This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/hPEOUrTaqxkP0HraBv5tFWum52o.roa File: hPEOUrTaqxkP0HraBv5tFWum52o.roa (raw, json) Hash identifier: a68ZRNdry4Fa8CMUTj7dyBiReCufFH2K20dWi6+LdmE= Subject key identifier: 84:F1:0E:52:B4:DA:AB:19:0F:D0:7A:DA:06:FE:6D:15:6B:A6:E7:6A Certificate issuer: /CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103 Certificate serial: 019B7F13528B731DF754EB22ECF7DC9D31C3 Authority key identifier: 75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/hPEOUrTaqxkP0HraBv5tFWum52o.roa Signing time: Fri 02 Jan 2026 14:18:51 +0000 ROA not before: Fri 02 Jan 2026 14:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204642 IP address blocks: 185.244.124.0/22 maxlen: 22 185.244.124.0/24 maxlen: 24 185.244.125.0/24 maxlen: 24 185.244.126.0/24 maxlen: 24 185.244.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:52:8b:73:1d:f7:54:eb:22:ec:f7:dc:9d:31:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103 Validity Not Before: Jan 2 14:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84f10e52b4daab190fd07ada06fe6d156ba6e76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7b:b9:2b:e4:f1:35:da:51:a8:01:dd:e8:e6: 47:71:ff:ca:31:33:89:f0:4b:de:7f:4b:fa:43:06: 49:7b:a8:98:ce:bc:30:d8:87:11:e9:8d:13:80:ae: b6:43:7b:4e:0a:99:4d:cf:29:29:39:8b:fa:52:51: be:c1:98:3f:51:3f:be:f7:8c:82:68:97:9a:41:b5: 48:53:56:7b:ec:d2:2f:10:22:ff:57:60:03:23:cf: 0b:9b:96:b8:dd:8a:af:57:00:fb:9f:d6:b1:07:c9: cd:8f:59:e4:19:dc:c3:1e:5a:af:30:08:5a:e9:9d: b8:4f:1d:b3:72:1c:4a:7b:30:26:0b:74:1d:29:19: 94:3b:9b:b0:b0:c7:c1:3d:65:e7:ac:e1:04:e3:98: c7:8b:3c:aa:1b:6e:e2:8c:4a:c4:bd:0e:55:70:cc: 96:46:bc:91:26:7e:27:fc:84:ca:22:4d:a1:49:92: 77:59:9e:8a:e6:56:95:91:eb:40:6d:a9:db:d5:24: 90:ab:9c:63:5c:71:d6:45:9a:1f:9a:2b:80:90:0b: dd:fa:e0:2d:a9:90:73:5c:3f:d9:84:77:92:a6:6a: fe:73:10:11:41:2e:27:d2:66:6e:e8:46:30:66:73: 75:ae:7d:10:24:d4:64:14:8a:a8:e7:fe:fd:89:47: d1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F1:0E:52:B4:DA:AB:19:0F:D0:7A:DA:06:FE:6D:15:6B:A6:E7:6A X509v3 Authority Key Identifier: keyid:75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/hPEOUrTaqxkP0HraBv5tFWum52o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.124.0/22 Signature Algorithm: sha256WithRSAEncryption ac:fd:fb:91:0e:74:be:5d:ad:ea:3d:7d:b8:f0:e5:50:8c:42: 15:c7:c6:69:51:fb:b1:0b:1d:d4:9c:06:24:93:71:cb:c3:0f: 0a:6c:72:03:d5:66:d1:fd:48:a9:15:26:b2:b4:d6:d8:48:2f: b9:03:8d:16:f6:48:16:a5:25:a1:c9:3a:41:ba:0b:15:d4:0e: e2:dd:53:98:64:4e:dd:6d:13:1f:b6:b0:61:53:b3:69:70:25: 15:e1:46:93:07:72:fc:b1:79:1e:bd:34:f1:7d:00:cb:ba:a0: 0f:f7:e6:b9:98:66:a4:6c:c3:71:7c:88:d0:e0:41:a1:f4:70: 62:21:09:bb:8a:21:d6:11:a8:2d:dc:10:88:4d:6a:31:7d:27: 96:b8:d1:05:a5:63:f4:af:da:8e:8c:45:8c:b4:70:1c:38:09: 2e:cd:57:82:4b:0a:02:7d:79:41:be:84:c0:64:84:1e:99:6c: 48:5b:4b:8a:8f:54:46:1c:8d:ef:dd:9c:76:6b:e4:a9:ed:2b: c9:50:57:e4:92:bb:08:71:e8:8e:28:57:77:a9:7f:25:0b:52: d6:63:42:25:99:25:e0:ae:6b:a4:22:70:5b:cb:14:3e:f8:d8: a5:10:8e:d5:ec:ce:6c:ef:76:6f:d6:ae:36:30:dc:30:de:dd: f8:82:35:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E1KLcx33VOsi7PfcnTHDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTFiMDJkNTVkMzUwNWZiOWY5NzE5ZmJkMGI1MjMxNmZm NmMxMDMwHhcNMjYwMTAyMTQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGYxMGU1MmI0ZGFhYjE5MGZkMDdhZGEwNmZlNmQxNTZiYTZlNzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3u5K+TxNdpRqAHd6OZHcf/KMTOJ 8Evef0v6QwZJe6iYzrww2IcR6Y0TgK62Q3tOCplNzykpOYv6UlG+wZg/UT++94yC aJeaQbVIU1Z77NIvECL/V2ADI88Lm5a43YqvVwD7n9axB8nNj1nkGdzDHlqvMAha 6Z24Tx2zchxKezAmC3QdKRmUO5uwsMfBPWXnrOEE45jHizyqG27ijErEvQ5VcMyW RryRJn4n/ITKIk2hSZJ3WZ6K5laVketAbanb1SSQq5xjXHHWRZofmiuAkAvd+uAt qZBzXD/ZhHeSpmr+cxARQS4n0mZu6EYwZnN1rn0QJNRkFIqo5/79iUfRXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFITxDlK02qsZD9B62gb+bRVrpudqMB8GA1UdIwQY MBaAFHVRsC1V01Bfuflxn70LUjFv9sEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZHd0xWWFRVRi01LVhHZnZRdFNNV18yd1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xMzZiNDMtM2I3Ni00YjE3LWEzNjYt ODRiN2Y2ODhiYTMwLzEvaFBFT1VyVGFxeGtQMEhyYUJ2NXRGV3VtNTJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xMzZiNDMtM2I3Ni00YjE3LWEzNjYtODRiN2Y2ODhiYTMw LzEvZFZHd0xWWFRVRi01LVhHZnZRdFNNV18yd1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufR8MA0G CSqGSIb3DQEBCwUAA4IBAQCs/fuRDnS+Xa3qPX248OVQjEIVx8ZpUfuxCx3UnAYk k3HLww8KbHID1WbR/UipFSaytNbYSC+5A40W9kgWpSWhyTpBugsV1A7i3VOYZE7d bRMftrBhU7NpcCUV4UaTB3L8sXkevTTxfQDLuqAP9+a5mGakbMNxfIjQ4EGh9HBi IQm7iiHWEagt3BCITWoxfSeWuNEFpWP0r9qOjEWMtHAcOAkuzVeCSwoCfXlBvoTA ZIQemWxIW0uKj1RGHI3v3Zx2a+Sp7SvJUFfkkrsIceiOKFd3qX8lC1LWY0IlmSXg rmukInBbyxQ++NilEI7V7M5s73Zv1q42MNww3t34gjXT -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:56 2026 by rpki-client