This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/hMLqEXV_h8cwrkd0qVqjik9UM5Q.roa File: hMLqEXV_h8cwrkd0qVqjik9UM5Q.roa (raw, json) Hash identifier: 049g9W8sXpkKaEFMxqweslPE125wn44hfoXmY1GLrGM= Subject key identifier: 84:C2:EA:11:75:7F:87:C7:30:AE:47:74:A9:5A:A3:8A:4F:54:33:94 Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Certificate serial: 019B77C7747216DC50AF5F5BA0FC5D149AF5 Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/hMLqEXV_h8cwrkd0qVqjik9UM5Q.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211797 IP address blocks: 185.193.160.0/22 maxlen: 22 185.193.160.0/24 maxlen: 24 185.193.161.0/24 maxlen: 24 185.193.162.0/24 maxlen: 24 185.193.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:74:72:16:dc:50:af:5f:5b:a0:fc:5d:14:9a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84c2ea11757f87c730ae4774a95aa38a4f543394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ad:e5:59:a3:87:07:3c:f7:0a:cb:6c:3d:9d: 6f:11:a0:6a:74:62:87:69:fc:b3:ef:3e:d0:ff:aa: c8:ba:b2:6e:39:58:5a:27:9d:23:54:3b:bf:c9:11: a6:f9:f5:c5:cf:de:73:d3:a8:44:ef:96:69:0c:b4: 66:bd:23:f0:79:64:90:d4:8d:8d:79:b1:05:6e:2a: 94:58:08:84:f2:73:79:cc:56:3c:e3:6b:f6:ba:24: 8b:53:80:23:7b:a8:36:28:4e:6a:38:41:16:ef:4c: 20:9b:42:ed:f2:7b:1d:4a:8e:56:a3:05:39:52:3f: ae:97:4e:81:f2:a0:47:95:0e:79:ba:a5:0d:38:b3: 52:b6:0b:a3:4f:05:25:4d:8d:dc:1c:6d:62:10:5f: 3f:d2:97:c3:48:94:7f:38:29:0d:71:36:ed:2e:41: 40:d9:f6:be:1c:ab:c4:ee:c5:79:8f:36:59:c0:6b: b4:3a:09:19:ce:d4:67:b7:59:32:43:2e:83:b3:71: 57:6f:5e:26:b6:18:7e:6b:c3:f4:f4:b0:90:d9:6c: fa:f8:d2:74:11:6b:20:14:55:2f:b6:56:8e:56:28: 20:fa:1c:74:19:a0:61:8e:1e:6c:0f:d3:aa:6d:ec: 15:1a:80:69:9d:63:0a:2c:c2:0c:97:d4:51:79:1f: f4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C2:EA:11:75:7F:87:C7:30:AE:47:74:A9:5A:A3:8A:4F:54:33:94 X509v3 Authority Key Identifier: keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/hMLqEXV_h8cwrkd0qVqjik9UM5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.193.160.0/22 Signature Algorithm: sha256WithRSAEncryption 32:9f:5e:53:ab:8c:fb:21:5e:95:61:6b:4f:06:7c:00:55:4c: f9:62:5a:e3:6b:f8:b8:cc:84:cc:2b:77:66:84:e9:75:9e:30: 4f:17:c4:9c:4c:84:8e:db:8e:42:49:83:ef:cf:fa:0b:23:d2: 80:5c:d1:a5:67:e9:92:5c:5d:07:33:b1:38:5a:ed:41:80:6f: 26:dc:d2:53:e3:fe:16:e6:ac:ee:2f:64:8e:45:fc:36:7a:f3: b0:04:37:78:af:af:af:9b:13:e1:a7:f0:ad:b1:4e:f9:b8:fc: 14:ae:ed:69:bd:e7:21:81:8e:ba:0f:42:2e:cc:ab:03:30:96: dd:99:f6:4a:fd:ae:ce:6f:b9:a1:8f:bf:40:8e:b5:9d:12:e8: 86:a5:37:7f:7a:e6:cd:7f:3c:ad:d1:c6:25:e5:5a:ac:ff:e7: fc:dd:d8:3b:17:f6:1d:5c:b7:f5:6d:38:28:09:6e:c7:90:64: 30:49:7c:27:c1:ff:ba:ac:f4:2b:a9:74:e6:bc:c7:82:df:d8: c8:02:19:e0:1b:c8:69:fd:81:34:4d:8c:a7:b7:1f:2c:d0:59: b6:7d:71:53:64:77:f0:b0:50:e1:b7:3e:07:9e:5c:77:a6:62: c2:84:32:ba:af:57:de:3d:01:32:f5:97:39:0e:d6:7f:71:0a: 76:4f:47:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3RyFtxQr19boPxdFJr1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOWU5Njk2ZGNjZjZjMWE0MzIwOTA0MDg1MTRhZWNkYzNm NjA3MzkwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGMyZWExMTc1N2Y4N2M3MzBhZTQ3NzRhOTVhYTM4YTRmNTQzMzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6q3lWaOHBzz3CstsPZ1vEaBqdGKH afyz7z7Q/6rIurJuOVhaJ50jVDu/yRGm+fXFz95z06hE75ZpDLRmvSPweWSQ1I2N ebEFbiqUWAiE8nN5zFY842v2uiSLU4Aje6g2KE5qOEEW70wgm0Lt8nsdSo5WowU5 Uj+ul06B8qBHlQ55uqUNOLNStgujTwUlTY3cHG1iEF8/0pfDSJR/OCkNcTbtLkFA 2fa+HKvE7sV5jzZZwGu0OgkZztRnt1kyQy6Ds3FXb14mthh+a8P09LCQ2Wz6+NJ0 EWsgFFUvtlaOVigg+hx0GaBhjh5sD9OqbewVGoBpnWMKLMIMl9RReR/0GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFITC6hF1f4fHMK5HdKlao4pPVDOUMB8GA1UdIwQY MBaAFG+elpbcz2waQyCQQIUUrs3D9gc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjIt YmFmNGUwYjRhNjllLzEvaE1McUVYVl9oOGN3cmtkMHFWcWppazlVTTVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjItYmFmNGUwYjRhNjll LzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucGgMA0G CSqGSIb3DQEBCwUAA4IBAQAyn15Tq4z7IV6VYWtPBnwAVUz5Ylrja/i4zITMK3dm hOl1njBPF8ScTISO245CSYPvz/oLI9KAXNGlZ+mSXF0HM7E4Wu1BgG8m3NJT4/4W 5qzuL2SORfw2evOwBDd4r6+vmxPhp/CtsU75uPwUru1pvechgY66D0IuzKsDMJbd mfZK/a7Ob7mhj79AjrWdEuiGpTd/eubNfzyt0cYl5Vqs/+f83dg7F/YdXLf1bTgo CW7HkGQwSXwnwf+6rPQrqXTmvMeC39jIAhngG8hp/YE0TYyntx8s0Fm2fXFTZHfw sFDhtz4Hnlx3pmLChDK6r1fePQEy9Zc5DtZ/cQp2T0er -----END CERTIFICATE-----Generated at Mon Jan 26 14:08:16 2026 by rpki-client