This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/hKRwWCL_6CoBmk8VsIrEXY1xai4.roa File: hKRwWCL_6CoBmk8VsIrEXY1xai4.roa (raw, json) Hash identifier: uqoBEgPcDkJFQkJhnCsNAf2Gfqg03lNWyYDwn89PoDU= Subject key identifier: 84:A4:70:58:22:FF:E8:2A:01:9A:4F:15:B0:8A:C4:5D:8D:71:6A:2E Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba Certificate serial: 019B7EA663D2C0ED65F95850A37A4D95CC7D Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/hKRwWCL_6CoBmk8VsIrEXY1xai4.roa Signing time: Fri 02 Jan 2026 12:19:52 +0000 ROA not before: Fri 02 Jan 2026 12:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34443 IP address blocks: 85.248.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:63:d2:c0:ed:65:f9:58:50:a3:7a:4d:95:cc:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba Validity Not Before: Jan 2 12:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84a4705822ffe82a019a4f15b08ac45d8d716a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:96:d2:a4:15:b2:e8:b6:47:7c:07:0e:1e:1c: b1:73:44:31:cb:61:43:8d:06:ab:49:a2:fe:60:d6: 00:cf:5d:5f:5a:10:e3:74:15:e8:ba:ed:ca:1e:e5: 4b:89:0b:72:86:86:9a:51:b6:ef:6b:cf:a7:36:dd: 39:53:9c:fa:d4:ce:a5:d2:f3:be:1b:e0:84:f4:d0: 06:12:4a:8a:6b:2b:e7:69:c1:28:5d:35:2b:40:a7: a0:f3:e9:f5:d4:c1:9b:5c:a8:79:dd:eb:9b:89:68: c4:03:5b:0c:69:d7:7f:db:2d:41:70:91:a2:46:7f: c0:38:04:a6:aa:d8:37:28:43:fb:3d:7c:84:57:a9: cb:0c:49:58:be:78:04:a2:f4:a0:14:97:81:a6:13: b8:54:38:f1:d3:44:7a:f7:65:82:db:5f:55:c8:c5: bb:1b:39:09:2e:eb:ea:d2:6c:fe:b7:86:da:12:1f: e0:e0:71:43:63:5a:56:71:19:51:6b:42:f4:72:75: e0:b8:d1:32:43:75:d8:c6:71:af:c4:e4:91:34:7e: b3:9e:d7:fa:a6:e3:31:c8:b5:ef:7f:31:39:49:95: 2f:24:4e:12:d4:5e:36:9d:17:29:bf:83:d3:20:f2: fc:52:f0:6f:6d:2e:38:0c:f4:13:cf:b9:eb:8b:29: cc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A4:70:58:22:FF:E8:2A:01:9A:4F:15:B0:8A:C4:5D:8D:71:6A:2E X509v3 Authority Key Identifier: keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/hKRwWCL_6CoBmk8VsIrEXY1xai4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.248.235.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:de:6e:a8:f7:2e:11:19:2b:ff:70:92:82:99:64:65:1d:85: 68:bb:b4:e6:bd:63:8c:75:1f:9f:b9:93:2d:5e:98:5b:cc:d3: 4b:bd:a0:5c:87:45:91:cd:a8:a3:fa:03:9a:31:97:35:62:64: 83:fc:ff:61:20:fb:b2:1f:c4:ae:1f:c8:2a:9c:76:97:e6:a3: 18:8a:20:ee:85:b4:b6:ba:3f:16:87:93:42:3c:b8:28:a9:39: 8a:54:ab:d5:81:38:c7:07:24:74:fe:44:77:b7:ed:a5:3f:d9: 03:a1:63:00:b3:4d:e6:e4:21:e0:25:d3:bb:9f:51:eb:33:d7: cf:7e:b7:78:d3:81:31:96:a0:07:27:80:56:45:e5:75:ad:35: 3e:27:25:21:28:16:85:e8:ff:0b:30:77:eb:7f:e5:3a:20:0f: 5d:6d:7b:30:8a:4d:5a:61:b7:dc:8e:fb:f9:90:4e:65:e2:ca: 67:73:70:94:4a:c4:04:b7:56:fd:de:9a:1a:5e:d7:af:cb:9b: 67:b9:94:9d:74:47:75:1f:eb:87:44:87:01:56:af:77:f5:ed: 3a:0d:2e:e5:cc:da:11:26:5d:81:c5:65:53:26:a3:95:57:6d: 34:98:48:5b:ae:07:7b:56:fc:c5:57:17:62:3c:04:92:74:ac: 42:a1:6a:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pmPSwO1l+VhQo3pNlcx9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm MDVkYmEwHhcNMjYwMTAyMTIxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGE0NzA1ODIyZmZlODJhMDE5YTRmMTViMDhhYzQ1ZDhkNzE2YTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZbSpBWy6LZHfAcOHhyxc0Qxy2FD jQarSaL+YNYAz11fWhDjdBXouu3KHuVLiQtyhoaaUbbva8+nNt05U5z61M6l0vO+ G+CE9NAGEkqKayvnacEoXTUrQKeg8+n11MGbXKh53eubiWjEA1sMadd/2y1BcJGi Rn/AOASmqtg3KEP7PXyEV6nLDElYvngEovSgFJeBphO4VDjx00R692WC219VyMW7 GzkJLuvq0mz+t4baEh/g4HFDY1pWcRlRa0L0cnXguNEyQ3XYxnGvxOSRNH6zntf6 puMxyLXvfzE5SZUvJE4S1F42nRcpv4PTIPL8UvBvbS44DPQTz7nriynMAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFISkcFgi/+gqAZpPFbCKxF2NcWouMB8GA1UdIwQY MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt ZTJmYmMzYTY4ODAwLzEvaEtSd1dDTF82Q29CbWs4VnNJckVYWTF4YWk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVfjrMA0G CSqGSIb3DQEBCwUAA4IBAQBs3m6o9y4RGSv/cJKCmWRlHYVou7TmvWOMdR+fuZMt XphbzNNLvaBch0WRzaij+gOaMZc1YmSD/P9hIPuyH8SuH8gqnHaX5qMYiiDuhbS2 uj8Wh5NCPLgoqTmKVKvVgTjHByR0/kR3t+2lP9kDoWMAs03m5CHgJdO7n1HrM9fP frd404ExlqAHJ4BWReV1rTU+JyUhKBaF6P8LMHfrf+U6IA9dbXswik1aYbfcjvv5 kE5l4spnc3CUSsQEt1b93poaXtevy5tnuZSddEd1H+uHRIcBVq939e06DS7lzNoR Jl2BxWVTJqOVV200mEhbrgd7VvzFVxdiPASSdKxCoWo0 -----END CERTIFICATE-----Generated at Mon Jan 26 12:16:38 2026 by rpki-client