This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/hCTpwVd8i1hPStdoLxWMzM8N_TE.roa File: hCTpwVd8i1hPStdoLxWMzM8N_TE.roa (raw, json) Hash identifier: ihYHu1XwJ3avyhb/XoPHgm87ZbqnGY5kgmNHjUUXafY= Subject key identifier: 84:24:E9:C1:57:7C:8B:58:4F:4A:D7:68:2F:15:8C:CC:CF:0D:FD:31 Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7 Certificate serial: 019B78A2D3A491BB39E9B756E29DCA1A1099 Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/hCTpwVd8i1hPStdoLxWMzM8N_TE.roa Signing time: Thu 01 Jan 2026 08:18:15 +0000 ROA not before: Thu 01 Jan 2026 08:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48954 IP address blocks: 185.220.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d3:a4:91:bb:39:e9:b7:56:e2:9d:ca:1a:10:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7 Validity Not Before: Jan 1 08:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8424e9c1577c8b584f4ad7682f158ccccf0dfd31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3b:4c:e9:a5:d2:53:8f:aa:1e:b4:92:d1:5a: da:8e:d0:bb:74:ba:81:72:e3:00:0c:01:0f:e0:96: 50:01:ae:6c:1e:e9:83:7e:a7:c5:c7:b6:e6:de:d8: 95:7b:f7:07:83:7c:26:3c:1a:1b:c6:e4:a2:f8:44: be:f2:71:9d:5d:b3:04:89:80:8d:e7:75:e2:76:e0: 09:84:31:83:73:a6:98:e6:12:b9:56:cc:2d:81:a4: a8:36:0a:bd:e7:57:0c:be:30:d5:a2:1d:01:2d:56: 3c:e0:76:be:68:e9:87:65:6e:d4:cc:7d:40:8d:05: 24:37:c2:cd:87:3b:8e:3a:96:28:e4:40:3f:a9:63: 25:60:08:5a:81:c2:61:ae:9d:5b:da:29:a4:5b:0b: 23:29:54:da:b3:4c:e0:ad:11:11:f9:ca:b0:c8:41: 49:8c:0c:ce:03:25:c3:72:be:b9:b6:30:33:ad:88: 36:56:3c:ea:d0:e5:cf:94:24:62:53:cd:49:6a:6b: 95:5e:e3:d4:a8:aa:f3:5c:42:9e:f7:c3:ec:f1:9e: 44:0a:e3:2e:71:42:52:07:ce:20:8c:c3:b8:e3:05: 49:4e:3f:d7:88:be:0b:c0:b4:ba:f6:80:fd:fc:10: ba:66:a6:25:a0:49:c1:bb:5f:b7:3f:a6:19:08:91: 26:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:24:E9:C1:57:7C:8B:58:4F:4A:D7:68:2F:15:8C:CC:CF:0D:FD:31 X509v3 Authority Key Identifier: keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/hCTpwVd8i1hPStdoLxWMzM8N_TE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.91.0/24 Signature Algorithm: sha256WithRSAEncryption 02:bf:f8:e1:6f:3d:4b:ca:3a:60:55:b7:0d:fd:a8:2b:b8:0e: 86:97:ea:6e:90:07:6c:89:b9:18:9c:f6:d3:7c:a8:12:20:71: 33:8a:24:be:08:25:ff:26:96:2e:00:fc:df:69:fd:f9:5f:43: 7c:be:bd:68:bf:75:fc:32:8b:00:36:fd:2e:7a:19:a1:37:91: 97:ef:b4:2c:e4:19:1f:8b:e7:ec:d7:c6:b8:b2:49:a7:27:c2: d4:5d:a7:5a:4a:83:e0:cf:42:6b:5e:9c:29:f8:26:f2:eb:41: fa:3e:6f:2e:b0:db:07:ae:b0:b2:bb:41:aa:30:ea:b9:ab:09: 34:43:bc:a6:b4:08:ce:da:8b:5d:82:08:26:92:92:23:23:c5: 81:e2:ed:4f:4d:c1:9b:2f:5e:2d:fb:42:02:60:4e:36:de:fc: 53:bc:de:38:2c:3c:bd:12:ab:f3:f8:1b:11:4c:a5:be:8a:77: a4:cd:e4:19:6b:4c:fc:f9:2d:78:2c:d9:d3:f0:46:d6:dc:1f: c5:99:b8:12:ee:8f:4b:09:b0:06:f1:dd:78:ce:54:eb:b6:98: b9:d1:7a:46:2f:29:ee:e5:af:e7:dd:4b:bb:06:0b:b4:13:3f: b4:17:94:46:15:8d:c3:39:66:16:4a:ea:aa:30:e3:91:22:34: 4b:80:de:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4otOkkbs56bdW4p3KGhCZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxOWNiYjg4ZDJiMWE4OTY2NTg1MDY3Nzg2NjJlNzVjNzMy YTY3ZTcwHhcNMjYwMTAxMDgxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDI0ZTljMTU3N2M4YjU4NGY0YWQ3NjgyZjE1OGNjY2NmMGRmZDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvztM6aXSU4+qHrSS0VrajtC7dLqB cuMADAEP4JZQAa5sHumDfqfFx7bm3tiVe/cHg3wmPBobxuSi+ES+8nGdXbMEiYCN 53XiduAJhDGDc6aY5hK5VswtgaSoNgq951cMvjDVoh0BLVY84Ha+aOmHZW7UzH1A jQUkN8LNhzuOOpYo5EA/qWMlYAhagcJhrp1b2imkWwsjKVTas0zgrRER+cqwyEFJ jAzOAyXDcr65tjAzrYg2Vjzq0OXPlCRiU81JamuVXuPUqKrzXEKe98Ps8Z5ECuMu cUJSB84gjMO44wVJTj/XiL4LwLS69oD9/BC6ZqYloEnBu1+3P6YZCJEmvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIQk6cFXfItYT0rXaC8VjMzPDf0xMB8GA1UdIwQY MBaAFOGcu4jSsaiWZYUGd4Zi51xzKmfnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFp5N2lOS3hxSlpsaFFaM2htTG5YSE1xWi1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hZDEyMTYtYjcxZC00NTU3LWEwODYt ZWZlYTYzZDA2ZjgwLzEvaENUcHdWZDhpMWhQU3Rkb0x4V016TThOX1RFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hZDEyMTYtYjcxZC00NTU3LWEwODYtZWZlYTYzZDA2Zjgw LzEvNFp5N2lOS3hxSlpsaFFaM2htTG5YSE1xWi1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudxbMA0G CSqGSIb3DQEBCwUAA4IBAQACv/jhbz1LyjpgVbcN/agruA6Gl+pukAdsibkYnPbT fKgSIHEziiS+CCX/JpYuAPzfaf35X0N8vr1ov3X8MosANv0uehmhN5GX77Qs5Bkf i+fs18a4skmnJ8LUXadaSoPgz0JrXpwp+Cby60H6Pm8usNsHrrCyu0GqMOq5qwk0 Q7ymtAjO2otdgggmkpIjI8WB4u1PTcGbL14t+0ICYE423vxTvN44LDy9Eqvz+BsR TKW+inekzeQZa0z8+S14LNnT8EbW3B/FmbgS7o9LCbAG8d14zlTrtpi50XpGLynu 5a/n3Uu7Bgu0Ez+0F5RGFY3DOWYWSuqqMOORIjRLgN5y -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:34 2026 by rpki-client