This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/j_HPqzEYCSbmN4xFIqdJBXQFYPM.roa File: j_HPqzEYCSbmN4xFIqdJBXQFYPM.roa (raw, json) Hash identifier: yoT1DifOeGVrHGJeSH6umh8rSky2R54pK6MzOeEXpKY= Subject key identifier: 8F:F1:CF:AB:31:18:09:26:E6:37:8C:45:22:A7:49:05:74:05:60:F3 Certificate issuer: /CN=65ab485af923d1b46c5a321fc7a3f856c04fb6fc Certificate serial: 019B7E375DDC5C2B47195385AA40DD06A4E8 Authority key identifier: 65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/j_HPqzEYCSbmN4xFIqdJBXQFYPM.roa Signing time: Fri 02 Jan 2026 10:18:36 +0000 ROA not before: Fri 02 Jan 2026 10:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61081 IP address blocks: 5.133.80.0/22 maxlen: 24 185.24.72.0/22 maxlen: 24 2a04:2ac0::/29 maxlen: 64 2a09:6a00::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 06:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:5d:dc:5c:2b:47:19:53:85:aa:40:dd:06:a4:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ab485af923d1b46c5a321fc7a3f856c04fb6fc Validity Not Before: Jan 2 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ff1cfab31180926e6378c4522a74905740560f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f0:ce:51:8a:f5:7e:72:3c:3f:dc:de:17:aa: d3:e5:bf:4d:20:26:55:f8:e3:74:77:5a:de:3c:e4: 7e:23:93:f8:e6:75:f5:8b:ce:7c:94:82:c5:2d:c9: cd:94:a5:81:6b:39:c4:e5:0d:a8:ff:81:39:73:f8: 00:30:8c:cf:ef:68:73:51:f7:35:6e:89:00:f1:10: d4:83:fa:f7:dc:75:bb:8f:b4:21:1e:45:ce:cf:8b: e1:9e:5a:ff:06:09:54:1f:f5:ca:86:f5:63:74:90: 78:aa:94:44:8e:bd:dd:46:4b:e2:cd:80:f9:70:4b: b5:dd:f0:a2:d0:d2:24:6a:39:31:c2:c8:2d:26:79: 0a:47:85:56:84:05:ed:c8:8c:69:5f:38:f1:a3:97: 5b:13:89:c4:e2:de:af:a7:29:ca:f7:19:c2:47:97: be:13:f0:b6:55:d9:1d:8f:4a:ef:d2:d4:fd:66:a3: 73:f5:48:5e:ed:a4:ac:b2:1a:e2:62:70:1a:ef:41: b9:ac:69:ea:d2:83:1e:02:39:fb:04:74:52:df:f7: 3d:1e:68:28:26:1b:f5:c3:e4:87:f2:48:83:15:e2: a2:3c:eb:43:3b:0d:37:77:ba:dc:0c:34:5f:c0:82: cb:64:8c:2f:0f:b4:8f:aa:58:99:f2:a8:76:52:c8: 8a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F1:CF:AB:31:18:09:26:E6:37:8C:45:22:A7:49:05:74:05:60:F3 X509v3 Authority Key Identifier: keyid:65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/j_HPqzEYCSbmN4xFIqdJBXQFYPM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.80.0/22 185.24.72.0/22 IPv6: 2a04:2ac0::/29 2a09:6a00::/29 Signature Algorithm: sha256WithRSAEncryption 0a:7b:76:9a:85:ac:0d:b0:ff:e4:11:04:68:e9:b0:78:4c:0f: 3d:4b:89:b7:71:9c:be:bd:61:f0:63:09:f1:32:35:78:13:1e: 