This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/hQYlFQzT91DNazRboAcnc_468LQ.roa File: hQYlFQzT91DNazRboAcnc_468LQ.roa (raw, json) Hash identifier: xwDlJYdyb3iMPJXDHp4iQgWl+BTTgyNe5ipYkebXqwc= Subject key identifier: 85:06:25:15:0C:D3:F7:50:CD:6B:34:5B:A0:07:27:73:FE:3A:F0:B4 Certificate issuer: /CN=24e940db190b692cd1b0d583edb6d8c361124569 Certificate serial: 019B7FF22009D558AC0323E0ACEE1576D89F Authority key identifier: 24:E9:40:DB:19:0B:69:2C:D1:B0:D5:83:ED:B6:D8:C3:61:12:45:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOlA2xkLaSzRsNWD7bbYw2ESRWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/hQYlFQzT91DNazRboAcnc_468LQ.roa Signing time: Fri 02 Jan 2026 18:22:12 +0000 ROA not before: Fri 02 Jan 2026 18:22:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13117 IP address blocks: 185.114.164.0/22 maxlen: 24 185.114.164.0/24 maxlen: 24 185.114.165.0/24 maxlen: 24 185.114.166.0/24 maxlen: 24 185.114.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft rsync://rpki.ripe.net/repository/DEFAULT/JOlA2xkLaSzRsNWD7bbYw2ESRWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:20:09:d5:58:ac:03:23:e0:ac:ee:15:76:d8:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e940db190b692cd1b0d583edb6d8c361124569 Validity Not Before: Jan 2 18:22:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=850625150cd3f750cd6b345ba0072773fe3af0b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c4:91:92:ed:08:9b:7d:69:d8:ec:ab:b6:2b: 3d:ee:e9:52:5b:62:22:bd:77:64:d0:20:cb:77:35: d9:d8:51:00:36:59:65:9c:61:98:57:a5:5b:db:ea: 5b:56:67:1a:61:f0:c9:e8:3e:04:02:8e:ac:27:9d: 3b:88:43:f8:59:df:d0:5d:e7:0a:31:b1:29:86:56: cf:32:c8:ed:c2:a3:fa:68:73:bf:7f:d2:31:cb:25: 9e:5e:55:57:73:c9:49:5a:72:f3:0c:4a:b5:96:2e: 18:c2:3f:2e:b7:49:5c:09:dd:9e:27:97:ff:aa:07: 6a:2b:c7:83:d9:26:10:62:97:fa:ba:a9:21:04:c8: eb:84:9b:6b:9d:d7:a2:11:35:54:9f:1b:53:74:9e: 5c:a3:79:40:45:d1:f4:e6:86:39:61:26:27:a1:b9: 03:8d:d5:4c:11:d8:61:0a:eb:2e:8c:dd:32:a2:41: ba:20:c7:5a:9e:c9:24:38:c0:61:e8:88:ee:1e:8c: 4f:a7:39:76:7c:46:b3:35:88:b8:7a:6e:b4:8b:e3: 36:a3:15:5e:33:2d:2a:22:f2:48:ca:a8:c6:cc:14: 7f:0f:36:67:5d:3b:cc:46:ee:dc:91:e5:c4:fb:ce: a2:80:53:c4:c7:4c:80:88:66:7d:65:3c:6d:99:9f: b1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:06:25:15:0C:D3:F7:50:CD:6B:34:5B:A0:07:27:73:FE:3A:F0:B4 X509v3 Authority Key Identifier: keyid:24:E9:40:DB:19:0B:69:2C:D1:B0:D5:83:ED:B6:D8:C3:61:12:45:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOlA2xkLaSzRsNWD7bbYw2ESRWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/hQYlFQzT91DNazRboAcnc_468LQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.164.0/22 