This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/hSA37ReSJwBifq2FS6j7Qro1BSg.roa File: hSA37ReSJwBifq2FS6j7Qro1BSg.roa (raw, json) Hash identifier: JWuo0foQtCUfW16LX8x62PTXkA++1LDR398enjd4AHQ= Subject key identifier: 85:20:37:ED:17:92:27:00:62:7E:AD:85:4B:A8:FB:42:BA:35:05:28 Certificate issuer: /CN=279669579b3ce61ee8ee7d6af7e314b0f726361f Certificate serial: 019B7FF06FF8377E681F42343E704EB6CE9E Authority key identifier: 27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/hSA37ReSJwBifq2FS6j7Qro1BSg.roa Signing time: Fri 02 Jan 2026 18:20:22 +0000 ROA not before: Fri 02 Jan 2026 18:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203512 IP address blocks: 185.129.120.0/24 maxlen: 24 185.129.122.0/24 maxlen: 24 185.129.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:6f:f8:37:7e:68:1f:42:34:3e:70:4e:b6:ce:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279669579b3ce61ee8ee7d6af7e314b0f726361f Validity Not Before: Jan 2 18:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=852037ed17922700627ead854ba8fb42ba350528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5d:8f:e9:12:72:e5:30:7c:51:0c:31:54:99: 6b:cf:43:00:ff:9d:2e:18:6f:7e:7c:86:c5:7c:88: 07:0c:a2:5b:3c:aa:3f:43:35:02:70:25:88:95:8b: e6:3d:5c:5c:18:df:13:32:d3:08:73:3d:e8:88:f4: 96:c6:47:9c:74:da:2c:bb:94:a4:32:d9:e5:a8:8b: 4c:d6:28:13:93:bc:ca:2d:87:24:0f:52:77:e2:39: 09:99:62:97:3f:10:43:9a:76:8d:01:cc:d8:9d:45: 45:b7:a4:9c:5c:8b:34:44:33:dc:3e:58:3c:5d:c2: d6:46:84:98:4e:77:58:4f:4e:b5:47:8d:c4:12:01: 83:a8:0c:59:7e:9e:ff:90:c6:1a:2e:f3:c6:4d:ca: 0b:bd:7e:e1:e2:16:17:0c:45:d7:bc:78:a5:9f:b1: 0d:d0:57:26:60:6e:4a:40:26:eb:27:61:23:d6:65: 96:21:2d:cb:d4:1f:83:16:e7:80:0f:39:20:d2:4c: 95:be:a6:55:07:7f:61:5e:a8:a8:e2:72:b3:02:ba: a7:bf:0a:02:29:d1:dc:23:5d:97:7b:dd:ac:bc:10: 6f:d2:a8:88:80:80:a9:8b:50:1f:e2:68:a1:97:0c: b6:b8:3c:af:46:e8:8c:64:f8:c3:19:ec:7c:d4:26: 98:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:20:37:ED:17:92:27:00:62:7E:AD:85:4B:A8:FB:42:BA:35:05:28 X509v3 Authority Key Identifier: keyid:27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/hSA37ReSJwBifq2FS6j7Qro1BSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.129.120.0/24 185.129.122.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:8d:9d:eb:a4:a5:82:f9:ab:30:50:f2:18:1b:39:9f:28:0a: 7f:42:79:d8:06:40:3f:25:17:25:8e:15:cd:13:6a:fc:d9:10: 52:c4:c6:33:5a:77:ee:e9:0a:f1:c3:00:e3:7c:3a:4c:14:e7: eb:87:64:2d:0a:6e:2f:8f:a5:b5:e7:47:8f:07:72:14:ff:31: d7:b9:fd:6d:d7:7c:4a:bb:ad:30:03:af:c5:99:1b:fc:8b:1d: 0a:60:fb:41:18:ff:36:60:6b:b3:e0:5c:15:8a:59:77:1e:cb: 8a:9e:de:38:8a:d6:3c:0b:dc:e5:97:84:0f:72:a8:fc:1e:79: 64:3b:65:7e:21:92:05:5c:88:01:05:5b:23:1d:a0:5c:e2:5b: 3e:2a:4d:df:1d:8e:5d:d4:eb:1c:15:6d:c1:06:8e:05:2a:27: 59:92:79:d4:51:c1:f6:64:6e:94:5f:ce:07:a3:b9:37:49:3c: 05:b1:da:60:2e:cf:a1:f3:54:9b:9f:09:ca:f0:ba:f4:42:3a: e6:58:04:5a:1c:a4:82:ca:2d:df:e4:9b:da:57:5d:d0:e3:df: 71:c7:29:4c:ec:78:e4:57:87:44:fd:72:6c:eb:35:ae:9b:32: 62:70:ab:59:33:9f:c4:5b:97:99:93:71:7a:bd:d6:2c:15:ec: df:61:c8:61 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8G/4N35oH0I0PnBOts6eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTY2OTU3OWIzY2U2MWVlOGVlN2Q2YWY3ZTMxNGIwZjcy NjM2MWYwHhcNMjYwMTAyMTgyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTIwMzdlZDE3OTIyNzAwNjI3ZWFkODU0YmE4ZmI0MmJhMzUwNTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl2P6RJy5TB8UQwxVJlrz0MA/50u GG9+fIbFfIgHDKJbPKo/QzUCcCWIlYvmPVxcGN8TMtMIcz3oiPSWxkecdNosu5Sk MtnlqItM1igTk7zKLYckD1J34jkJmWKXPxBDmnaNAczYnUVFt6ScXIs0RDPcPlg8 XcLWRoSYTndYT061R43EEgGDqAxZfp7/kMYaLvPGTcoLvX7h4hYXDEXXvHiln7EN 0FcmYG5KQCbrJ2Ej1mWWIS3L1B+DFueADzkg0kyVvqZVB39hXqio4nKzArqnvwoC KdHcI12Xe92svBBv0qiIgICpi1Af4mihlwy2uDyvRuiMZPjDGex81CaYrwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIUgN+0XkicAYn6thUuo+0K6NQUoMB8GA1UdIwQY MBaAFCeWaVebPOYe6O59avfjFLD3JjYfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVacFY1czg1aDdvN24xcTktTVVzUGNtTmg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xMTg0MTMtYjdhYS00NTljLTk5ZmEt NGRlMWI1MjBhNTk0LzEvaFNBMzdSZVNKd0JpZnEyRlM2ajdRcm8xQlNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8xMTg0MTMtYjdhYS00NTljLTk5ZmEtNGRlMWI1MjBhNTk0 LzEvSjVacFY1czg1aDdvN24xcTktTVVzUGNtTmg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuYF4AwQB uYF6MA0GCSqGSIb3DQEBCwUAA4IBAQAejZ3rpKWC+aswUPIYGzmfKAp/QnnYBkA/ JRcljhXNE2r82RBSxMYzWnfu6QrxwwDjfDpMFOfrh2QtCm4vj6W150ePB3IU/zHX uf1t13xKu60wA6/FmRv8ix0KYPtBGP82YGuz4FwVill3HsuKnt44itY8C9zll4QP cqj8HnlkO2V+IZIFXIgBBVsjHaBc4ls+Kk3fHY5d1OscFW3BBo4FKidZknnUUcH2 ZG6UX84Ho7k3STwFsdpgLs+h81SbnwnK8Lr0QjrmWARaHKSCyi3f5JvaV13Q499x xylM7HjkV4dE/XJs6zWumzJicKtZM5/EW5eZk3F6vdYsFezfYchh -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:11 2026 by rpki-client