This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/hdmcIiKIZX8G4d6aOngw7fPbjSM.roa File: hdmcIiKIZX8G4d6aOngw7fPbjSM.roa (raw, json) Hash identifier: vkx9iSLozc4+nysiRZ6DJE0dNHHPaSgNyoUkZVK01oM= Subject key identifier: 85:D9:9C:22:22:88:65:7F:06:E1:DE:9A:3A:78:30:ED:F3:DB:8D:23 Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681 Certificate serial: 019B7D5C77713E035972396745BAADD168D1 Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/hdmcIiKIZX8G4d6aOngw7fPbjSM.roa Signing time: Fri 02 Jan 2026 06:19:30 +0000 ROA not before: Fri 02 Jan 2026 06:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211142 IP address blocks: 185.83.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:77:71:3e:03:59:72:39:67:45:ba:ad:d1:68:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681 Validity Not Before: Jan 2 06:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85d99c222288657f06e1de9a3a7830edf3db8d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:85:19:17:83:66:96:9a:2e:bc:0a:90:4e:16: 02:94:99:ee:a5:6f:e8:7e:6b:d8:e2:63:9b:01:43: 06:57:cf:fa:4c:d8:9d:9d:92:9c:64:2a:51:93:98: 44:4b:25:e6:c5:44:8b:6f:c6:5c:b2:36:37:e4:f7: 04:75:59:2f:d7:4b:b9:4a:c0:e0:e2:6f:07:70:82: 90:fe:6c:b4:54:e5:9d:9c:43:dc:23:29:23:66:fe: e4:0a:bf:81:04:be:26:2d:c7:1e:a8:c3:67:fe:54: 64:dd:d0:c6:b5:c8:36:57:79:ee:9c:69:a1:41:57: d4:fc:30:77:13:23:fb:f9:2e:ab:18:95:a1:03:e1: 1c:4d:b4:e4:bd:2d:f4:de:5f:55:99:df:6e:9d:d4: 03:71:e6:ce:91:20:13:20:07:20:2c:d2:b7:be:97: d0:c0:79:9b:76:c1:45:ba:da:67:93:eb:1d:7c:d3: 3f:30:74:59:0d:36:b3:d4:41:f9:15:dc:c7:ce:bf: 89:2d:13:75:69:ec:d3:20:43:be:e6:f5:7a:a3:fb: 0f:35:c2:9d:b4:7e:18:06:39:70:a6:6e:be:43:a1: 1a:71:b9:58:40:13:98:84:8d:ba:c7:c5:af:2e:f7: c5:f9:1a:ec:5c:23:a1:8d:33:a4:1a:17:19:19:63: 95:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D9:9C:22:22:88:65:7F:06:E1:DE:9A:3A:78:30:ED:F3:DB:8D:23 X509v3 Authority Key Identifier: keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/hdmcIiKIZX8G4d6aOngw7fPbjSM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.229.0/24 Signature Algorithm: sha256WithRSAEncryption 52:fe:b5:e1:37:0c:97:69:ab:4d:04:68:64:6e:5b:9b:a4:b8: 06:e6:87:a9:4e:7e:92:c1:a6:49:95:b6:21:7c:e5:d8:a2:19: 44:91:4e:a6:30:f5:be:e4:8b:22:b9:61:0a:4d:40:75:97:37: 95:e6:68:93:17:ac:dc:ff:41:28:66:86:4a:d5:12:5d:7a:66: 66:8a:bc:d1:3c:c7:3c:5b:6e:99:29:da:9c:a9:79:fd:0c:f9: d3:ab:4f:e2:c5:33:2a:a3:07:f3:3f:07:be:cd:e7:04:95:b3: 75:87:73:d6:1d:3b:f9:39:8a:5d:02:aa:55:2b:c7:3d:fc:b0: 03:30:a0:9b:f2:16:44:2a:07:f2:9a:02:06:f3:0c:47:e6:8e: 6f:03:3b:e6:3a:b1:07:53:27:33:83:f1:e7:ae:d0:e9:5a:52: 8a:9f:6c:13:81:2d:45:97:91:6f:fd:22:e1:07:c3:a3:35:58: d5:ef:44:27:46:68:21:95:b5:09:44:e9:2f:c1:86:0b:a6:95: cb:11:7e:db:f3:60:24:fb:25:04:27:e2:24:33:68:bb:7c:62: 4e:db:f6:4a:7c:2f:1c:ef:4b:d6:68:15:d2:75:a0:e8:bd:12: 7b:43:1b:07:ca:c0:f5:6e:4d:95:b0:7b:31:b0:ad:4b:fb:27: 4b:c4:c6:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XHdxPgNZcjlnRbqt0WjRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1 YmE2ODEwHhcNMjYwMTAyMDYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWQ5OWMyMjIyODg2NTdmMDZlMWRlOWEzYTc4MzBlZGYzZGI4ZDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYUZF4NmlpouvAqQThYClJnupW/o fmvY4mObAUMGV8/6TNidnZKcZCpRk5hESyXmxUSLb8ZcsjY35PcEdVkv10u5SsDg 4m8HcIKQ/my0VOWdnEPcIykjZv7kCr+BBL4mLcceqMNn/lRk3dDGtcg2V3nunGmh QVfU/DB3EyP7+S6rGJWhA+EcTbTkvS303l9Vmd9undQDcebOkSATIAcgLNK3vpfQ wHmbdsFFutpnk+sdfNM/MHRZDTaz1EH5FdzHzr+JLRN1aezTIEO+5vV6o/sPNcKd tH4YBjlwpm6+Q6EacblYQBOYhI26x8WvLvfF+RrsXCOhjTOkGhcZGWOV7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIXZnCIiiGV/BuHemjp4MO3z240jMB8GA1UdIwQY MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt YTg3NzNkZTc2OGY3LzEvaGRtY0lpS0laWDhHNGQ2YU9uZ3c3ZlBialNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3 LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVPlMA0G CSqGSIb3DQEBCwUAA4IBAQBS/rXhNwyXaatNBGhkblubpLgG5oepTn6SwaZJlbYh fOXYohlEkU6mMPW+5IsiuWEKTUB1lzeV5miTF6zc/0EoZoZK1RJdemZmirzRPMc8 W26ZKdqcqXn9DPnTq0/ixTMqowfzPwe+zecElbN1h3PWHTv5OYpdAqpVK8c9/LAD MKCb8hZEKgfymgIG8wxH5o5vAzvmOrEHUyczg/HnrtDpWlKKn2wTgS1Fl5Fv/SLh B8OjNVjV70QnRmghlbUJROkvwYYLppXLEX7b82Ak+yUEJ+IkM2i7fGJO2/ZKfC8c 70vWaBXSdaDovRJ7QxsHysD1bk2VsHsxsK1L+ydLxMaj -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:44 2026 by rpki-client