This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/HgVTCqxTI2p7CB3_pzYOlBKbewI.roa File: HgVTCqxTI2p7CB3_pzYOlBKbewI.roa (raw, json) Hash identifier: Vx3tDFhqH00mNA0Sjbw5LLVQH5B1ifF/KkPAwaHsXVk= Subject key identifier: 1E:05:53:0A:AC:53:23:6A:7B:08:1D:FF:A7:36:0E:94:12:9B:7B:02 Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59 Certificate serial: 019B7C7FFC46AAC6471B166945E9E7DD8B31 Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/HgVTCqxTI2p7CB3_pzYOlBKbewI.roa Signing time: Fri 02 Jan 2026 02:18:41 +0000 ROA not before: Fri 02 Jan 2026 02:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207143 IP address blocks: 185.101.156.0/22 maxlen: 22 185.101.156.0/24 maxlen: 24 185.101.157.0/24 maxlen: 24 185.101.158.0/24 maxlen: 24 185.101.159.0/24 maxlen: 24 185.229.88.0/24 maxlen: 24 185.229.89.0/24 maxlen: 24 185.229.90.0/24 maxlen: 24 185.229.91.0/24 maxlen: 24 193.203.253.0/24 maxlen: 24 204.174.100.0/24 maxlen: 24 213.254.165.0/24 maxlen: 24 2a11:8b81::/32 maxlen: 32 2a11:8b82::/32 maxlen: 32 2a11:8b83:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:fc:46:aa:c6:47:1b:16:69:45:e9:e7:dd:8b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59 Validity Not Before: Jan 2 02:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e05530aac53236a7b081dffa7360e94129b7b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:21:a0:d4:52:ef:65:c8:fd:f5:c0:af:a2:97: 5c:a0:2d:e2:20:fb:5f:fe:96:d5:27:ea:19:3a:f1: 76:6c:48:d2:51:ea:f7:b7:1e:dd:02:92:af:8d:78: ed:cf:28:bb:4c:1a:30:4f:cc:b9:3a:d1:a0:2e:ae: 4f:5d:9c:ac:04:af:fe:7c:7d:25:44:0c:3e:13:99: 51:f0:e7:ff:92:fd:08:a9:06:94:1f:9f:42:00:34: 38:1d:a4:86:23:64:f4:5d:ce:ef:b6:f7:ed:17:af: 6e:31:87:c0:fa:e1:cb:47:7c:61:7e:6a:3d:b6:c6: 3f:6f:ac:26:8c:6e:f9:ea:2e:c8:74:a4:ec:38:6f: 58:ac:ff:66:9a:d2:82:d6:50:bc:17:04:db:db:13: 73:8e:2f:b6:63:ed:d5:b4:19:0e:52:d5:38:77:07: 70:ed:c4:41:2f:b3:23:f4:3c:fb:80:46:da:db:f8: 2e:d4:68:da:72:e4:bb:ff:e8:c4:98:ae:fe:5f:74: 66:a3:0d:a1:fb:fc:39:6f:b1:0a:49:64:e6:62:a2: 20:3d:22:41:59:04:3d:a0:c6:59:24:a9:aa:13:ae: e4:1d:9e:e6:1c:1d:67:65:41:8c:b4:18:41:0c:6f: 39:50:a6:b7:e2:17:99:68:28:56:dd:84:02:77:55: 6f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:05:53:0A:AC:53:23:6A:7B:08:1D:FF:A7:36:0E:94:12:9B:7B:02 X509v3 Authority Key Identifier: keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/HgVTCqxTI2p7CB3_pzYOlBKbewI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.101.156.0/22 185.229.88.0/22 193.203.253.0/24 204.174.100.0/24 213.254.165.0/24 IPv6: 