This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/hnuU_eck5x_jb8etQeMJYN7agCw.roa File: hnuU_eck5x_jb8etQeMJYN7agCw.roa (raw, json) Hash identifier: WjEdC6KQw2C4VlNncqPImg4Zkitm7oOt+PVE/RuPsE0= Subject key identifier: 86:7B:94:FD:E7:24:E7:1F:E3:6F:C7:AD:41:E3:09:60:DE:DA:80:2C Certificate issuer: /CN=68231a500a0a8108dc7a4358b1002b1fdbf07995 Certificate serial: 019B7BA4AD135F7D47EA703E731C4576BBC4 Authority key identifier: 68:23:1A:50:0A:0A:81:08:DC:7A:43:58:B1:00:2B:1F:DB:F0:79:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCMaUAoKgQjcekNYsQArH9vweZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/hnuU_eck5x_jb8etQeMJYN7agCw.roa Signing time: Thu 01 Jan 2026 22:19:08 +0000 ROA not before: Thu 01 Jan 2026 22:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202735 IP address blocks: 185.155.236.0/22 maxlen: 22 185.155.236.0/24 maxlen: 24 185.155.237.0/24 maxlen: 24 185.155.238.0/24 maxlen: 24 185.155.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.mft rsync://rpki.ripe.net/repository/DEFAULT/aCMaUAoKgQjcekNYsQArH9vweZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ad:13:5f:7d:47:ea:70:3e:73:1c:45:76:bb:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68231a500a0a8108dc7a4358b1002b1fdbf07995 Validity Not Before: Jan 1 22:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=867b94fde724e71fe36fc7ad41e30960deda802c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9a:43:5e:82:79:44:5a:e9:c2:6b:62:bb:96: 23:b5:20:30:97:39:4e:0a:75:26:1e:e4:f0:5a:76: e9:09:ee:c3:a0:39:0c:18:8a:6b:ec:4d:e4:0c:97: c3:a8:e2:76:ed:af:90:84:5f:11:e5:f4:f5:32:5a: 67:8a:ff:fe:14:da:b0:ef:26:17:02:9b:c6:44:d7: bd:ef:70:7f:86:ef:de:04:76:5b:f4:bd:98:f0:be: b7:db:c1:43:39:96:ca:b1:44:52:74:0e:a7:7a:50: 73:aa:07:12:2c:32:a0:75:90:b4:b0:2d:fa:65:0b: 4d:40:e3:cd:22:51:a1:68:b3:bc:29:37:3f:f8:7b: e4:aa:7a:e2:53:de:55:5a:55:6f:d1:b3:10:d2:0d: 9e:eb:60:03:9f:5f:98:49:09:5a:bc:14:f0:e9:32: a9:4f:1f:27:c4:e8:55:b9:e1:ed:c6:4b:b8:fe:e8: 75:af:a1:a0:bd:30:70:92:db:78:81:5e:c2:72:3c: 50:5c:dd:12:b5:be:31:63:6c:a8:a7:d3:74:1d:41: c0:4b:5c:0e:ba:de:2d:93:fe:f3:a7:8d:80:11:ae: 96:1f:99:2a:f3:51:d6:b7:4e:9a:8c:fc:6c:13:2f: 01:f6:1b:90:b5:bd:68:62:1e:35:12:fb:0b:f1:19: d9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7B:94:FD:E7:24:E7:1F:E3:6F:C7:AD:41:E3:09:60:DE:DA:80:2C X509v3 Authority Key Identifier: keyid:68:23:1A:50:0A:0A:81:08:DC:7A:43:58:B1:00:2B:1F:DB:F0:79:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCMaUAoKgQjcekNYsQArH9vweZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/hnuU_eck5x_jb8etQeMJYN7agCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.236.