3c:e4:bd:73:d7:ec:11:e4:f1:1d:3d:6a:78:88:f0:17:31:07: a5:02:32:7a:a0:c7:c9:84:51:6e:b4:15:f8:83:bd:c2:5c:16: 85:4d:05:5c:46:29:c5:91:02:e1:c0:a6:31:8d:a0:51:b7:5f: 5d:a6:dc:70:95:6e:52:eb:1f:ec:84:9c:e0:9b:05:62:df:6f: 6c:8b:db:d2:cf:f8:b5:9d:f7:d5:7e:ac:0f:cd:c0:68:11:ff: da:0f:ac:6a:eb:33:b7:a3:06:54:10:9e:1b:7f:bf:50:00:11: 0e:e4:4b:63:a2:e1:21:4f:f2:fa:0c:29:27:c2:8c:09:15:06: 7b:24:16:0a:0a:b1:f5:b0:9e:09:48:a2:ee:b7:28:c8:d4:15: f8:60:a5:4d:cd:b7:c9:32:e3:7f:2e:d7:5e:cc:76:78:d9:a4: 65:59:43:e6:a1:68:ed:ca:3d:17:56:81:ad:99:af:35:da:ce: fb:5d:4a:95:44:c9:b7:11:4d:06:2e:b0:97:36:6b:e0:ed:d3: d4:74:cc:fb:4d:e2:58:0d:ab:2d:0a:da:a1:4e:dd:4b:6e:d0: 7a:da:ce:e3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt+N13cXCtHGVOFqkDdBqToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YWI0ODVhZjkyM2QxYjQ2YzVhMzIxZmM3YTNmODU2YzA0 ZmI2ZmMwHhcNMjYwMTAyMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmYxY2ZhYjMxMTgwOTI2ZTYzNzhjNDUyMmE3NDkwNTc0MDU2MGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvDOUYr1fnI8P9zeF6rT5b9NICZV +ON0d1rePOR+I5P45nX1i858lILFLcnNlKWBaznE5Q2o/4E5c/gAMIzP72hzUfc1 bokA8RDUg/r33HW7j7QhHkXOz4vhnlr/BglUH/XKhvVjdJB4qpREjr3dRkvizYD5 cEu13fCi0NIkajkxwsgtJnkKR4VWhAXtyIxpXzjxo5dbE4nE4t6vpynK9xnCR5e+ E/C2Vdkdj0rv0tT9ZqNz9Uhe7aSsshriYnAa70G5rGnq0oMeAjn7BHRS3/c9Hmgo Jhv1w+SH8kiDFeKiPOtDOw03d7rcDDRfwILLZIwvD7SPqliZ8qh2UsiKwwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFI/xz6sxGAkm5jeMRSKnSQV0BWDzMB8GA1UdIwQY MBaAFGWrSFr5I9G0bFoyH8ej+FbAT7b8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmF0SVd2a2owYlJzV2pJZng2UDRWc0JQdHZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8xNjRkOGQtNDFhYy00NTIyLWJiMjUt ODk4NjM0OTQyMjg1LzEval9IUHF6RVlDU2JtTjR4RklxZEpCWFFGWVBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8xNjRkOGQtNDFhYy00NTIyLWJiMjUtODk4NjM0OTQyMjg1 LzEvWmF0SVd2a2owYlJzV2pJZng2UDRWc0JQdHZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCBYVQAwQC uRhIMBQEAgACMA4DBQMqBCrAAwUDKglqADANBgkqhkiG9w0BAQsFAAOCAQEACnt2 moWsDbD/5BEEaOmweEwPPUuJt3Gcvr1h8GMJ8TI1eBMePOS9c9fsEeTxHT1qeIjw FzEHpQIyeqDHyYRRbrQV+IO9wlwWhU0FXEYpxZEC4cCmMY2gUbdfXabccJVuUusf 7ISc4JsFYt9vbIvb0s/4tZ331X6sD83AaBH/2g+sauszt6MGVBCeG3+/UAARDuRL Y6LhIU/y+gwpJ8KMCRUGeyQWCgqx9bCeCUii7rcoyNQV+GClTc23yTLjfy7XXsx2 eNmkZVlD5qFo7co9F1aBrZmvNdrO+11KlUTJtxFNBi6wlzZr4O3T1HTM+03iWA2r LQraoU7dS27QetrO4w== -----END CERTIFICATE-----Generated at Tue Jan 13 14:37:22 2026 by rpki-client