2a11:8b81::-2a11:8b82:ffff:ffff:ffff:ffff:ffff:ffff 2a11:8b83:1::/48 Signature Algorithm: sha256WithRSAEncryption 40:81:4c:a5:ef:7f:e8:ba:53:b4:b9:60:af:d0:29:80:d1:08: 75:6d:49:f4:be:5e:d8:8e:ba:87:75:6b:b0:a5:c6:db:91:45: 26:af:4b:31:b6:f9:5b:a5:88:94:d4:12:86:a5:b4:01:a2:54: 21:b2:a2:25:a7:3e:56:9a:d0:9a:87:0c:87:82:5e:eb:32:7b: 44:e6:3d:b4:bf:d8:75:92:fc:50:61:11:33:6f:7c:9a:63:1d: 15:65:c2:4f:ef:2e:42:66:1b:95:a6:b2:be:2e:b5:27:ff:ef: 37:0c:7e:68:1d:e5:7c:69:0e:2e:94:18:bb:89:3d:ef:de:f3: d5:7f:a3:ae:8d:17:17:b4:93:b3:92:ac:ad:c5:da:a4:2b:40: be:f2:b0:5f:1a:49:7e:36:e3:c2:1b:9e:03:b3:5a:03:65:95: 05:68:7b:f1:af:7c:87:17:09:5e:37:de:43:d9:b8:7e:75:13: ed:a0:94:87:50:a9:e2:b9:b1:3c:d6:6b:48:13:a9:8f:76:40: e0:73:ae:64:37:39:29:52:7a:4a:71:c3:dc:6f:20:66:c4:c8: ec:2a:55:7c:0a:4f:0c:2a:13:54:a3:6a:f1:3a:a3:46:ba:ff: fd:44:fa:13:9c:3f:b8:10:ed:11:a8:cf:c3:18:81:f6:f2:52: 37:66:20:b9 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt8f/xGqsZHGxZpRenn3YsxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyM2EyYjNkZDc2NjcyNzVmMDk4ODZkZjdkYTA3OWY3NTVj ZWVkNTkwHhcNMjYwMTAyMDIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTA1NTMwYWFjNTMyMzZhN2IwODFkZmZhNzM2MGU5NDEyOWI3YjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iGg1FLvZcj99cCvopdcoC3iIPtf /pbVJ+oZOvF2bEjSUer3tx7dApKvjXjtzyi7TBowT8y5OtGgLq5PXZysBK/+fH0l RAw+E5lR8Of/kv0IqQaUH59CADQ4HaSGI2T0Xc7vtvftF69uMYfA+uHLR3xhfmo9 tsY/b6wmjG756i7IdKTsOG9YrP9mmtKC1lC8FwTb2xNzji+2Y+3VtBkOUtU4dwdw 7cRBL7Mj9Dz7gEba2/gu1GjacuS7/+jEmK7+X3Rmow2h+/w5b7EKSWTmYqIgPSJB WQQ9oMZZJKmqE67kHZ7mHB1nZUGMtBhBDG85UKa34heZaChW3YQCd1VvJwIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFB4FUwqsUyNqewgd/6c2DpQSm3sCMB8GA1UdIwQY MBaAFJI6Kz3XZnJ18JiG332gefdVzu1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjkt MjczOGJjYjQzZDZkLzEvSGdWVENxeFRJMnA3Q0IzX3B6WU9sQktiZXdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjktMjczOGJjYjQzZDZk LzEva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzAkBAIAATAeAwQCuWWcAwQC ueVYAwQAwcv9AwQAzK5kAwQA1f6lMB8EAgACMBkwDgMFACoRi4EDBQAqEYuCAwcA KhGLgwABMA0GCSqGSIb3DQEBCwUAA4IBAQBAgUyl73/oulO0uWCv0CmA0Qh1bUn0 vl7YjrqHdWuwpcbbkUUmr0sxtvlbpYiU1BKGpbQBolQhsqIlpz5WmtCahwyHgl7r MntE5j20v9h1kvxQYREzb3yaYx0VZcJP7y5CZhuVprK+LrUn/+83DH5oHeV8aQ4u lBi7iT3v3vPVf6OujRcXtJOzkqytxdqkK0C+8rBfGkl+NuPCG54Ds1oDZZUFaHvx r3yHFwleN95D2bh+dRPtoJSHUKniubE81mtIE6mPdkDgc65kNzkpUnpKccPcbyBm xMjsKlV8Ck8MKhNUo2rxOqNGuv/9RPoTnD+4EO0RqM/DGIH28lI3ZiC5 -----END CERTIFICATE-----Generated at Mon Jan 26 03:40:34 2026 by rpki-client