:86:db:09:88:b8:03:56:4b: f6:cb:fa:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvDlKyBUIT/oHPaVEYah48XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjYwMTE1MjEzNDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWIxZTgyYjRhMzZhN2EwNmRkMmMzMGJjZjhmMGQ5ZmIxMDgxMzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y4+vvEufCkiSPw7jFtlK0rD1kxm VD4IhGOutd0sk1sSp4ST+0S5J4iY65a9adlZLRV+bLnZBZslk5xYhTqsfrRzlogH KLpQ69p0simZDfiKi3+41xS5Js1dssaPtOFkc35Itx12+vaPlmZhK65g+X9i7ofl wEdl2j1E15p6yzeXSJti0h1/XozqVIuddisoaQg7eRmttGfl1GsBPFqOBnwEbZs4 MQlXEHjOALfa1LcgJuyhAqfueRygu2fTWLjc7n1dPfQlzeKssrbyvN3lloRKlE4m HIX/F4JP0GuUn/aizk7FyRMng7xMvRqtzQze9ogOFRPZzKYDkZ/Ok+IDeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIWx6CtKNqegbdLDC8+PDZ+xCBMLMB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvaGJIb0swbzJwNkJ0MHNNTHo0OE5uN0VJRXdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDg2MA0G CSqGSIb3DQEBCwUAA4IBAQBp09tAwcAPIYVkGgF3+V81gPZg47EEhDCHUxCG5O9y q3Nra9o3K4AhKwzfkBeBxJQ+/Ks6WDT87krh8uHvgrV390SyJllrh213vpe7eVuw YFK+44G4Eu0R3qnu70NJqKWYxfFRpYVYHwgowgY3xJQyDGP2/RUdCM1AydKllbe7 +TGYTd12/9gEGMbYzKre6Vpf5g0q6gR0llrJZKZg6VxZpA7KrU2kJMyl8IrA0v12 uUy4y/IQ+8UckpvejXzQbgl5N81kJVvdFLKMTLEwiZXiVdy68HZ7zLQ+tPR+5Ehy FPatu8FGhhfNpWV6WK0JweDgbjp9htsJiLgDVkv2y/r4 -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:20 2026 by rpki-client