This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/hSa-jL7A0Cvb7swNmNrYjsj_n70.roa File: hSa-jL7A0Cvb7swNmNrYjsj_n70.roa (raw, json) Hash identifier: TUV2Alqz5JkF7MwZ8HViCcGRzdJK6kTlEyLaHmA8NLA= Subject key identifier: 85:26:BE:8C:BE:C0:D0:2B:DB:EE:CC:0D:98:DA:D8:8E:C8:FF:9F:BD Certificate issuer: /CN=05c09c41d23896b2d5428182623f88fa676e6c90 Certificate serial: 019B7C80471AB2C651191627A2CF22187AF7 Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/hSa-jL7A0Cvb7swNmNrYjsj_n70.roa Signing time: Fri 02 Jan 2026 02:19:00 +0000 ROA not before: Fri 02 Jan 2026 02:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50446 IP address blocks: 109.69.184.0/21 maxlen: 24 109.69.185.0/24 maxlen: 24 109.69.186.0/24 maxlen: 24 109.69.188.0/24 maxlen: 24 109.69.190.0/24 maxlen: 24 185.73.52.0/22 maxlen: 22 2a03:ba80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:47:1a:b2:c6:51:19:16:27:a2:cf:22:18:7a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90 Validity Not Before: Jan 2 02:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8526be8cbec0d02bdbeecc0d98dad88ec8ff9fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:25:94:91:44:4f:02:6a:23:29:60:71:66:aa: 7c:31:1f:2d:ab:8a:e9:bf:2d:78:4d:70:9e:86:9e: 80:e9:be:00:da:ac:c8:5c:e1:71:d8:8b:39:2e:42: 14:f3:d6:93:b6:4d:a5:0f:b3:f6:fa:2a:6f:e3:37: 9b:da:e1:1f:dd:fa:f9:3a:e5:e1:ea:84:75:1b:b7: a9:25:f3:2e:2d:25:e1:30:ee:1d:ed:ff:dd:52:b5: 60:5d:bd:81:9e:7b:ca:ac:95:16:be:1e:15:83:28: 36:ff:12:5e:ea:ac:94:62:d0:fe:8e:ed:d9:5c:72: 81:f4:77:02:90:2d:5c:fa:aa:04:24:f3:91:de:80: 5a:75:4b:59:7f:e3:37:a1:0f:8b:1c:7b:15:f8:a1: 1b:e3:58:68:e1:7a:17:1c:f4:00:4c:91:82:45:9f: 27:51:a9:58:43:78:d9:8a:8f:fc:78:e0:c1:d2:18: 06:ca:f8:e9:f5:58:56:86:32:54:27:5f:ed:b3:cf: 00:5d:1e:5b:f7:e6:b8:3a:69:8a:0f:c8:2a:ee:d8: 7f:d8:69:50:42:dc:ff:1c:e8:e2:dc:e0:ef:dd:eb: 65:8a:49:61:9a:53:1e:69:4f:89:68:29:04:f1:b9: c7:11:d6:95:89:63:1e:38:63:d9:bc:93:c2:f1:e2: 04:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:26:BE:8C:BE:C0:D0:2B:DB:EE:CC:0D:98:DA:D8:8E:C8:FF:9F:BD X509v3 Authority Key Identifier: keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/hSa-jL7A0Cvb7swNmNrYjsj_n70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.69.184.0/21 185.73.52.0/22 IPv6: 2a03:ba80::/32 Signature Algorithm: sha256WithRSAEncryption 5d:b0:39:46:2f:eb:1d:38:ab:78:eb:bb:0b:3f:3a:3c:49:8d: