This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/HORWGw6AaqSSM12H6ipwx55-oWY.roa File: HORWGw6AaqSSM12H6ipwx55-oWY.roa (raw, json) Hash identifier: G83S9Vamz90/aaDzeWNDK3Mb1c9FRLQyr+F0Xgj6z8g= Subject key identifier: 1C:E4:56:1B:0E:80:6A:A4:92:33:5D:87:EA:2A:70:C7:9E:7E:A1:66 Certificate issuer: /CN=f83ebe2a906dd587012599209c31ce10f29d5785 Certificate serial: 019B77C6B67EE3D2EE4CDC489D68FABB8AC9 Authority key identifier: F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/HORWGw6AaqSSM12H6ipwx55-oWY.roa Signing time: Thu 01 Jan 2026 04:17:50 +0000 ROA not before: Thu 01 Jan 2026 04:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216262 IP address blocks: 185.45.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b6:7e:e3:d2:ee:4c:dc:48:9d:68:fa:bb:8a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f83ebe2a906dd587012599209c31ce10f29d5785 Validity Not Before: Jan 1 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ce4561b0e806aa492335d87ea2a70c79e7ea166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:90:0b:d1:5f:91:83:a7:4f:51:d0:ec:b6:34: 73:d3:93:35:f5:b5:6e:1a:3c:4b:ca:cd:28:bf:57: 83:e0:ae:85:1a:41:8b:43:26:fe:c8:42:6c:40:e9: 1a:48:fd:6a:9e:ae:46:59:67:4c:bb:1b:ec:2a:7a: 47:86:05:20:b4:f2:34:be:5b:f2:e6:3e:96:d4:9a: a2:fb:ef:2b:db:cd:2a:d2:0e:22:0e:c0:e2:7d:24: d1:84:57:ce:60:c0:06:a2:e1:85:5a:1c:22:65:46: 95:21:ad:8d:00:1c:f1:44:9f:a2:f0:48:3e:ac:35: 70:61:27:a9:8f:5c:bb:50:be:7d:83:cc:e1:52:9f: a2:8c:ae:7e:4b:13:2c:72:a0:ba:29:f4:3f:d4:2c: cf:07:f6:fb:ac:91:af:93:b7:b8:e0:c5:89:3f:56: c5:3b:fb:25:bc:fc:cf:0c:c1:cc:fa:d6:4a:7e:e1: 56:71:15:cd:6d:71:2e:78:94:16:4f:ed:49:39:b5: 52:8d:3f:f9:3b:31:e2:c7:91:00:47:16:eb:65:df: 28:9b:6f:e4:62:30:d3:81:9c:2c:9f:d4:55:c8:39: 4e:87:fe:7d:77:43:60:74:55:4d:d3:13:50:ee:f8: 59:1e:d5:d4:b3:97:bc:ee:df:0d:72:0f:2d:cb:d7: 8b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E4:56:1B:0E:80:6A:A4:92:33:5D:87:EA:2A:70:C7:9E:7E:A1:66 X509v3 Authority Key Identifier: keyid:F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/HORWGw6AaqSSM12H6ipwx55-oWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.252.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:cf:e9:17:a3:6f:04:3f:40:27:90:02:d8:eb:da:30:51:09: 07:b6:ea:2c:60:46:80:4f:01:9a:b6:79:e7:4f:85:0c:9e:d1: df:d8:3c:70:8e:73:bd:c0:5a:66:9e:1e:bd:b7:43:6d:11:34: ca:e9:0d:8e:ef:42:d3:e1:84:f4:d4:4a:90:41:ac:e3:06:91: 1d:20:2d:68:85:22:7a:ec:69:30:44:b9:03:c3:95:1b:47:e1: b6:d6:da:9b:83:0c:10:47:2a:69:93:ea:0e:8c:0f:96:07:04: c1:b2:da:4e:74:51:ae:4e:f8:ab:a8:63:8f:12:d5:55:c0:eb: 51:04:57:13:c9:3b:a1:7e:3d:2c:8c:33:fe:69:e9:92:9e:ab: 10:6e:27:d0:5e:4b:9b:d8:b5:77:5c:f8:72:84:89:09:5d:9d: 6a:29:ee:0b:2f:d3:79:f2:b3:79:fe:c3:4d:fe:44:d2:23:ee: 28:28:3c:17:71:03:e7:9f:5c:51:26:6a:40:45:8b:81:97:10: 09:1f:d2:35:61:7e:9d:97:d6:62:5e:7b:97:c0:9d:bc:ba:6c: d9:3f:97:53:b1:dc:8f:f2:ee:05:39:47:ec:f8:26:1b:c4:5e: 9e:12:48:7e:eb:f7:34:30:37:bc:16:af:80:12:0d:d9:c4:db: 11:58:88:02 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3xrZ+49LuTNxInWj6u4rJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4M2ViZTJhOTA2ZGQ1ODcwMTI1OTkyMDljMzFjZTEwZjI5 ZDU3ODUwHhcNMjYwMTAxMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2U0NTYxYjBlODA2YWE0OTIzMzVkODdlYTJhNzBjNzllN2VhMTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJAL0V+Rg6dPUdDstjRz05M19bVu GjxLys0ov1eD4K6FGkGLQyb+yEJsQOkaSP1qnq5GWWdMuxvsKnpHhgUgtPI0vlvy 5j6W1Jqi++8r280q0g4iDsDifSTRhFfOYMAGouGFWhwiZUaVIa2NABzxRJ+i8Eg+ rDVwYSepj1y7UL59g8zhUp+ijK5+SxMscqC6KfQ/1CzPB/b7rJGvk7e44MWJP1bF O/slvPzPDMHM+tZKfuFWcRXNbXEueJQWT+1JObVSjT/5OzHix5EARxbrZd8om2/k YjDTgZwsn9RVyDlOh/59d0NgdFVN0xNQ7vhZHtXUs5e87t8Ncg8ty9eLqQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBzkVhsOgGqkkjNdh+oqcMeefqFmMB8GA1UdIwQY MBaAFPg+viqQbdWHASWZIJwxzhDynVeFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ENi1LcEJ0MVljQkpaa2duREhPRVBLZFY0VS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvMWY2MWFjLTAyZmUtNGU0Yy04NTJl LTQ1MjNhMGUyYjg0NC8xL0hPUldHdzZBYXFTU00xMkg2aXB3eDU1LW9XWS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmYvMWY2MWFjLTAyZmUtNGU0Yy04NTJlLTQ1MjNhMGUyYjg0 NC8xLzEtRDYtS3BCdDFZY0JKWmtnbkRIT0VQS2RWNFUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5Lfww DQYJKoZIhvcNAQELBQADggEBADzP6RejbwQ/QCeQAtjr2jBRCQe26ixgRoBPAZq2 eedPhQye0d/YPHCOc73AWmaeHr23Q20RNMrpDY7vQtPhhPTUSpBBrOMGkR0gLWiF InrsaTBEuQPDlRtH4bbW2puDDBBHKmmT6g6MD5YHBMGy2k50Ua5O+KuoY48S1VXA 61EEVxPJO6F+PSyMM/5p6ZKeqxBuJ9BeS5vYtXdc+HKEiQldnWop7gsv03nys3n+ w03+RNIj7igoPBdxA+efXFEmakBFi4GXEAkf0jVhfp2X1mJee5fAnby6bNk/l1Ox 3I/y7gU5R+z4JhvEXp4SSH7r9zQwN7wWr4ASDdnE2xFYiAI= -----END CERTIFICATE-----Generated at Fri Jan 9 16:53:43 2026 by rpki-client