This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/_rQ-inVtZiLnUQDx1Re8DAds5e8.roa File: _rQ-inVtZiLnUQDx1Re8DAds5e8.roa (raw, json) Hash identifier: h5VKcdxj79+jYpnEz4FG7zfzdVmPeg7kNvFKCQvIgGA= Subject key identifier: FE:B4:3E:8A:75:6D:66:22:E7:51:00:F1:D5:17:BC:0C:07:6C:E5:EF Certificate issuer: /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0 Certificate serial: 019B7A5B4F6DBD3ABBA9728803B1D4C40882 Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/_rQ-inVtZiLnUQDx1Re8DAds5e8.roa Signing time: Thu 01 Jan 2026 16:19:22 +0000 ROA not before: Thu 01 Jan 2026 16:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 185.248.164.0/23 maxlen: 23 185.248.167.0/24 maxlen: 24 2a0d:ed80:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4f:6d:bd:3a:bb:a9:72:88:03:b1:d4:c4:08:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0 Validity Not Before: Jan 1 16:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=feb43e8a756d6622e75100f1d517bc0c076ce5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c2:cd:d1:9b:88:e8:76:a1:d8:15:b2:b3:f0: 9e:75:0c:74:36:f4:23:fe:5a:f1:bb:3b:ed:f1:49: 06:82:46:d8:db:71:87:34:18:b0:fa:17:f4:18:44: 4b:4b:44:23:49:c0:8f:e2:70:bb:7d:92:21:cc:cf: e9:e7:d3:17:40:75:40:05:ea:e7:a5:09:ce:81:68: 3e:70:f6:c1:9d:20:7c:bf:af:85:c3:a0:d0:21:ca: 43:68:e9:56:36:60:0c:98:c9:df:94:f4:ef:24:c9: 42:1d:1e:0d:9b:95:f5:75:7f:b9:13:d2:ef:a4:ab: 69:ee:dd:ca:b9:a4:d8:04:2b:76:0c:a0:ad:25:48: 80:6d:29:b8:14:06:aa:c6:b3:45:19:78:54:0c:42: 51:7e:4c:b6:51:d2:0e:5f:97:f3:5b:aa:85:41:f5: bd:03:9e:77:70:71:bf:92:04:ee:ca:ca:c0:b3:60: 97:d9:d0:a5:c8:3e:0b:6e:16:cb:b9:46:cd:14:e7: 0d:41:11:3f:d4:8a:bc:fd:98:bc:65:81:1c:c7:f4: 6b:93:8e:cd:48:70:d1:a2:a4:f5:7a:1d:ef:35:a1: dc:17:e0:70:38:f3:a9:0e:49:d2:a8:c4:a0:be:c1: b1:cf:e1:48:5d:4f:8b:7f:2d:8d:91:bf:2e:98:88: 76:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B4:3E:8A:75:6D:66:22:E7:51:00:F1:D5:17:BC:0C:07:6C:E5:EF X509v3 Authority Key Identifier: keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/_rQ-inVtZiLnUQDx1Re8DAds5e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.164.0/23 185.248.167.0/24 IPv6: 2a0d:ed80:300::/40 Signature Algorithm: sha256WithRSAEncryption 23:51:e6:b0:ba:37:28:88:01:17:87:24:9a:99:79:af:ea:f7: c2:7c:82:a8:72:85:53:eb:6f:71:c7:3e:6e:76:59:c9:3a:04: 19:86:8f:b3:a6:4b:d9:8a:93:4d:33:c0:54:76:50:0d:7d:be: 