Signature Algorithm: sha256WithRSAEncryption 21:a7:85:31:f9:49:2b:86:62:27:47:65:11:94:20:3d:66:ae: 59:55:87:59:24:a6:d8:9f:07:3f:2a:e1:0b:33:09:0b:e3:8b: 57:5b:e3:d3:2f:86:c0:15:22:b3:c2:4f:14:fe:66:6a:2d:eb: 48:c0:40:24:91:44:a6:1b:30:b7:21:b5:a5:19:e3:b8:e8:f4: 05:51:c8:9a:4f:e7:d2:93:f1:29:b5:ce:a5:3f:59:f3:8e:6f: 1c:ff:56:45:c9:bd:6e:5e:1d:6f:57:cb:68:24:bb:3f:7f:47: 00:2b:4c:26:40:5e:31:f4:41:59:0a:a4:5a:98:07:e5:01:ee: 29:75:8a:9a:e8:6f:67:77:31:1f:c7:f2:d5:ee:c7:d5:75:6d: 66:e1:04:00:ad:f0:a0:ed:56:a7:7c:3b:4a:b3:85:12:d5:ff: a3:45:70:72:d8:7f:5b:0e:43:76:35:bd:16:1a:31:be:f7:e4: c0:6c:82:39:62:0a:64:28:6e:e5:30:ab:78:5b:77:f6:9b:e4: 1b:d7:3f:48:09:2f:40:f5:35:44:94:f0:03:b3:d1:ed:c3:ab: 88:c9:23:2e:6d:13:89:19:07:a2:1a:bc:95:f2:31:97:e6:c4: aa:49:cf:73:c2:72:63:aa:b6:9f:d7:98:2c:14:e2:53:73:4c: 86:72:54:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8iAJ1VisAyPgrO4VdtifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZTk0MGRiMTkwYjY5MmNkMWIwZDU4M2VkYjZkOGMzNjEx MjQ1NjkwHhcNMjYwMTAyMTgyMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTA2MjUxNTBjZDNmNzUwY2Q2YjM0NWJhMDA3Mjc3M2ZlM2FmMGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sSRku0Im31p2Oyrtis97ulSW2Ii vXdk0CDLdzXZ2FEANlllnGGYV6Vb2+pbVmcaYfDJ6D4EAo6sJ507iEP4Wd/QXecK MbEphlbPMsjtwqP6aHO/f9IxyyWeXlVXc8lJWnLzDEq1li4Ywj8ut0lcCd2eJ5f/ qgdqK8eD2SYQYpf6uqkhBMjrhJtrndeiETVUnxtTdJ5co3lARdH05oY5YSYnobkD jdVMEdhhCusujN0yokG6IMdanskkOMBh6IjuHoxPpzl2fEazNYi4em60i+M2oxVe My0qIvJIyqjGzBR/DzZnXTvMRu7ckeXE+86igFPEx0yAiGZ9ZTxtmZ+xNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIUGJRUM0/dQzWs0W6AHJ3P+OvC0MB8GA1UdIwQY MBaAFCTpQNsZC2ks0bDVg+222MNhEkVpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk9sQTJ4a0xhU3pSc05XRDdiYll3MkVTUldrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83NTAyNWQtMDYxYS00ZDk2LWE3ZDIt ZjU4OWY4YzAzMmNhLzEvaFFZbEZRelQ5MUROYXpSYm9BY25jXzQ2OExRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83NTAyNWQtMDYxYS00ZDk2LWE3ZDItZjU4OWY4YzAzMmNh LzEvSk9sQTJ4a0xhU3pSc05XRDdiYll3MkVTUldrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXKkMA0G CSqGSIb3DQEBCwUAA4IBAQAhp4Ux+UkrhmInR2URlCA9Zq5ZVYdZJKbYnwc/KuEL MwkL44tXW+PTL4bAFSKzwk8U/mZqLetIwEAkkUSmGzC3IbWlGeO46PQFUciaT+fS k/Eptc6lP1nzjm8c/1ZFyb1uXh1vV8toJLs/f0cAK0wmQF4x9EFZCqRamAflAe4p dYqa6G9ndzEfx/LV7sfVdW1m4QQArfCg7VanfDtKs4US1f+jRXBy2H9bDkN2Nb0W GjG+9+TAbII5YgpkKG7lMKt4W3f2m+Qb1z9ICS9A9TVElPADs9Htw6uIySMubROJ GQeiGryV8jGX5sSqSc9zwnJjqraf15gsFOJTc0yGclTY -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:30 2026 by rpki-client