This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/hitJJLRKZoeTjFy1UdVtOKCeU3E.roa File: hitJJLRKZoeTjFy1UdVtOKCeU3E.roa (raw, json) Hash identifier: P3W2mUUG6W+rjdD2ot4LgXNOj0ClkdXmzifsh0+3Km0= Subject key identifier: 86:2B:49:24:B4:4A:66:87:93:8C:5C:B5:51:D5:6D:38:A0:9E:53:71 Certificate issuer: /CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a Certificate serial: 019B79EC88381BB3CE98109E94891D154FDF Authority key identifier: DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/hitJJLRKZoeTjFy1UdVtOKCeU3E.roa Signing time: Thu 01 Jan 2026 14:18:23 +0000 ROA not before: Thu 01 Jan 2026 14:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43260 IP address blocks: 185.13.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:88:38:1b:b3:ce:98:10:9e:94:89:1d:15:4f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a Validity Not Before: Jan 1 14:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=862b4924b44a6687938c5cb551d56d38a09e5371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e5:49:a6:61:aa:74:3d:6a:5d:79:b5:d6:e9: f2:15:15:16:c5:f6:89:b5:d8:77:a2:bb:30:43:4f: 0f:7d:b0:4b:20:11:99:51:bd:6c:be:ae:f1:60:34: 92:da:5b:d7:bf:24:56:90:de:83:63:17:23:d0:7c: 94:41:fd:5d:f2:a2:07:09:a4:d6:41:dd:41:ee:35: ad:36:a5:d6:e9:92:db:28:3d:84:40:16:53:41:d5: de:1f:10:c8:71:57:4e:fe:c2:a8:4a:c6:2d:93:41: 91:36:af:d1:7d:c5:c8:c8:9e:98:b7:5e:f1:0b:30: 23:aa:3b:25:44:6c:ed:9b:cc:68:3e:d3:67:a2:32: d4:ab:5f:c3:1d:60:cd:3d:e0:4b:ff:36:4f:a8:08: e2:30:0a:24:b2:ef:f2:4e:1b:78:e7:02:17:56:b5: 7e:c6:21:d2:e2:6f:34:2d:7f:27:26:8b:74:9f:fe: 6d:f6:43:96:b8:25:0a:6d:8e:8c:8f:96:87:71:45: 57:16:f4:10:6c:4a:cf:2b:89:29:c9:f5:09:46:43: 8e:75:30:c3:b7:59:d6:90:f2:ae:5f:9d:99:7c:16: 61:72:0d:75:70:aa:dd:ca:7e:87:40:fb:14:d9:ee: 0c:22:df:d1:c4:98:24:9e:c8:00:75:82:88:b6:2e: ae:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2B:49:24:B4:4A:66:87:93:8C:5C:B5:51:D5:6D:38:A0:9E:53:71 X509v3 Authority Key Identifier: keyid:DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/hitJJLRKZoeTjFy1UdVtOKCeU3E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.13.56.0/24 Signature Algorithm: sha256WithRSAEncryption 39:86:04:1c:ea:28:5c:a8:0a:6f:f7:97:ce:c3:60:45:98:8b: a5:fe:5e:f8:f3:8d:83:53:83:ea:aa:0e:a2:40:ca:e2:02:72: 5d:3e:c0:07:56:97:8f:fb:64:45:02:6a:1d:2e:eb:f0:fc:66: 72:da:9d:77:25:ce:d1:14:32:e5:3c:b9:a2:55:1e:6e:2f:ec: 17:de:93:7b:33:ff:dd:1d:c0:1a:ae:43:9a:21:27:a2:2c:cd: 10:7e:29:ff:cd:81:1a:6b:c2:58:4b:0d:18:c2:52:b6:91:48: fd:82:81:ea:ec:9b:0d:28:6e:26:09:b0:2b:8f:50:17:73:26: 20:f6:a1:36:14:be:cf:6d:72:57:ba:0a:6c:f0:02:9a:d9:b9: 62:fe:e6:78:9b:41:b6:ac:74:a7:3e:dc:3e:61:05:17:c6:a9: 11:c7:7d:28:1a:94:d5:f1:9c:5b:2e:5b:ae:85:8e:09:db:0c: 47:65:70:5e:60:4a:0b:8a:9c:42:ba:2b:32:ef:cc:dc:c5:94: 93:43:79:ff:79:9a:8f:27:66:f7:65:b7:03:67:68:4c:fb:28: 53:05:6f:8f:3e:19:9b:2f:d2:2c:ad:56:a2:c4:60:1f:6d:40: 63:50:17:25:33:f5:02:e9:a2:a1:89:45:07:79:1f:db:8b:52: fa:a8:28:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Ig4G7POmBCelIkdFU/fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMmJjNTQwM2FiMzUzZDVmYzI1ZTVhYWRjZTA5MzJiMjlm NDE3NmEwHhcNMjYwMTAxMTQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjJiNDkyNGI0NGE2Njg3OTM4YzVjYjU1MWQ1NmQzOGEwOWU1MzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeVJpmGqdD1qXXm11unyFRUWxfaJ tdh3orswQ08PfbBLIBGZUb1svq7xYDSS2lvXvyRWkN6DYxcj0HyUQf1d8qIHCaTW Qd1B7jWtNqXW6ZLbKD2EQBZTQdXeHxDIcVdO/sKoSsYtk0GRNq/RfcXIyJ6Yt17x CzAjqjslRGztm8xoPtNnojLUq1/DHWDNPeBL/zZPqAjiMAoksu/yTht45wIXVrV+ xiHS4m80LX8nJot0n/5t9kOWuCUKbY6Mj5aHcUVXFvQQbErPK4kpyfUJRkOOdTDD t1nWkPKuX52ZfBZhcg11cKrdyn6HQPsU2e4MIt/RxJgknsgAdYKIti6u3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIYrSSS0SmaHk4xctVHVbTignlNxMB8GA1UdIwQY MBaAFN0rxUA6s1PV/CXlqtzgkysp9BdqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1N2RlFEcXpVOVg4SmVXcTNPQ1RLeW4wRjJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9jMjU2NTAtNDcyNy00Zjg4LThmMjEt Yzk5N2FlNmM1YmQ0LzEvaGl0SkpMUktab2VUakZ5MVVkVnRPS0NlVTNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9jMjU2NTAtNDcyNy00Zjg4LThmMjEtYzk5N2FlNmM1YmQ0 LzEvM1N2RlFEcXpVOVg4SmVXcTNPQ1RLeW4wRjJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ04MA0G CSqGSIb3DQEBCwUAA4IBAQA5hgQc6ihcqApv95fOw2BFmIul/l74842DU4Pqqg6i QMriAnJdPsAHVpeP+2RFAmodLuvw/GZy2p13Jc7RFDLlPLmiVR5uL+wX3pN7M//d HcAarkOaISeiLM0Qfin/zYEaa8JYSw0YwlK2kUj9goHq7JsNKG4mCbArj1AXcyYg 9qE2FL7PbXJXugps8AKa2bli/uZ4m0G2rHSnPtw+YQUXxqkRx30oGpTV8ZxbLluu hY4J2wxHZXBeYEoLipxCuisy78zcxZSTQ3n/eZqPJ2b3ZbcDZ2hM+yhTBW+PPhmb L9IsrVaixGAfbUBjUBclM/UC6aKhiUUHeR/bi1L6qCjw -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:22 2026 by rpki-client