This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/hzOfi7xasUduK6-Dsf-xHmLVWNU.roa File: hzOfi7xasUduK6-Dsf-xHmLVWNU.roa (raw, json) Hash identifier: 4jhdSegQbPfAmbaR3QHv7zCisX3cfxYoTmno1EUf1HQ= Subject key identifier: 87:33:9F:8B:BC:5A:B1:47:6E:2B:AF:83:B1:FF:B1:1E:62:D5:58:D5 Certificate issuer: /CN=0277acd112f1c6c833bec22f8b53cc70d2390876 Certificate serial: 019B7B35E1AB706DDEE5BE3E829FBAFE710A Authority key identifier: 02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/hzOfi7xasUduK6-Dsf-xHmLVWNU.roa Signing time: Thu 01 Jan 2026 20:18:07 +0000 ROA not before: Thu 01 Jan 2026 20:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59973 IP address blocks: 176.58.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e1:ab:70:6d:de:e5:be:3e:82:9f:ba:fe:71:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0277acd112f1c6c833bec22f8b53cc70d2390876 Validity Not Before: Jan 1 20:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87339f8bbc5ab1476e2baf83b1ffb11e62d558d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:51:c4:31:d7:95:21:09:47:64:3a:b5:f9:2d: e0:66:46:ec:ac:79:a9:72:fd:62:e5:62:ee:f7:76: cb:80:ff:f2:b1:f1:71:7b:67:80:53:5e:e2:eb:55: c9:77:1a:d3:de:05:c8:5c:cb:ba:5e:34:99:13:62: 06:b6:99:ad:81:34:ca:5a:b0:2d:56:85:68:b3:b5: 00:5f:aa:94:99:88:72:61:63:40:83:f6:b9:6c:39: 01:cb:13:c7:3a:81:88:4b:79:42:ae:1d:65:b6:85: 7e:db:24:a6:51:aa:8c:3f:15:32:a4:4b:9e:80:d7: 52:4d:26:d5:4c:98:a0:e1:77:fc:5c:4d:88:16:41: 7d:c7:25:6a:62:f1:95:2e:2b:68:07:16:ea:f1:df: 1d:3c:f6:23:29:da:db:e9:ab:54:6d:f7:99:6f:a8: da:36:6f:6c:ae:e1:c1:6c:e9:26:cb:4b:07:c1:c4: 03:ba:e4:29:72:7c:fb:57:ab:22:0a:70:4d:90:6f: 17:b5:d8:d5:88:4c:bb:b1:50:4a:09:a0:e2:a2:3f: 02:c3:34:8c:2f:fd:65:d8:65:a7:65:e0:bc:10:96: 83:22:fa:e8:ea:bc:5c:b0:3c:d1:e9:c9:aa:74:e1: 78:e2:13:5b:44:b4:17:9f:d0:bd:0d:c5:d2:e1:e4: ca:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:33:9F:8B:BC:5A:B1:47:6E:2B:AF:83:B1:FF:B1:1E:62:D5:58:D5 X509v3 Authority Key Identifier: keyid:02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/hzOfi7xasUduK6-Dsf-xHmLVWNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.58.66.0/24 Signature Algorithm: sha256WithRSAEncryption 98:ae:30:d7:22:25:2f:b9:3b:35:6f:9b:9c:d4:0e:48:a8:b4: f9:c3:4f:61:99:07:1f:00:e8:a8:6d:96:2b:6d:fa:76:ca:43: 74:4d:d3:14:7c:ec:09:b0:d5:a7:86:f2:ee:7f:fb:6d:d9:88: