This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/Hbp3xZjUeZ9MzhUGZdMqZdnKptY.roa File: Hbp3xZjUeZ9MzhUGZdMqZdnKptY.roa (raw, json) Hash identifier: MVxhrFEdxzKNdhuGLJMQ/HdUK+Lb2pJyE950JplmMWA= Subject key identifier: 1D:BA:77:C5:98:D4:79:9F:4C:CE:15:06:65:D3:2A:65:D9:CA:A6:D6 Certificate issuer: /CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b Certificate serial: 019B79106BF664FD689DA3149FCEE9888438 Authority key identifier: E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/Hbp3xZjUeZ9MzhUGZdMqZdnKptY.roa Signing time: Thu 01 Jan 2026 10:17:57 +0000 ROA not before: Thu 01 Jan 2026 10:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200976 IP address blocks: 185.198.112.0/24 maxlen: 24 185.198.113.0/24 maxlen: 24 185.198.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.crl rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6b:f6:64:fd:68:9d:a3:14:9f:ce:e9:88:84:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b Validity Not Before: Jan 1 10:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dba77c598d4799f4cce150665d32a65d9caa6d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:52:03:cd:a3:f1:4d:68:93:a0:e7:ca:c8:50: ab:ea:a9:09:e2:b8:e3:6b:48:6d:49:dc:fa:f4:06: b2:65:dd:d7:c2:34:f7:ae:a1:02:81:b6:e4:c7:ba: a8:c5:2b:56:05:98:39:20:8b:9b:19:23:99:a4:ae: 14:6f:6e:b1:d1:18:26:73:8b:03:46:cf:2f:06:a7: f7:f5:7b:79:46:fa:b8:29:06:01:02:17:f1:ec:f8: ad:46:7f:2e:5f:41:23:20:f2:91:83:d1:dc:1e:9f: 53:cb:11:ee:fa:d7:eb:7e:25:f8:40:ac:df:78:b2: 72:20:7a:9f:41:26:9b:5a:dc:17:18:e4:0f:fe:d2: 8a:22:5b:62:af:2b:3f:01:06:95:f1:54:e4:f2:c7: 7d:70:56:ef:34:4a:79:d6:9c:da:25:7c:a2:b7:dc: d8:0b:78:d0:88:74:77:29:05:b1:61:18:b8:48:c2: fe:39:45:82:23:3f:78:75:cc:a5:a2:3e:1d:1b:a7: 7f:e2:fc:f6:c8:9a:85:e6:4f:3b:71:c5:21:7f:99: df:c7:0b:fa:37:0b:97:3a:8e:12:32:5c:bc:28:33: d4:e2:97:27:fb:d0:27:85:b1:70:62:d5:33:de:ac: 53:25:fe:ed:ae:0d:7b:de:f5:07:07:56:0c:ab:9a: b7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BA:77:C5:98:D4:79:9F:4C:CE:15:06:65:D3:2A:65:D9:CA:A6:D6 X509v3 Authority Key Identifier: keyid:E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/Hbp3xZjUeZ9MzhUGZdMqZdnKptY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.198.112.0-185.198.114.255 Signature Algorithm: sha256WithRSAEncryption 9c:ba:71:27:91:f6:76:9a:ce:f6:7d:16:13:eb:d5:29:22:6e: 6b:d4:69:d1:5f:bc:54:08:92:c8:9c:c7:d6:4e:87:f4:47:8b: da:ac:8b:88:f2:b9:31:89:62:13:6a:11:33:57:70:66:8d:1b: 8b:3d:e8:0b:f7:df:53:0c:e4:c5:7b:06:8d:b7:8e:e1:f8:9c: 8b:23:f8:da:41:b5:b1:cb:5f:44:70:9a:d4:e2:6a:6c:57:45: 48:86:66:2e:d8:a0:dc:1a:05:a5:8d:a6:16:62:8a:a1:c2:ba: e2:9b:7a:61:8c:81:08:28:df:ab:30:ec:c9:dd:9d:86:cf:87: 00:e4:df:fa:75:31:68:05:cf:fd:61:b7:37:56:a7:fc:4e:bd: ac:14:2d:ff:d6:47:42:f1:58:d2:cc:6a:e0:cc:37:26:0b:03: 5e:fe:82:03:cd:f8:20:32:83:fa:2a:1a:4d:e0:fe:65:13:3e: df:a5:d2:03:48:8c:11:a9:3e:d9:cd:92:2a:91:9d:69:05:ca: 93:ec:61:cf:69:2b:df:bf:33:e5:b4:c8:65:13:ad:ee:35:fa: 26:aa:89:f9:83:88:be:ef:d6:06:b0:ad:cb:46:11:9f:20:fd: f0:8a:3f:3c:c4:51:22:d2:1e:b9:c6:48:e8:91:78:99:e6:51: f7:e6:8f:7a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5EGv2ZP1onaMUn87piIQ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NjRkMjcwNWE5YjI2ZmQ0ODJhOWMxMGU5MjZlYWU3YmRh NDFlOWIwHhcNMjYwMTAxMTAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGJhNzdjNTk4ZDQ3OTlmNGNjZTE1MDY2NWQzMmE2NWQ5Y2FhNmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVIDzaPxTWiToOfKyFCr6qkJ4rjj a0htSdz69AayZd3XwjT3rqECgbbkx7qoxStWBZg5IIubGSOZpK4Ub26x0Rgmc4sD Rs8vBqf39Xt5Rvq4KQYBAhfx7PitRn8uX0EjIPKRg9HcHp9TyxHu+tfrfiX4QKzf eLJyIHqfQSabWtwXGOQP/tKKIltirys/AQaV8VTk8sd9cFbvNEp51pzaJXyit9zY C3jQiHR3KQWxYRi4SML+OUWCIz94dcyloj4dG6d/4vz2yJqF5k87ccUhf5nfxwv6 NwuXOo4SMly8KDPU4pcn+9AnhbFwYtUz3qxTJf7trg173vUHB1YMq5q3xwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFB26d8WY1HmfTM4VBmXTKmXZyqbWMB8GA1UdIwQY MBaAFOlk0nBamyb9SCqcEOkm6ue9pB6bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNldUU2NGcWJKdjFJS3B3UTZTYnE1NzJrSHBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hNjYzNmQtY2M1My00Y2VlLTg0Y2Mt ZjRlMzYxZTRkYTJkLzEvSGJwM3haalVlWjlNemhVR1pkTXFaZG5LcHRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9hNjYzNmQtY2M1My00Y2VlLTg0Y2MtZjRlMzYxZTRkYTJk LzEvNldUU2NGcWJKdjFJS3B3UTZTYnE1NzJrSHBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAS5xnAD BAC5xnIwDQYJKoZIhvcNAQELBQADggEBAJy6cSeR9naazvZ9FhPr1SkibmvUadFf vFQIksicx9ZOh/RHi9qsi4jyuTGJYhNqETNXcGaNG4s96Av331MM5MV7Bo23juH4 nIsj+NpBtbHLX0RwmtTiamxXRUiGZi7YoNwaBaWNphZiiqHCuuKbemGMgQgo36sw 7MndnYbPhwDk3/p1MWgFz/1htzdWp/xOvawULf/WR0LxWNLMauDMNyYLA17+ggPN +CAyg/oqGk3g/mUTPt+l0gNIjBGpPtnNkiqRnWkFypPsYc9pK9+/M+W0yGUTre41 +iaqifmDiL7v1gawrctGEZ8g/fCKPzzEUSLSHrnGSOiReJnmUffmj3o= -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:38 2026 by rpki-client