This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/hcjtq7J7FKS0bIahe8TWZOilbrc.roa File: hcjtq7J7FKS0bIahe8TWZOilbrc.roa (raw, json) Hash identifier: uOY6FMIgCoFqDzQfMMnNRctUj2RDP4gSOMAnS9KpjHI= Subject key identifier: 85:C8:ED:AB:B2:7B:14:A4:B4:6C:86:A1:7B:C4:D6:64:E8:A5:6E:B7 Certificate issuer: /CN=9256ebf66b80f08135858d144ced6f785834f5f4 Certificate serial: 019B79109FCFF2DBDDF48E9222DA5FF32B00 Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/hcjtq7J7FKS0bIahe8TWZOilbrc.roa Signing time: Thu 01 Jan 2026 10:18:11 +0000 ROA not before: Thu 01 Jan 2026 10:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35421 IP address blocks: 185.168.160.0/22 maxlen: 24 185.168.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:9f:cf:f2:db:dd:f4:8e:92:22:da:5f:f3:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4 Validity Not Before: Jan 1 10:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85c8edabb27b14a4b46c86a17bc4d664e8a56eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a8:2d:13:2f:ed:89:a9:72:00:12:0c:df:a3: 96:15:a3:bc:02:7c:86:ca:c0:43:47:79:6e:54:ed: 3a:08:17:a6:5c:e9:2a:ec:37:73:bb:78:9f:93:87: 65:24:aa:c2:f9:c7:60:12:57:cf:5f:fc:e0:e4:08: a5:fd:2a:07:ee:7b:e4:c1:d4:9e:e1:36:e0:f4:e1: 19:e0:2b:77:c3:26:f2:f2:26:5f:8f:33:56:6e:37: e5:d4:89:49:fd:fe:61:2b:f3:89:2d:48:74:1b:f4: 59:58:78:96:70:28:73:18:dc:7d:64:78:85:18:07: 37:7d:65:eb:c0:6e:42:8a:a3:d9:8d:3a:2d:a9:ea: 16:12:8b:9c:ea:60:bb:ee:dc:17:99:4d:9c:be:12: d8:e2:ce:00:f3:dc:af:8b:b2:62:1f:08:89:5e:70: 59:75:d0:a1:26:b5:f8:7e:65:04:8f:ec:7f:65:75: e0:03:f6:b9:cc:a3:3c:25:24:1f:20:0c:b2:8b:ce: 15:a2:2b:31:3b:53:d6:08:78:13:e6:95:fc:f6:0d: 2e:59:aa:92:c7:26:39:f7:50:c4:6b:d2:b7:db:98: e0:3e:26:6a:33:a8:6b:e2:c3:ec:3a:2c:0c:fc:a5: 92:8e:fe:a1:f3:0e:a7:63:80:9b:69:b8:54:5d:e2: c4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C8:ED:AB:B2:7B:14:A4:B4:6C:86:A1:7B:C4:D6:64:E8:A5:6E:B7 X509v3 Authority Key Identifier: keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/hcjtq7J7FKS0bIahe8TWZOilbrc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.168.160.0/22 Signature Algorithm: sha256WithRSAEncryption 94:ff:2b:57:03:42:f4:41:a1:1f:b9:fb:8b:0d:70:84:24:ca: df:21:9e:f9:53:3a:ed:e1:4a:bd:3b:9b:17:67:a3:72:8c:f3: 36:95:c9:b7:c4:cc:9e:9a:ee:a7:39:92:a5:92:dc:ac:d3:97: 67:3b:de:a5:56:32:3f:0a:0c:e6:ab:0a:4b:bc:eb:8a:3e:fd: 15:e2:a9:5a:7f:79:3b:ae:3e:e9:da:bd:bb:51:27:d9:05:92: 18:84:d4:e2:b9:bf:6c:05:e1:c5:58:e4:72:6e:a2:b5:f3:6f: 3a:99:18:c8:c1:05:87:d0:26:bc:19:4b:97:04:fb:d5:99:66: 3e:b1:06:b6:69:76:96:2a:1b:b0:b0:be:7c:93:26:a5:2d:44: f8:7b:17:3a:cb:ed:de:c1:30:7f:5f:b8:05:84:aa:aa:0d:b5: 90:3f:f2:66:6b:f3:93:8e:7f:43:c6:d7:f0:e4:f3:16:d3:e0: 11:20:2d:ac:86:c9:42:4c:94:bf:f3:4d:e5:9b:09:45:c8:c2: 34:05:fe:68:e9:ec:52:da:1e:d0:81:56:7b:d1:f1:0e:50:c4: 04:c9:7f:2e:55:d0:5a:cb:87:18:d2:a6:25:fe:e3:c3:89:8a: 59:7d:44:54:4f:83:cf:11:17:d0:71:6a:bd:38:be:ea:07:6d: f5:4f:e5:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EJ/P8tvd9I6SItpf8ysAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTZlYmY2NmI4MGYwODEzNTg1OGQxNDRjZWQ2Zjc4NTgz NGY1ZjQwHhcNMjYwMTAxMTAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWM4ZWRhYmIyN2IxNGE0YjQ2Yzg2YTE3YmM0ZDY2NGU4YTU2ZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KgtEy/tialyABIM36OWFaO8AnyG ysBDR3luVO06CBemXOkq7Ddzu3ifk4dlJKrC+cdgElfPX/zg5Ail/SoH7nvkwdSe 4Tbg9OEZ4Ct3wyby8iZfjzNWbjfl1IlJ/f5hK/OJLUh0G/RZWHiWcChzGNx9ZHiF GAc3fWXrwG5CiqPZjTotqeoWEouc6mC77twXmU2cvhLY4s4A89yvi7JiHwiJXnBZ ddChJrX4fmUEj+x/ZXXgA/a5zKM8JSQfIAyyi84VoisxO1PWCHgT5pX89g0uWaqS xyY591DEa9K325jgPiZqM6hr4sPsOiwM/KWSjv6h8w6nY4CbabhUXeLEqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIXI7auyexSktGyGoXvE1mTopW63MB8GA1UdIwQY MBaAFJJW6/ZrgPCBNYWNFEztb3hYNPX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xicjltdUE4SUUxaFkwVVRPMXZlRmcwOWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iNzE3YzUtYTY0Yi00NDc1LWJlM2Ut NWRhOGQ2NzdkODQ3LzEvaGNqdHE3SjdGS1MwYklhaGU4VFdaT2lsYnJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9iNzE3YzUtYTY0Yi00NDc1LWJlM2UtNWRhOGQ2NzdkODQ3 LzEva2xicjltdUE4SUUxaFkwVVRPMXZlRmcwOWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaigMA0G CSqGSIb3DQEBCwUAA4IBAQCU/ytXA0L0QaEfufuLDXCEJMrfIZ75Uzrt4Uq9O5sX Z6NyjPM2lcm3xMyemu6nOZKlktys05dnO96lVjI/CgzmqwpLvOuKPv0V4qlaf3k7 rj7p2r27USfZBZIYhNTiub9sBeHFWORybqK18286mRjIwQWH0Ca8GUuXBPvVmWY+ sQa2aXaWKhuwsL58kyalLUT4exc6y+3ewTB/X7gFhKqqDbWQP/Jma/OTjn9Dxtfw 5PMW0+ARIC2shslCTJS/803lmwlFyMI0Bf5o6exS2h7QgVZ70fEOUMQEyX8uVdBa y4cY0qYl/uPDiYpZfURUT4PPERfQcWq9OL7qB231T+Ws -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:41 2026 by rpki-client