This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/HzhyaLY-dxXZvc_QIQ109vTOmVk.roa File: HzhyaLY-dxXZvc_QIQ109vTOmVk.roa (raw, json) Hash identifier: 2KIy1Y3fhiaplSw3pNxF7FHa/JUWxXXFo2l5Y4VeI0s= Subject key identifier: 1F:38:72:68:B6:3E:77:15:D9:BD:CF:D0:21:0D:74:F6:F4:CE:99:59 Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAF4752CE66E56463A9804CE4F54B0 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/HzhyaLY-dxXZvc_QIQ109vTOmVk.roa Signing time: Thu 01 Jan 2026 00:17:48 +0000 ROA not before: Thu 01 Jan 2026 00:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134413 IP address blocks: 185.248.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f4:75:2c:e6:6e:56:46:3a:98:04:ce:4f:54:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f387268b63e7715d9bdcfd0210d74f6f4ce9959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:09:c8:e8:96:d5:e4:c9:fc:34:36:85:07:8d: df:b0:b3:7c:8e:fe:94:ed:eb:35:17:35:51:97:e4: 8e:45:51:a7:4c:45:5b:c2:31:c1:c6:f1:b9:c3:a1: 00:57:e9:28:46:64:fc:20:84:ac:76:e1:6a:75:d4: 15:97:36:65:9b:c9:3d:88:a9:2c:fd:30:72:52:65: 76:e5:6c:0d:a6:01:ab:51:5c:c5:65:50:d7:2c:af: 92:18:4a:e8:d2:2e:5b:01:2b:1a:a9:cc:45:34:24: db:ff:28:bc:e1:6e:0a:b5:c1:09:78:bb:af:e9:3d: ae:7e:5e:0a:8b:67:98:28:4c:e1:e3:55:e3:f5:ed: 0c:20:b9:5c:8b:3d:11:c1:28:2e:98:9f:68:eb:61: 56:33:c8:7c:26:68:e1:35:70:e4:ab:10:3b:b5:48: 9b:a3:64:f3:12:c6:e6:fe:b0:3a:62:6a:6e:34:9a: 65:05:59:e5:43:02:6e:b6:29:a6:67:dd:e3:01:49: f4:2e:45:70:b0:95:5f:e0:78:d7:1d:1e:2d:41:13: 47:48:ca:0b:74:24:d5:ec:44:bc:3b:68:56:75:cf: 15:7c:af:34:9e:13:a6:26:82:a4:aa:11:7b:cd:95: d2:26:b8:cf:7b:75:53:ba:20:b9:f2:4e:95:55:fb: f4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:38:72:68:B6:3E:77:15:D9:BD:CF:D0:21:0D:74:F6:F4:CE:99:59 X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/HzhyaLY-dxXZvc_QIQ109vTOmVk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.186.0/23 Signature Algorithm: sha256WithRSAEncryption 25:e9:65:92:0b:00:d0:28:41:da:c9:b0:85:bf:ef:bf:42:c3: bb:a3:70:dc:9b:46:7c:5e:e7:d2:d5:0a:b3:c3:87:24:b5:46: 1a:09:07:38:e0:b9:62:16:23:3e:15:ac:44:ee:7e:9d:60:ea: d9:b3:a1:0a:18:77:08:ec:b6:39:3c:e9:6f:3f:6f:44:c5:19: e7:58:5f:0d:bb:b6:53:4a:d4:9e:78:b5:fd:ee:c2:a2:2f:dc: b9:b2:75:e9:04:68:bf:d7:08:d7:60:dd:a8:16:8a:b2:4d:33: 75:22:58:7a:b5:2e:df:79:08:d2:ba:0d:c2:70:4d:e7:37:3a: e2:45:03:78:54:4d:0c:c8:ef:5c:9c:ec:2e:a6:8c:3b:f7:af: c8:d2:ea:dd:be:96:ae:7a:6e:4e:75:f4:65:6d:5c:76:2b:36: 15:bf:84:4c:a0:20:a0:a2:83:5f:ec:5b:bf:66:b3:21:b3:f1: 5f:0e:cc:0c:d6:97:1c:83:1e:c7:52:5f:f7:c0:87:f0:a3:04: c1:42:9a:7c:87:f6:77:16:72:ca:b3:a1:8c:3c:aa:db:d8:43: 92:0a:7c:66:41:49:72:c8:96:f5:59:76:2a:a3:bc:3e:42:3d: a5:3f:9a:ed:ce:b9:b8:3e:7c:80:e3:8b:62:e5:45:8d:df:6b: fa:13:dd:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vR1LOZuVkY6mATOT1SwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjM4NzI2OGI2M2U3NzE1ZDliZGNmZDAyMTBkNzRmNmY0Y2U5OTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gnI6JbV5Mn8NDaFB43fsLN8jv6U 7es1FzVRl+SORVGnTEVbwjHBxvG5w6EAV+koRmT8IISsduFqddQVlzZlm8k9iKks /TByUmV25WwNpgGrUVzFZVDXLK+SGEro0i5bASsaqcxFNCTb/yi84W4KtcEJeLuv 6T2ufl4Ki2eYKEzh41Xj9e0MILlciz0RwSgumJ9o62FWM8h8JmjhNXDkqxA7tUib o2TzEsbm/rA6YmpuNJplBVnlQwJutimmZ93jAUn0LkVwsJVf4HjXHR4tQRNHSMoL dCTV7ES8O2hWdc8VfK80nhOmJoKkqhF7zZXSJrjPe3VTuiC58k6VVfv09QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB84cmi2PncV2b3P0CENdPb0zplZMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvSHpoeWFMWS1keFhadmNfUUlRMTA5dlRPbVZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufi6MA0G CSqGSIb3DQEBCwUAA4IBAQAl6WWSCwDQKEHaybCFv++/QsO7o3Dcm0Z8XufS1Qqz w4cktUYaCQc44LliFiM+FaxE7n6dYOrZs6EKGHcI7LY5POlvP29ExRnnWF8Nu7ZT StSeeLX97sKiL9y5snXpBGi/1wjXYN2oFoqyTTN1Ilh6tS7feQjSug3CcE3nNzri RQN4VE0MyO9cnOwupow796/I0urdvpauem5OdfRlbVx2KzYVv4RMoCCgooNf7Fu/ ZrMhs/FfDswM1pccgx7HUl/3wIfwowTBQpp8h/Z3FnLKs6GMPKrb2EOSCnxmQUly yJb1WXYqo7w+Qj2lP5rtzrm4PnyA44ti5UWN32v6E90t -----END CERTIFICATE-----Generated at Wed Jan 21 00:38:54 2026 by rpki-client