This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/hLLZvlA7_aLzHqMN-k0zYYWqdoI.roa File: hLLZvlA7_aLzHqMN-k0zYYWqdoI.roa (raw, json) Hash identifier: 11v4o65bjg9Zi3P8TmWqgVpKzKXaXy9HU3XbxQsjkfA= Subject key identifier: 84:B2:D9:BE:50:3B:FD:A2:F3:1E:A3:0D:FA:4D:33:61:85:AA:76:82 Certificate issuer: /CN=30d58e40c6d91f3729e57e3344d308b5992fe46e Certificate serial: 019B797E31FE0B69F6EFD0833A1E36B9963D Authority key identifier: 30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/hLLZvlA7_aLzHqMN-k0zYYWqdoI.roa Signing time: Thu 01 Jan 2026 12:17:51 +0000 ROA not before: Thu 01 Jan 2026 12:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.130.49.0/24 maxlen: 24 2a13:141:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:31:fe:0b:69:f6:ef:d0:83:3a:1e:36:b9:96:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d58e40c6d91f3729e57e3344d308b5992fe46e Validity Not Before: Jan 1 12:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84b2d9be503bfda2f31ea30dfa4d336185aa7682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:27:1a:94:15:53:25:a4:cf:a8:2e:61:40:4e: bb:e6:24:c0:08:fb:9c:c5:09:49:db:23:3d:b8:28: 24:d3:f4:26:33:5e:d1:7b:08:b0:c3:e5:17:c4:09: 5c:85:cd:83:7a:b2:9e:78:03:ee:fd:6d:35:82:df: c3:62:c6:93:a5:7c:97:d1:ab:9f:7d:cd:1b:07:45: f1:dd:f3:bb:3a:58:82:af:73:9c:fb:c8:65:86:fb: 5a:c6:53:79:6d:cb:14:66:99:19:0f:f7:f4:0b:c3: 88:48:0f:f4:37:65:e6:70:2d:34:35:5e:2a:1a:32: 90:f1:57:4e:1a:70:d2:ee:5b:11:88:14:0e:15:20: 7c:ee:2f:95:5c:26:dc:56:5e:af:49:c7:ab:da:d0: 02:b9:c7:86:fd:6c:fb:1e:df:79:40:d5:23:ee:60: 29:ed:52:0c:50:42:ef:ec:91:ea:2a:4c:89:df:9b: 20:9f:d4:63:eb:37:82:8a:d3:82:64:ed:f9:5b:53: 62:07:9a:3e:f2:73:9b:03:ba:7c:09:32:a1:e8:9b: 46:98:0c:99:d9:36:02:f2:fb:f9:0b:c7:f5:26:ff: fc:4f:5d:81:35:9a:63:75:9f:34:d5:60:ed:87:cc: 1a:d0:94:2d:ef:c7:33:bf:50:a2:0a:f2:2a:79:a9: 0e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B2:D9:BE:50:3B:FD:A2:F3:1E:A3:0D:FA:4D:33:61:85:AA:76:82 X509v3 Authority Key Identifier: keyid:30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/hLLZvlA7_aLzHqMN-k0zYYWqdoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.49.0/24 IPv6: 2a13:141:3::/48 Signature Algorithm: sha256WithRSAEncryption 25:5e:42:16:59:31:d3:a5:bc:bb:db:37:1e:86:c3:5f:7b:cb: 33:30:df:d2:ab:b6:48:1c:1e:ef:16:50:b7:88:2a:19:7b:67: 2e:75:b3:a3:7f:ff:dc:35:af:dd:d1:35:07:2f:63:83:8f:cb: