This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/HnXupNyU6Ln1DvOJmDwyBCuBye8.roa File: HnXupNyU6Ln1DvOJmDwyBCuBye8.roa (raw, json) Hash identifier: e7NeeQetnUXIz/cPikG/o99FtcutUK+Ayg5ZE+4XzYc= Subject key identifier: 1E:75:EE:A4:DC:94:E8:B9:F5:0E:F3:89:98:3C:32:04:2B:81:C9:EF Certificate issuer: /CN=1a71810fec8e7b0b5ec2629e99c89635926c6251 Certificate serial: 019B797EFEE4F5D9CA2EC387709A780CCA79 Authority key identifier: 1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/HnXupNyU6Ln1DvOJmDwyBCuBye8.roa Signing time: Thu 01 Jan 2026 12:18:44 +0000 ROA not before: Thu 01 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60791 IP address blocks: 185.25.248.0/22 maxlen: 22 2a00:7f20::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fe:e4:f5:d9:ca:2e:c3:87:70:9a:78:0c:ca:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a71810fec8e7b0b5ec2629e99c89635926c6251 Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e75eea4dc94e8b9f50ef389983c32042b81c9ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5e:c8:22:95:75:73:85:d3:f2:83:9d:30:31: 6a:0a:9b:5b:b3:04:ff:26:68:59:ec:c1:f3:45:f3: 8b:81:12:cb:9f:86:15:39:67:e8:c5:d6:7f:60:95: 04:e0:96:31:c4:a9:7c:94:7c:66:9c:bd:98:db:47: a0:fa:c5:cc:e7:1e:13:46:45:5f:1f:47:54:eb:38: 8d:14:91:8e:03:f8:5a:11:1a:a0:38:ff:cc:7a:e2: ca:86:8c:84:3e:b3:1f:6f:e8:61:33:85:83:10:31: 88:51:89:37:2b:d7:db:8c:2e:62:57:dd:87:5d:2c: 47:d6:e3:c5:6a:44:b9:fd:96:f9:4b:35:19:25:d3: 2b:57:bf:10:25:0b:ec:4c:77:47:d9:fa:d0:8a:03: 22:e4:99:ed:ba:b1:69:95:67:53:d0:dd:75:f4:7a: b6:b7:f0:7c:26:58:ba:ff:55:f6:21:77:92:ff:d5: aa:eb:2e:1b:5b:d6:78:68:01:8f:4d:0c:c0:f6:6e: d4:74:80:66:55:2f:18:39:57:c3:25:5d:75:c7:e2: b4:be:44:ae:b5:10:3b:f9:df:df:3b:43:ba:e2:c0: 31:b4:9a:cc:69:16:98:00:84:7f:cd:16:7c:40:a2: a5:f9:ec:3e:ee:0d:b2:5f:77:e8:7f:bb:20:6a:fc: 40:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:75:EE:A4:DC:94:E8:B9:F5:0E:F3:89:98:3C:32:04:2B:81:C9:EF X509v3 Authority Key Identifier: keyid:1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/HnXupNyU6Ln1DvOJmDwyBCuBye8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.25.248.0/22 IPv6: 2a00:7f20::/32 Signature Algorithm: sha256WithRSAEncryption 72:58:87:0a:09:20:64:88:6f:6f:f0:d7:cb:f7:16:81:db:5c: 69:32:87:be:b4:18:db:59:9b:4a:2f:3e:d8:1e:45:06:fd:d4: 21:05:36:3d:d6:9d:40:22:68:54:40:7d:53:7e:72:75:79:05: 70:87:45:1b:a1:b9:67:4e:f0:fb:38:44:9c:48:93:fc:a8:66: 8f:fc:64:76:d3:bf:fd:1a:67:19:ee:f6:0c:34:f5:d4:64:af: 4a:68:22:e5:3a:90:14:92:16:e0:6f:35:b4:98:89:e5:47:94: 04:16:60:35:de:ce:db:cc:96:42:ac:f0:4c:1a:a2:27:08:c2: 24:7b:88:23:a8:39:4b:81:84:59:31:42:8d:d2:4a:ed:c6:18: 3a:0f:18:57:ab:97:4c:89:8d:ab:ee:44:46:cf:05:81:54:91: d7:6e:2b:0d:6f:aa:4f:a4:22:66:fc:1c:e5:54:a6:74:6a:d8: 17:8e:86:0b:c0:0d:1e:25:f8:a6:ab:3a:8f:f5:78:07:f8:64: 35:2d:9e:48:62:b9:18:a8:86:4c:63:6f:ed:3f:91:21:da:aa: 18:6a:51:c3:0a:ed:95:11:28:ce:7e:76:62:6c:06:7a:30:0f: d0:16:a9:ba:80:62:de:8b:14:43:3d:41:a4:3d:df:de:ee:c4: 59:ec:ba:9b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fv7k9dnKLsOHcJp4DMp5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNzE4MTBmZWM4ZTdiMGI1ZWMyNjI5ZTk5Yzg5NjM1OTI2 YzYyNTEwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTc1ZWVhNGRjOTRlOGI5ZjUwZWYzODk5ODNjMzIwNDJiODFjOWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV7IIpV1c4XT8oOdMDFqCptbswT/ JmhZ7MHzRfOLgRLLn4YVOWfoxdZ/YJUE4JYxxKl8lHxmnL2Y20eg+sXM5x4TRkVf H0dU6ziNFJGOA/haERqgOP/MeuLKhoyEPrMfb+hhM4WDEDGIUYk3K9fbjC5iV92H XSxH1uPFakS5/Zb5SzUZJdMrV78QJQvsTHdH2frQigMi5JnturFplWdT0N119Hq2 t/B8Jli6/1X2IXeS/9Wq6y4bW9Z4aAGPTQzA9m7UdIBmVS8YOVfDJV11x+K0vkSu tRA7+d/fO0O64sAxtJrMaRaYAIR/zRZ8QKKl+ew+7g2yX3fof7sgavxA2wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFB517qTclOi59Q7ziZg8MgQrgcnvMB8GA1UdIwQY MBaAFBpxgQ/sjnsLXsJinpnIljWSbGJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR25HQkQteU9ld3Rld21LZW1jaVdOWkpzWWxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jYzI0YjktNTkxOC00NTU3LWE4MzIt NDAxN2NlZjViY2E5LzEvSG5YdXBOeVU2TG4xRHZPSm1Ed3lCQ3VCeWU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9jYzI0YjktNTkxOC00NTU3LWE4MzItNDAxN2NlZjViY2E5 LzEvR25HQkQteU9ld3Rld21LZW1jaVdOWkpzWWxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuRn4MA0E AgACMAcDBQAqAH8gMA0GCSqGSIb3DQEBCwUAA4IBAQByWIcKCSBkiG9v8NfL9xaB 21xpMoe+tBjbWZtKLz7YHkUG/dQhBTY91p1AImhUQH1TfnJ1eQVwh0UboblnTvD7 OEScSJP8qGaP/GR207/9GmcZ7vYMNPXUZK9KaCLlOpAUkhbgbzW0mInlR5QEFmA1 3s7bzJZCrPBMGqInCMIke4gjqDlLgYRZMUKN0krtxhg6DxhXq5dMiY2r7kRGzwWB VJHXbisNb6pPpCJm/BzlVKZ0atgXjoYLwA0eJfimqzqP9XgH+GQ1LZ5IYrkYqIZM Y2/tP5Eh2qoYalHDCu2VESjOfnZibAZ6MA/QFqm6gGLeixRDPUGkPd/e7sRZ7Lqb -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:58 2026 by rpki-client