This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/4HYOyK7UVPMY-7-PRIJm1n9dsEM.roa File: 4HYOyK7UVPMY-7-PRIJm1n9dsEM.roa (raw, json) Hash identifier: Z+M0a2CeBocn+5J0DpLY2Wi61/jCPMoAwEWgcIu3zn8= Subject key identifier: E0:76:0E:C8:AE:D4:54:F3:18:FB:BF:8F:44:82:66:D6:7F:5D:B0:43 Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190 Certificate serial: 019B79112E8926F22B9B10DA1344FD9F2100 Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/4HYOyK7UVPMY-7-PRIJm1n9dsEM.roa Signing time: Thu 01 Jan 2026 10:18:47 +0000 ROA not before: Thu 01 Jan 2026 10:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62284 IP address blocks: 185.110.28.0/22 maxlen: 22 185.110.28.0/24 maxlen: 24 185.110.29.0/24 maxlen: 24 185.110.30.0/24 maxlen: 24 185.110.31.0/24 maxlen: 24 2a13:e180::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2e:89:26:f2:2b:9b:10:da:13:44:fd:9f:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190 Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0760ec8aed454f318fbbf8f448266d67f5db043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:4e:1a:b8:f2:23:07:24:93:0c:84:3e:5e:fc: a3:ad:e0:b3:bf:36:1f:0d:56:bf:f9:1e:9d:c0:cd: 4e:6b:d3:cb:40:8a:46:70:aa:9e:1c:b9:4c:1b:e2: 24:f1:c3:46:1a:e0:d9:81:2f:a3:be:48:7d:df:4e: 50:37:8c:e7:14:c5:a9:66:ed:67:4a:f7:b9:a1:7a: b7:dd:9b:d7:e0:c8:b8:bb:cb:a8:7b:f3:52:b8:82: 72:66:e0:15:dd:8a:22:9a:1d:b5:a0:b2:42:4a:b9: 10:39:12:c7:88:c9:71:d7:e6:52:a5:e2:3e:a9:91: 83:02:fa:b3:31:ca:63:9b:9c:6a:92:92:cb:7f:65: 26:da:3c:b6:75:c7:de:87:87:2f:4d:53:27:40:0d: f1:95:91:04:9c:6d:2a:3f:ff:b0:a4:18:2a:6e:24: 53:e4:e4:31:76:c4:d8:46:82:29:e3:97:a6:6b:58: fb:6c:48:da:b4:1d:9b:43:41:50:4c:8f:9e:39:76: f7:df:d8:b4:39:43:e3:b7:dc:1f:b5:d1:10:d3:1f: c2:1c:c9:cd:d2:ae:c3:48:b3:21:29:0e:d0:20:26: 7d:41:86:04:28:e4:8a:9c:0d:92:66:78:b6:54:5c: 0e:42:dc:98:c7:ab:ad:d2:20:ef:65:0c:62:4e:eb: 48:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:76:0E:C8:AE:D4:54:F3:18:FB:BF:8F:44:82:66:D6:7F:5D:B0:43 X509v3 Authority Key Identifier: keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/4HYOyK7UVPMY-7-PRIJm1n9dsEM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.110.28.0/22 IPv6: 2a13:e180::/29 Signature Algorithm: sha256WithRSAEncryption 88:30:1d:db:7c:f1:2c:1d:91:6a:92:c7:16:8e:9a:f7:17:7d: 3f:2b:0d:65:ec:b3:c9:82:3f:9e:b7:db:42:5b:07:fe:35:ce: 1e:37:d4:b5:58:15:34:39:15:93:ec:51:4f:03:8f:10:97:01: 08:0a:82:8e:dd:31:16:8b:d9:bd:2a:7f:a3:0d:69:69:a7:e1: 03:0f:46:c8:95:fd:5e:70:b1:5b:8e:21:55:4f:75:07:26:6f: 1a:9f:8d:ed:7f:1f:53:1d:47:a7:52:a0:25:47:a3:4e:6d:c2: 2f:cd:9f:6c:9f:a5:c4:37:da:29:3a:77:92:0f:a6:c7:2d:ab: 30:81:75:6f:00:46:8c:a1:51:4b:37:b4:55:74:02:d9:a9:24: ff:44:88:21:28:b8:39:78:a3:ba:95:7b:55:7b:82:1d:fb:42: 79:60:e2:6b:db:80:01:67:3b:8c:08:fa:56:22:b3:18:52:06: ec:0b:ba:ed:aa:13:8e:fe:ee:ac:df:3b:c1:89:70:bb:e3:bc: 8c:02:47:38:bb:56:a7:22:c1:45:d2:a1:d5:14:17:2e:44:15: 09:40:3e:01:f0:1d:12:f8:4c:26:6c:14:d1:c5:35:f9:eb:ff: 2e:fe:d5:df:a7:83:f3:f3:a0:ea:90:3e:0a:30:69:d1:e0:dc: d7:20:df:18 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ES6JJvIrmxDaE0T9nyEAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTM1MzQyOWU3MmViMjg2Y2MxOGVjYmViOGZhNzFhMzFj MDgxOTAwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDc2MGVjOGFlZDQ1NGYzMThmYmJmOGY0NDgyNjZkNjdmNWRiMDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9E4auPIjBySTDIQ+XvyjreCzvzYf DVa/+R6dwM1Oa9PLQIpGcKqeHLlMG+Ik8cNGGuDZgS+jvkh9305QN4znFMWpZu1n Sve5oXq33ZvX4Mi4u8uoe/NSuIJyZuAV3Yoimh21oLJCSrkQORLHiMlx1+ZSpeI+ qZGDAvqzMcpjm5xqkpLLf2Um2jy2dcfeh4cvTVMnQA3xlZEEnG0qP/+wpBgqbiRT 5OQxdsTYRoIp45ema1j7bEjatB2bQ0FQTI+eOXb339i0OUPjt9wftdEQ0x/CHMnN 0q7DSLMhKQ7QICZ9QYYEKOSKnA2SZni2VFwOQtyYx6ut0iDvZQxiTutIbQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOB2Dsiu1FTzGPu/j0SCZtZ/XbBDMB8GA1UdIwQY MBaAFDUTU0KecusobMGOy+uPpxoxwIGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEt MzkzNjk2ODlmMjdlLzEvNEhZT3lLN1VWUE1ZLTctUFJJSm0xbjlkc0VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEtMzkzNjk2ODlmMjdl LzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuW4cMA0E AgACMAcDBQMqE+GAMA0GCSqGSIb3DQEBCwUAA4IBAQCIMB3bfPEsHZFqkscWjpr3 F30/Kw1l7LPJgj+et9tCWwf+Nc4eN9S1WBU0ORWT7FFPA48QlwEICoKO3TEWi9m9 Kn+jDWlpp+EDD0bIlf1ecLFbjiFVT3UHJm8an43tfx9THUenUqAlR6NObcIvzZ9s n6XEN9opOneSD6bHLaswgXVvAEaMoVFLN7RVdALZqST/RIghKLg5eKO6lXtVe4Id +0J5YOJr24ABZzuMCPpWIrMYUgbsC7rtqhOO/u6s3zvBiXC747yMAkc4u1anIsFF 0qHVFBcuRBUJQD4B8B0S+EwmbBTRxTX56/8u/tXfp4Pz86DqkD4KMGnR4NzXIN8Y -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:29 2026 by rpki-client