This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/hXDlG2G0xbowy6t6EZnHJ70Ehao.roa File: hXDlG2G0xbowy6t6EZnHJ70Ehao.roa (raw, json) Hash identifier: 3IDUKM+58lF7xSd9cxW6Agkn2PnQGt/z8nVFt8JreYU= Subject key identifier: 85:70:E5:1B:61:B4:C5:BA:30:CB:AB:7A:11:99:C7:27:BD:04:85:AA Certificate issuer: /CN=cc215f58159ec576a2022776ea64f61c5bb00194 Certificate serial: 019B77C685D96C5BABEA3FC40120E45E285F Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/hXDlG2G0xbowy6t6EZnHJ70Ehao.roa Signing time: Thu 01 Jan 2026 04:17:37 +0000 ROA not before: Thu 01 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 212.122.160.0/22 maxlen: 24 212.122.164.0/24 maxlen: 24 212.122.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:85:d9:6c:5b:ab:ea:3f:c4:01:20:e4:5e:28:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194 Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8570e51b61b4c5ba30cbab7a1199c727bd0485aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:14:6f:ae:16:38:38:f6:f8:12:80:fe:0f:23: 5f:9c:ac:42:86:8b:1f:74:06:9c:45:c1:d5:67:8a: 6b:0f:1b:db:d3:9c:0c:39:5e:50:fa:fe:be:ef:18: a1:b6:22:b8:c5:58:d0:65:3b:8c:56:dd:0e:1c:cc: b0:67:e2:7b:34:d5:31:fc:16:23:45:16:19:65:d0: 51:e8:73:d7:98:fe:32:82:4a:72:6f:c8:7a:41:06: 76:0b:ef:ac:dc:b2:3c:02:16:f1:06:cc:b4:1f:39: 9c:50:11:db:61:c3:21:ab:83:b5:1c:21:94:09:b9: 19:e1:b6:81:8e:e0:e5:cb:b4:02:16:5c:48:ff:dc: de:91:9b:90:13:b1:05:4e:03:89:f3:5b:76:3b:f8: 40:56:8b:26:c6:80:72:e2:90:9d:db:84:fe:a9:54: 3a:4c:45:f2:81:b8:a8:49:2e:72:4e:ec:2e:8e:6f: 82:9a:17:9f:c5:eb:67:bd:ab:73:a2:c5:d6:87:d4: ec:94:3d:a4:f0:a8:38:e6:31:f5:62:51:be:d0:2a: 6a:e4:0e:8f:41:de:32:e0:d0:85:3d:0f:96:e7:24: ae:c4:51:e2:29:bf:c5:3b:1c:92:ae:ab:8f:32:5d: 9b:43:da:8c:c3:54:dd:8b:9f:88:e7:44:24:e4:29: 1f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:70:E5:1B:61:B4:C5:BA:30:CB:AB:7A:11:99:C7:27:BD:04:85:AA X509v3 Authority Key Identifier: keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/hXDlG2G0xbowy6t6EZnHJ70Ehao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.122.160.0-212.122.165.255 Signature Algorithm: sha256WithRSAEncryption 9a:7e:ae:db:6d:01:e0:ca:9b:00:cc:ff:94:0c:a2:41:2f:70: 57:68:fe:55:b6:03:0f:fe:60:6b:d8:9e:c9:e1:a1:b0:a3:a9: c7:48:39:d7:24:1e:12:6f:48:7e:89:27:b4:91:b2:09:91:b2: 8f:8e:41:09:82:96:85:ed:fe:2b:ad:2b:0a:f0:14:47:81:a9: 9f:69:37:54:eb:43:ef:0d:d2:5a:07:b2:ef:6f:97:c6:e9:b7: 35:f6:cb:2a:7d:ca:d9:e6:a2:9c:2f:a9:4d:5b:18:8a:d7:bb: a4:e3:5d:9a:02:2a:ab:e4:9d:bb:71:6d:ed:97:43:bd:7e:79: 7f:5b:a8:44:e3:d1:6e:cc:2d:2b:3c:20:6c:09:d6:41:ea:8a: 71:67:28:21:58:a3:2b:8a:db:a5:6d:83:1c:3b:9c:8b:81:bd: 0a:38:a5:18:c3:31:af:5c:67:72:54:b7:06:6f:e2:89:79:4b: a4:4b:35:f0:22:47:c7:b6:3f:c6:4a:b2:3d:97:1d:f2:d6:c6: 87:bd:ba:a1:ca:3f:bf:5e:88:6f:39:41:fe:15:56:de:32:86: df:ac:3f:6d:23:a6:63:8d:65:ed:dd:23:48:79:de:4e:0e:85: 19:72:8e:80:85:b4:a6:6b:e6:d4:b9:3a:e6:8c:db:1d:b3:31: c7:ff:71:39 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xoXZbFur6j/EASDkXihfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMjE1ZjU4MTU5ZWM1NzZhMjAyMjc3NmVhNjRmNjFjNWJi MDAxOTQwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTcwZTUxYjYxYjRjNWJhMzBjYmFiN2ExMTk5YzcyN2JkMDQ4NWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhRvrhY4OPb4EoD+DyNfnKxChosf dAacRcHVZ4prDxvb05wMOV5Q+v6+7xihtiK4xVjQZTuMVt0OHMywZ+J7NNUx/BYj RRYZZdBR6HPXmP4ygkpyb8h6QQZ2C++s3LI8AhbxBsy0HzmcUBHbYcMhq4O1HCGU CbkZ4baBjuDly7QCFlxI/9zekZuQE7EFTgOJ81t2O/hAVosmxoBy4pCd24T+qVQ6 TEXygbioSS5yTuwujm+CmhefxetnvatzosXWh9TslD2k8Kg45jH1YlG+0Cpq5A6P Qd4y4NCFPQ+W5ySuxFHiKb/FOxySrquPMl2bQ9qMw1Tdi5+I50Qk5CkfeQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIVw5RthtMW6MMurehGZxye9BIWqMB8GA1UdIwQY MBaAFMwhX1gVnsV2ogIndupk9hxbsAGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lYmM3NDgtNjgyNi00MTQwLWE4ZTAt ODQzZWVlZTBhMjYwLzEvaFhEbEcyRzB4Ym93eTZ0NkVabkhKNzBFaGFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9lYmM3NDgtNjgyNi00MTQwLWE4ZTAtODQzZWVlZTBhMjYw LzEvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXUeqAD BAHUeqQwDQYJKoZIhvcNAQELBQADggEBAJp+rtttAeDKmwDM/5QMokEvcFdo/lW2 Aw/+YGvYnsnhobCjqcdIOdckHhJvSH6JJ7SRsgmRso+OQQmCloXt/iutKwrwFEeB qZ9pN1TrQ+8N0loHsu9vl8bptzX2yyp9ytnmopwvqU1bGIrXu6TjXZoCKqvknbtx be2XQ71+eX9bqETj0W7MLSs8IGwJ1kHqinFnKCFYoyuK26Vtgxw7nIuBvQo4pRjD Ma9cZ3JUtwZv4ol5S6RLNfAiR8e2P8ZKsj2XHfLWxoe9uqHKP79eiG85Qf4VVt4y ht+sP20jpmONZe3dI0h53k4OhRlyjoCFtKZr5tS5OuaM2x2zMcf/cTk= -----END CERTIFICATE-----Generated at Wed Jan 7 06:55:48 2026 by rpki-client