This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/hfXT8LQHaBMfJkasTrm7RdvVn3Y.roa File: hfXT8LQHaBMfJkasTrm7RdvVn3Y.roa (raw, json) Hash identifier: z2Fk8o05kqf7vSmZOKJV+E6QrC7t6Pe5xa8E+bNZIE0= Subject key identifier: 85:F5:D3:F0:B4:07:68:13:1F:26:46:AC:4E:B9:BB:45:DB:D5:9F:76 Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d Certificate serial: 019B76EABA4DB5075376EE80BE6A69F064EF Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/hfXT8LQHaBMfJkasTrm7RdvVn3Y.roa Signing time: Thu 01 Jan 2026 00:17:33 +0000 ROA not before: Thu 01 Jan 2026 00:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203993 IP address blocks: 185.54.92.0/23 maxlen: 24 2a00:8642::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ba:4d:b5:07:53:76:ee:80:be:6a:69:f0:64:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d Validity Not Before: Jan 1 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85f5d3f0b40768131f2646ac4eb9bb45dbd59f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9a:b6:65:fe:1d:0c:bd:e3:48:a5:85:1f:a9: 53:e6:0d:40:d5:a0:87:91:24:2b:00:7d:73:01:cd: 23:8c:46:34:50:14:1e:cb:57:df:5d:8c:81:51:58: 8d:35:77:a1:4a:20:eb:2f:5e:2f:f5:62:ee:c9:ad: 87:ee:ad:86:16:4d:83:a3:01:7b:9b:f1:a1:5e:41: 85:7c:82:30:ff:8e:ac:2d:a3:33:72:7f:bf:66:0d: 0d:d6:91:f9:42:f3:1b:13:f3:ca:96:51:cd:d8:bd: 90:12:2d:d7:7a:96:4f:34:2b:01:05:b8:43:3b:0e: f5:ca:23:25:7b:ed:fb:f7:31:18:d7:5d:cf:c3:12: 64:f5:96:7c:02:f1:c3:13:30:46:12:ab:8d:7e:8e: dd:a7:d4:94:73:46:47:23:ac:85:d7:45:c0:04:4d: 62:fc:b4:26:d7:f5:af:68:13:64:dd:e7:38:ed:f5: 69:b7:f7:6b:cc:3b:bd:ce:94:29:ef:f4:83:bf:c7: 24:eb:87:04:98:e2:2e:3d:6a:d9:8a:5b:bd:93:10: b4:a3:3c:bc:8f:09:b5:4e:fd:a4:e0:84:57:65:8b: f0:cf:f6:51:d9:61:a6:51:bc:f4:9b:45:4d:14:d0: ae:df:3f:b8:c9:2b:34:09:b8:6d:0c:62:39:9a:b6: 69:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F5:D3:F0:B4:07:68:13:1F:26:46:AC:4E:B9:BB:45:DB:D5:9F:76 X509v3 Authority Key Identifier: keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/hfXT8LQHaBMfJkasTrm7RdvVn3Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.92.0/23 IPv6: 2a00:8642::/32 Signature Algorithm: sha256WithRSAEncryption 97:8b:7d:a4:ac:a6:97:c8:2a:cb:96:e6:ff:8f:bf:a3:27:1f: 7a:d8:84:70:27:14:96:3d:50:4f:93:1e:da:11:1d:75:de:3e: 8a:55:47:5c:e5:a3:c4:8c:22:5d:36:b6:57:f2:67:93:f6:6a: 88:48:da:fc:7b:1b:ee:c3:62:9e:90:7c:92:b6:87:24:58:cb: c9:bb:42:4a:a8:68:0b:36:58:b1:43:8d:40:36:1c:b2:f9:02: 80:07:66:a4:42:69:a3:28:ce:2b:b2:21:8d:0b:c0:23:5b:3b: c0:cf:ae:52:ee:f7:0d:b9:56:7d:88:df:fd:8e:f6:bc:8e:f3: 86:b7:ce:f0:9c:1a:38:92:e1:34:db:c6:47:9d:57:e9:e9:89: e0:7e:16:26:dd:a3:30:7d:75:85:8b:bd:91:72:5a:a4:a8:1e: 26:1a:dc:13:d9:0e:af:7d:ac:4a:46:43:e6:01:2b:ec:6d:d9: a8:e6:a8:7f:f8:4e:05:a9:6c:2f:be:9d:ce:82:5d:d9:7e:88: f4:de:da:d9:cb:53:c8:f8:b4:06:a1:e3:4a:83:b0:ea:8d:38: 5e:1a:f6:51:db:1f:39:63:4a:e1:ad:87:36:e3:10:f9:9a:81: 4d:b3:f8:00:b7:80:2d:e7:32:bc:19:85:48:03:cf:91:f7:5c: 9f:c4:21:f0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26rpNtQdTdu6Avmpp8GTvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MGIyODNhMDUxMzk0MGQ1MjBhNjgwYjhiM2QxNGRiYzM2 Nzc3MGQwHhcNMjYwMTAxMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWY1ZDNmMGI0MDc2ODEzMWYyNjQ2YWM0ZWI5YmI0NWRiZDU5Zjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpq2Zf4dDL3jSKWFH6lT5g1A1aCH kSQrAH1zAc0jjEY0UBQey1ffXYyBUViNNXehSiDrL14v9WLuya2H7q2GFk2DowF7 m/GhXkGFfIIw/46sLaMzcn+/Zg0N1pH5QvMbE/PKllHN2L2QEi3XepZPNCsBBbhD Ow71yiMle+379zEY113PwxJk9ZZ8AvHDEzBGEquNfo7dp9SUc0ZHI6yF10XABE1i /LQm1/WvaBNk3ec47fVpt/drzDu9zpQp7/SDv8ck64cEmOIuPWrZilu9kxC0ozy8 jwm1Tv2k4IRXZYvwz/ZR2WGmUbz0m0VNFNCu3z+4ySs0CbhtDGI5mrZpdQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIX10/C0B2gTHyZGrE65u0Xb1Z92MB8GA1UdIwQY MBaAFDgLKDoFE5QNUgpoC4s9FNvDZ3cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEt Y2NmNjQ1NGJiMjRjLzEvaGZYVDhMUUhhQk1mSmthc1RybTdSZHZWbjNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEtY2NmNjQ1NGJiMjRj LzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuTZcMA0E AgACMAcDBQAqAIZCMA0GCSqGSIb3DQEBCwUAA4IBAQCXi32krKaXyCrLlub/j7+j Jx962IRwJxSWPVBPkx7aER113j6KVUdc5aPEjCJdNrZX8meT9mqISNr8exvuw2Ke kHyStockWMvJu0JKqGgLNlixQ41ANhyy+QKAB2akQmmjKM4rsiGNC8AjWzvAz65S 7vcNuVZ9iN/9jva8jvOGt87wnBo4kuE028ZHnVfp6YngfhYm3aMwfXWFi72Rclqk qB4mGtwT2Q6vfaxKRkPmASvsbdmo5qh/+E4FqWwvvp3Ogl3Zfoj03trZy1PI+LQG oeNKg7DqjTheGvZR2x85Y0rhrYc24xD5moFNs/gAt4At5zK8GYVIA8+R91yfxCHw -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:38 2026 by rpki-client