f5:1d:e6:7e:fd:50:60:56:fe:4f:20:dd:3b:8b:db:87:77:89: bc:d8:46:f1:1f:c6:15:1b:83:5e:de:5a:e7:2e:d7:3d:af:ac: 20:56:d7:1c:39:de:5a:ac:4e:96:67:2f:f5:8a:fe:3a:fb:69: 86:bd:ca:76:14:75:97:65:b3:0a:a0:19:a8:9d:68:34:6e:3a: 04:a6:4c:05:7e:70:e1:0c:84:e7:6e:2a:fc:76:23:39:bb:85: d2:26:79:b9:c0:3f:a2:1e:5b:27:1c:b3:87:84:9f:6f:ae:d2: d2:02:0e:4a:50:fb:c3:b6:65:ec:9b:0b:17:b4:a8:88:23:20: 1a:6e:d9:71:f1:81:a8:47:d1:39:b3:6a:4c:a8:f5:f9:f0:3b: 05:9a:4d:53:bd:bc:51:9b:75:06:1a:d0:bf:6e:17:87:96:20: 9f:27:37:13:9e:90:34:c8:19:14:cc:31:5b:62:e5:82:67:18: 05:28:82:e6:11:04:2f:b1:51:0c:1f:e5:bf:1a:cb:3d:c5:da: 82:77:c0:01:07:a0:ff:65:bc:2d:a3:08:78:61:35:05:d4:e1: 2b:be:0a:23:79:b1:6b:3c:af:3e:aa:62:e0:51:5d:c3:b5:06: 6f:63:8e:41 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8gEcassZRGRYnos8iGHr3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YzA5YzQxZDIzODk2YjJkNTQyODE4MjYyM2Y4OGZhNjc2 ZTZjOTAwHhcNMjYwMTAyMDIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTI2YmU4Y2JlYzBkMDJiZGJlZWNjMGQ5OGRhZDg4ZWM4ZmY5ZmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiWUkURPAmojKWBxZqp8MR8tq4rp vy14TXCehp6A6b4A2qzIXOFx2Is5LkIU89aTtk2lD7P2+ipv4zeb2uEf3fr5OuXh 6oR1G7epJfMuLSXhMO4d7f/dUrVgXb2BnnvKrJUWvh4Vgyg2/xJe6qyUYtD+ju3Z XHKB9HcCkC1c+qoEJPOR3oBadUtZf+M3oQ+LHHsV+KEb41ho4XoXHPQATJGCRZ8n UalYQ3jZio/8eODB0hgGyvjp9VhWhjJUJ1/ts88AXR5b9+a4OmmKD8gq7th/2GlQ Qtz/HOji3ODv3etliklhmlMeaU+JaCkE8bnHEdaViWMeOGPZvJPC8eIEpwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIUmvoy+wNAr2+7MDZja2I7I/5+9MB8GA1UdIwQY MBaAFAXAnEHSOJay1UKBgmI/iPpnbmyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85NGU1ZmQtZTAzMy00YTVlLWFlZmMt YjMzNDQwYWFhYjcyLzEvaFNhLWpMN0EwQ3ZiN3N3Tm1Ocllqc2pfbjcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS85NGU1ZmQtZTAzMy00YTVlLWFlZmMtYjMzNDQwYWFhYjcy LzEvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDbUW4AwQC uUk0MA0EAgACMAcDBQAqA7qAMA0GCSqGSIb3DQEBCwUAA4IBAQBdsDlGL+sdOKt4 67sLPzo8SY31HeZ+/VBgVv5PIN07i9uHd4m82EbxH8YVG4Ne3lrnLtc9r6wgVtcc Od5arE6WZy/1iv46+2mGvcp2FHWXZbMKoBmonWg0bjoEpkwFfnDhDITnbir8diM5 u4XSJnm5wD+iHlsnHLOHhJ9vrtLSAg5KUPvDtmXsmwsXtKiIIyAabtlx8YGoR9E5 s2pMqPX58DsFmk1TvbxRm3UGGtC/bheHliCfJzcTnpA0yBkUzDFbYuWCZxgFKILm EQQvsVEMH+W/Gss9xdqCd8ABB6D/Zbwtowh4YTUF1OErvgojebFrPK8+qmLgUV3D tQZvY45B -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:34 2026 by rpki-client