This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/hbtaOvEFCXtoUrdAHECiUoig7xU.roa File: hbtaOvEFCXtoUrdAHECiUoig7xU.roa (raw, json) Hash identifier: O68z7xb4iBIuS0t0SJsBOxoH1aeWdrmSjVIjONruRgY= Subject key identifier: 85:BB:5A:3A:F1:05:09:7B:68:52:B7:40:1C:40:A2:52:88:A0:EF:15 Certificate issuer: /CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52 Certificate serial: 019B7C80A543E09D92ABB138010FCD501B5D Authority key identifier: C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/hbtaOvEFCXtoUrdAHECiUoig7xU.roa Signing time: Fri 02 Jan 2026 02:19:24 +0000 ROA not before: Fri 02 Jan 2026 02:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199229 IP address blocks: 185.2.20.0/22 maxlen: 22 2a02:6740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a5:43:e0:9d:92:ab:b1:38:01:0f:cd:50:1b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52 Validity Not Before: Jan 2 02:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85bb5a3af105097b6852b7401c40a25288a0ef15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0e:6b:d4:f7:9c:39:a1:4e:62:b0:b4:0e:0a: ea:8c:c8:dd:66:19:54:ae:0e:4b:64:d7:09:d1:e9: 00:1f:15:4b:53:e3:6b:5b:1f:d5:0f:07:ae:26:66: 63:de:fe:49:9b:be:76:5e:9b:83:d0:54:e2:ad:9b: fd:b2:41:3a:65:f5:7e:cc:8d:a2:05:17:10:b6:18: 0c:85:00:09:f3:eb:25:3d:9b:6a:57:0a:3a:03:16: 4b:40:aa:72:bb:4d:f5:aa:87:6c:b3:e4:6d:e8:b4: 46:83:00:2a:a6:67:73:45:89:fd:64:b3:54:1b:65: d7:f8:15:3d:fd:06:4f:0c:bf:0f:4a:fc:94:89:cf: f4:c9:89:fd:44:e1:0a:2e:7e:9c:fa:0b:dd:59:5c: 41:2c:04:73:1a:d1:62:38:09:65:f3:cc:ef:3b:86: a9:17:5e:fd:f7:46:35:3d:fb:2a:a5:5d:69:bb:e0: a2:82:73:aa:99:b0:2b:d7:50:90:72:27:d1:a7:e8: 84:fe:b1:11:9d:37:96:14:0f:4f:e1:10:c3:84:a5: 7d:27:50:8d:ab:b2:25:19:cb:1d:f5:8b:db:8a:7e: d5:22:21:2a:67:bd:c2:34:9c:a9:fc:fe:9f:00:78: ce:60:f3:82:1d:5c:f6:0f:a9:82:00:f4:d6:95:63: a8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BB:5A:3A:F1:05:09:7B:68:52:B7:40:1C:40:A2:52:88:A0:EF:15 X509v3 Authority Key Identifier: keyid:C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/hbtaOvEFCXtoUrdAHECiUoig7xU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.2.20.0/22 IPv6: 2a02:6740::/32 Signature Algorithm: sha256WithRSAEncryption 37:dd:06:b7:c0:e2:99:cd:7e:af:57:e0:b0:ce:51:30:2e:3d: b6:82:d0:b7:ed:dd:e0:bd:ff:1b:a4:6c:be:c3:98:46:a4:42: e5:7c:a9:06:e7:17:1e:a5:8e:15:11:e9:9d:7d:eb:aa:3d:51: a9:bb:aa:c7:39:c2:7d:e1:b8:fd:42:de:58:42:51:77:b4:7e: c7:84:4f:6a:26:4e:4d:86:82:9b:6d:32:f3:8d:6e:36:a3:3a: 4d:f5:e0:57:7c:1a:6f:51:65:81:72:b4:1a:11:a6:77:ed:39: 77:a4:f2:48:2f:a6:f6:6b:7b:23:67:34:4d:50:c4:0a:a8:c9: f2:f2:16:41:2a:ce:d1:54:1f:a6:f8:b5:de:b7:80:2d:07:b7: 62:fd:1f:e6:f3:bf:51:cc:2a:14:da:85:90:37:c2:88:93:bf: f0:85:08:b9:9d:35:22:c2:d6:12:4c:7e:9a:65:fb:b6:ba:a9: 22:ca:3f:b5:9b:79:ab:d4:ed:73:ad:5c:67:d5:c7:1f:f7:ca: eb:5e:d4:a7:9b:af:58:9e:e0:26:df:5d:10:3d:d1:51:94:ef: fb:f3:50:ac:1a:5c:12:1a:bf:96:68:b7:3f:34:a7:42:92:62: 31:35:89:d2:88:3c:61:c8:ef:61:80:da:d4:f3:5c:cb:35:7f: b5:ec:ca:16 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gKVD4J2Sq7E4AQ/NUBtdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YzVhY2M3ZjdlYzJiNDViNDNkMjU0N2M5NjQ2NGMwMDg5 MzNkNTIwHhcNMjYwMTAyMDIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWJiNWEzYWYxMDUwOTdiNjg1MmI3NDAxYzQwYTI1Mjg4YTBlZjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA5r1PecOaFOYrC0DgrqjMjdZhlU rg5LZNcJ0ekAHxVLU+NrWx/VDweuJmZj3v5Jm752XpuD0FTirZv9skE6ZfV+zI2i BRcQthgMhQAJ8+slPZtqVwo6AxZLQKpyu031qodss+Rt6LRGgwAqpmdzRYn9ZLNU G2XX+BU9/QZPDL8PSvyUic/0yYn9ROEKLn6c+gvdWVxBLARzGtFiOAll88zvO4ap F17990Y1PfsqpV1pu+CignOqmbAr11CQcifRp+iE/rERnTeWFA9P4RDDhKV9J1CN q7IlGcsd9Yvbin7VIiEqZ73CNJyp/P6fAHjOYPOCHVz2D6mCAPTWlWOoNwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIW7WjrxBQl7aFK3QBxAolKIoO8VMB8GA1UdIwQY MBaAFMXFrMf37CtFtD0lR8lkZMAIkz1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGNXc3hfZnNLMFcwUFNWSHlXUmt3QWlUUFZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My85ZjUzNmQtMGRkNi00M2VhLWE5MTQt OWMwODhjMzQ1YWU2LzEvaGJ0YU92RUZDWHRvVXJkQUhFQ2lVb2lnN3hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My85ZjUzNmQtMGRkNi00M2VhLWE5MTQtOWMwODhjMzQ1YWU2 LzEveGNXc3hfZnNLMFcwUFNWSHlXUmt3QWlUUFZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuQIUMA0E AgACMAcDBQAqAmdAMA0GCSqGSIb3DQEBCwUAA4IBAQA33Qa3wOKZzX6vV+CwzlEw Lj22gtC37d3gvf8bpGy+w5hGpELlfKkG5xcepY4VEemdfeuqPVGpu6rHOcJ94bj9 Qt5YQlF3tH7HhE9qJk5NhoKbbTLzjW42ozpN9eBXfBpvUWWBcrQaEaZ37Tl3pPJI L6b2a3sjZzRNUMQKqMny8hZBKs7RVB+m+LXet4AtB7di/R/m879RzCoU2oWQN8KI k7/whQi5nTUiwtYSTH6aZfu2uqkiyj+1m3mr1O1zrVxn1ccf98rrXtSnm69YnuAm 310QPdFRlO/781CsGlwSGr+WaLc/NKdCkmIxNYnSiDxhyO9hgNrU81zLNX+17MoW -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:29 2026 by rpki-client