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:7d:4c:63:35:fa:91:f9:1f:20:2c:44:12:2d:74:aa:6b:77: da:d8:68:15:58:d8:28:d8:12:37:38:03:c5:89:a4:78:f0:fb: 12:25:8f:48:6c:e8:33:90:b8:8e:47:d1:31:48:93:48:de:75: ee:36:70:bb:62:df:1a:4d:f8:c3:c9:ec:34:e9:11:1a:6d:12: 55:9b:1a:34:ff:4a:27:0e:86:db:2d:8f:cd:ae:3b:09:5f:a8: c5:88:82:ef:14:88:09:c8:1e:be:83:41:ab:d6:e4:c0:cc:04: 9f:10:a6:ff:ae:2e:c0:61:61:86:ad:56:1f:93:06:93:f3:72: 95:74:ff:69:be:d7:96:88:57:c7:e1:3b:9d:5c:10:44:47:32: 9f:0f:1d:5b:20:24:1c:b2:21:73:1f:c5:3f:32:a5:5e:65:5f: 57:c8:e6:08:a2:3a:82:75:f9:48:7e:29:c1:71:f8:a6:fe:38: 0a:74:8d:c8:40:6a:5e:c0:cd:47:d2:4c:e1:3d:e6:9b:bf:75: 0d:dc:d5:a7:7e:a6:1e:7e:15:9c:12:f8:a2:8a:e9:93:81:74: 99:8f:68:da:e0:d6:49:ce:c2:85:d2:6e:2e:8f:c8:78:ad:f9: 38:72:66:e0:c1:74:67:17:e7:8c:de:e7:95:fb:96:29:da:ef: f2:94:2d:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pK0TX31H6nA+cxxFdrvEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MjMxYTUwMGEwYTgxMDhkYzdhNDM1OGIxMDAyYjFmZGJm MDc5OTUwHhcNMjYwMTAxMjIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjdiOTRmZGU3MjRlNzFmZTM2ZmM3YWQ0MWUzMDk2MGRlZGE4MDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoppDXoJ5RFrpwmtiu5YjtSAwlzlO CnUmHuTwWnbpCe7DoDkMGIpr7E3kDJfDqOJ27a+QhF8R5fT1Mlpniv/+FNqw7yYX ApvGRNe973B/hu/eBHZb9L2Y8L6328FDOZbKsURSdA6nelBzqgcSLDKgdZC0sC36 ZQtNQOPNIlGhaLO8KTc/+HvkqnriU95VWlVv0bMQ0g2e62ADn1+YSQlavBTw6TKp Tx8nxOhVueHtxku4/uh1r6GgvTBwktt4gV7CcjxQXN0Stb4xY2yop9N0HUHAS1wO ut4tk/7zp42AEa6WH5kq81HWt06ajPxsEy8B9huQtb1oYh41EvsL8RnZjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIZ7lP3nJOcf42/HrUHjCWDe2oAsMB8GA1UdIwQY MBaAFGgjGlAKCoEI3HpDWLEAKx/b8HmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUNNYVVBb0tnUWpjZWtOWXNRQXJIOXZ3ZVpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8wMGIwODUtOTk2Ni00Mjc1LWE1MmIt N2YyM2IzNDY4NmMyLzEvaG51VV9lY2s1eF9qYjhldFFlTUpZTjdhZ0N3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8wMGIwODUtOTk2Ni00Mjc1LWE1MmItN2YyM2IzNDY4NmMy LzEvYUNNYVVBb0tnUWpjZWtOWXNRQXJIOXZ3ZVpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZvsMA0G CSqGSIb3DQEBCwUAA4IBAQALfUxjNfqR+R8gLEQSLXSqa3fa2GgVWNgo2BI3OAPF iaR48PsSJY9IbOgzkLiOR9ExSJNI3nXuNnC7Yt8aTfjDyew06REabRJVmxo0/0on DobbLY/NrjsJX6jFiILvFIgJyB6+g0Gr1uTAzASfEKb/ri7AYWGGrVYfkwaT83KV dP9pvteWiFfH4TudXBBERzKfDx1bICQcsiFzH8U/MqVeZV9XyOYIojqCdflIfinB cfim/jgKdI3IQGpewM1H0kzhPeabv3UN3NWnfqYefhWcEviiiumTgXSZj2ja4NZJ zsKF0m4uj8h4rfk4cmbgwXRnF+eM3ueV+5Yp2u/ylC1H -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:28 2026 by rpki-client