This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/HpLqibQGspD7I0_UJ2EcgU7t_k0.roa File: HpLqibQGspD7I0_UJ2EcgU7t_k0.roa (raw, json) Hash identifier: WDoBuCvl81J2NkEtc2oSPamqpTdUvE0GF3Mfe4I1HBQ= Subject key identifier: 1E:92:EA:89:B4:06:B2:90:FB:23:4F:D4:27:61:1C:81:4E:ED:FE:4D Certificate issuer: /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c Certificate serial: 019B7AC85E5643B751BF1E493B5CD6CBE085 Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/HpLqibQGspD7I0_UJ2EcgU7t_k0.roa Signing time: Thu 01 Jan 2026 18:18:30 +0000 ROA not before: Thu 01 Jan 2026 18:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 185.14.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:5e:56:43:b7:51:bf:1e:49:3b:5c:d6:cb:e0:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c Validity Not Before: Jan 1 18:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e92ea89b406b290fb234fd427611c814eedfe4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:69:a0:35:81:b1:a7:2f:43:dc:4c:3b:62:44: 4b:27:c7:43:27:ef:4a:ae:f7:4b:9f:2f:33:00:6b: 14:da:ca:25:ad:b0:25:31:dc:cb:52:d1:60:6c:00: 2f:22:c2:1f:e7:28:0d:cd:d3:af:84:12:ab:73:9e: 69:bc:32:86:4f:8a:ff:0a:c8:d0:a2:19:aa:9a:66: f2:f8:90:f1:de:e4:fe:ba:d4:05:14:dd:75:b6:cb: 10:f4:32:3c:2e:1e:d5:07:fd:6d:91:c6:46:04:2f: 46:28:d0:70:17:d7:e9:3e:70:bc:a6:dd:07:a2:95: e8:9d:7f:97:bb:0f:d4:16:48:b6:89:ac:fc:5c:b2: 4e:65:0f:a3:43:59:95:7e:9a:e2:d5:a9:9e:c7:b7: 82:db:db:b9:4d:56:80:c1:40:0e:e3:84:9a:1c:61: 8e:29:b9:6a:f9:c0:ed:df:e8:90:ae:59:54:28:91: 16:8f:24:6c:95:3e:eb:ad:9e:29:2d:bf:35:a2:bc: aa:75:c9:bf:4c:0d:ba:d3:d8:5b:a3:c0:02:11:84: 17:72:e0:1c:9a:52:39:9b:5e:68:29:15:03:e1:b2: bd:7f:0d:aa:ca:78:00:0a:43:3d:c2:6e:5d:ea:19: 33:c0:2e:48:c7:ea:f2:cc:00:e7:c3:d5:da:5a:0b: 3c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:92:EA:89:B4:06:B2:90:FB:23:4F:D4:27:61:1C:81:4E:ED:FE:4D X509v3 Authority Key Identifier: keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/HpLqibQGspD7I0_UJ2EcgU7t_k0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.14.237.0/24 Signature Algorithm: sha256WithRSAEncryption 32:d7:54:e6:87:17:be:1d:11:02:a6:08:64:b5:14:d4:11:9e: 1b:20:0c:56:92:f3:d2:35:20:5a:b9:d6:b5:ee:9c:d7:1b:03: 7e:a7:f9:57:b6:29:64:ea:8c:5e:1e:56:35:65:5d:bf:19:0f: a0:94:b3:3c:d0:25:71:e6:8d:00:b6:95:3a:f6:54:db:59:83: 8b:44:50:fd:de:9f:7c:d0:af:39:a1:ba:16:95:78:db:32:e0: 5b:7f:55:e1:26:02:42:eb:7d:0d:c2:eb:fe:95:fa:f5:33:aa: 52:54:6b:09:1f:5b:1a:4f:89:06:82:6a:90:6e:f4:ae:f4:28: e0:06:21:53:e5:8a:1e:52:da:f3:d5:01:19:f8:74:ac:a5:91: 5d:58:66:3a:9e:6e:42:60:76:b3:6e:83:46:50:3d:7c:16:95: 0d:48:74:ac:92:a2:0e:97:92:87:84:74:47:71:5b:d0:a8:93: 6a:2c:62:52:dc:fa:3a:f4:12:e5:4d:77:17:26:22:b5:9f:d0: 31:12:de:71:40:a4:7f:87:d0:90:3e:1f:86:cf:97:87:44:96: f3:c2:77:21:05:de:96:3f:8b:f5:c3:f2:29:5c:3c:3e:b3:05: 40:55:72:bb:76:df:46:28:b1:69:67:a5:53:d6:4a:a3:8f:6d: 32:72:c5:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yF5WQ7dRvx5JO1zWy+CFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkYzgxZDI0YzQ1ZGRhYTM0NWY5MDY0ZGUyOWZiY2E3YjEy OWE1MmMwHhcNMjYwMTAxMTgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTkyZWE4OWI0MDZiMjkwZmIyMzRmZDQyNzYxMWM4MTRlZWRmZTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGmgNYGxpy9D3Ew7YkRLJ8dDJ+9K rvdLny8zAGsU2solrbAlMdzLUtFgbAAvIsIf5ygNzdOvhBKrc55pvDKGT4r/CsjQ ohmqmmby+JDx3uT+utQFFN11tssQ9DI8Lh7VB/1tkcZGBC9GKNBwF9fpPnC8pt0H opXonX+Xuw/UFki2iaz8XLJOZQ+jQ1mVfpri1amex7eC29u5TVaAwUAO44SaHGGO Kblq+cDt3+iQrllUKJEWjyRslT7rrZ4pLb81oryqdcm/TA2609hbo8ACEYQXcuAc mlI5m15oKRUD4bK9fw2qyngACkM9wm5d6hkzwC5Ix+ryzADnw9XaWgs8KwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB6S6om0BrKQ+yNP1CdhHIFO7f5NMB8GA1UdIwQY MBaAFC3IHSTEXdqjRfkGTeKfvKexKaUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iZjNkYjUtYTMzZi00MzExLWFjZDkt MmZjYzBiNzQ5YjMyLzEvSHBMcWliUUdzcEQ3STBfVUoyRWNnVTd0X2swLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9iZjNkYjUtYTMzZi00MzExLWFjZDktMmZjYzBiNzQ5YjMy LzEvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ7tMA0G CSqGSIb3DQEBCwUAA4IBAQAy11Tmhxe+HRECpghktRTUEZ4bIAxWkvPSNSBauda1 7pzXGwN+p/lXtilk6oxeHlY1ZV2/GQ+glLM80CVx5o0AtpU69lTbWYOLRFD93p98 0K85oboWlXjbMuBbf1XhJgJC630Nwuv+lfr1M6pSVGsJH1saT4kGgmqQbvSu9Cjg BiFT5YoeUtrz1QEZ+HSspZFdWGY6nm5CYHazboNGUD18FpUNSHSskqIOl5KHhHRH cVvQqJNqLGJS3Po69BLlTXcXJiK1n9AxEt5xQKR/h9CQPh+Gz5eHRJbzwnchBd6W P4v1w/IpXDw+swVAVXK7dt9GKLFpZ6VT1kqjj20ycsVs -----END CERTIFICATE-----Generated at Sat Jan 24 00:18:51 2026 by rpki-client