This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/HkkRPwqU3p5aRopaf6XmKJHJOS0.roa File: HkkRPwqU3p5aRopaf6XmKJHJOS0.roa (raw, json) Hash identifier: rwteSwkgkB56v9QAYH409kxEVNO2s78pdzGxZ9J+cBI= Subject key identifier: 1E:49:11:3F:0A:94:DE:9E:5A:46:8A:5A:7F:A5:E6:28:91:C9:39:2D Certificate issuer: /CN=ec65d31440bf75d25c606f7915c236ca614464a2 Certificate serial: 019B7A5A1751851257EF1D97DEDA9BE24589 Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/HkkRPwqU3p5aRopaf6XmKJHJOS0.roa Signing time: Thu 01 Jan 2026 16:18:03 +0000 ROA not before: Thu 01 Jan 2026 16:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197704 IP address blocks: 185.80.35.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:17:51:85:12:57:ef:1d:97:de:da:9b:e2:45:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2 Validity Not Before: Jan 1 16:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e49113f0a94de9e5a468a5a7fa5e62891c9392d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:97:94:a6:aa:ad:a6:e6:ba:36:5f:bd:e7:27: 1b:df:33:23:1a:73:cd:90:10:5f:0c:de:7e:c0:12: ae:e5:73:48:0c:ae:ce:00:bd:c8:a6:45:8a:ce:21: e8:ff:4e:a3:23:98:fe:36:bc:eb:5c:6b:8d:43:d7: 43:9b:91:2c:36:c8:4e:c2:22:3c:27:1c:b2:20:67: 9b:da:08:ed:af:e3:26:fb:2a:9c:b3:60:6a:0f:4b: 16:c3:87:d2:20:1c:26:54:de:b5:b6:e8:07:29:c2: 1b:7b:32:34:21:b2:91:e2:a2:71:84:30:c8:80:20: fd:2d:0d:06:41:d0:71:31:6a:25:a4:72:2b:c6:cb: 7a:5b:d0:09:3f:46:b4:07:55:fc:5a:1f:96:3b:bc: b5:6f:9c:dc:2a:47:57:9e:4c:39:ce:1b:7f:8c:10: 0d:1c:e7:5d:17:f6:fa:42:0c:a2:1c:dc:b1:4d:29: e6:98:7d:c0:6e:b3:27:87:ac:0c:ae:76:12:6d:0d: eb:16:23:92:df:b0:a8:56:ce:7d:b9:22:f3:cc:36: 45:8c:b0:c7:74:38:89:7f:83:f3:1b:cd:a9:2f:f0: a5:c3:ce:0d:19:3d:96:47:c8:a5:20:29:8c:c7:83: 14:ef:84:da:3a:f5:98:c4:67:57:1e:ab:85:7b:f7: 53:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:49:11:3F:0A:94:DE:9E:5A:46:8A:5A:7F:A5:E6:28:91:C9:39:2D X509v3 Authority Key Identifier: keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/HkkRPwqU3p5aRopaf6XmKJHJOS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.35.0/24 Signature Algorithm: sha256WithRSAEncryption 41:37:a3:04:87:95:d9:f6:82:71:c3:cf:2d:53:63:56:98:f6: ea:d3:24:19:55:c1:68:1e:79:71:fe:8d:10:cc:3e:56:1c:bb: 5c:9d:b1:0b:96:59:41:f7:da:b0:9a:44:2f:2c:bf:60:46:f3: 37:76:16:5a:f2:9d:4f:c4:02:0a:10:29:f8:66:2d:b7:38:58: f1:7e:74:a6:15:8c:cd:fa:67:ae:03:f1:6f:53:44:14:5e:7c: d3:4b:fd:07:8f:18:35:c0:0f:d9:be:8e:7e:56:eb:ac:05:9e: 8c:15:7d:5d:a3:bc:b5:5c:61:ee:5b:fb:da:cb:ec:5c:fd:3d: 56:ea:01:03:ab:7c:7f:d6:1f:f7:49:a7:a3:31:4d:1f:00:09: ea:9c:87:53:42:2e:86:37:be:c5:b2:cf:66:42:5f:77:29:72: 87:e1:c0:f3:3b:35:9b:d9:64:2e:4e:ff:e7:aa:c6:ec:0b:ad: a0:e3:50:28:83:cf:74:4a:f3:80:4d:0d:8e:64:48:19:1f:36: 84:0b:c6:5a:40:6b:05:7c:39:d9:4b:88:bf:fa:84:c7:22:de: 7d:80:28:e6:0c:83:61:87:7a:c3:67:7e:ed:0e:09:0f:e2:d7: 30:89:ab:a0:f7:2e:63:67:9f:e3:f7:2f:1d:c3:31:3b:15:a9: ea:5e:2a:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WhdRhRJX7x2X3tqb4kWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNjVkMzE0NDBiZjc1ZDI1YzYwNmY3OTE1YzIzNmNhNjE0 NDY0YTIwHhcNMjYwMTAxMTYxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTQ5MTEzZjBhOTRkZTllNWE0NjhhNWE3ZmE1ZTYyODkxYzkzOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpeUpqqtpua6Nl+95ycb3zMjGnPN kBBfDN5+wBKu5XNIDK7OAL3IpkWKziHo/06jI5j+NrzrXGuNQ9dDm5EsNshOwiI8 JxyyIGeb2gjtr+Mm+yqcs2BqD0sWw4fSIBwmVN61tugHKcIbezI0IbKR4qJxhDDI gCD9LQ0GQdBxMWolpHIrxst6W9AJP0a0B1X8Wh+WO7y1b5zcKkdXnkw5zht/jBAN HOddF/b6QgyiHNyxTSnmmH3AbrMnh6wMrnYSbQ3rFiOS37CoVs59uSLzzDZFjLDH dDiJf4PzG82pL/Clw84NGT2WR8ilICmMx4MU74TaOvWYxGdXHquFe/dTUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB5JET8KlN6eWkaKWn+l5iiRyTktMB8GA1UdIwQY MBaAFOxl0xRAv3XSXGBveRXCNsphRGSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0dYVEZFQ19kZEpjWUc5NUZjSTJ5bUZFWktJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yYTZkZjUtODIzNi00MTJkLWFkNzkt ZTI5NTg5ZTg5NjRhLzEvSGtrUlB3cVUzcDVhUm9wYWY2WG1LSkhKT1MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8yYTZkZjUtODIzNi00MTJkLWFkNzktZTI5NTg5ZTg5NjRh LzEvN0dYVEZFQ19kZEpjWUc5NUZjSTJ5bUZFWktJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVAjMA0G CSqGSIb3DQEBCwUAA4IBAQBBN6MEh5XZ9oJxw88tU2NWmPbq0yQZVcFoHnlx/o0Q zD5WHLtcnbELlllB99qwmkQvLL9gRvM3dhZa8p1PxAIKECn4Zi23OFjxfnSmFYzN +meuA/FvU0QUXnzTS/0Hjxg1wA/Zvo5+VuusBZ6MFX1do7y1XGHuW/vay+xc/T1W 6gEDq3x/1h/3SaejMU0fAAnqnIdTQi6GN77Fss9mQl93KXKH4cDzOzWb2WQuTv/n qsbsC62g41Aog890SvOATQ2OZEgZHzaEC8ZaQGsFfDnZS4i/+oTHIt59gCjmDINh h3rDZ37tDgkP4tcwiaug9y5jZ5/j9y8dwzE7FanqXioA -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:52 2026 by rpki-client