This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/hs-AzdnIKl__cAx33Gis1dnFwQw.roa File: hs-AzdnIKl__cAx33Gis1dnFwQw.roa (raw, json) Hash identifier: HkOzeRN5x0MI5F+tRIRhpZumHAlvuvmNzxwstCGaN70= Subject key identifier: 86:CF:80:CD:D9:C8:2A:5F:FF:70:0C:77:DC:68:AC:D5:D9:C5:C1:0C Certificate issuer: /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112 Certificate serial: 019B7B36AC697ED41061FD5C4BBF26818428 Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/hs-AzdnIKl__cAx33Gis1dnFwQw.roa Signing time: Thu 01 Jan 2026 20:18:59 +0000 ROA not before: Thu 01 Jan 2026 20:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48029 IP address blocks: 185.208.76.0/23 maxlen: 23 185.208.76.0/24 maxlen: 24 185.208.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ac:69:7e:d4:10:61:fd:5c:4b:bf:26:81:84:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112 Validity Not Before: Jan 1 20:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86cf80cdd9c82a5fff700c77dc68acd5d9c5c10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:aa:93:d3:75:aa:0a:94:9c:6d:86:da:9a:c3: f4:b9:a7:03:9a:34:de:63:3e:b5:c2:28:fb:3c:cd: 3c:b1:4b:27:1d:b6:d5:c3:9d:76:e3:f9:7c:00:fa: e9:75:bd:d9:5f:74:f8:c4:96:c1:10:36:cc:24:89: 79:4b:b4:03:e1:37:b4:3c:6f:94:2f:39:56:cd:2b: 20:23:5b:8e:65:3b:73:ef:68:f3:0d:a0:c4:15:6b: 14:ca:a4:92:be:8b:64:e0:79:d1:3f:ca:a0:64:f9: e8:fd:cb:6c:e3:8e:4b:97:70:dc:23:e4:cc:95:c2: af:0a:4d:ff:d5:ec:60:44:7d:00:0e:40:b4:d1:d8: cc:87:39:5f:36:d0:4b:f6:67:27:1a:c0:6f:1a:1b: 2e:85:6c:34:58:e3:f1:19:51:e0:65:8b:b6:42:84: 28:4c:a4:67:33:39:13:35:a0:b3:dc:2e:9c:11:e4: 48:25:0f:b5:a8:15:37:da:65:34:fb:70:2b:4e:3b: 3e:2a:e3:a6:a5:1f:93:59:a2:76:51:15:83:2f:53: 12:7f:9a:dd:77:de:bb:9d:86:07:35:d1:6f:65:a9: 9e:14:76:8a:cb:11:3a:54:5c:79:d0:63:64:21:da: 1b:43:e9:8d:7f:db:9e:83:0e:b8:3e:c2:6c:1e:4f: c9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CF:80:CD:D9:C8:2A:5F:FF:70:0C:77:DC:68:AC:D5:D9:C5:C1:0C X509v3 Authority Key Identifier: keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/hs-AzdnIKl__cAx33Gis1dnFwQw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.208.76.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:59:90:f2:cf:23:f6:4f:40:5e:6e:5a:35:9f:f2:d8:6d:ca: 7b:ab:ed:43:3c:3a:f1:8a:38:32:4e:8d:fa:71:53:03:e9:d7: a8:5d:90:71:7b:e5:7e:e1:34:27:8a:bf:68:93:ae:84:6a:ef: 18:9c:af:40:e9:46:a7:f8:20:e1:13:1b:97:3f:e1:68:3c:cb: 92:93:98:90:be:df:7b:d9:2f:6c:7f:2b:40:a8:26:60:d3:24: 68:11:7a:7f:ba:aa:aa:c9:b8:26:6e:e2:77:ae:bc:b9:86:27: 62:89:61:29:c0:12:ae:2c:ca:85:b0:44:57:f3:d5:31:20:08: 45:84:00:fc:df:91:9c:b8:7c:63:d8:1f:ea:17:28:9b:a6:17: ee:93:49:03:6c:1b:fb:05:3b:77:48:f0:e8:b9:a6:d2:64:4c: f5:a0:48:7e:6c:e2:fb:e7:9c:66:29:1b:f0:3e:cb:16:d0:a9: 2d:b4:1b:d9:8d:37:12:af:69:d4:2a:34:3f:fd:e5:de:90:bc: 98:c9:ca:9b:48:3a:f0:d7:97:b9:23:47:68:1a:ef:b6:55:33: a7:33:a4:b3:0a:43:8b:cc:2c:b8:fe:a5:72:f9:c2:2b:58:af: 73:5e:f2:a2:71:fa:84:43:af:29:df:63:9d:b4:42:26:30:ef: 58:14:c9:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NqxpftQQYf1cS78mgYQoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZWUxMTk0YmQ4MWQxOTQ2YzM5ZjEwZjdmZGZkZjIyZDFh MDMxMTIwHhcNMjYwMTAxMjAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmNmODBjZGQ5YzgyYTVmZmY3MDBjNzdkYzY4YWNkNWQ5YzVjMTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaqT03WqCpScbYbamsP0uacDmjTe Yz61wij7PM08sUsnHbbVw5124/l8APrpdb3ZX3T4xJbBEDbMJIl5S7QD4Te0PG+U LzlWzSsgI1uOZTtz72jzDaDEFWsUyqSSvotk4HnRP8qgZPno/cts445Ll3DcI+TM lcKvCk3/1exgRH0ADkC00djMhzlfNtBL9mcnGsBvGhsuhWw0WOPxGVHgZYu2QoQo TKRnMzkTNaCz3C6cEeRIJQ+1qBU32mU0+3ArTjs+KuOmpR+TWaJ2URWDL1MSf5rd d967nYYHNdFvZameFHaKyxE6VFx50GNkIdobQ+mNf9uegw64PsJsHk/JsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIbPgM3ZyCpf/3AMd9xorNXZxcEMMB8GA1UdIwQY MBaAFEnuEZS9gdGUbDnxD3/f3yLRoDESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2U0UmxMMkIwWlJzT2ZFUGY5X2ZJdEdnTVJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMzI0ZjQtOTc3MC00YTU4LWE2ZWYt ZDYyZmE2MzE5ZmQ0LzEvaHMtQXpkbklLbF9fY0F4MzNHaXMxZG5Gd1F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9hMzI0ZjQtOTc3MC00YTU4LWE2ZWYtZDYyZmE2MzE5ZmQ0 LzEvU2U0UmxMMkIwWlJzT2ZFUGY5X2ZJdEdnTVJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudBMMA0G CSqGSIb3DQEBCwUAA4IBAQB6WZDyzyP2T0Beblo1n/LYbcp7q+1DPDrxijgyTo36 cVMD6deoXZBxe+V+4TQnir9ok66Eau8YnK9A6Uan+CDhExuXP+FoPMuSk5iQvt97 2S9sfytAqCZg0yRoEXp/uqqqybgmbuJ3rry5hidiiWEpwBKuLMqFsERX89UxIAhF hAD835GcuHxj2B/qFyibphfuk0kDbBv7BTt3SPDouabSZEz1oEh+bOL755xmKRvw PssW0KkttBvZjTcSr2nUKjQ//eXekLyYycqbSDrw15e5I0doGu+2VTOnM6SzCkOL zCy4/qVy+cIrWK9zXvKicfqEQ68p32OdtEImMO9YFMlJ -----END CERTIFICATE-----Generated at Mon Jan 26 06:18:02 2026 by rpki-client