This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/hpTl067hwTIPEoUANyWpDMshVQE.roa File: hpTl067hwTIPEoUANyWpDMshVQE.roa (raw, json) Hash identifier: Ut4M2y31jaLJIG/kBUnELOfappjNoVrYNXBuoXPxjK8= Subject key identifier: 86:94:E5:D3:AE:E1:C1:32:0F:12:85:00:37:25:A9:0C:CB:21:55:01 Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37 Certificate serial: 019B7E3858B00BBD60CA7849E1A6A088E061 Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/hpTl067hwTIPEoUANyWpDMshVQE.roa Signing time: Fri 02 Jan 2026 10:19:40 +0000 ROA not before: Fri 02 Jan 2026 10:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.133.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:58:b0:0b:bd:60:ca:78:49:e1:a6:a0:88:e0:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37 Validity Not Before: Jan 2 10:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8694e5d3aee1c1320f1285003725a90ccb215501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:23:7c:5b:43:fe:4b:35:7f:3b:ce:45:15:bc: 44:1d:a6:ac:b6:ed:5a:a7:c0:9c:87:c4:33:6b:8c: 39:29:a6:59:a2:87:6b:04:4e:bb:82:f1:e3:42:b6: 7b:0a:d6:ba:77:f3:49:32:4c:f2:37:d3:87:16:c3: e6:c0:10:0f:2d:a8:23:70:83:37:5b:d0:92:77:fa: ca:0d:87:03:7f:32:ff:61:30:57:05:e7:4a:bb:33: 82:5e:b1:76:fe:d1:47:cb:73:73:8d:f6:ec:29:b4: dc:dc:70:db:7f:6c:88:be:cb:b7:85:01:1b:21:42: c9:a3:83:32:9a:3d:51:63:41:23:71:be:d3:97:8a: 93:eb:02:e0:19:10:1b:d6:e1:90:40:a1:1c:ac:0d: ad:f6:2a:76:9b:7c:b8:b2:e4:f3:cf:db:1e:ec:7b: fe:60:0f:c1:87:7c:19:d8:09:28:5f:fb:5e:ce:5a: 95:93:05:0e:43:44:57:79:b8:77:dc:15:36:2a:94: f5:d0:d9:9e:44:8f:99:29:b3:8c:91:7f:91:f3:9f: b9:11:82:e0:a6:55:d0:76:58:42:1b:20:b8:01:53: ee:9e:9a:94:e1:c6:7d:9d:74:2c:9d:e1:69:91:e1: de:31:c0:26:fc:95:9e:98:4d:01:e8:67:16:e2:89: ca:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:94:E5:D3:AE:E1:C1:32:0F:12:85:00:37:25:A9:0C:CB:21:55:01 X509v3 Authority Key Identifier: keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/hpTl067hwTIPEoUANyWpDMshVQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.138.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:35:cd:86:47:19:89:fb:06:3b:f4:c4:cc:b6:eb:a2:c2:51: 6e:94:e7:73:3b:db:68:a3:0b:95:c7:21:1c:fb:e9:16:80:eb: 41:d6:1e:80:94:96:4f:c9:93:36:f2:c1:ab:ab:de:18:9e:f5: cb:2c:33:04:74:86:f7:60:0d:fb:43:80:cd:7b:ce:ae:c7:78: da:d9:68:9b:d1:6a:7a:33:93:bb:cc:d1:e9:c5:d0:7b:7a:7d: 97:45:a0:67:94:0f:2a:e1:d6:ce:6f:b6:8c:9c:07:74:5a:11: 86:7e:1c:6b:b1:93:7d:9c:d2:01:80:cc:f1:a2:cc:8b:b9:b6: 86:25:cf:44:f5:e4:10:34:fb:ba:28:0b:6b:70:ad:24:3b:5e: 26:d5:78:d6:77:2c:92:d3:06:85:7f:db:7b:76:95:77:93:12: 04:9e:fd:0c:b2:e1:d1:8e:14:48:85:82:d8:c3:35:0b:dd:14: 41:72:16:b7:2c:a0:29:7e:b7:76:c8:6c:0f:65:af:8f:1a:12: 3d:87:35:3c:3f:e1:bf:f8:56:1e:bf:0f:4e:4d:bc:07:59:00: 07:d6:9b:30:a1:66:73:c1:6c:24:9e:73:19:94:29:e1:55:04: 89:0e:10:7b:52:14:41:bb:e4:92:1d:80:34:58:8b:bf:0d:0d: c2:d5:c4:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OFiwC71gynhJ4aagiOBhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5M2QyZjBhOTYxOTlhMDYwODU2Y2Y2N2UyMTA1ZmRhMmNi OTNkMzcwHhcNMjYwMTAyMTAxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Njk0ZTVkM2FlZTFjMTMyMGYxMjg1MDAzNzI1YTkwY2NiMjE1NTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyN8W0P+SzV/O85FFbxEHaastu1a p8Cch8Qza4w5KaZZoodrBE67gvHjQrZ7Cta6d/NJMkzyN9OHFsPmwBAPLagjcIM3 W9CSd/rKDYcDfzL/YTBXBedKuzOCXrF2/tFHy3NzjfbsKbTc3HDbf2yIvsu3hQEb IULJo4Mymj1RY0Ejcb7Tl4qT6wLgGRAb1uGQQKEcrA2t9ip2m3y4suTzz9se7Hv+ YA/Bh3wZ2AkoX/tezlqVkwUOQ0RXebh33BU2KpT10NmeRI+ZKbOMkX+R85+5EYLg plXQdlhCGyC4AVPunpqU4cZ9nXQsneFpkeHeMcAm/JWemE0B6GcW4onKSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIaU5dOu4cEyDxKFADclqQzLIVUBMB8GA1UdIwQY MBaAFDk9LwqWGZoGCFbPZ+IQX9osuT03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wMzY1ZGUtODAwOC00NzEzLWFiOTkt NjE5ZmE4MGI4ZDc0LzEvaHBUbDA2N2h3VElQRW9VQU55V3BETXNoVlFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wMzY1ZGUtODAwOC00NzEzLWFiOTktNjE5ZmE4MGI4ZDc0 LzEvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYWKMA0G CSqGSIb3DQEBCwUAA4IBAQB+Nc2GRxmJ+wY79MTMtuuiwlFulOdzO9toowuVxyEc ++kWgOtB1h6AlJZPyZM28sGrq94YnvXLLDMEdIb3YA37Q4DNe86ux3ja2Wib0Wp6 M5O7zNHpxdB7en2XRaBnlA8q4dbOb7aMnAd0WhGGfhxrsZN9nNIBgMzxosyLubaG Jc9E9eQQNPu6KAtrcK0kO14m1XjWdyyS0waFf9t7dpV3kxIEnv0MsuHRjhRIhYLY wzUL3RRBcha3LKApfrd2yGwPZa+PGhI9hzU8P+G/+FYevw9OTbwHWQAH1pswoWZz wWwknnMZlCnhVQSJDhB7UhRBu+SSHYA0WIu/DQ3C1cQF -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:44 2026 by rpki-client