This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/hL4U-26oJ-d8CY7a6r3Udux4pFM.roa File: hL4U-26oJ-d8CY7a6r3Udux4pFM.roa (raw, json) Hash identifier: 8nT0Nid1k0WCSq4dufjGbFyrf1TbKzMQQr3veAEfmRs= Subject key identifier: 84:BE:14:FB:6E:A8:27:E7:7C:09:8E:DA:EA:BD:D4:76:EC:78:A4:53 Certificate issuer: /CN=b586a8643633e9874111a8bcf3518a0905f28609 Certificate serial: 019B791005025BC791982E25E5CF9777DB72 Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/hL4U-26oJ-d8CY7a6r3Udux4pFM.roa Signing time: Thu 01 Jan 2026 10:17:31 +0000 ROA not before: Thu 01 Jan 2026 10:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56847 IP address blocks: 185.160.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:05:02:5b:c7:91:98:2e:25:e5:cf:97:77:db:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609 Validity Not Before: Jan 1 10:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84be14fb6ea827e77c098edaeabdd476ec78a453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a3:4b:6d:5c:95:4d:a0:72:47:99:a4:71:7b: 53:de:f8:3e:2a:ae:8b:b7:15:bb:bd:20:c8:a2:b5: 8f:56:9f:89:08:18:b4:e7:6d:ab:f4:77:18:b4:fa: 27:5d:ca:db:ef:26:ee:84:ae:57:bc:b6:e4:76:60: f5:8b:17:f9:03:b4:86:be:e7:5f:38:8d:0f:c4:f0: af:c6:be:af:f1:ce:9b:78:a5:d8:de:0b:e1:2b:4e: 62:77:ed:c6:cd:fd:cb:0c:51:59:4b:56:ca:46:21: 57:8f:60:78:41:ac:b6:e4:c7:a7:9a:1c:59:08:59: a7:7d:19:e2:67:d6:8f:23:05:8e:b1:38:84:10:7a: 90:39:28:0d:d8:93:d9:97:3f:60:42:e3:1f:b7:96: d9:ca:f9:73:03:a2:63:7a:b7:ff:92:40:8e:c0:e1: 5f:b6:17:98:04:4a:14:9b:d8:6b:17:50:ce:36:fe: 37:de:45:2c:10:28:85:1e:25:d6:78:b0:ca:86:ce: 49:c3:11:96:ec:ed:fd:5a:5c:5e:e6:65:53:ed:2c: 7f:f4:99:9b:d0:f6:ee:e6:28:a6:f2:29:4c:9b:46: 0c:b0:1a:1c:fb:0b:98:58:94:9e:8d:a9:9c:80:24: 1a:9b:44:a6:63:7e:ab:0f:e8:3f:69:cf:18:9d:41: 06:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BE:14:FB:6E:A8:27:E7:7C:09:8E:DA:EA:BD:D4:76:EC:78:A4:53 X509v3 Authority Key Identifier: keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/hL4U-26oJ-d8CY7a6r3Udux4pFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.142.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:5d:e0:bd:27:01:a6:bf:fe:85:98:2f:61:16:ea:19:d5:11: 8b:9e:86:cf:f2:fe:e1:1b:dc:5a:8f:68:11:7b:6a:1d:d1:33: af:b9:12:19:a0:1e:2f:89:1a:4b:ca:0b:a4:74:d2:05:95:f6: 36:a8:fe:81:aa:e5:68:55:60:a2:3d:b5:b9:94:9b:a8:44:11: 09:11:94:47:16:c7:db:69:5d:e6:99:33:6b:88:b7:c1:7a:7b: 5d:49:c9:6a:7e:13:c7:ca:7e:e6:83:87:cf:6d:7e:64:fc:c1: 6f:b7:17:de:36:f6:25:09:1d:41:01:5f:a5:63:6c:75:8d:92: 01:40:0c:ea:a2:ae:ec:aa:de:6a:ac:8b:1d:40:d3:cd:c8:ae: 50:72:a3:dd:c2:df:cc:da:5b:62:9b:a6:59:43:23:e6:0e:e5: 95:e4:4f:d7:55:ab:6b:f4:82:15:01:f9:f4:f7:0b:92:47:8c: a1:2f:b1:08:54:5f:b1:8a:4a:c9:0f:c2:52:06:3a:72:54:79: b3:26:6a:a5:27:41:2a:66:c9:56:98:83:cf:1c:06:3f:5d:58: 15:91:30:4c:de:5f:5a:a1:90:e1:ff:66:5a:99:aa:ab:91:f3: 5e:b8:5c:dc:40:36:43:60:a6:52:a3:96:4c:ac:cd:4e:2d:4d: 2d:52:8e:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EAUCW8eRmC4l5c+Xd9tyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ODZhODY0MzYzM2U5ODc0MTExYThiY2YzNTE4YTA5MDVm Mjg2MDkwHhcNMjYwMTAxMTAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGJlMTRmYjZlYTgyN2U3N2MwOThlZGFlYWJkZDQ3NmVjNzhhNDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6NLbVyVTaByR5mkcXtT3vg+Kq6L txW7vSDIorWPVp+JCBi0522r9HcYtPonXcrb7ybuhK5XvLbkdmD1ixf5A7SGvudf OI0PxPCvxr6v8c6beKXY3gvhK05id+3Gzf3LDFFZS1bKRiFXj2B4Qay25MenmhxZ CFmnfRniZ9aPIwWOsTiEEHqQOSgN2JPZlz9gQuMft5bZyvlzA6Jjerf/kkCOwOFf theYBEoUm9hrF1DONv433kUsECiFHiXWeLDKhs5JwxGW7O39Wlxe5mVT7Sx/9Jmb 0Pbu5iim8ilMm0YMsBoc+wuYWJSejamcgCQam0SmY36rD+g/ac8YnUEG3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIS+FPtuqCfnfAmO2uq91HbseKRTMB8GA1UdIwQY MBaAFLWGqGQ2M+mHQRGovPNRigkF8oYJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFlhb1pEWXo2WWRCRWFpODgxR0tDUVh5aGdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yMGNjYWMtMzNlZS00NWRjLWJjOWMt NDQ5OWUzMjM5ZjFmLzEvaEw0VS0yNm9KLWQ4Q1k3YTZyM1VkdXg0cEZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yMGNjYWMtMzNlZS00NWRjLWJjOWMtNDQ5OWUzMjM5ZjFm LzEvdFlhb1pEWXo2WWRCRWFpODgxR0tDUVh5aGdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaCOMA0G CSqGSIb3DQEBCwUAA4IBAQCNXeC9JwGmv/6FmC9hFuoZ1RGLnobP8v7hG9xaj2gR e2od0TOvuRIZoB4viRpLygukdNIFlfY2qP6BquVoVWCiPbW5lJuoRBEJEZRHFsfb aV3mmTNriLfBentdSclqfhPHyn7mg4fPbX5k/MFvtxfeNvYlCR1BAV+lY2x1jZIB QAzqoq7sqt5qrIsdQNPNyK5QcqPdwt/M2ltim6ZZQyPmDuWV5E/XVatr9IIVAfn0 9wuSR4yhL7EIVF+xikrJD8JSBjpyVHmzJmqlJ0EqZslWmIPPHAY/XVgVkTBM3l9a oZDh/2ZamaqrkfNeuFzcQDZDYKZSo5ZMrM1OLU0tUo6y -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:29 2026 by rpki-client