This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/HW9BEyLLal7OfEp_A46sqT8pKZI.roa File: HW9BEyLLal7OfEp_A46sqT8pKZI.roa (raw, json) Hash identifier: 6gY+Oh6ZWBmv2AAZJTbOLnfk6tGnOt3EIE4RNOngnwE= Subject key identifier: 1D:6F:41:13:22:CB:6A:5E:CE:7C:4A:7F:03:8E:AC:A9:3F:29:29:92 Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d Certificate serial: 019B7D5C22EF4AD32258E7ED1ACE3278C8E9 Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/HW9BEyLLal7OfEp_A46sqT8pKZI.roa Signing time: Fri 02 Jan 2026 06:19:08 +0000 ROA not before: Fri 02 Jan 2026 06:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 185.144.36.0/22 maxlen: 22 193.134.216.0/21 maxlen: 21 2a07:3e00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:22:ef:4a:d3:22:58:e7:ed:1a:ce:32:78:c8:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d Validity Not Before: Jan 2 06:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d6f411322cb6a5ece7c4a7f038eaca93f292992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:90:fb:db:2a:31:cc:e0:60:7d:7a:d4:e5:59: 78:ab:7f:6f:f0:61:ba:3f:1d:16:77:24:e7:97:21: 68:85:ac:2b:3c:0b:4d:7f:67:29:c4:b6:22:ed:2b: 18:bc:fb:49:a3:c8:90:36:92:ca:df:f8:c2:ad:c4: fd:0c:eb:4e:42:9b:46:0a:f6:f0:c8:0f:0a:0f:da: 5f:96:75:8a:f7:8f:58:f6:eb:a1:29:90:38:c8:f0: 60:3a:c1:9c:b4:17:33:7b:23:ef:25:a8:0e:22:b9: 0f:35:aa:41:b5:b7:d7:8b:b8:57:1d:cf:f9:27:be: 6a:5d:82:5a:7e:98:bf:65:04:f6:b7:c5:65:21:93: c0:be:79:ee:92:65:48:4f:46:77:ed:13:53:4f:42: 01:29:1c:78:8b:33:d7:03:95:36:11:63:70:80:58: af:60:d1:37:99:26:b5:f2:00:46:4d:a8:04:2a:96: 38:68:51:05:3a:89:af:7d:b9:4d:e2:3d:c0:7b:d4: 49:70:3c:b7:70:eb:e6:19:03:76:0b:49:32:c0:87: 36:ff:99:f9:43:a5:e1:78:27:4b:d3:14:6c:27:58: d3:9a:76:70:f5:5d:5b:1f:e9:ef:cf:3b:bc:61:54: 98:ee:e0:3b:2f:bd:fb:34:82:ee:3d:c1:39:25:69: d1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6F:41:13:22:CB:6A:5E:CE:7C:4A:7F:03:8E:AC:A9:3F:29:29:92 X509v3 Authority Key Identifier: keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/HW9BEyLLal7OfEp_A46sqT8pKZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.36.0/22 193.134.216.0/21 IPv6: 2a07:3e00::/29 Signature Algorithm: sha256WithRSAEncryption 24:8b:d6:c6:61:d8:dc:d7:a3:6a:8f:19:09:e2:76:36:bf:11: ea:7a:f5:4c:6a:b5:3f:f0:d4:79:02:ab:36:29:3f:36:96:1c: ed:a5:b3:f8:4a:38:4c:74:58:f1:9d:a5:96:34:0c:5c:7e:2a: 42:5e:e0:05:6e:22:c2:8d:72:6b:c0:64:df:7c:96:61:e5:d0: f9:fb:64:9f:c6:02:d8:da:54:17:ea:12:b6:c5:f6:67:93:72: a7:f1:73:be:05:b7:f5:5f:39:b5:87:1c:af:51:9b:48:56:14: 65:ec:85:d4:82:fc:e5:8f:11:1d:99:89:c4:91:9c:2c:24:c7: 71:32:7d:86:da:04:5c:cc:e2:dc:38:fa:d8:c0:fe:a9:22:7e: 9d:ff:3c:b8:39:b2:12:52:da:4e:bb:12:05:84:e0:f5:ab:1b: 58:dc:7c:e1:02:79:ea:1d:87:bb:4e:38:86:f3:55:0c:f0:70: 72:8f:32:f8:ee:ef:48:61:76:90:f5:3e:d0:84:e4:dd:e2:27: 7e:69:4a:7f:27:55:48:70:47:11:78:f2:b6:76:68:e1:62:b7: 33:07:99:70:c6:6a:0d:66:97:b5:61:18:f1:8d:15:54:9e:de: 3f:a4:cb:c3:d3:c6:ef:67:21:1c:db:89:30:6c:83:12:2e:a3: fd:9f:7b:a8 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XCLvStMiWOftGs4yeMjpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NDRlMWNhOTMxMmJhNzliZTU1OWUxMWM4ZWEwOTEwMDYw ZGQ0OGQwHhcNMjYwMTAyMDYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDZmNDExMzIyY2I2YTVlY2U3YzRhN2YwMzhlYWNhOTNmMjkyOTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5D72yoxzOBgfXrU5Vl4q39v8GG6 Px0WdyTnlyFohawrPAtNf2cpxLYi7SsYvPtJo8iQNpLK3/jCrcT9DOtOQptGCvbw yA8KD9pflnWK949Y9uuhKZA4yPBgOsGctBczeyPvJagOIrkPNapBtbfXi7hXHc/5 J75qXYJafpi/ZQT2t8VlIZPAvnnukmVIT0Z37RNTT0IBKRx4izPXA5U2EWNwgFiv YNE3mSa18gBGTagEKpY4aFEFOomvfblN4j3Ae9RJcDy3cOvmGQN2C0kywIc2/5n5 Q6XheCdL0xRsJ1jTmnZw9V1bH+nvzzu8YVSY7uA7L737NILuPcE5JWnRoQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFB1vQRMiy2peznxKfwOOrKk/KSmSMB8GA1UdIwQY MBaAFBZE4cqTErp5vlWeEcjqCRAGDdSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDIt NThlZWZjZDY1MmQ4LzEvSFc5QkV5TExhbDdPZkVwX0E0NnNxVDhwS1pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDItNThlZWZjZDY1MmQ4 LzEvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuZAkAwQD wYbYMA0EAgACMAcDBQMqBz4AMA0GCSqGSIb3DQEBCwUAA4IBAQAki9bGYdjc16Nq jxkJ4nY2vxHqevVMarU/8NR5Aqs2KT82lhztpbP4SjhMdFjxnaWWNAxcfipCXuAF biLCjXJrwGTffJZh5dD5+2SfxgLY2lQX6hK2xfZnk3Kn8XO+Bbf1Xzm1hxyvUZtI VhRl7IXUgvzljxEdmYnEkZwsJMdxMn2G2gRczOLcOPrYwP6pIn6d/zy4ObISUtpO uxIFhOD1qxtY3HzhAnnqHYe7TjiG81UM8HByjzL47u9IYXaQ9T7QhOTd4id+aUp/ J1VIcEcRePK2dmjhYrczB5lwxmoNZpe1YRjxjRVUnt4/pMvD08bvZyEc24kwbIMS LqP9n3uo -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:17 2026 by rpki-client