This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/Hqz5Gerx__tFj2L3So2G4XVB1Nk.roa File: Hqz5Gerx__tFj2L3So2G4XVB1Nk.roa (raw, json) Hash identifier: uM9EsZZ8E2g49L46zhUinx0urR3LGpmOX04s8ebZGss= Subject key identifier: 1E:AC:F9:19:EA:F1:FF:FB:45:8F:62:F7:4A:8D:86:E1:75:41:D4:D9 Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c Certificate serial: 019B7DCB669760CD280D3A4CC4ED5BC8B674 Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/Hqz5Gerx__tFj2L3So2G4XVB1Nk.roa Signing time: Fri 02 Jan 2026 08:20:40 +0000 ROA not before: Fri 02 Jan 2026 08:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16376 IP address blocks: 185.105.64.0/23 maxlen: 24 185.105.66.0/23 maxlen: 24 2a09:fd40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:66:97:60:cd:28:0d:3a:4c:c4:ed:5b:c8:b6:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1eacf919eaf1fffb458f62f74a8d86e17541d4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d5:08:df:25:44:5e:98:6c:ff:8e:b8:31:77: c3:1e:f1:05:60:bf:2b:37:56:b3:cc:2a:d3:68:7c: fe:23:bd:82:74:e7:03:18:ff:e1:c8:ca:59:59:39: 04:0e:cb:0c:be:13:29:c6:8b:4d:40:af:27:36:1b: f2:15:3b:17:7e:cf:3d:0d:b3:23:30:2f:93:c2:c1: 2b:36:7f:af:c5:e5:00:ed:9d:90:af:8c:12:6a:0b: 0d:65:9d:33:87:a8:51:8d:4a:d4:db:86:0f:16:d7: 44:1f:10:45:36:1c:8d:b9:bb:57:3d:e6:d6:c6:64: 6d:9c:f5:84:8d:34:97:41:62:d8:c2:10:7c:ba:ca: 2c:47:4c:4f:86:aa:83:17:ae:a9:35:a2:04:7f:28: ca:62:47:e9:a9:d9:ef:b3:75:7c:c0:98:a2:0c:33: e1:c7:2d:ce:29:13:42:56:09:af:fe:47:92:be:af: c8:62:7b:ed:bb:bf:95:e4:e2:b5:fc:49:ca:8f:7d: 5a:4d:7d:68:38:3e:11:90:3a:f5:cf:b3:5d:1e:b4: 4e:ab:45:e7:d6:19:69:89:39:d3:43:2d:c2:64:c6: 11:57:fb:bf:cb:04:52:82:fb:7a:82:ba:6a:29:32: ab:5c:9e:3d:72:0b:28:ea:e8:9f:a7:9d:d8:af:f5: 92:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AC:F9:19:EA:F1:FF:FB:45:8F:62:F7:4A:8D:86:E1:75:41:D4:D9 X509v3 Authority Key Identifier: keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/Hqz5Gerx__tFj2L3So2G4XVB1Nk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.105.64.0/22 IPv6: 2a09:fd40::/48 Signature Algorithm: sha256WithRSAEncryption 10:f6:43:dc:02:20:e8:6f:26:ba:a4:21:ac:46:b1:69:ab:a2: 62:32:22:69:2e:24:44:a2:e4:06:08:55:bc:bb:fb:cc:d5:96: 18:98:aa:30:a8:19:0e:15:ca:03:c1:c8:98:f8:89:05:0f:84: fc:ff:be:33:c5:fc:2d:1a:ad:f3:48:b0:c6:0a:07:24:7a:df: f0:4c:1b:f6:e9:37:85:d2:66:0d:09:44:0a:a5:8a:73:0e:4d: eb:c4:5e:5a:0e:ce:6c:9f:28:a9:bb:8f:e5:70:f7:59:07:1c: 19:71:5b:71:21:ff:03:c0:80:7b:26:e4:7f:a9:31:6e:0f:bd: b4:e6:9d:0a:d6:9a:5a:70:76:ef:0f:7b:cd:58:22:19:3f:d2: c2:95:31:4a:67:2a:31:31:b1:fb:98:50:72:37:46:65:1a:fc: 1c:cd:43:92:e6:69:de:7e:0a:7b:4d:d9:67:ca:d2:29:d8:71: fc:e1:08:61:14:5a:75:46:77:f0:d4:bd:ce:73:b5:58:fd:54: 17:0f:37:ca:ca:fc:70:68:8c:50:b7:95:ae:aa:40:b0:90:17: 4d:e6:c6:de:62:87:a0:63:40:93:87:b9:3f:11:e4:c6:88:c0: aa:11:af:f2:40:7f:64:94:96:bb:af:10:ce:30:d7:00:18:d2: f9:e3:1f:dc -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9y2aXYM0oDTpMxO1byLZ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYTJmMTIwNTU1M2ZhNTk2MGYxODA1YzZlZDkzODllOWUw ZGM5MmMwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWFjZjkxOWVhZjFmZmZiNDU4ZjYyZjc0YThkODZlMTc1NDFkNGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49UI3yVEXphs/464MXfDHvEFYL8r N1azzCrTaHz+I72CdOcDGP/hyMpZWTkEDssMvhMpxotNQK8nNhvyFTsXfs89DbMj MC+TwsErNn+vxeUA7Z2Qr4wSagsNZZ0zh6hRjUrU24YPFtdEHxBFNhyNubtXPebW xmRtnPWEjTSXQWLYwhB8usosR0xPhqqDF66pNaIEfyjKYkfpqdnvs3V8wJiiDDPh xy3OKRNCVgmv/keSvq/IYnvtu7+V5OK1/EnKj31aTX1oOD4RkDr1z7NdHrROq0Xn 1hlpiTnTQy3CZMYRV/u/ywRSgvt6grpqKTKrXJ49cgso6uifp53Yr/WSJwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFB6s+Rnq8f/7RY9i90qNhuF1QdTZMB8GA1UdIwQY MBaAFAqi8SBVU/pZYPGAXG7ZOJ6eDcksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMt YjA2ODMxNTk2NDQ5LzEvSHF6NUdlcnhfX3RGajJMM1NvMkc0WFZCMU5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMtYjA2ODMxNTk2NDQ5 LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuWlAMA8E AgACMAkDBwAqCf1AAAAwDQYJKoZIhvcNAQELBQADggEBABD2Q9wCIOhvJrqkIaxG sWmromIyImkuJESi5AYIVby7+8zVlhiYqjCoGQ4VygPByJj4iQUPhPz/vjPF/C0a rfNIsMYKByR63/BMG/bpN4XSZg0JRAqlinMOTevEXloOzmyfKKm7j+Vw91kHHBlx W3Eh/wPAgHsm5H+pMW4PvbTmnQrWmlpwdu8Pe81YIhk/0sKVMUpnKjExsfuYUHI3 RmUa/BzNQ5Lmad5+CntN2WfK0inYcfzhCGEUWnVGd/DUvc5ztVj9VBcPN8rK/HBo jFC3la6qQLCQF03mxt5ih6BjQJOHuT8R5MaIwKoRr/JAf2SUlruvEM4w1wAY0vnj H9w= -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:32 2026 by rpki-client