This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/hyIL6HSqJA6DV3TQ_73m49DFfWk.roa File: hyIL6HSqJA6DV3TQ_73m49DFfWk.roa (raw, json) Hash identifier: JSYCVb3jUqEMKnAogn+SHjD1TLvMtiN042d+14ciUi8= Subject key identifier: 87:22:0B:E8:74:AA:24:0E:83:57:74:D0:FF:BD:E6:E3:D0:C5:7D:69 Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd Certificate serial: 019B7A5B0ABDE116CD8591218A03EC96F716 Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/hyIL6HSqJA6DV3TQ_73m49DFfWk.roa Signing time: Thu 01 Jan 2026 16:19:05 +0000 ROA not before: Thu 01 Jan 2026 16:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 702 IP address blocks: 192.109.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0a:bd:e1:16:cd:85:91:21:8a:03:ec:96:f7:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd Validity Not Before: Jan 1 16:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87220be874aa240e835774d0ffbde6e3d0c57d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b0:87:3f:75:85:0f:ce:c9:7b:4b:66:ae:30: 70:f3:9a:ae:aa:57:c6:af:e1:24:d7:1e:1a:06:9f: e0:0f:2f:d0:6a:61:5d:39:82:d6:2c:62:e6:b0:c3: 86:a4:42:dc:51:d2:55:1a:d5:7a:2d:c8:41:38:9d: 65:d4:dd:f8:6f:86:61:d4:3e:8e:3e:86:c2:d9:ef: 11:88:92:f9:13:fa:7c:71:4a:17:be:ce:03:3c:a5: a6:d9:48:6a:ea:9e:5b:87:77:07:d0:66:fa:af:17: 43:93:1a:c2:53:2e:9c:a7:ff:f0:47:eb:74:a7:b8: 91:59:fe:10:65:f0:82:ec:e6:9e:13:f0:3b:82:7c: a2:ca:29:8b:1b:ae:17:10:34:65:82:63:81:30:8b: 04:da:e2:59:97:0e:c7:f6:76:4e:a8:88:31:e6:b7: a2:84:2d:84:8d:1c:1f:2c:c1:3f:c6:90:14:94:a8: b1:72:ff:16:02:56:81:f3:e2:62:bd:ed:02:a0:23: 66:1e:f8:c6:b3:d3:77:6b:28:c7:d6:b6:6a:74:6d: 3b:3b:ce:d4:7d:f4:50:e6:94:39:f1:0a:22:64:a4: a7:2f:63:5f:73:af:80:7d:90:8f:3f:d3:6e:75:11: 46:28:1d:17:8e:6a:af:d6:42:30:73:a0:91:4e:0b: 5f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:22:0B:E8:74:AA:24:0E:83:57:74:D0:FF:BD:E6:E3:D0:C5:7D:69 X509v3 Authority Key Identifier: keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/hyIL6HSqJA6DV3TQ_73m49DFfWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.254.0/23 Signature Algorithm: sha256WithRSAEncryption 08:52:29:f8:37:2e:ac:9d:d1:5d:f0:65:bc:38:e6:a7:da:30: a5:8e:fc:c1:50:d5:a1:3a:d6:e2:39:7d:e2:8d:54:d7:28:52: 0e:53:cb:53:75:75:d4:80:dd:9b:f1:d1:ba:fd:80:75:c9:00: cd:8b:fd:e9:25:d1:61:8c:cb:43:ac:fa:33:22:2c:bb:39:b0: 53:7b:56:e3:2b:ec:06:3d:0c:60:f5:d4:88:1c:6d:2f:51:b8: 66:3c:90:5c:cb:42:64:08:44:58:41:cc:44:8b:f9:c4:f6:a4: 4a:40:ed:e3:c8:40:72:82:fb:fe:21:48:d1:73:f9:e2:9b:cc: 56:f3:7f:b9:53:86:73:94:50:4d:ae:5d:c3:e6:06:67:2a:4a: 1d:c4:75:70:f8:db:4a:e3:52:b6:f8:63:82:20:1a:dd:58:89: 2a:b0:1c:15:ed:d1:37:3d:fc:fc:fc:2c:b8:26:fc:d3:d0:57: 8b:2d:24:d3:cd:1a:76:c1:17:0a:cd:a3:31:2c:50:7a:39:2d: f7:3a:21:ff:37:3c:26:00:1a:f3:5c:1b:20:10:3e:45:59:91: 2a:d2:22:98:9d:57:e8:02:45:d9:6c:9b:d2:0f:13:4b:57:43: eb:79:2d:50:c2:41:ba:42:1e:9f:88:75:f1:b5:27:2b:f6:61: 21:2e:88:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wwq94RbNhZEhigPslvcWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzFjYzM2MDViM2VmYzA5YjI2ODg1MDgwNjNiNmZkNDg1 NTYxZGQwHhcNMjYwMTAxMTYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzIyMGJlODc0YWEyNDBlODM1Nzc0ZDBmZmJkZTZlM2QwYzU3ZDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7CHP3WFD87Je0tmrjBw85quqlfG r+Ek1x4aBp/gDy/QamFdOYLWLGLmsMOGpELcUdJVGtV6LchBOJ1l1N34b4Zh1D6O PobC2e8RiJL5E/p8cUoXvs4DPKWm2Uhq6p5bh3cH0Gb6rxdDkxrCUy6cp//wR+t0 p7iRWf4QZfCC7OaeE/A7gnyiyimLG64XEDRlgmOBMIsE2uJZlw7H9nZOqIgx5rei hC2EjRwfLME/xpAUlKixcv8WAlaB8+Jive0CoCNmHvjGs9N3ayjH1rZqdG07O87U ffRQ5pQ58QoiZKSnL2Nfc6+AfZCPP9NudRFGKB0Xjmqv1kIwc6CRTgtfdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIciC+h0qiQOg1d00P+95uPQxX1pMB8GA1UdIwQY MBaAFI8xzDYFs+/AmyaIUIBjtv1IVWHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hM2E1YTQtZDA3ZC00YWJkLWIxMjkt MjI3Zjc0OTdkYzFlLzEvaHlJTDZIU3FKQTZEVjNUUV83M200OURGZldrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hM2E1YTQtZDA3ZC00YWJkLWIxMjktMjI3Zjc0OTdkYzFl LzEvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwG3+MA0G CSqGSIb3DQEBCwUAA4IBAQAIUin4Ny6sndFd8GW8OOan2jCljvzBUNWhOtbiOX3i jVTXKFIOU8tTdXXUgN2b8dG6/YB1yQDNi/3pJdFhjMtDrPozIiy7ObBTe1bjK+wG PQxg9dSIHG0vUbhmPJBcy0JkCERYQcxEi/nE9qRKQO3jyEBygvv+IUjRc/nim8xW 83+5U4ZzlFBNrl3D5gZnKkodxHVw+NtK41K2+GOCIBrdWIkqsBwV7dE3Pfz8/Cy4 JvzT0FeLLSTTzRp2wRcKzaMxLFB6OS33OiH/NzwmABrzXBsgED5FWZEq0iKYnVfo AkXZbJvSDxNLV0PreS1QwkG6Qh6fiHXxtScr9mEhLoip -----END CERTIFICATE-----Generated at Sun Jan 25 16:35:46 2026 by rpki-client