bd:87:22:f4:30:33:d1:9e:55:2c:2a:81:93:b4:e0:78:cc:3d: ed:23:20:c8:40:77:b5:06:15:73:da:98:d5:f0:c5:bc:2a:8c: 4d:3c:d1:3f:8a:9e:80:28:44:1a:bf:b2:aa:0f:5a:ec:ab:84: c5:b4:6b:f3:a3:63:9d:72:fb:a7:19:53:ac:16:37:6a:05:70: 0d:d9:dc:dc:02:b5:64:f0:a5:88:75:48:1e:b2:53:b3:09:31: 3e:5f:e2:09:e1:f6:8e:7f:54:73:c0:79:6e:4e:bd:97:17:3e: f7:6e:6d:0a:b7:0f:25:ab:f0:90:81:9b:f7:a2:25:d9:52:0d: 89:b2:bd:00:4b:6c:35:46:63:99:c1:ff:81:2f:3c:61:57:97: 71:d4:ae:7c:56:6f:b8:07:34:8d:7e:af:50:a8:d3:76:ea:fc: 06:40:b9:d9:8b:a0:c6:a8:3c:99:13:a0:f3:83:c8:9c:1d:18: a3:cd:3d:e8:de:26:60:aa:95:04:cf:20:16:ba:a5:68:07:b6: 79:d7:65:19 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fjH+C2n279CDOh42uZY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZDU4ZTQwYzZkOTFmMzcyOWU1N2UzMzQ0ZDMwOGI1OTky ZmU0NmUwHhcNMjYwMTAxMTIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGIyZDliZTUwM2JmZGEyZjMxZWEzMGRmYTRkMzM2MTg1YWE3NjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCcalBVTJaTPqC5hQE675iTACPuc xQlJ2yM9uCgk0/QmM17Rewiww+UXxAlchc2DerKeeAPu/W01gt/DYsaTpXyX0auf fc0bB0Xx3fO7OliCr3Oc+8hlhvtaxlN5bcsUZpkZD/f0C8OISA/0N2XmcC00NV4q GjKQ8VdOGnDS7lsRiBQOFSB87i+VXCbcVl6vScer2tACuceG/Wz7Ht95QNUj7mAp 7VIMUELv7JHqKkyJ35sgn9Rj6zeCitOCZO35W1NiB5o+8nObA7p8CTKh6JtGmAyZ 2TYC8vv5C8f1Jv/8T12BNZpjdZ801WDth8wa0JQt78czv1CiCvIqeakOAwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFISy2b5QO/2i8x6jDfpNM2GFqnaCMB8GA1UdIwQY MBaAFDDVjkDG2R83KeV+M0TTCLWZL+RuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU5XT1FNYlpIemNwNVg0elJOTUl0Wmt2NUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82MjVhMzAtM2E2Yi00NjYxLTg0MGEt ZjgyYjcwZDhhMGE3LzEvaExMWnZsQTdfYUx6SHFNTi1rMHpZWVdxZG9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy82MjVhMzAtM2E2Yi00NjYxLTg0MGEtZjgyYjcwZDhhMGE3 LzEvTU5XT1FNYlpIemNwNVg0elJOTUl0Wmt2NUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuYIxMA8E AgACMAkDBwAqEwFBAAMwDQYJKoZIhvcNAQELBQADggEBACVeQhZZMdOlvLvbNx6G w197yzMw39KrtkgcHu8WULeIKhl7Zy51s6N//9w1r93RNQcvY4OPy72HIvQwM9Ge VSwqgZO04HjMPe0jIMhAd7UGFXPamNXwxbwqjE080T+KnoAoRBq/sqoPWuyrhMW0 a/OjY51y+6cZU6wWN2oFcA3Z3NwCtWTwpYh1SB6yU7MJMT5f4gnh9o5/VHPAeW5O vZcXPvdubQq3DyWr8JCBm/eiJdlSDYmyvQBLbDVGY5nB/4EvPGFXl3HUrnxWb7gH NI1+r1Co03bq/AZAudmLoMaoPJkToPODyJwdGKPNPejeJmCqlQTPIBa6pWgHtnnX ZRk= -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:57 2026 by rpki-client