This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/dRHnWg8xgMV7IsHlZGz8N74fQIs.roa File: dRHnWg8xgMV7IsHlZGz8N74fQIs.roa (raw, json) Hash identifier: gSF6LAUwiGyd8EI+BN4CEzTlS4d9BOM234ihF2xKvGw= Subject key identifier: 75:11:E7:5A:0F:31:80:C5:7B:22:C1:E5:64:6C:FC:37:BE:1F:40:8B Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e Certificate serial: 019B7CEE3C9BA25865A38D863EAB8A8F63D7 Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/dRHnWg8xgMV7IsHlZGz8N74fQIs.roa Signing time: Fri 02 Jan 2026 04:19:06 +0000 ROA not before: Fri 02 Jan 2026 04:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.190.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 07:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3c:9b:a2:58:65:a3:8d:86:3e:ab:8a:8f:63:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e Validity Not Before: Jan 2 04:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7511e75a0f3180c57b22c1e5646cfc37be1f408b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:04:97:7c:65:b6:56:6e:6d:0b:95:9b:8e:4a: ab:3e:62:72:81:e9:48:29:ec:85:f6:1e:67:f3:bb: e8:ea:dc:cc:d9:4d:a9:b8:ae:e4:c7:fd:9c:ed:e6: ed:3a:ae:f7:8b:82:5d:b7:1d:fe:bc:43:b6:37:43: 07:07:b7:a4:27:f0:56:35:37:50:80:cc:d9:90:04: a2:92:ef:35:ca:0a:34:67:48:31:2a:6a:ca:68:8f: b1:56:b8:6b:01:78:72:8a:55:41:da:5a:b8:dc:0d: cc:e5:7c:26:f0:80:bf:22:9c:32:9a:16:bb:f8:89: 5c:f2:eb:34:4c:48:8b:f1:45:2c:c2:a8:9c:f1:4d: 97:02:d7:c6:f4:e3:26:9d:28:e2:1d:22:9b:63:c9: 74:1d:79:22:33:25:0f:38:9c:61:8d:4d:6f:07:8e: fa:a1:15:2b:3f:44:a9:b0:58:58:e7:8c:ff:c9:a6: 1d:71:3d:0b:e6:b5:8a:8c:20:2e:44:10:02:d1:42: f8:09:b5:9c:6e:7a:87:b0:a2:96:69:ce:4d:f8:9a: de:26:9d:c9:aa:c9:11:62:64:42:95:c9:02:39:b6: 59:f2:b3:68:00:7d:68:8c:12:14:43:53:60:fd:5a: 65:1d:72:3b:c6:19:d8:ec:16:8e:22:22:ac:92:e7: 55:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:11:E7:5A:0F:31:80:C5:7B:22:C1:E5:64:6C:FC:37:BE:1F:40:8B X509v3 Authority Key Identifier: keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/dRHnWg8xgMV7IsHlZGz8N74fQIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.190.37.0/24 Signature Algorithm: sha256WithRSAEncryption 49:42:42:ea:c1:e0:31:04:c6:8e:10:41:20:2f:ea:46:7a:4c: 6e:5d:a9:34:28:2b:08:c4:61:8b:a0:3a:5f:8a:b0:45:bb:a2: 78:02:f5:9e:73:56:a4:3b:91:53:e0:ce:07:d1:2a:bf:2b:68: 5e:68:a7:ed:f0:6a:1e:a8:54:38:ac:54:9b:ac:6a:fe:af:11: c7:93:d7:05:c7:ae:f2:a9:6a:a7:6b:6a:7b:5c:98:6e:f7:75: b4:6b:1f:f7:6e:c2:07:bb:96:e4:92:41:3c:28:69:68:2a:30: 86:6a:c9:bd:b1:95:6b:df:0c:70:69:06:a7:36:f5:5f:e1:7a: 25:f9:f5:1c:a6:65:02:5e:3c:48:cc:2e:f7:af:ac:e7:5d:32: e2:47:2c:fb:25:ea:0e:d7:bb:60:af:51:4a:07:ac:8d:26:ae: 2b:3f:88:a3:2c:ba:65:42:42:9b:ab:3b:f7:35:d0:f2:11:df: 46:53:4b:1a:33:f6:eb:88:0d:7f:ee:8f:f7:df:25:01:83:d7: e1:91:64:2c:4a:ba:ae:22:9d:8c:db:57:fb:15:a8:c1:07:0e: dc:e9:a2:fb:01:3d:10:fd:91:13:d2:30:e9:c6:cc:84:2c:f6: 9d:3a:0f:21:4d:55:ae:94:1c:3a:bb:15:c7:72:62:f8:2b:c6: eb:4e:3c:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87jybolhlo42GPquKj2PXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMDU2NTg2NWE1MzM0MDJjMmY0MzQzZmUxYWY1NDFhMDA2 ZDlkNmUwHhcNMjYwMTAyMDQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTExZTc1YTBmMzE4MGM1N2IyMmMxZTU2NDZjZmMzN2JlMWY0MDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QSXfGW2Vm5tC5WbjkqrPmJygelI KeyF9h5n87vo6tzM2U2puK7kx/2c7ebtOq73i4Jdtx3+vEO2N0MHB7ekJ/BWNTdQ gMzZkASiku81ygo0Z0gxKmrKaI+xVrhrAXhyilVB2lq43A3M5Xwm8IC/Ipwymha7 +Ilc8us0TEiL8UUswqic8U2XAtfG9OMmnSjiHSKbY8l0HXkiMyUPOJxhjU1vB476 oRUrP0SpsFhY54z/yaYdcT0L5rWKjCAuRBAC0UL4CbWcbnqHsKKWac5N+JreJp3J qskRYmRClckCObZZ8rNoAH1ojBIUQ1Ng/VplHXI7xhnY7BaOIiKskudVyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHUR51oPMYDFeyLB5WRs/De+H0CLMB8GA1UdIwQY MBaAFB8FZYZaUzQCwvQ0P+GvVBoAbZ1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUt NWM2OTA0NDdiYTg5LzEvZFJIbldnOHhnTVY3SXNIbFpHejhONzRmUUlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUtNWM2OTA0NDdiYTg5 LzEvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub4lMA0G CSqGSIb3DQEBCwUAA4IBAQBJQkLqweAxBMaOEEEgL+pGekxuXak0KCsIxGGLoDpf irBFu6J4AvWec1akO5FT4M4H0Sq/K2heaKft8GoeqFQ4rFSbrGr+rxHHk9cFx67y qWqna2p7XJhu93W0ax/3bsIHu5bkkkE8KGloKjCGasm9sZVr3wxwaQanNvVf4Xol +fUcpmUCXjxIzC73r6znXTLiRyz7JeoO17tgr1FKB6yNJq4rP4ijLLplQkKbqzv3 NdDyEd9GU0saM/briA1/7o/33yUBg9fhkWQsSrquIp2M21f7FajBBw7c6aL7AT0Q /ZET0jDpxsyELPadOg8hTVWulBw6uxXHcmL4K8brTjzU -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:34 2026 by rpki-client