This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/hMWRlyBu_98qhrvASUIfs50ilt4.roa File: hMWRlyBu_98qhrvASUIfs50ilt4.roa (raw, json) Hash identifier: IGWE5HJqvsWQ/JQ2ivM4pc0kcFg9yZY3dxE1FGpgh1g= Subject key identifier: 84:C5:91:97:20:6E:FF:DF:2A:86:BB:C0:49:42:1F:B3:9D:22:96:DE Certificate issuer: /CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41 Certificate serial: 019B7DCA0494F445C5820F77A1EB87034335 Authority key identifier: AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/hMWRlyBu_98qhrvASUIfs50ilt4.roa Signing time: Fri 02 Jan 2026 08:19:10 +0000 ROA not before: Fri 02 Jan 2026 08:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205185 IP address blocks: 185.114.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:04:94:f4:45:c5:82:0f:77:a1:eb:87:03:43:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41 Validity Not Before: Jan 2 08:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84c59197206effdf2a86bbc049421fb39d2296de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f6:1e:d4:1b:69:a7:9b:8d:a5:00:1a:0a:7d: b9:01:78:3d:8e:ef:c4:8b:8b:56:63:35:8e:f7:79: 59:a7:73:b6:1a:4b:a3:ef:b3:35:dd:ea:c1:7b:6e: 05:db:38:f1:97:fb:93:4f:3b:c2:9c:56:24:1a:d5: bd:42:f7:d1:8f:37:d9:85:dd:5b:c6:e9:c0:52:5b: 0b:f5:cd:e7:b9:8d:32:3c:da:89:66:96:ec:f5:fc: 43:fd:25:96:f7:56:49:a0:2a:90:c2:2f:04:10:29: 0b:d6:92:0b:dc:71:11:41:77:d7:6c:a0:79:cf:51: 05:72:4a:3e:ac:b2:19:28:46:9e:d8:08:d7:ca:95: 62:29:ed:04:31:cd:b6:04:fb:5e:bc:bf:1f:e6:b3: cb:6b:a9:62:21:a8:e9:ac:4a:da:9a:84:3b:8d:55: 6c:3a:ce:4a:80:85:72:8f:2c:6d:bd:c9:1b:5f:82: 92:5e:96:46:71:a2:3f:96:1c:22:5b:3e:23:2a:c6: f2:c8:26:93:c6:e6:96:99:98:19:c1:98:a9:a4:2c: a7:03:33:20:2b:5b:52:ac:34:50:83:4d:01:12:06: 05:96:67:7c:43:82:b8:5b:af:3a:92:64:f6:bb:97: 11:36:45:6a:36:4d:91:dd:4b:31:be:7e:61:28:0d: 30:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C5:91:97:20:6E:FF:DF:2A:86:BB:C0:49:42:1F:B3:9D:22:96:DE X509v3 Authority Key Identifier: keyid:AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/hMWRlyBu_98qhrvASUIfs50ilt4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.236.0/24 Signature Algorithm: sha256WithRSAEncryption 00:51:37:3b:50:59:1b:e5:f0:d2:8c:8a:4a:d5:b4:d5:e0:88: dc:b2:15:6d:6e:0e:64:e2:5f:47:a8:6c:17:20:aa:48:e9:9f: 0b:73:55:24:d2:4e:56:21:74:99:f4:49:21:ad:16:4d:fc:df: 93:fc:74:31:6a:9d:7b:bb:81:94:dd:33:16:12:b6:54:5c:f1: 9f:b7:db:47:17:ad:7e:36:a1:36:f5:a1:99:3f:8d:68:ad:7d: 74:56:52:f3:5b:db:d6:bd:c7:4d:dc:93:54:58:16:63:5b:05: 81:55:bb:fe:cc:d7:ec:7a:c1:bf:7f:72:80:b1:ed:e7:51:6c: 5f:e3:65:b8:c1:95:fe:39:c5:89:ac:3e:f6:9d:cc:f7:aa:5c: f4:d2:62:c4:08:d7:75:0a:3d:a1:f1:24:08:10:8d:99:0d:37: 1d:6c:41:b5:d6:17:60:a9:eb:16:46:e1:a7:b7:e3:64:14:3b: 28:1e:7f:d5:91:52:c4:9e:6f:0c:67:c7:22:9f:86:a3:8a:22: fe:28:b0:a4:cf:eb:f9:f4:89:5c:5b:4e:dd:28:22:4e:96:e0: 74:7b:99:45:64:90:4d:d0:d5:cc:30:93:65:cf:07:9a:66:c7: 6a:62:76:2b:2a:be:58:e7:4c:d4:b6:ad:fa:85:af:0d:ce:c8: e1:4d:75:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ygSU9EXFgg93oeuHA0M1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhOWU4NmE3NmJkZGMxMjAzYTAyOWQzMTQ3NWQzZWJjNTdk OTBhNDEwHhcNMjYwMTAyMDgxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGM1OTE5NzIwNmVmZmRmMmE4NmJiYzA0OTQyMWZiMzlkMjI5NmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/Ye1Btpp5uNpQAaCn25AXg9ju/E i4tWYzWO93lZp3O2Gkuj77M13erBe24F2zjxl/uTTzvCnFYkGtW9QvfRjzfZhd1b xunAUlsL9c3nuY0yPNqJZpbs9fxD/SWW91ZJoCqQwi8EECkL1pIL3HERQXfXbKB5 z1EFcko+rLIZKEae2AjXypViKe0EMc22BPtevL8f5rPLa6liIajprEramoQ7jVVs Os5KgIVyjyxtvckbX4KSXpZGcaI/lhwiWz4jKsbyyCaTxuaWmZgZwZippCynAzMg K1tSrDRQg00BEgYFlmd8Q4K4W686kmT2u5cRNkVqNk2R3Usxvn5hKA0wcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFITFkZcgbv/fKoa7wElCH7OdIpbeMB8GA1UdIwQY MBaAFKqehqdr3cEgOgKdMUddPrxX2QpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXA2R3AydmR3U0E2QXAweFIxMC12RmZaQ2tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iOTQ4MzEtNjViYi00MDZiLTg0YzQt MDNiMGVlYzdmZjI5LzEvaE1XUmx5QnVfOThxaHJ2QVNVSWZzNTBpbHQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9iOTQ4MzEtNjViYi00MDZiLTg0YzQtMDNiMGVlYzdmZjI5 LzEvcXA2R3AydmR3U0E2QXAweFIxMC12RmZaQ2tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXLsMA0G CSqGSIb3DQEBCwUAA4IBAQAAUTc7UFkb5fDSjIpK1bTV4IjcshVtbg5k4l9HqGwX IKpI6Z8Lc1Uk0k5WIXSZ9EkhrRZN/N+T/HQxap17u4GU3TMWErZUXPGft9tHF61+ NqE29aGZP41orX10VlLzW9vWvcdN3JNUWBZjWwWBVbv+zNfsesG/f3KAse3nUWxf 42W4wZX+OcWJrD72ncz3qlz00mLECNd1Cj2h8SQIEI2ZDTcdbEG11hdgqesWRuGn t+NkFDsoHn/VkVLEnm8MZ8cin4ajiiL+KLCkz+v59IlcW07dKCJOluB0e5lFZJBN 0NXMMJNlzweaZsdqYnYrKr5Y50zUtq36ha8NzsjhTXWs -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:33 2026 by rpki-client