This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/s-hYEuR7QzCMZYkhMtC8P1oHx24.roa File: s-hYEuR7QzCMZYkhMtC8P1oHx24.roa (raw, json) Hash identifier: xVxCRO6iWAgbZPNlY9qjziiMXXmRZfi75ei52vrfj30= Subject key identifier: B3:E8:58:12:E4:7B:43:30:8C:65:89:21:32:D0:BC:3F:5A:07:C7:6E Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c Certificate serial: 019B791041F0267FB8F2D559D9947722BCC3 Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/s-hYEuR7QzCMZYkhMtC8P1oHx24.roa Signing time: Thu 01 Jan 2026 10:17:47 +0000 ROA not before: Thu 01 Jan 2026 10:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9199 IP address blocks: 185.57.46.0/24 maxlen: 24 2a04:7580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:41:f0:26:7f:b8:f2:d5:59:d9:94:77:22:bc:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c Validity Not Before: Jan 1 10:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3e85812e47b43308c65892132d0bc3f5a07c76e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f2:80:be:bd:ab:79:02:f3:b7:8c:f5:7c:d7: 7d:a5:9a:fb:92:10:d3:b6:85:0e:be:74:47:87:1a: 41:bc:b9:80:2a:86:01:47:8d:73:87:4f:93:b2:82: 8d:72:34:cb:f4:06:c4:35:dc:80:fa:7a:5b:aa:5a: b2:d2:7c:69:5e:cd:38:d7:12:68:8f:fe:7b:c9:53: d1:50:e6:97:98:2e:55:58:96:10:16:a4:0f:a2:7f: bd:64:b4:ff:0b:7a:91:9b:75:93:e0:f3:ba:97:af: 5b:c9:12:5a:e9:04:40:aa:e1:a2:87:cd:9b:06:a9: 02:8e:c8:a3:f1:90:10:15:2d:a4:e7:22:2b:a5:34: a6:6a:24:33:1f:e6:89:3c:21:26:de:3a:71:ce:59: 12:6d:cd:1b:77:8c:d1:94:1c:a6:b1:5a:e3:ee:9a: bc:32:66:36:16:3d:ba:86:69:00:36:17:46:a4:b1: 7d:24:40:a1:ca:0f:27:4f:bd:e4:92:b5:61:16:e3: c1:91:19:88:fe:35:24:1c:81:33:36:01:77:03:f3: 3e:6a:bf:82:b5:42:95:50:c3:24:58:a0:40:d2:b9: 66:96:00:16:bf:86:e2:dd:6c:1e:de:91:36:81:29: df:67:5e:9d:62:3b:1a:ba:15:5c:8e:46:54:b6:5e: 44:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E8:58:12:E4:7B:43:30:8C:65:89:21:32:D0:BC:3F:5A:07:C7:6E X509v3 Authority Key Identifier: keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/s-hYEuR7QzCMZYkhMtC8P1oHx24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.57.46.0/24 IPv6: 2a04:7580::/29 Signature Algorithm: sha256WithRSAEncryption 5e:f2:b0:2a:58:98:b0:7d:6b:bd:ac:d2:a2:3e:3b:ca:04:7f: ad:b7:6c:d6:44:bf:3c:7e:d8:9d:03:bc:8e:1f:bd:3d:86:f3: 6b:cd:12:b7:2f:10:c2:dd:28:4a:52:05:52:ba:09:bc:15:45: 06:16:e4:57:b6:5a:f3:c3:68:50:26:18:64:56:2f:31:77:09: 52:bf:8b:7c:7b:a8:dd:c7:cb:2b:e0:c9:1c:e7:28:73:e6:55: c2:ac:e1:ca:fb:28:4b:9b:18:71:db:62:da:06:b1:f4:be:9c: fa:db:74:30:99:04:67:8d:99:c7:a4:f7:39:e1:c9:1d:49:bd: c3:30:8e:5f:5c:39:39:63:9a:9f:78:01:5f:f9:bb:9d:9f:17: bc:09:bf:fe:fe:7e:49:cc:bb:e7:9d:33:cf:7e:f2:95:24:84: 8f:d4:ca:d1:23:4b:cd:88:42:a7:fd:13:91:f1:f4:af:df:49: 1d:86:dd:ae:07:3b:10:07:78:d8:dc:80:b3:25:47:83:40:a7: 9e:3d:75:b9:25:10:ab:f1:03:63:af:9a:d8:d6:a3:ca:af:2d: 1e:3d:c8:47:63:30:54:1c:1f:cb:95:c4:15:2a:61:4b:a4:42: 11:cd:5f:a5:f8:91:8e:5c:f4:83:f8:df:03:61:50:57:95:ab: b2:a5:59:78 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EEHwJn+48tVZ2ZR3IrzDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNGIwZWVkMmM1YTc4N2FkODdmYjQ5ZjA0ZDNmZGYzZDBm NDlkNGMwHhcNMjYwMTAxMTAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2U4NTgxMmU0N2I0MzMwOGM2NTg5MjEzMmQwYmMzZjVhMDdjNzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPKAvr2reQLzt4z1fNd9pZr7khDT toUOvnRHhxpBvLmAKoYBR41zh0+TsoKNcjTL9AbENdyA+npbqlqy0nxpXs041xJo j/57yVPRUOaXmC5VWJYQFqQPon+9ZLT/C3qRm3WT4PO6l69byRJa6QRAquGih82b BqkCjsij8ZAQFS2k5yIrpTSmaiQzH+aJPCEm3jpxzlkSbc0bd4zRlBymsVrj7pq8 MmY2Fj26hmkANhdGpLF9JEChyg8nT73kkrVhFuPBkRmI/jUkHIEzNgF3A/M+ar+C tUKVUMMkWKBA0rlmlgAWv4bi3Wwe3pE2gSnfZ16dYjsauhVcjkZUtl5E8wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLPoWBLke0MwjGWJITLQvD9aB8duMB8GA1UdIwQY MBaAFANLDu0sWnh62H+0nwTT/fPQ9J1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTBzTzdTeGFlSHJZZjdTZkJOUDk4OUQwblV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZDc4M2EtMWNiYy00MGQ0LWIwMTEt ZTA4NTI3NWFhMzY0LzEvcy1oWUV1UjdRekNNWllraE10QzhQMW9IeDI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yZDc4M2EtMWNiYy00MGQ0LWIwMTEtZTA4NTI3NWFhMzY0 LzEvQTBzTzdTeGFlSHJZZjdTZkJOUDk4OUQwblV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuTkuMA0E AgACMAcDBQMqBHWAMA0GCSqGSIb3DQEBCwUAA4IBAQBe8rAqWJiwfWu9rNKiPjvK BH+tt2zWRL88ftidA7yOH709hvNrzRK3LxDC3ShKUgVSugm8FUUGFuRXtlrzw2hQ JhhkVi8xdwlSv4t8e6jdx8sr4Mkc5yhz5lXCrOHK+yhLmxhx22LaBrH0vpz623Qw mQRnjZnHpPc54ckdSb3DMI5fXDk5Y5qfeAFf+budnxe8Cb/+/n5JzLvnnTPPfvKV JISP1MrRI0vNiEKn/ROR8fSv30kdht2uBzsQB3jY3ICzJUeDQKeePXW5JRCr8QNj r5rY1qPKry0ePchHYzBUHB/LlcQVKmFLpEIRzV+l+JGOXPSD+N8DYVBXlauypVl4 -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:11 2026 by rpki-client