This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/hU1lZW7ePs-jJStAbmgwJQdywgk.roa File: hU1lZW7ePs-jJStAbmgwJQdywgk.roa (raw, json) Hash identifier: GCbi7/7u241zxcC9BwBBXY2OG87lKhbUz6RrhT+13oQ= Subject key identifier: 85:4D:65:65:6E:DE:3E:CF:A3:25:2B:40:6E:68:30:25:07:72:C2:09 Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2 Certificate serial: 019B7E39109430B93174B247A436A63B5634 Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/hU1lZW7ePs-jJStAbmgwJQdywgk.roa Signing time: Fri 02 Jan 2026 10:20:27 +0000 ROA not before: Fri 02 Jan 2026 10:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31549 IP address blocks: 185.211.84.0/24 maxlen: 24 185.211.85.0/24 maxlen: 24 185.211.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:10:94:30:b9:31:74:b2:47:a4:36:a6:3b:56:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2 Validity Not Before: Jan 2 10:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=854d65656ede3ecfa3252b406e6830250772c209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:be:d2:9e:da:db:6e:4e:49:31:50:12:88:6f: a7:64:8c:09:3a:6d:c7:ef:9c:bd:3f:ef:57:02:4f: 60:9c:18:8b:ea:38:d0:fa:3a:51:94:4f:ce:66:5b: 88:07:8d:88:ae:2d:6b:04:1d:61:dd:26:c2:51:19: 70:85:d8:f1:c7:d3:99:4e:d8:0b:47:2f:53:a3:d2: 9a:94:c5:32:ba:98:a6:95:d2:29:45:25:70:d3:61: ed:95:17:f2:38:d8:ee:a0:1e:62:2f:a2:e4:c8:3c: d2:93:68:9e:d4:ed:72:86:0f:ac:c7:47:e9:16:2d: b4:8f:ee:0b:d0:f1:a7:b0:47:9c:e7:38:7f:d5:c6: 3b:de:76:e6:a0:5f:35:b6:04:a1:8c:32:af:0c:a3: 5c:fa:65:26:39:a2:cd:78:58:7e:a5:77:f6:12:b7: d8:f5:ef:28:34:23:b1:fc:89:84:ea:57:f2:6d:b0: 52:be:35:de:f3:6e:38:fb:dd:03:46:4b:13:e5:c2: 29:43:72:72:b0:c5:53:3f:5d:14:79:46:ee:dd:cb: 17:69:ba:68:78:48:77:2d:06:e5:05:7c:ec:9d:2f: 34:db:c6:71:e0:9b:ba:ae:6f:91:2d:20:dd:81:ac: 93:fc:bb:1e:61:74:1d:43:17:f3:87:67:59:fd:0f: a8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4D:65:65:6E:DE:3E:CF:A3:25:2B:40:6E:68:30:25:07:72:C2:09 X509v3 Authority Key Identifier: keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/hU1lZW7ePs-jJStAbmgwJQdywgk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.84.0/22 Signature Algorithm: sha256WithRSAEncryption 82:89:a3:f0:6d:39:4e:b6:ce:a2:b3:59:07:14:a0:2c:c1:2e: 5f:26:2b:5e:15:5c:22:71:39:33:84:20:00:22:5a:d8:ef:37: d1:b4:79:ca:9e:35:14:fc:1a:b0:8a:78:3d:4c:06:57:3c:6a: aa:ee:29:51:a0:81:b8:ef:c5:32:45:38:d6:f6:8c:9b:02:00: 15:1d:1c:ae:2f:6d:90:87:c2:66:15:31:a6:82:87:9f:96:99: 87:48:a5:73:81:df:be:5e:4a:99:5f:1f:6a:d9:5d:cf:bf:48: 41:94:f6:2d:d8:04:39:52:e1:57:71:eb:4d:98:36:d2:1f:f6: 40:cd:e5:ad:b5:a0:b0:c3:2a:25:2f:42:c7:a6:d0:cb:c4:4a: d2:6d:52:4a:ad:0d:9d:7f:00:36:67:c9:f6:75:15:4c:92:bf: 31:a5:12:c4:7c:e9:9a:3d:94:e0:d3:41:29:a0:69:0d:50:b5: d0:d9:1b:21:b8:83:b7:a9:89:44:df:97:31:95:74:c0:ac:7e: c8:3e:a0:14:71:2a:a0:20:ed:7e:77:4c:0b:d8:b6:2a:29:9f: b9:a7:ec:82:2a:30:c9:f3:10:15:b0:7f:dd:20:e8:c4:a7:3a: fa:7e:f2:cd:d8:2b:bf:40:f0:54:00:4a:56:af:df:22:83:13: d7:0f:43:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORCUMLkxdLJHpDamO1Y0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YTM3MmI3NTRlNDkyMDhkNjQ2YWE3ODU5ZTM0OGI0NzVl NTI2ZDIwHhcNMjYwMTAyMTAyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTRkNjU2NTZlZGUzZWNmYTMyNTJiNDA2ZTY4MzAyNTA3NzJjMjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb7Sntrbbk5JMVASiG+nZIwJOm3H 75y9P+9XAk9gnBiL6jjQ+jpRlE/OZluIB42Iri1rBB1h3SbCURlwhdjxx9OZTtgL Ry9To9KalMUyupimldIpRSVw02HtlRfyONjuoB5iL6LkyDzSk2ie1O1yhg+sx0fp Fi20j+4L0PGnsEec5zh/1cY73nbmoF81tgShjDKvDKNc+mUmOaLNeFh+pXf2ErfY 9e8oNCOx/ImE6lfybbBSvjXe8244+90DRksT5cIpQ3JysMVTP10UeUbu3csXabpo eEh3LQblBXzsnS8028Zx4Ju6rm+RLSDdgayT/LseYXQdQxfzh2dZ/Q+osQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIVNZWVu3j7PoyUrQG5oMCUHcsIJMB8GA1UdIwQY MBaAFHajcrdU5JII1kaqeFnjSLR15SbSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFOeXQxVGtrZ2pXUnFwNFdlTkl0SFhsSnRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yMzVmZWMtYWZjOS00ZDJmLThiNTkt YTk5ZWE5MWNiNWI5LzEvaFUxbFpXN2VQcy1qSlN0QWJtZ3dKUWR5d2drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8yMzVmZWMtYWZjOS00ZDJmLThiNTktYTk5ZWE5MWNiNWI5 LzEvZHFOeXQxVGtrZ2pXUnFwNFdlTkl0SFhsSnRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudNUMA0G CSqGSIb3DQEBCwUAA4IBAQCCiaPwbTlOts6is1kHFKAswS5fJiteFVwicTkzhCAA IlrY7zfRtHnKnjUU/Bqwing9TAZXPGqq7ilRoIG478UyRTjW9oybAgAVHRyuL22Q h8JmFTGmgoeflpmHSKVzgd++XkqZXx9q2V3Pv0hBlPYt2AQ5UuFXcetNmDbSH/ZA zeWttaCwwyolL0LHptDLxErSbVJKrQ2dfwA2Z8n2dRVMkr8xpRLEfOmaPZTg00Ep oGkNULXQ2RshuIO3qYlE35cxlXTArH7IPqAUcSqgIO1+d0wL2LYqKZ+5p+yCKjDJ 8xAVsH/dIOjEpzr6fvLN2Cu/QPBUAEpWr98igxPXD0MR -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:46 2026 by rpki-client