This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/hYLRUg0SQqMstMmusnhckxfWhuY.roa File: hYLRUg0SQqMstMmusnhckxfWhuY.roa (raw, json) Hash identifier: 1x1ITik47KH9EPZ8bGLZz5XWRPVBO6Cz1LvH0CdcCtM= Subject key identifier: 85:82:D1:52:0D:12:42:A3:2C:B4:C9:AE:B2:78:5C:93:17:D6:86:E6 Certificate issuer: /CN=e11aa92850ebfe648ad3d89add8e736ec3675a11 Certificate serial: 019B7A5ACC9B3615D4659BA3AA6EF65940FA Authority key identifier: E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/hYLRUg0SQqMstMmusnhckxfWhuY.roa Signing time: Thu 01 Jan 2026 16:18:49 +0000 ROA not before: Thu 01 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197965 IP address blocks: 194.180.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cc:9b:36:15:d4:65:9b:a3:aa:6e:f6:59:40:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e11aa92850ebfe648ad3d89add8e736ec3675a11 Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8582d1520d1242a32cb4c9aeb2785c9317d686e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8f:ea:87:c1:22:e6:83:c5:99:31:96:7a:f8: 6b:9b:1c:a6:53:51:f5:6f:5c:92:a2:14:7e:27:cb: b8:48:2b:2b:d8:0e:6a:42:80:95:c0:13:64:02:72: 69:34:c6:38:5f:82:7f:39:45:e2:d5:5d:bd:f3:fb: a1:d0:f4:79:4d:a8:b1:1e:72:d2:a8:44:71:68:3a: 49:1a:92:e4:3f:fe:58:02:86:72:fb:d8:56:60:95: b9:41:ea:47:3b:7a:72:b0:d3:54:cd:03:e3:c8:fd: 22:08:46:82:76:3a:ab:a0:04:f7:d6:42:a7:ad:17: 99:f6:3e:e7:a6:97:54:e9:4e:92:88:7f:0b:00:fa: 89:29:32:0f:37:40:48:97:55:83:8d:b7:9c:c1:2e: e9:12:e9:ea:98:1e:43:64:ae:2e:87:7e:0f:1e:c2: af:81:e7:18:4d:22:b2:11:10:de:d0:9d:8e:f6:df: 78:f8:05:e7:64:5a:25:f1:f1:d1:cd:92:c6:24:c6: 5e:e1:dc:25:df:b9:fd:33:c9:dc:51:a6:e3:58:d5: 2f:f2:fb:9f:d3:ed:f5:44:87:c2:ea:b8:91:14:13: fb:35:44:91:cf:80:1b:64:26:62:3b:06:34:c4:0e: 93:fa:4e:82:be:e3:c5:d3:40:ef:59:e7:5c:40:76: 35:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:82:D1:52:0D:12:42:A3:2C:B4:C9:AE:B2:78:5C:93:17:D6:86:E6 X509v3 Authority Key Identifier: keyid:E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/hYLRUg0SQqMstMmusnhckxfWhuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.180.136.0/24 Signature Algorithm: sha256WithRSAEncryption 93:5c:a8:1d:9b:96:b3:f7:da:5c:83:da:d8:bc:ca:9b:a5:6c: 22:b7:3b:07:b0:6c:24:d8:3f:cd:63:8a:c6:eb:01:32:04:ce: 88:84:c4:70:fe:1f:b8:26:24:7d:4e:1b:ff:ee:e6:12:c4:cb: cb:b6:0f:8a:84:76:21:44:f0:97:c6:9a:3d:81:46:45:26:84: 37:b9:4e:d2:f2:2b:1c:8f:68:ff:81:32:b7:75:5b:9d:d1:9e: c1:0f:62:fd:f7:74:c0:32:ea:0e:7a:c2:83:e9:7b:6a:89:a8: f3:15:b7:21:d6:ac:7d:ae:a8:84:4d:18:99:92:30:b3:75:ea: 7c:0b:f4:7e:b4:54:d0:64:02:e3:44:dd:61:2f:11:66:2b:eb: 02:8e:33:53:5c:6f:da:07:f3:99:59:9e:75:43:ce:82:59:68: c0:69:4a:be:1d:94:f5:da:7e:08:5f:fa:88:4e:78:47:6a:02: 95:d7:07:b4:f3:a7:65:2a:e0:53:9f:e6:81:f9:48:9c:b6:8d: b6:b1:09:8e:f5:26:b3:e2:77:e3:32:6c:1c:90:62:4b:c5:0f: d9:b0:b8:76:03:2b:d5:b4:f6:94:75:b0:1e:92:c4:46:d0:c4: 1b:02:04:4c:73:04:82:03:9f:18:b2:e9:09:0a:89:b9:ac:06: 0a:d5:6e:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WsybNhXUZZujqm72WUD6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMWFhOTI4NTBlYmZlNjQ4YWQzZDg5YWRkOGU3MzZlYzM2 NzVhMTEwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTgyZDE1MjBkMTI0MmEzMmNiNGM5YWViMjc4NWM5MzE3ZDY4NmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4/qh8Ei5oPFmTGWevhrmxymU1H1 b1ySohR+J8u4SCsr2A5qQoCVwBNkAnJpNMY4X4J/OUXi1V298/uh0PR5TaixHnLS qERxaDpJGpLkP/5YAoZy+9hWYJW5QepHO3pysNNUzQPjyP0iCEaCdjqroAT31kKn rReZ9j7nppdU6U6SiH8LAPqJKTIPN0BIl1WDjbecwS7pEunqmB5DZK4uh34PHsKv gecYTSKyERDe0J2O9t94+AXnZFol8fHRzZLGJMZe4dwl37n9M8ncUabjWNUv8vuf 0+31RIfC6riRFBP7NUSRz4AbZCZiOwY0xA6T+k6CvuPF00DvWedcQHY1NQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIWC0VINEkKjLLTJrrJ4XJMX1obmMB8GA1UdIwQY MBaAFOEaqShQ6/5kitPYmt2Oc27DZ1oRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFJxcEtGRHJfbVNLMDlpYTNZNXpic05uV2hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yZWJiYTUtN2EwZC00MzMzLWI5MTEt MGY4OGQxNmUxYWZlLzEvaFlMUlVnMFNRcU1zdE1tdXNuaGNreGZXaHVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8yZWJiYTUtN2EwZC00MzMzLWI5MTEtMGY4OGQxNmUxYWZl LzEvNFJxcEtGRHJfbVNLMDlpYTNZNXpic05uV2hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrSIMA0G CSqGSIb3DQEBCwUAA4IBAQCTXKgdm5az99pcg9rYvMqbpWwitzsHsGwk2D/NY4rG 6wEyBM6IhMRw/h+4JiR9Thv/7uYSxMvLtg+KhHYhRPCXxpo9gUZFJoQ3uU7S8isc j2j/gTK3dVud0Z7BD2L993TAMuoOesKD6XtqiajzFbch1qx9rqiETRiZkjCzdep8 C/R+tFTQZALjRN1hLxFmK+sCjjNTXG/aB/OZWZ51Q86CWWjAaUq+HZT12n4IX/qI TnhHagKV1we086dlKuBTn+aB+Uicto22sQmO9Saz4nfjMmwckGJLxQ/ZsLh2AyvV tPaUdbAeksRG0MQbAgRMcwSCA58YsukJCom5rAYK1W5V -----END CERTIFICATE-----Generated at Sun Jan 25 15:51:51 2026 by rpki-client