This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Hspf_URz2KDbogzxgWPGF9vCW2I.roa File: Hspf_URz2KDbogzxgWPGF9vCW2I.roa (raw, json) Hash identifier: MZYOMQZiAEH0b7+vzGCcL9MNhUF9IFDlXNbOclxeUzM= Subject key identifier: 1E:CA:5F:FD:44:73:D8:A0:DB:A2:0C:F1:81:63:C6:17:DB:C2:5B:62 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E3914CA32A6A6EEDBF958BFA9153CC1 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Hspf_URz2KDbogzxgWPGF9vCW2I.roa Signing time: Fri 02 Jan 2026 10:20:28 +0000 ROA not before: Fri 02 Jan 2026 10:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207256 IP address blocks: 85.142.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:14:ca:32:a6:a6:ee:db:f9:58:bf:a9:15:3c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1eca5ffd4473d8a0dba20cf18163c617dbc25b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:83:ec:19:dc:1f:5a:fd:fb:38:35:eb:d5:b4: 2b:26:e9:c3:8e:85:e3:52:c4:fe:4e:ec:c0:ee:9d: c1:8c:ef:d2:c7:6e:a5:9f:8a:98:27:44:b9:c0:d0: 65:cd:97:b2:1f:46:64:15:6a:8a:75:37:3a:55:1c: c8:bd:79:65:f7:f3:31:e3:e7:5f:a8:a8:8a:5d:37: aa:25:61:c8:c2:21:5d:b4:ec:c7:40:70:cc:b8:61: f3:4b:5a:e0:ea:75:32:90:35:f1:21:e7:b3:ca:6d: ae:01:fa:fd:49:3f:97:b7:29:3c:65:dc:45:27:66: 2c:4a:76:3b:bb:85:ae:22:94:39:8a:ee:73:b8:f5: 60:c2:36:4b:30:0e:54:fa:41:d5:37:76:2b:55:c3: 87:07:7e:a2:d9:7b:a2:4f:7a:f8:16:d2:06:28:c8: 27:8d:69:4a:f5:04:2c:7d:a2:b8:fc:a2:8b:8a:b3: 10:9d:0a:8e:52:c7:f6:63:8c:27:9b:b5:8f:46:73: a2:de:ff:5a:f1:3a:c8:28:f9:46:2a:d6:17:ad:82: 04:00:4d:5a:0c:70:73:95:71:a6:16:56:2f:ab:18: da:aa:28:0b:8d:fe:3b:98:e7:12:8c:29:1a:d6:8c: e0:32:ee:87:28:ae:a7:10:4e:f1:b3:b5:a3:43:fe: 1f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CA:5F:FD:44:73:D8:A0:DB:A2:0C:F1:81:63:C6:17:DB:C2:5B:62 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Hspf_URz2KDbogzxgWPGF9vCW2I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.142.251.0/24 Signature Algorithm: sha256WithRSAEncryption 53:3e:c5:7c:fc:f4:f2:f7:1c:cb:d1:e7:80:87:0b:4b:ff:62: a4:84:1a:c6:38:a6:9f:07:9a:64:66:22:5a:b7:fa:fb:09:04: df:1b:f7:ef:b0:d3:4c:4d:27:27:4a:e4:2b:94:98:6f:fc:a9: 29:47:4a:c6:eb:cb:eb:2b:fe:f0:2e:d9:f7:27:fe:73:f8:97: 18:a4:e0:54:f2:34:41:14:ee:33:34:ab:df:9b:73:f7:2a:48: 82:66:c7:4d:df:e3:bc:b8:fe:6d:a0:2a:39:ab:57:4a:f0:73: 58:ef:5d:48:bd:a9:8c:f2:04:11:e6:ca:d8:01:64:b8:11:2d: ee:86:bf:eb:37:b4:95:7d:1c:3e:aa:34:c0:c6:4c:c7:3a:b5: af:e4:fb:d3:56:a8:79:94:bd:01:85:5c:09:05:41:9b:a3:f7: 01:60:c8:29:0b:5a:ad:65:f0:ca:44:44:5a:2b:ef:2c:f0:42: 3a:5f:03:51:cd:e9:91:00:23:fe:ca:c4:5b:75:ec:ac:94:3a: 72:d1:94:2a:5b:ea:8b:31:c0:cc:01:d8:4a:3d:5b:42:ee:5d: f2:c5:d0:14:3a:4e:0c:da:82:1d:db:1a:2d:42:3d:26:63:a5: b6:29:68:d5:16:51:14:53:3f:9c:69:cd:34:c6:14:5f:33:ce: 2e:25:b3:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORTKMqam7tv5WL+pFTzBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWNhNWZmZDQ0NzNkOGEwZGJhMjBjZjE4MTYzYzYxN2RiYzI1YjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoPsGdwfWv37ODXr1bQrJunDjoXj UsT+TuzA7p3BjO/Sx26ln4qYJ0S5wNBlzZeyH0ZkFWqKdTc6VRzIvXll9/Mx4+df qKiKXTeqJWHIwiFdtOzHQHDMuGHzS1rg6nUykDXxIeezym2uAfr9ST+Xtyk8ZdxF J2YsSnY7u4WuIpQ5iu5zuPVgwjZLMA5U+kHVN3YrVcOHB36i2XuiT3r4FtIGKMgn jWlK9QQsfaK4/KKLirMQnQqOUsf2Y4wnm7WPRnOi3v9a8TrIKPlGKtYXrYIEAE1a DHBzlXGmFlYvqxjaqigLjf47mOcSjCka1ozgMu6HKK6nEE7xs7WjQ/4fEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB7KX/1Ec9ig26IM8YFjxhfbwltiMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvSHNwZl9VUnoyS0Rib2d6eGdXUEdGOXZDVzJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVY77MA0G CSqGSIb3DQEBCwUAA4IBAQBTPsV8/PTy9xzL0eeAhwtL/2KkhBrGOKafB5pkZiJa t/r7CQTfG/fvsNNMTScnSuQrlJhv/KkpR0rG68vrK/7wLtn3J/5z+JcYpOBU8jRB FO4zNKvfm3P3KkiCZsdN3+O8uP5toCo5q1dK8HNY711IvamM8gQR5srYAWS4ES3u hr/rN7SVfRw+qjTAxkzHOrWv5PvTVqh5lL0BhVwJBUGbo/cBYMgpC1qtZfDKRERa K+8s8EI6XwNRzemRACP+ysRbdeyslDpy0ZQqW+qLMcDMAdhKPVtC7l3yxdAUOk4M 2oId2xotQj0mY6W2KWjVFlEUUz+cac00xhRfM84uJbMm -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:07 2026 by rpki-client