This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/HTK96uRhaCPEIKPa_uJkVUtYSro.roa File: HTK96uRhaCPEIKPa_uJkVUtYSro.roa (raw, json) Hash identifier: YJYJVj428OJsUTfvfAdi4uBETofBiuE9K+NdS6ELexs= Subject key identifier: 1D:32:BD:EA:E4:61:68:23:C4:20:A3:DA:FE:E2:64:55:4B:58:4A:BA Certificate issuer: /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b Certificate serial: 019B7B35DBDD8B97B4FC704FB7ED985A3B35 Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/HTK96uRhaCPEIKPa_uJkVUtYSro.roa Signing time: Thu 01 Jan 2026 20:18:05 +0000 ROA not before: Thu 01 Jan 2026 20:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60341 IP address blocks: 185.211.210.0/23 maxlen: 23 185.211.210.0/24 maxlen: 24 185.211.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:db:dd:8b:97:b4:fc:70:4f:b7:ed:98:5a:3b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b Validity Not Before: Jan 1 20:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d32bdeae4616823c420a3dafee264554b584aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f0:db:eb:54:17:aa:7c:23:20:4e:61:f4:84: b0:88:c6:56:54:d2:50:8e:9a:db:cf:53:51:55:f9: 40:aa:3f:46:82:66:40:71:1d:1b:4a:1f:12:6f:ee: 0f:61:ad:6b:a7:dc:c2:95:97:c4:1d:a5:35:3e:31: 20:08:d6:b1:8e:16:15:e4:98:f0:b4:57:76:66:90: 3d:3d:e1:d7:9a:79:62:9c:2b:9a:01:75:c8:97:2c: 10:5b:5d:cb:2e:d0:88:2e:14:9b:d4:9c:ea:e2:86: b4:f6:fc:3c:4e:25:0f:79:ea:e8:c0:bd:0b:59:60: 69:72:56:34:94:d0:30:0c:6b:fe:cb:c3:e9:4c:49: c0:50:24:a2:8c:fe:37:16:4a:44:37:cc:b8:61:ba: f3:3a:8b:c8:01:f6:bc:34:60:c3:5b:c2:42:08:26: eb:2d:96:50:4e:84:f5:54:3c:88:fc:1c:97:3d:6c: 6b:73:1a:69:9d:83:64:e0:15:76:8e:46:17:06:14: 7f:a9:8c:94:36:6c:9d:38:b1:1e:6f:b7:81:da:fb: 38:9e:17:d0:60:6c:76:11:7c:72:aa:02:08:f1:7f: 82:55:08:13:c6:b0:48:a5:05:31:a0:ab:9c:b6:b4: f8:fd:25:3d:ec:e9:25:6d:77:09:0f:f8:86:68:8d: b7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:32:BD:EA:E4:61:68:23:C4:20:A3:DA:FE:E2:64:55:4B:58:4A:BA X509v3 Authority Key Identifier: keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/HTK96uRhaCPEIKPa_uJkVUtYSro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.210.0/23 Signature Algorithm: sha256WithRSAEncryption 32:ff:06:2c:eb:27:c6:a4:3a:7a:2a:bc:b8:a4:91:69:c4:d6: 02:28:8e:dc:7e:ed:cc:1d:5e:c7:ca:48:b1:a5:b6:2b:68:55: b6:32:07:44:2f:5d:a8:ba:38:e7:0d:de:3c:38:d0:23:a1:f6: ab:27:91:ba:6d:04:55:fe:86:06:35:4f:3c:b9:17:fb:0a:2e: 8f:cd:e5:09:e4:f7:8e:08:7f:55:fc:dc:36:f5:a6:cf:3c:00: 75:19:a9:9f:9e:56:72:0a:38:57:41:c0:a8:c8:0c:92:55:51: 04:35:1e:fa:98:57:49:be:a7:ce:35:d7:76:34:d9:27:b5:11: 53:2f:cc:2f:96:53:0a:cd:5b:66:bb:e4:fc:df:bc:ec:bd:f1: c0:41:cc:05:45:76:89:53:4b:a0:cf:0d:a3:b9:6f:0a:c9:97: 05:a2:11:5d:1d:39:5a:a5:61:6b:6a:f3:a4:41:5f:dc:29:8c: 4e:17:b9:c1:a3:2f:14:5c:84:8b:80:56:54:83:b6:52:22:31: ac:a6:f8:cb:98:5a:41:1d:18:fd:90:2d:13:13:68:6d:08:6f: eb:e7:0f:91:73:76:18:71:2f:5c:3b:bb:67:7e:2b:6f:45:29: 2b:28:87:68:bb:9c:a2:2f:c2:14:60:91:3d:89:0c:37:d3:62: 6c:f7:98:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ndvdi5e0/HBPt+2YWjs1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YmQ0YTM4MmRhZTJiZTVjYjk4YjM1ZTVhMDQ4ZDAzYjRj Y2JlMmIwHhcNMjYwMTAxMjAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDMyYmRlYWU0NjE2ODIzYzQyMGEzZGFmZWUyNjQ1NTRiNTg0YWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvDb61QXqnwjIE5h9ISwiMZWVNJQ jprbz1NRVflAqj9GgmZAcR0bSh8Sb+4PYa1rp9zClZfEHaU1PjEgCNaxjhYV5Jjw tFd2ZpA9PeHXmnlinCuaAXXIlywQW13LLtCILhSb1Jzq4oa09vw8TiUPeerowL0L WWBpclY0lNAwDGv+y8PpTEnAUCSijP43FkpEN8y4YbrzOovIAfa8NGDDW8JCCCbr LZZQToT1VDyI/ByXPWxrcxppnYNk4BV2jkYXBhR/qYyUNmydOLEeb7eB2vs4nhfQ YGx2EXxyqgII8X+CVQgTxrBIpQUxoKuctrT4/SU97OklbXcJD/iGaI23pwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB0yverkYWgjxCCj2v7iZFVLWEq6MB8GA1UdIwQY MBaAFDa9Sjgtrivly5izXloEjQO0zL4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lNzRmNWYtNzVjNS00YTc1LTk4Yjkt OWZlY2JkMjVkNDM0LzEvSFRLOTZ1UmhhQ1BFSUtQYV91SmtWVXRZU3JvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9lNzRmNWYtNzVjNS00YTc1LTk4YjktOWZlY2JkMjVkNDM0 LzEvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudPSMA0G CSqGSIb3DQEBCwUAA4IBAQAy/wYs6yfGpDp6Kry4pJFpxNYCKI7cfu3MHV7Hykix pbYraFW2MgdEL12oujjnDd48ONAjofarJ5G6bQRV/oYGNU88uRf7Ci6PzeUJ5PeO CH9V/Nw29abPPAB1GamfnlZyCjhXQcCoyAySVVEENR76mFdJvqfONdd2NNkntRFT L8wvllMKzVtmu+T837zsvfHAQcwFRXaJU0ugzw2juW8KyZcFohFdHTlapWFravOk QV/cKYxOF7nBoy8UXISLgFZUg7ZSIjGspvjLmFpBHRj9kC0TE2htCG/r5w+Rc3YY cS9cO7tnfitvRSkrKIdou5yiL8IUYJE9iQw302Js95gc -----END CERTIFICATE-----Generated at Tue Feb 10 02:20:23 2026 by rpki-client