52:98:f5:31:ea:c6:24:37:9f:19:02:48:6a:71:cc:60:7f:d1: 2d:45:35:5c:9d:a4:07:6e:32:37:8f:ee:5f:00:41:bd:cb:59: 0b:e5:4e:39:57:07:83:43:39:a0:d7:4a:5f:0f:3e:d4:49:ad: b7:59:08:c8:56:d0:1d:a1:d5:1d:e7:56:2c:09:7c:bd:05:73: 69:c7:87:ae:49:42:54:45:f8:f1:0e:9f:0c:6c:1f:04:38:5c: 65:a3:3a:bd:96:a3:86:1c:d9:fe:27:c1:69:99:0c:ee:ac:d1: 89:b9:c1:b9:09:b0:04:e9:01:2e:55:d7:e8:2e:28:30:2a:7d: 1c:ee:9f:6f:58:94:8b:ac:5e:c7:71:b7:69:32:a0:a8:4a:00: 26:c5:52:d7:94:87:fd:51:b1:17:8a:0f:a8:b6:a3:1a:7f:9d: 2a:82:40:7f:88:4b:2a:02:0a:7b:a0:e4:48:76:b1:8c:d6:4b: 1d:6a:3f:fc:b5:ea:bd:c0:5c:9e:e5:f5:d7:91:2d:11:bb:11: 24:fd:eb:bc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt6W09tvTq7qXKIA7HUxAiCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNTRiZTc5Yzg5MmI1MzU2YmYxYjdiY2QxMzEzOTdmMmMy M2FkYzAwHhcNMjYwMTAxMTYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWI0M2U4YTc1NmQ2NjIyZTc1MTAwZjFkNTE3YmMwYzA3NmNlNWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycLN0ZuI6Hah2BWys/CedQx0NvQj /lrxuzvt8UkGgkbY23GHNBiw+hf0GERLS0QjScCP4nC7fZIhzM/p59MXQHVABern pQnOgWg+cPbBnSB8v6+Fw6DQIcpDaOlWNmAMmMnflPTvJMlCHR4Nm5X1dX+5E9Lv pKtp7t3KuaTYBCt2DKCtJUiAbSm4FAaqxrNFGXhUDEJRfky2UdIOX5fzW6qFQfW9 A553cHG/kgTuysrAs2CX2dClyD4LbhbLuUbNFOcNQRE/1Iq8/Zi8ZYEcx/Rrk47N SHDRoqT1eh3vNaHcF+BwOPOpDknSqMSgvsGxz+FIXU+Lfy2Nkb8umIh2MQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFP60Pop1bWYi51EA8dUXvAwHbOXvMB8GA1UdIwQY MBaAFB1UvnnIkrU1a/G3vNExOX8sI63AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFZTLWVjaVN0VFZyOGJlODBURTVmeXdqcmNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82Nzc2OWItODVhNS00YTBhLTg4OWIt ODAyYjYzNzZmNzQzLzEvX3JRLWluVnRaaUxuVVFEeDFSZThEQWRzNWU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82Nzc2OWItODVhNS00YTBhLTg4OWItODAyYjYzNzZmNzQz LzEvSFZTLWVjaVN0VFZyOGJlODBURTVmeXdqcmNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQBufikAwQA ufinMA4EAgACMAgDBgAqDe2AAzANBgkqhkiG9w0BAQsFAAOCAQEAI1HmsLo3KIgB F4ckmpl5r+r3wnyCqHKFU+tvccc+bnZZyToEGYaPs6ZL2YqTTTPAVHZQDX2+Upj1 MerGJDefGQJIanHMYH/RLUU1XJ2kB24yN4/uXwBBvctZC+VOOVcHg0M5oNdKXw8+ 1Emtt1kIyFbQHaHVHedWLAl8vQVzaceHrklCVEX48Q6fDGwfBDhcZaM6vZajhhzZ /ifBaZkM7qzRibnBuQmwBOkBLlXX6C4oMCp9HO6fb1iUi6xex3G3aTKgqEoAJsVS 15SH/VGxF4oPqLajGn+dKoJAf4hLKgIKe6DkSHaxjNZLHWo//LXqvcBcnuX115Et EbsRJP3rvA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:08:01 2026 by rpki-client