This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/hsUdN5AH-_WZM1oy6ZaXEs1Pgkc.roa File: hsUdN5AH-_WZM1oy6ZaXEs1Pgkc.roa (raw, json) Hash identifier: 5DMQKgnCdfv9+elfbQuigH3vAHijYLKsjKk2UMsJGK4= Subject key identifier: 86:C5:1D:37:90:07:FB:F5:99:33:5A:32:E9:96:97:12:CD:4F:82:47 Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a Certificate serial: 019B76EAD5980D551C80F7E0749158583456 Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/hsUdN5AH-_WZM1oy6ZaXEs1Pgkc.roa Signing time: Thu 01 Jan 2026 00:17:40 +0000 ROA not before: Thu 01 Jan 2026 00:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8426 IP address blocks: 87.236.245.0/24 maxlen: 24 87.236.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d5:98:0d:55:1c:80:f7:e0:74:91:58:58:34:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a Validity Not Before: Jan 1 00:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86c51d379007fbf599335a32e9969712cd4f8247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7c:3b:bf:5c:50:99:07:a1:b1:de:dc:9b:78: 90:24:56:78:6c:de:4c:d3:a6:99:fb:66:bb:ed:d2: f3:aa:60:f0:fa:16:21:b9:34:9c:7b:35:94:74:d5: 09:99:6e:b1:c5:e6:eb:d7:e6:34:3e:98:84:12:68: 32:1b:dc:1b:1d:c8:f3:4b:5d:2f:32:8b:4d:b6:33: d3:f8:2c:2d:68:d5:e1:e8:76:ee:9e:04:f7:10:dc: 34:84:c1:8f:1c:de:d1:55:f5:1c:ef:30:fd:bb:be: f2:89:3c:db:f0:ca:e1:22:bb:16:fd:63:0f:85:aa: 3c:0c:7a:0b:9b:9a:da:e7:9f:95:37:3d:34:24:6c: 74:11:4a:cf:ea:53:65:8e:0a:7c:de:e2:18:bb:db: 4d:f0:ab:b1:53:7d:0c:dd:77:97:98:da:20:a8:8e: 35:92:35:0b:69:ec:a2:97:93:bd:b5:45:c9:64:27: a3:b8:e4:6b:52:51:a5:93:4f:1b:c2:f1:9e:58:52: 5c:f4:a2:21:53:32:90:36:e6:88:fd:76:24:af:66: c2:4f:ef:5b:81:ae:fb:4f:5b:15:e2:c0:ce:20:f5: 7b:c8:20:61:7c:45:ea:1f:0a:bd:7a:2f:5d:bb:aa: 54:a3:97:2f:44:ed:e4:58:ed:30:98:81:dd:33:12: ba:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C5:1D:37:90:07:FB:F5:99:33:5A:32:E9:96:97:12:CD:4F:82:47 X509v3 Authority Key Identifier: keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/hsUdN5AH-_WZM1oy6ZaXEs1Pgkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.245.0-87.236.246.255 Signature Algorithm: sha256WithRSAEncryption 07:83:8a:54:7f:84:5e:28:88:83:ce:38:bd:e5:f2:1f:03:75: fb:c7:cc:3b:2e:a1:56:79:89:6a:9f:1a:d1:d7:30:de:17:5c: 38:e5:2a:78:e0:00:3a:28:c7:36:6e:bf:00:2f:1c:b7:d6:e8: 52:28:72:7a:b0:68:78:72:a9:9f:10:bc:f2:ac:cc:e6:3b:9d: f5:22:fb:d1:99:15:a0:a8:3f:60:48:ca:09:9b:87:f7:27:70: 9b:61:0d:e7:44:43:75:93:0e:bc:59:e5:36:b8:a8:4b:8a:8d: 79:62:ca:84:22:b7:7f:d2:6f:83:0b:79:22:bc:87:31:34:04: a1:50:4b:ee:3f:bb:22:50:c6:d6:b2:91:5c:da:42:d5:0b:60: 3a:88:36:f7:fd:bc:67:e2:e9:f8:36:a6:19:8b:a3:55:3e:85: 0b:e1:a0:62:71:91:c3:cd:df:03:53:d2:d6:f4:dd:da:fb:f9: 3d:b3:6c:0f:40:92:67:dc:25:36:e6:af:0a:f9:f3:9a:38:f2: 1a:27:f2:2e:81:1a:3c:c9:54:f8:00:2a:ba:7c:57:ce:a3:5a: 75:b4:69:d4:be:8e:c6:2f:2b:73:b6:2e:ae:24:bd:9a:0d:47: 3d:e1:05:4c:7e:54:a3:58:77:51:d4:c3:77:32:76:0f:66:56: 2e:1b:58:a0 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt26tWYDVUcgPfgdJFYWDRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDY3OTVhZDY4YTZiYWRkNWFmY2I2YmE0NjUzZTljMDkw ZmM4NWEwHhcNMjYwMTAxMDAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmM1MWQzNzkwMDdmYmY1OTkzMzVhMzJlOTk2OTcxMmNkNGY4MjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHw7v1xQmQehsd7cm3iQJFZ4bN5M 06aZ+2a77dLzqmDw+hYhuTScezWUdNUJmW6xxebr1+Y0PpiEEmgyG9wbHcjzS10v MotNtjPT+CwtaNXh6HbungT3ENw0hMGPHN7RVfUc7zD9u77yiTzb8MrhIrsW/WMP hao8DHoLm5ra55+VNz00JGx0EUrP6lNljgp83uIYu9tN8KuxU30M3XeXmNogqI41 kjULaeyil5O9tUXJZCejuORrUlGlk08bwvGeWFJc9KIhUzKQNuaI/XYkr2bCT+9b ga77T1sV4sDOIPV7yCBhfEXqHwq9ei9du6pUo5cvRO3kWO0wmIHdMxK6LQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIbFHTeQB/v1mTNaMumWlxLNT4JHMB8GA1UdIwQY MBaAFDJGeVrWimut1a/La6RlPpwJD8haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMt NzMwYjE3ZjA2OWFiLzEvaHNVZE41QUgtX1daTTFveTZaYVhFczFQZ2tjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMtNzMwYjE3ZjA2OWFi LzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABX7PUD BABX7PYwDQYJKoZIhvcNAQELBQADggEBAAeDilR/hF4oiIPOOL3l8h8DdfvHzDsu oVZ5iWqfGtHXMN4XXDjlKnjgADooxzZuvwAvHLfW6FIocnqwaHhyqZ8QvPKszOY7 nfUi+9GZFaCoP2BIygmbh/cncJthDedEQ3WTDrxZ5Ta4qEuKjXliyoQit3/Sb4ML eSK8hzE0BKFQS+4/uyJQxtaykVzaQtULYDqINvf9vGfi6fg2phmLo1U+hQvhoGJx kcPN3wNT0tb03dr7+T2zbA9AkmfcJTbmrwr585o48hon8i6BGjzJVPgAKrp8V86j WnW0adS+jsYvK3O2Lq4kvZoNRz3hBUx+VKNYd1HUw3cydg9mVi4bWKA= -----END CERTIFICATE-----Generated at Mon Jan 26 05:06:08 2026 by rpki-client