b0:2a:b9:29:8d:6a:6e:bb:f6:7a:cd:d4:ef:db:81:98:37:68: 67:e8:48:f6:07:55:89:ed:91:e8:4c:85:9c:91:fb:31:64:4c: 7f:d2:2e:34:5e:fa:dd:70:03:9e:4b:25:96:52:ac:0a:ba:44: 9b:33:94:35:f6:f2:09:b2:34:6c:f4:92:10:e8:aa:51:a1:52: 7a:1b:b7:b5:a6:1d:12:35:04:e3:ed:21:83:ba:76:68:4d:3f: cf:bc:b7:5d:18:6a:02:14:ab:75:df:8c:cc:52:f9:09:71:27: 95:a1:e2:14:8b:40:90:6c:38:2f:80:30:21:2f:4d:7e:cf:2d: 7a:ac:72:c3:fa:82:83:57:88:9d:7a:02:74:67:b8:88:98:0e: 00:ab:83:ed:45:b0:e3:1c:1b:be:7e:56:4d:a1:1a:0a:c9:27: c8:bf:59:7d:d5:04:51:4e:75:2a:50:f8:6d:fc:5e:34:44:02: 71:be:89:ff:20:1b:e0:ea:f2:12:94:40:2c:c4:24:49:de:42: 79:e5:17:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NeGrcG3e5b4+gp+6/nEKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNzdhY2QxMTJmMWM2YzgzM2JlYzIyZjhiNTNjYzcwZDIz OTA4NzYwHhcNMjYwMTAxMjAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzMzOWY4YmJjNWFiMTQ3NmUyYmFmODNiMWZmYjExZTYyZDU1OGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVHEMdeVIQlHZDq1+S3gZkbsrHmp cv1i5WLu93bLgP/ysfFxe2eAU17i61XJdxrT3gXIXMu6XjSZE2IGtpmtgTTKWrAt VoVos7UAX6qUmYhyYWNAg/a5bDkByxPHOoGIS3lCrh1ltoV+2ySmUaqMPxUypEue gNdSTSbVTJig4Xf8XE2IFkF9xyVqYvGVLitoBxbq8d8dPPYjKdrb6atUbfeZb6ja Nm9sruHBbOkmy0sHwcQDuuQpcnz7V6siCnBNkG8XtdjViEy7sVBKCaDioj8CwzSM L/1l2GWnZeC8EJaDIvro6rxcsDzR6cmqdOF44hNbRLQXn9C9DcXS4eTKywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIczn4u8WrFHbiuvg7H/sR5i1VjVMB8GA1UdIwQY MBaAFAJ3rNES8cbIM77CL4tTzHDSOQh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW5lczBSTHh4c2d6dnNJdmkxUE1jTkk1Q0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yYzBmMGItNzgzMS00MWQzLTkxNmQt ZDk2NTU5ODc4NzRhLzEvaHpPZmk3eGFzVWR1SzYtRHNmLXhIbUxWV05VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8yYzBmMGItNzgzMS00MWQzLTkxNmQtZDk2NTU5ODc4NzRh LzEvQW5lczBSTHh4c2d6dnNJdmkxUE1jTkk1Q0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDpCMA0G CSqGSIb3DQEBCwUAA4IBAQCYrjDXIiUvuTs1b5uc1A5IqLT5w09hmQcfAOiobZYr bfp2ykN0TdMUfOwJsNWnhvLuf/tt2YiwKrkpjWpuu/Z6zdTv24GYN2hn6Ej2B1WJ 7ZHoTIWckfsxZEx/0i40XvrdcAOeSyWWUqwKukSbM5Q19vIJsjRs9JIQ6KpRoVJ6 G7e1ph0SNQTj7SGDunZoTT/PvLddGGoCFKt134zMUvkJcSeVoeIUi0CQbDgvgDAh L01+zy16rHLD+oKDV4idegJ0Z7iImA4Aq4PtRbDjHBu+flZNoRoKySfIv1l91QRR TnUqUPht/F40RAJxvon/IBvg6vISlEAsxCRJ3kJ55ReP -----END CERTIFICATE-----Generated at Mon Jan 26 06:56:23 2026 by rpki-client