This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/HqFdFQd3mJjjEoQudvkZxqIuHF4.roa File: HqFdFQd3mJjjEoQudvkZxqIuHF4.roa (raw, json) Hash identifier: Q9RLxw/T80VOo7/+EDUnGtAF2QXxYd4cppakgqAvZwY= Subject key identifier: 1E:A1:5D:15:07:77:98:98:E3:12:84:2E:76:F9:19:C6:A2:2E:1C:5E Certificate issuer: /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4 Certificate serial: 019B7C7F750078E5776BCD9FD5C6382FE310 Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/HqFdFQd3mJjjEoQudvkZxqIuHF4.roa Signing time: Fri 02 Jan 2026 02:18:06 +0000 ROA not before: Fri 02 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42962 IP address blocks: 185.192.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:75:00:78:e5:77:6b:cd:9f:d5:c6:38:2f:e3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4 Validity Not Before: Jan 2 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ea15d1507779898e312842e76f919c6a22e1c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:71:8d:9f:c2:ce:c4:20:ab:f9:f6:7d:f3:56: 0c:ee:24:3c:cd:de:93:25:0b:0e:b2:2f:85:7b:08: fa:fc:76:f3:6b:d7:9a:a2:4e:69:42:ff:61:74:7a: de:65:6f:37:66:db:fc:1e:16:c9:ee:75:a2:e9:58: 14:06:bf:03:1d:d9:94:d7:96:45:72:d6:12:67:45: 31:48:c3:ad:e6:98:b3:05:b7:ea:a9:77:49:63:28: d8:e1:4d:f9:44:9b:6e:76:6c:40:27:7c:c2:55:9a: 23:5d:0c:6a:36:92:01:16:15:23:b8:94:3a:6c:22: 92:d4:85:02:53:fb:e4:b2:bc:3d:85:91:e8:ab:27: 89:94:4e:25:2c:c1:bd:82:73:2c:19:3f:38:2c:28: 6b:02:9a:a5:ac:ad:bb:da:5e:4a:23:13:ee:0e:10: d0:83:48:c2:73:74:88:ac:c2:25:b6:fd:82:17:6d: 5f:c2:9a:a2:0a:cd:4e:e3:ef:46:de:71:11:9b:eb: 59:3d:32:db:f8:5e:27:5d:96:34:29:dc:24:9c:5d: e3:43:52:c5:e4:3a:f1:9a:eb:36:48:ff:d9:ab:fb: 89:68:0c:48:79:29:4b:3e:fd:4b:3b:8d:46:d3:12: 8e:6d:98:31:a2:8a:f6:68:55:06:c6:41:1e:c8:56: c8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A1:5D:15:07:77:98:98:E3:12:84:2E:76:F9:19:C6:A2:2E:1C:5E X509v3 Authority Key Identifier: keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/HqFdFQd3mJjjEoQudvkZxqIuHF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.56.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:3b:fd:b6:6d:4d:d3:c7:5d:78:5e:06:b1:0e:97:f3:31:45: 6f:57:68:74:5c:c5:e6:8b:d7:1c:41:2f:06:44:62:d7:e4:aa: 6d:28:ac:81:b3:64:44:07:f0:c7:bf:3c:9b:17:32:38:d5:66: 52:0b:23:2f:ee:83:0c:41:63:e2:ab:a2:7d:40:7b:8e:26:85: 22:86:25:ef:9a:63:dd:01:d6:98:fb:ce:87:8b:97:48:92:71: 35:cb:4d:ab:ab:91:9b:a4:e8:fd:e0:28:72:8b:2d:f3:68:98: 11:20:c9:88:23:ce:de:a1:11:29:94:0a:81:dc:b4:19:7f:c8: bc:37:57:4d:aa:c5:03:ea:13:42:59:99:a2:05:0d:41:f2:d2: a8:37:72:26:51:a5:be:41:5c:d6:e1:6a:0b:33:47:89:8a:7e: ac:b2:a2:c9:b7:5e:6c:e1:cb:24:1a:aa:08:26:5e:b0:f9:7c: 4c:29:dc:9f:f9:1c:df:9d:b3:2a:ad:4d:d9:76:b4:48:d3:86: 86:ec:e9:69:f7:c9:b6:93:e9:5d:0f:ac:73:41:1d:a9:87:15: f9:44:9b:49:65:12:d9:6b:db:26:50:52:e3:a3:ba:b1:aa:bc: b7:c8:00:5f:87:a1:87:93:45:c2:94:99:ab:13:78:68:fd:eb: 7d:c3:a6:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f3UAeOV3a82f1cY4L+MQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRkMTE1NTQyNDdiZDJiZDMwMWNlYTQzZmY1MTgwMzcy YzM4ZTQwHhcNMjYwMTAyMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWExNWQxNTA3Nzc5ODk4ZTMxMjg0MmU3NmY5MTljNmEyMmUxYzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnGNn8LOxCCr+fZ981YM7iQ8zd6T JQsOsi+Fewj6/Hbza9eaok5pQv9hdHreZW83Ztv8HhbJ7nWi6VgUBr8DHdmU15ZF ctYSZ0UxSMOt5pizBbfqqXdJYyjY4U35RJtudmxAJ3zCVZojXQxqNpIBFhUjuJQ6 bCKS1IUCU/vksrw9hZHoqyeJlE4lLMG9gnMsGT84LChrApqlrK272l5KIxPuDhDQ g0jCc3SIrMIltv2CF21fwpqiCs1O4+9G3nERm+tZPTLb+F4nXZY0KdwknF3jQ1LF 5Drxmus2SP/Zq/uJaAxIeSlLPv1LO41G0xKObZgxoor2aFUGxkEeyFbIgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB6hXRUHd5iY4xKELnb5GcaiLhxeMB8GA1UdIwQY MBaAFBpN0RVUJHvSvTAc6kP/UYA3LDjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUt M2JhNWYzMGNhYWJmLzEvSHFGZEZRZDNtSmpqRW9RdWR2a1p4cUl1SEY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUtM2JhNWYzMGNhYWJm LzEvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucA4MA0G CSqGSIb3DQEBCwUAA4IBAQBMO/22bU3Tx114XgaxDpfzMUVvV2h0XMXmi9ccQS8G RGLX5KptKKyBs2REB/DHvzybFzI41WZSCyMv7oMMQWPiq6J9QHuOJoUihiXvmmPd AdaY+86Hi5dIknE1y02rq5GbpOj94Chyiy3zaJgRIMmII87eoREplAqB3LQZf8i8 N1dNqsUD6hNCWZmiBQ1B8tKoN3ImUaW+QVzW4WoLM0eJin6ssqLJt15s4cskGqoI Jl6w+XxMKdyf+RzfnbMqrU3ZdrRI04aG7Olp98m2k+ldD6xzQR2phxX5RJtJZRLZ a9smUFLjo7qxqry3yABfh6GHk0XClJmrE3ho/et9w6af -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:44 2026 by rpki-client