This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/HSRkhqaXY-J-szKJGb322CNozlI.roa File: HSRkhqaXY-J-szKJGb322CNozlI.roa (raw, json) Hash identifier: AvBoZFMkLxLlkN5UUWxsTcEYLDw2vSTiZXKpkSzpzYg= Subject key identifier: 1D:24:64:86:A6:97:63:E2:7E:B3:32:89:19:BD:F6:D8:23:68:CE:52 Certificate issuer: /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a Certificate serial: 019B7AC87BC14CD9177411197447BE37CD37 Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/HSRkhqaXY-J-szKJGb322CNozlI.roa Signing time: Thu 01 Jan 2026 18:18:37 +0000 ROA not before: Thu 01 Jan 2026 18:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202892 IP address blocks: 185.9.140.0/22 maxlen: 22 185.9.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:7b:c1:4c:d9:17:74:11:19:74:47:be:37:cd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a Validity Not Before: Jan 1 18:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d246486a69763e27eb3328919bdf6d82368ce52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:91:01:4c:11:61:09:cf:7a:af:79:6b:f3:21: 83:57:a4:b8:4b:b0:2b:00:77:fe:c3:f9:04:1f:b3: 06:a1:f4:a8:49:49:cf:f6:7a:e2:9f:67:8b:ce:28: a0:e8:e3:12:0c:20:d3:f5:85:1f:72:6e:8e:d5:e8: a7:33:eb:74:4f:57:09:3a:67:78:7f:c8:da:88:52: 0a:16:38:47:7f:5d:5e:b6:a5:a0:ba:6c:d0:66:88: c8:78:c6:21:03:c4:90:15:01:39:8f:88:79:c6:bd: 1f:6c:18:65:d4:4e:ba:50:b0:08:d3:0d:3c:d4:27: a7:0d:eb:09:32:8d:e0:a7:46:a0:1a:1c:43:3c:3f: 00:cf:86:c9:01:69:5e:be:21:a0:fe:32:a0:91:80: fe:bc:57:b1:82:b1:f8:24:6b:8d:6d:80:1c:33:c1: 34:1b:b8:b7:3d:58:98:97:d9:3c:98:81:cc:62:34: e7:d3:1a:23:6f:ad:60:e6:a6:85:56:00:51:2d:62: c2:b6:99:6d:38:db:6b:0a:6a:f2:d2:f6:2b:18:d6: d7:f4:35:54:d4:60:90:8d:a5:da:4b:89:fd:68:70: 69:88:e8:b0:67:81:93:a7:fd:4e:99:94:c1:f4:26: 6f:74:c0:68:09:bb:95:e7:1e:ed:28:42:90:0c:e0: 34:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:24:64:86:A6:97:63:E2:7E:B3:32:89:19:BD:F6:D8:23:68:CE:52 X509v3 Authority Key Identifier: keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/HSRkhqaXY-J-szKJGb322CNozlI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.140.0/22 Signature Algorithm: sha256WithRSAEncryption 31:63:1b:ff:c6:04:dd:ac:29:f4:34:c4:89:62:dc:12:b7:5a: 92:ad:69:45:d7:17:e5:3f:be:0f:60:4d:7b:19:65:c5:59:d3: 51:57:40:8a:0b:ae:f1:f7:ee:df:b2:70:95:22:49:d0:1e:13: e5:b3:cb:ea:03:87:9d:75:00:88:c6:81:54:ab:07:26:fb:a4: df:ed:2b:37:7f:9e:17:ee:f3:a6:d3:3a:7c:de:63:70:fc:23: 76:ac:ff:5b:d3:9b:e1:2b:c3:c4:e9:d6:f4:fd:17:74:67:b7: bf:2f:d4:b9:18:4c:31:dc:6e:85:a0:db:5e:09:d3:6a:6b:15: 18:e6:fe:1c:fb:9e:e0:17:0e:b0:5c:71:84:63:72:49:67:02: 1c:dc:8f:3a:bf:c7:40:15:55:7d:5d:c6:93:81:2e:02:4a:2f: 74:4b:7e:52:f0:f1:42:f4:76:88:ec:05:74:a7:6e:0a:25:6e: 80:8c:4a:de:16:8a:af:63:be:da:11:79:9b:ef:46:20:3e:e8: fe:db:ab:d2:e1:7e:f7:b2:e1:1c:a0:84:cc:9a:79:9f:49:ed: c4:0d:62:3a:1f:fa:4a:e9:62:b7:fb:f3:09:d2:fb:bb:63:6d: 43:97:b3:59:10:2b:75:57:73:98:00:01:6a:8d:bb:55:83:8c: 02:b3:36:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yHvBTNkXdBEZdEe+N803MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ODVkYzNjMTQ0NjRiOGM0MDgxNzUyNWQ5YTI1NGI0ZWQz YThhM2EwHhcNMjYwMTAxMTgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDI0NjQ4NmE2OTc2M2UyN2ViMzMyODkxOWJkZjZkODIzNjhjZTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JEBTBFhCc96r3lr8yGDV6S4S7Ar AHf+w/kEH7MGofSoSUnP9nrin2eLziig6OMSDCDT9YUfcm6O1einM+t0T1cJOmd4 f8jaiFIKFjhHf11etqWgumzQZojIeMYhA8SQFQE5j4h5xr0fbBhl1E66ULAI0w08 1CenDesJMo3gp0agGhxDPD8Az4bJAWleviGg/jKgkYD+vFexgrH4JGuNbYAcM8E0 G7i3PViYl9k8mIHMYjTn0xojb61g5qaFVgBRLWLCtpltONtrCmry0vYrGNbX9DVU 1GCQjaXaS4n9aHBpiOiwZ4GTp/1OmZTB9CZvdMBoCbuV5x7tKEKQDOA0zQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB0kZIaml2PifrMyiRm99tgjaM5SMB8GA1UdIwQY MBaAFPaF3DwURkuMQIF1JdmiVLTtOoo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yMDQyNzUtYTM2OC00MzFiLThmZjYt ZWI2N2Y4ZTYzMmI4LzEvSFNSa2hxYVhZLUotc3pLSkdiMzIyQ05vemxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8yMDQyNzUtYTM2OC00MzFiLThmZjYtZWI2N2Y4ZTYzMmI4 LzEvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQmMMA0G CSqGSIb3DQEBCwUAA4IBAQAxYxv/xgTdrCn0NMSJYtwSt1qSrWlF1xflP74PYE17 GWXFWdNRV0CKC67x9+7fsnCVIknQHhPls8vqA4eddQCIxoFUqwcm+6Tf7Ss3f54X 7vOm0zp83mNw/CN2rP9b05vhK8PE6db0/Rd0Z7e/L9S5GEwx3G6FoNteCdNqaxUY 5v4c+57gFw6wXHGEY3JJZwIc3I86v8dAFVV9XcaTgS4CSi90S35S8PFC9HaI7AV0 p24KJW6AjEreFoqvY77aEXmb70YgPuj+26vS4X73suEcoITMmnmfSe3EDWI6H/pK 6WK3+/MJ0vu7Y21Dl7NZECt1V3OYAAFqjbtVg4wCszaL -----END CERTIFICATE-----Generated at Sun Jan 18 19:25:27 2026 by rpki-client