This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/hBaKkxMtUKtrEeFF-i0rx692Iyo.roa File: hBaKkxMtUKtrEeFF-i0rx692Iyo.roa (raw, json) Hash identifier: eWsrWRk1A9hKlcWj/lFqR26zj+izpniq3CmuJ2sGH14= Subject key identifier: 84:16:8A:93:13:2D:50:AB:6B:11:E1:45:FA:2D:2B:C7:AF:76:23:2A Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 019B7C131661873FC7286F44CB6E803EAF76 Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/hBaKkxMtUKtrEeFF-i0rx692Iyo.roa Signing time: Fri 02 Jan 2026 00:19:44 +0000 ROA not before: Fri 02 Jan 2026 00:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30058 IP address blocks: 185.245.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:16:61:87:3f:c7:28:6f:44:cb:6e:80:3e:af:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Jan 2 00:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84168a93132d50ab6b11e145fa2d2bc7af76232a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8f:dc:11:03:7a:fa:e0:1e:bb:c7:8f:7a:45: 58:56:a5:d3:f4:f4:6d:24:9d:52:b6:c9:c3:37:42: b2:b8:48:ac:7e:fe:d3:60:6b:d1:07:a6:7a:00:e7: 94:9a:5a:89:e1:04:3e:91:e3:56:79:9e:1d:75:fc: 84:8b:f8:0d:0f:0f:0e:7e:e7:db:fe:bb:38:8b:44: 13:5a:1a:2b:1d:64:38:b3:da:be:86:72:5d:45:f0: 31:50:75:e2:b7:2c:da:bf:fe:09:32:70:e2:eb:bb: 06:2d:35:a5:a2:9d:8a:3f:ed:dd:4b:aa:57:23:36: a8:dc:7a:ae:cb:22:ac:c0:b1:d7:05:39:05:e0:97: be:5c:38:d7:9f:2b:35:9f:92:9e:88:cb:9d:58:a4: ef:6b:61:d0:3e:81:a0:ff:49:08:5b:f3:da:df:ff: 67:ff:a0:d5:19:79:8f:b9:82:b5:14:57:4e:e5:9b: 44:83:44:8c:f0:12:07:a2:13:ea:90:c3:66:1e:f3: ce:f6:b5:ed:d6:c9:aa:b1:50:e3:59:ed:f2:f7:b2: 38:60:77:3e:1d:41:f2:b2:dc:07:3d:ab:f6:4e:b9: 8a:db:89:3b:73:0a:b7:39:1d:68:74:a2:bb:f9:c1: 02:8f:9e:e1:88:4c:51:e6:a2:2e:ac:c7:10:b4:59: d5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:16:8A:93:13:2D:50:AB:6B:11:E1:45:FA:2D:2B:C7:AF:76:23:2A X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/hBaKkxMtUKtrEeFF-i0rx692Iyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.40.0/24 Signature Algorithm: sha256WithRSAEncryption 36:9d:98:2a:57:8e:cd:a3:62:2d:2f:cc:95:e8:a3:32:8f:43: f1:5c:0b:e7:49:2e:88:22:2d:fc:f1:27:30:ea:90:5d:27:f3: c3:f7:68:81:9f:56:51:60:74:f6:73:4f:f7:a8:54:d0:23:c5: 70:45:98:e7:10:5e:69:c7:16:8a:38:8f:44:04:30:82:41:16: 1a:f9:c5:56:5d:0d:52:f5:f3:d7:4a:85:49:db:07:21:6e:a3: 7c:7b:24:ea:52:f2:37:a5:1c:bd:f5:69:e2:98:64:20:ea:c3: 8c:d0:c5:4d:08:42:26:68:a0:23:ad:5a:c3:06:40:7a:ec:32: 92:09:27:7d:c3:cc:b9:7f:d1:b9:86:3e:c7:cf:8e:d0:a3:74: ae:95:81:06:30:40:32:47:da:45:2a:d3:30:d3:9f:0b:6d:86: 22:92:e5:11:81:e5:aa:4a:01:7a:4d:d3:5a:c1:05:f1:05:40: c3:7f:37:c7:11:f9:54:35:b1:fa:c4:bf:2d:9e:77:69:f9:40: d6:2b:5e:0a:37:8d:aa:55:99:fa:be:69:ca:9b:f4:06:0a:f6: 1a:c4:e0:be:c9:55:d7:63:4b:ac:26:02:a7:c3:9a:8b:aa:10: 2d:db:8e:af:26:3c:c1:a3:4b:5d:e2:04:41:43:ee:e5:89:17: 3b:a3:0c:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ExZhhz/HKG9Ey26APq92MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjYwMTAyMDAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDE2OGE5MzEzMmQ1MGFiNmIxMWUxNDVmYTJkMmJjN2FmNzYyMzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY/cEQN6+uAeu8ePekVYVqXT9PRt JJ1StsnDN0KyuEisfv7TYGvRB6Z6AOeUmlqJ4QQ+keNWeZ4ddfyEi/gNDw8Ofufb /rs4i0QTWhorHWQ4s9q+hnJdRfAxUHXityzav/4JMnDi67sGLTWlop2KP+3dS6pX Izao3HquyyKswLHXBTkF4Je+XDjXnys1n5KeiMudWKTva2HQPoGg/0kIW/Pa3/9n /6DVGXmPuYK1FFdO5ZtEg0SM8BIHohPqkMNmHvPO9rXt1smqsVDjWe3y97I4YHc+ HUHystwHPav2TrmK24k7cwq3OR1odKK7+cECj57hiExR5qIurMcQtFnVjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIQWipMTLVCraxHhRfotK8evdiMqMB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvaEJhS2t4TXRVS3RyRWVGRi1pMHJ4NjkySXlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufUoMA0G CSqGSIb3DQEBCwUAA4IBAQA2nZgqV47No2ItL8yV6KMyj0PxXAvnSS6IIi388Scw 6pBdJ/PD92iBn1ZRYHT2c0/3qFTQI8VwRZjnEF5pxxaKOI9EBDCCQRYa+cVWXQ1S 9fPXSoVJ2wchbqN8eyTqUvI3pRy99WnimGQg6sOM0MVNCEImaKAjrVrDBkB67DKS CSd9w8y5f9G5hj7Hz47Qo3SulYEGMEAyR9pFKtMw058LbYYikuURgeWqSgF6TdNa wQXxBUDDfzfHEflUNbH6xL8tnndp+UDWK14KN42qVZn6vmnKm/QGCvYaxOC+yVXX Y0usJgKnw5qLqhAt246vJjzBo0td4gRBQ+7liRc7owwt -----END CERTIFICATE-----Generated at Tue Jan 20 12:49:42 2026 by rpki-client