This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/Hwa8i0p0AtGJ1GXfRVKCvTBqny0.roa File: Hwa8i0p0AtGJ1GXfRVKCvTBqny0.roa (raw, json) Hash identifier: DT+ukv3DVtJgqcPr2TlSsYEdjNtd1WuqqHEUYL6lIL8= Subject key identifier: 1F:06:BC:8B:4A:74:02:D1:89:D4:65:DF:45:52:82:BD:30:6A:9F:2D Certificate issuer: /CN=57e72ce7f8c494235a084823965b904704bc8240 Certificate serial: 019B7FF26C16A00B0F22AD8C2BC6E5AE0641 Authority key identifier: 57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/Hwa8i0p0AtGJ1GXfRVKCvTBqny0.roa Signing time: Fri 02 Jan 2026 18:22:32 +0000 ROA not before: Fri 02 Jan 2026 18:22:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214248 IP address blocks: 185.221.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:6c:16:a0:0b:0f:22:ad:8c:2b:c6:e5:ae:06:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57e72ce7f8c494235a084823965b904704bc8240 Validity Not Before: Jan 2 18:22:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f06bc8b4a7402d189d465df455282bd306a9f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:1e:82:f8:cb:00:cc:ce:7a:d7:75:b2:11: c0:f9:1d:c0:45:6f:60:2b:e1:82:d5:91:d5:49:26: 19:55:0d:6b:99:b9:de:72:57:49:16:10:a9:1e:80: cf:c3:06:97:28:e4:bd:4f:d8:bd:16:10:25:c8:cd: 3e:3a:aa:d4:78:a7:c8:22:f4:f2:7f:2d:12:63:f0: 26:3b:f6:b0:7a:b5:86:dd:d3:5e:7a:88:73:13:5c: 89:5c:fb:28:2a:aa:ae:e1:dd:7f:fa:87:78:14:29: 4d:75:52:65:7f:b9:eb:91:ed:ed:ce:7f:09:93:ef: 66:e4:36:e8:f5:4d:f3:54:ec:f6:27:96:63:d6:6c: d8:6a:21:e8:15:19:ac:3d:e3:6c:50:61:e5:68:18: 0d:dd:eb:9f:5b:bb:2e:d0:0e:26:2a:d8:2a:3c:35: 25:e8:24:c4:cd:4d:45:15:fd:f7:09:db:66:5d:51: 6e:9e:b9:b1:af:1a:77:4d:db:98:b5:65:33:fc:3c: c8:8a:f0:c1:de:7e:3e:00:da:48:5e:73:89:7a:e7: d2:b7:aa:a4:f3:ca:43:54:12:dc:1d:bf:ee:1a:6f: 6f:db:31:ab:58:47:c3:13:e5:5d:49:a3:47:4d:fb: 4a:53:ba:9c:60:dc:73:26:4b:2f:f3:a5:4a:f4:4b: 60:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:06:BC:8B:4A:74:02:D1:89:D4:65:DF:45:52:82:BD:30:6A:9F:2D X509v3 Authority Key Identifier: keyid:57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/Hwa8i0p0AtGJ1GXfRVKCvTBqny0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.221.190.0/24 Signature Algorithm: sha256WithRSAEncryption b8:93:bc:49:ee:ed:ca:ae:05:14:00:56:18:2c:bd:9b:80:c9: ea:bc:1e:67:a1:8a:cf:64:24:d5:73:fd:7b:ab:5c:c2:ec:f6: ca:1b:70:7b:22:be:0c:80:39:46:8e:5e:a7:26:34:e9:92:53: 6e:05:67:7e:05:36:28:40:23:d7:1d:34:43:99:70:77:07:00: 35:c0:58:a5:9e:c9:eb:9b:47:9d:13:2f:ea:b3:0b:d3:85:f5: 72:fe:3b:2a:b8:74:ca:2f:a6:40:8b:d9:b7:6c:f4:4e:c8:1a: a1:ea:3c:9d:7c:3d:af:b4:04:2b:dd:fc:4d:6b:f5:38:fa:14: b7:ef:a5:03:82:be:80:9f:54:77:34:51:d1:54:60:4d:4d:2b: 0c:23:a0:75:cb:cd:a2:bb:4c:d0:96:ae:da:fd:e1:a4:ca:e3: 08:d5:93:92:5d:b1:4f:f3:43:ea:f0:c5:1d:f7:99:72:ca:1d: ca:26:91:70:22:8f:09:a2:6b:c6:e8:6a:36:03:94:8f:49:8b: 8f:03:c0:41:57:e0:3d:ca:8b:28:28:82:2e:1c:b6:53:fe:c5: f6:67:f8:a1:9a:8b:bc:07:5c:c7:d7:1a:02:73:b7:4b:f1:ba: 8c:93:75:ca:a1:a2:8f:8f:46:18:0e:5a:b2:a0:6b:63:f6:04: 9c:c8:dd:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8mwWoAsPIq2MK8blrgZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZTcyY2U3ZjhjNDk0MjM1YTA4NDgyMzk2NWI5MDQ3MDRi YzgyNDAwHhcNMjYwMTAyMTgyMjMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjA2YmM4YjRhNzQwMmQxODlkNDY1ZGY0NTUyODJiZDMwNmE5ZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3YegvjLAMzOetd1shHA+R3ARW9g K+GC1ZHVSSYZVQ1rmbnecldJFhCpHoDPwwaXKOS9T9i9FhAlyM0+OqrUeKfIIvTy fy0SY/AmO/awerWG3dNeeohzE1yJXPsoKqqu4d1/+od4FClNdVJlf7nrke3tzn8J k+9m5Dbo9U3zVOz2J5Zj1mzYaiHoFRmsPeNsUGHlaBgN3eufW7su0A4mKtgqPDUl 6CTEzU1FFf33CdtmXVFunrmxrxp3TduYtWUz/DzIivDB3n4+ANpIXnOJeufSt6qk 88pDVBLcHb/uGm9v2zGrWEfDE+VdSaNHTftKU7qcYNxzJksv86VK9EtgbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB8GvItKdALRidRl30VSgr0wap8tMB8GA1UdIwQY MBaAFFfnLOf4xJQjWghII5ZbkEcEvIJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVi1jczVfakVsQ05hQ0VnamxsdVFSd1M4Z2tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kYTJhYjEtNGI1My00OTlmLThkZGQt MmEwZjg3NDNjMmMyLzEvSHdhOGkwcDBBdEdKMUdYZlJWS0N2VEJxbnkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9kYTJhYjEtNGI1My00OTlmLThkZGQtMmEwZjg3NDNjMmMy LzEvVi1jczVfakVsQ05hQ0VnamxsdVFSd1M4Z2tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud2+MA0G CSqGSIb3DQEBCwUAA4IBAQC4k7xJ7u3KrgUUAFYYLL2bgMnqvB5noYrPZCTVc/17 q1zC7PbKG3B7Ir4MgDlGjl6nJjTpklNuBWd+BTYoQCPXHTRDmXB3BwA1wFilnsnr m0edEy/qswvThfVy/jsquHTKL6ZAi9m3bPROyBqh6jydfD2vtAQr3fxNa/U4+hS3 76UDgr6An1R3NFHRVGBNTSsMI6B1y82iu0zQlq7a/eGkyuMI1ZOSXbFP80Pq8MUd 95lyyh3KJpFwIo8JomvG6Go2A5SPSYuPA8BBV+A9yosoKIIuHLZT/sX2Z/ihmou8 B1zH1xoCc7dL8bqMk3XKoaKPj0YYDlqyoGtj9gScyN3Q -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:18 2026 by rpki-client