This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/HDDUkhzgUOHlF7zi4DlC9_ywpGI.roa File: HDDUkhzgUOHlF7zi4DlC9_ywpGI.roa (raw, json) Hash identifier: ob4GjBCgXhSHBsKltA+N4Bhya5B54UhmYsdP2O0rGB0= Subject key identifier: 1C:30:D4:92:1C:E0:50:E1:E5:17:BC:E2:E0:39:42:F7:FC:B0:A4:62 Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e Certificate serial: 019B7C122AF8308D8933AC61810649466D3E Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/HDDUkhzgUOHlF7zi4DlC9_ywpGI.roa Signing time: Fri 02 Jan 2026 00:18:43 +0000 ROA not before: Fri 02 Jan 2026 00:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52180 IP address blocks: 185.126.253.0/24 maxlen: 24 212.79.123.0/24 maxlen: 24 212.79.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:2a:f8:30:8d:89:33:ac:61:81:06:49:46:6d:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e Validity Not Before: Jan 2 00:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c30d4921ce050e1e517bce2e03942f7fcb0a462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:81:55:a6:7b:10:70:3f:16:8d:93:fa:e1:ae: 34:c0:b7:85:00:a4:70:47:94:de:85:ef:aa:17:c6: ec:9a:05:ef:78:70:2a:1b:6b:4c:9f:11:27:e6:da: 4d:0a:af:65:e6:a0:60:07:95:8b:14:82:0e:a6:7e: 2c:63:b4:fd:57:5f:77:ca:fe:6e:48:df:96:23:8c: 0f:28:89:53:48:cf:05:ce:39:e0:22:31:5a:77:bb: f8:64:93:cf:87:28:84:61:5b:2f:a4:63:75:12:96: 0a:d6:53:b4:f5:72:73:57:d5:f3:99:e1:4c:f6:3f: f7:11:ff:58:58:05:a9:5a:a3:0d:ef:92:92:33:f8: 28:d1:99:c8:e7:19:2b:1a:7d:1d:de:53:8f:da:6f: ba:97:b9:24:20:65:df:a9:be:ac:fe:0c:0a:8f:62: 63:d3:c2:f1:18:46:f9:09:67:17:f2:ba:af:0a:bc: 1e:50:b7:9b:d0:fa:04:34:50:93:d7:74:9e:2b:1f: 36:73:b8:94:80:d5:a8:94:2b:16:8a:79:43:c5:08: 06:41:05:00:cd:6a:ad:f4:9d:5b:6c:e7:c0:3f:e4: 7a:f9:52:7b:ff:0d:c6:49:bb:aa:d2:7e:ac:62:b8: d7:7b:06:48:1e:80:84:f5:a9:cd:8b:a3:87:f3:5b: da:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:30:D4:92:1C:E0:50:E1:E5:17:BC:E2:E0:39:42:F7:FC:B0:A4:62 X509v3 Authority Key Identifier: keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/HDDUkhzgUOHlF7zi4DlC9_ywpGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.126.253.0/24 212.79.123.0-212.79.124.255 Signature Algorithm: sha256WithRSAEncryption 08:13:3f:31:78:ef:00:0b:09:12:f5:f6:29:dd:73:17:d9:8a: 06:1c:9e:31:11:e4:f8:ef:ff:de:69:1e:16:cd:6b:68:b2:06: 12:ad:66:f3:28:9a:b4:a1:c5:35:ee:dc:72:2d:cc:6b:b4:77: d4:d5:b3:6d:63:1f:e5:59:a3:75:46:6f:08:8c:5c:25:37:77: 4f:e1:af:04:35:eb:31:a4:cb:91:df:c9:f8:62:f7:96:05:26: 68:9c:47:c1:ce:2f:49:e1:63:eb:82:b5:01:31:9e:f6:d6:ef: 3a:f4:8a:2c:88:36:06:d4:63:1a:ac:3a:57:a9:95:07:44:32: 84:de:25:6b:f1:d1:4d:4b:54:42:18:05:32:13:b3:14:92:0c: 7f:87:5b:4a:a6:0b:fc:8f:8f:52:49:05:8e:83:4b:2f:22:c4: 81:ae:f0:c2:35:01:ab:67:01:2b:fb:20:30:33:d8:a8:09:92: 2f:b9:2f:bf:43:ef:a8:08:8c:05:e7:16:3d:90:0b:df:48:5c: 18:ce:d8:61:00:7b:f3:17:04:8e:1a:f5:92:e1:d6:81:c8:bf: f2:5a:04:4f:b4:8d:e6:35:61:f3:f7:55:0e:15:be:a3:24:39: 9b:c9:7b:2b:6e:07:3d:ec:a1:c6:09:31:f9:f0:3c:e4:f2:d8: dd:c1:1e:68 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt8Eir4MI2JM6xhgQZJRm0+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjViYWUyNTc3OGJlZWQ4ODgwYzA4ZGYyZDNmMzdmYzM3 YWJjMWUwHhcNMjYwMTAyMDAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzMwZDQ5MjFjZTA1MGUxZTUxN2JjZTJlMDM5NDJmN2ZjYjBhNDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4FVpnsQcD8WjZP64a40wLeFAKRw R5Tehe+qF8bsmgXveHAqG2tMnxEn5tpNCq9l5qBgB5WLFIIOpn4sY7T9V193yv5u SN+WI4wPKIlTSM8FzjngIjFad7v4ZJPPhyiEYVsvpGN1EpYK1lO09XJzV9XzmeFM 9j/3Ef9YWAWpWqMN75KSM/go0ZnI5xkrGn0d3lOP2m+6l7kkIGXfqb6s/gwKj2Jj 08LxGEb5CWcX8rqvCrweULeb0PoENFCT13SeKx82c7iUgNWolCsWinlDxQgGQQUA zWqt9J1bbOfAP+R6+VJ7/w3GSbuq0n6sYrjXewZIHoCE9anNi6OH81vafwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFBww1JIc4FDh5Re84uA5Qvf8sKRiMB8GA1UdIwQY MBaAFKhluuJXeL7tiIDAjfLT83/DerweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTkt MWI2Zjc1MGNmOWEyLzEvSEREVWtoemdVT0hsRjd6aTREbEM5X3l3cEdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTktMWI2Zjc1MGNmOWEy LzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAuX79MAwD BADUT3sDBADUT3wwDQYJKoZIhvcNAQELBQADggEBAAgTPzF47wALCRL19indcxfZ igYcnjER5Pjv/95pHhbNa2iyBhKtZvMomrShxTXu3HItzGu0d9TVs21jH+VZo3VG bwiMXCU3d0/hrwQ16zGky5Hfyfhi95YFJmicR8HOL0nhY+uCtQExnvbW7zr0iiyI NgbUYxqsOleplQdEMoTeJWvx0U1LVEIYBTITsxSSDH+HW0qmC/yPj1JJBY6DSy8i xIGu8MI1AatnASv7IDAz2KgJki+5L79D76gIjAXnFj2QC99IXBjO2GEAe/MXBI4a 9ZLh1oHIv/JaBE+0jeY1YfP3VQ4VvqMkOZvJeytuBz3socYJMfnwPOTy2N3BHmg= -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:44 2026 by rpki-client