This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/_Hrgg9TwnO9PoE-2Cm9MNkAYl0w.roa File: _Hrgg9TwnO9PoE-2Cm9MNkAYl0w.roa (raw, json) Hash identifier: bu/cyj5EwB3TDiwyIVSQeElzT+joOr0r21e4GEpp8jI= Subject key identifier: FC:7A:E0:83:D4:F0:9C:EF:4F:A0:4F:B6:0A:6F:4C:36:40:18:97:4C Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 019B7D5C95E53A67958BF93A62B4C95B43A0 Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/_Hrgg9TwnO9PoE-2Cm9MNkAYl0w.roa Signing time: Fri 02 Jan 2026 06:19:38 +0000 ROA not before: Fri 02 Jan 2026 06:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.148.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:95:e5:3a:67:95:8b:f9:3a:62:b4:c9:5b:43:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Jan 2 06:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc7ae083d4f09cef4fa04fb60a6f4c364018974c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:22:66:82:ad:c3:2a:1b:ba:26:bc:6c:74: 8d:18:fd:58:ce:55:e0:fd:a1:3d:48:86:8c:74:3f: 39:c1:75:a4:cf:98:68:25:11:70:b3:c4:af:bf:ca: 54:43:29:e6:e3:b8:f8:25:f2:08:d1:c4:de:88:67: bb:9d:b1:d1:3b:0d:90:6f:ca:a7:60:d2:93:d4:55: 27:d4:dd:ea:8e:31:f9:c6:e2:dc:69:26:d9:44:c9: 41:e9:7c:67:82:8d:09:93:3e:9f:93:2e:f8:1d:cf: 14:e9:97:71:81:90:21:2e:b3:87:bc:80:85:61:78: 3b:f1:65:e2:9e:6d:da:c5:85:30:d5:9a:f2:e0:10: 89:17:d6:71:d9:5d:8d:cc:c7:97:92:3b:b8:fe:36: ce:64:89:16:b5:96:b8:dc:12:2a:5e:82:66:dd:aa: 66:b4:c1:d1:0a:98:65:e3:e0:1e:10:2f:61:02:10: 5b:bc:33:4b:f1:1a:b6:d6:5a:2a:16:b6:86:30:55: 06:9e:f4:0a:8a:28:fa:1d:78:52:ac:3b:a8:f6:c5: bc:70:5e:01:af:ee:10:48:35:85:f9:c3:42:0f:b5: 6d:b8:f6:d0:4c:b4:ed:cf:ae:6e:29:13:21:57:4b: 54:5e:da:6e:3d:a0:c4:d8:e9:b5:dc:ef:bd:2c:15: 1f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7A:E0:83:D4:F0:9C:EF:4F:A0:4F:B6:0A:6F:4C:36:40:18:97:4C X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/_Hrgg9TwnO9PoE-2Cm9MNkAYl0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.148.68.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:00:c3:12:d0:35:7f:40:23:04:d6:d0:c7:d0:89:3a:39:a5: 77:fc:9d:93:72:da:57:80:bd:78:93:c0:29:11:a6:4b:e1:9f: 95:aa:b4:5d:97:e1:34:51:87:48:e7:02:29:ce:fb:2c:e8:75: 6e:fd:15:f5:7d:8c:73:d1:05:f1:db:87:32:f9:72:f9:ec:cd: 93:28:41:f8:38:cb:58:47:db:0e:c1:0c:be:2e:ef:d0:ae:64: 84:6f:4d:68:4b:34:2f:9d:9c:cd:5a:f5:84:d8:f7:7c:aa:76: b9:ed:31:c2:e8:55:99:36:7c:6d:e2:7b:39:36:b5:1d:ec:48: 63:ec:9a:9b:cd:0b:17:c4:60:13:22:57:17:b5:39:e1:63:c4: 50:d5:8b:b2:fe:82:2c:f5:f5:0e:85:8f:bf:61:6e:41:12:52: 2d:23:f0:56:c9:45:ae:be:06:0d:35:55:05:1c:2b:ef:56:ad: 61:6a:03:9a:b3:92:0a:93:f0:e6:a1:b6:35:cc:ee:4a:11:4b: 5f:c3:2e:26:91:e7:bc:f4:37:f7:51:f2:59:a8:98:a5:63:95: d1:a8:1d:92:fa:5b:70:a4:03:c8:46:7c:51:9e:15:3b:76:88: a0:c8:b2:79:0c:c0:1d:60:0f:a7:fa:22:f6:a2:5d:cd:21:8b: cc:96:d7:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XJXlOmeVi/k6YrTJW0OgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjYwMTAyMDYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzdhZTA4M2Q0ZjA5Y2VmNGZhMDRmYjYwYTZmNGMzNjQwMTg5NzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteYiZoKtwyobuia8bHSNGP1YzlXg /aE9SIaMdD85wXWkz5hoJRFws8Svv8pUQynm47j4JfII0cTeiGe7nbHROw2Qb8qn YNKT1FUn1N3qjjH5xuLcaSbZRMlB6Xxngo0Jkz6fky74Hc8U6ZdxgZAhLrOHvICF YXg78WXinm3axYUw1Zry4BCJF9Zx2V2NzMeXkju4/jbOZIkWtZa43BIqXoJm3apm tMHRCphl4+AeEC9hAhBbvDNL8Rq21loqFraGMFUGnvQKiij6HXhSrDuo9sW8cF4B r+4QSDWF+cNCD7VtuPbQTLTtz65uKRMhV0tUXtpuPaDE2Om13O+9LBUfnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPx64IPU8JzvT6BPtgpvTDZAGJdMMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvX0hyZ2c5VHduTzlQb0UtMkNtOU1Oa0FZbDB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZREMA0G CSqGSIb3DQEBCwUAA4IBAQAqAMMS0DV/QCME1tDH0Ik6OaV3/J2TctpXgL14k8Ap EaZL4Z+VqrRdl+E0UYdI5wIpzvss6HVu/RX1fYxz0QXx24cy+XL57M2TKEH4OMtY R9sOwQy+Lu/QrmSEb01oSzQvnZzNWvWE2Pd8qna57THC6FWZNnxt4ns5NrUd7Ehj 7JqbzQsXxGATIlcXtTnhY8RQ1Yuy/oIs9fUOhY+/YW5BElItI/BWyUWuvgYNNVUF HCvvVq1hagOas5IKk/DmobY1zO5KEUtfwy4mkee89Df3UfJZqJilY5XRqB2S+ltw pAPIRnxRnhU7doigyLJ5DMAdYA+n+iL2ol3NIYvMlteM -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:43 2026 by rpki-client