This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/HadOqbA-zW7zuAMsfZ5snCO_uJI.roa File: HadOqbA-zW7zuAMsfZ5snCO_uJI.roa (raw, json) Hash identifier: c383oFdITf3uYihF/VSMwy3YXg/GVpIdA63Ws7pcO3U= Subject key identifier: 1D:A7:4E:A9:B0:3E:CD:6E:F3:B8:03:2C:7D:9E:6C:9C:23:BF:B8:92 Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Certificate serial: 019B7C1181A96B86CA5198DB83C1FDFB7E08 Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/HadOqbA-zW7zuAMsfZ5snCO_uJI.roa Signing time: Fri 02 Jan 2026 00:18:00 +0000 ROA not before: Fri 02 Jan 2026 00:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202302 IP address blocks: 185.143.145.0/24 maxlen: 24 185.235.218.0/24 maxlen: 24 185.235.219.0/24 maxlen: 24 185.253.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:81:a9:6b:86:ca:51:98:db:83:c1:fd:fb:7e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Validity Not Before: Jan 2 00:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1da74ea9b03ecd6ef3b8032c7d9e6c9c23bfb892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b1:59:e7:1b:f7:9b:d4:e7:f5:b4:af:fe:d3: 3e:f2:a7:52:3f:c9:7c:92:cc:61:e8:e0:a5:3a:97: 21:69:cf:5a:ad:d7:bc:58:ce:37:3f:39:8f:33:fb: 97:60:64:69:83:7d:3d:98:87:7c:6c:bf:dc:7e:4e: d3:2d:21:5b:7a:50:b5:ef:1a:e9:5b:b7:d9:96:d1: 05:a9:7e:22:0a:d6:50:0a:0b:82:e3:d9:9a:61:cf: 33:f8:23:b0:a9:0d:53:b4:22:09:48:ec:f3:3b:43: 77:56:f6:bc:5f:88:ba:2c:9e:6d:0b:63:6f:d9:6b: ae:27:24:ed:26:e2:b9:54:97:a2:04:ec:c3:46:47: 68:44:f1:dc:9d:17:46:7a:9d:f8:87:72:da:90:23: 90:b3:3b:79:b7:e8:02:36:9f:67:ac:dc:3d:a4:db: ff:ae:6f:c5:56:a4:5b:01:d7:09:ea:3d:e7:a5:27: b6:4a:ef:0d:83:c0:4d:be:cd:0c:ad:2b:d0:d9:00: 1b:60:87:a5:ba:b3:94:20:78:65:2f:11:08:1f:94: c7:ab:38:53:11:0c:70:d8:b4:19:21:bc:c6:97:c0: f2:37:43:fd:14:8b:e9:56:53:8e:60:5a:9b:eb:3d: 79:8f:90:4e:b3:59:d4:96:66:4c:8d:3f:28:cf:50: d5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A7:4E:A9:B0:3E:CD:6E:F3:B8:03:2C:7D:9E:6C:9C:23:BF:B8:92 X509v3 Authority Key Identifier: keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/HadOqbA-zW7zuAMsfZ5snCO_uJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.145.0/24 185.235.218.0/23 185.253.218.0/24 Signature Algorithm: sha256WithRSAEncryption 40:dd:69:3e:95:32:cc:32:c7:59:fe:dd:54:6f:c9:ed:65:8c: 5c:cb:79:90:97:49:9f:d2:9c:25:91:98:35:2d:44:9b:96:60: b8:64:53:28:50:0b:4e:a8:81:d7:34:e4:64:ec:d0:80:88:df: 2f:af:7c:cc:ea:48:5e:30:26:86:4d:4a:67:01:dc:dc:86:ce: ee:ab:77:65:35:ab:be:58:eb:19:0f:3f:62:47:f1:a0:83:ba: 40:89:eb:a6:08:7d:a4:ce:fe:a5:1e:a5:b4:d9:b9:60:4b:fb: b5:0b:92:6e:4f:ea:61:ca:82:b8:21:97:2d:0a:b1:03:eb:58: 80:0e:17:03:75:1c:a2:a8:e3:8b:13:c6:2d:80:49:8f:7e:a4: 6a:5e:ae:d3:e8:da:a8:71:d1:68:0e:64:ea:d9:f4:c4:f7:fb: f0:ea:5d:2a:8f:5f:8e:53:59:c9:22:1a:80:0d:e5:bb:dd:a4: 4f:f4:42:bd:53:f2:f2:18:b9:74:80:14:e8:1c:ff:29:20:d6: ae:be:fc:e8:e6:e7:56:85:b2:58:e4:49:c8:78:c3:b4:bf:d9: c2:0e:64:41:91:1c:70:c6:ae:28:eb:61:4c:b8:25:f6:2c:01: 5a:50:db:e3:c2:e0:d0:aa:65:86:01:b5:d2:01:de:6d:fa:4a: 5b:2b:60:f2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EYGpa4bKUZjbg8H9+34IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4 ODE3ZmMwHhcNMjYwMTAyMDAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGE3NGVhOWIwM2VjZDZlZjNiODAzMmM3ZDllNmM5YzIzYmZiODkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLFZ5xv3m9Tn9bSv/tM+8qdSP8l8 ksxh6OClOpchac9arde8WM43PzmPM/uXYGRpg309mId8bL/cfk7TLSFbelC17xrp W7fZltEFqX4iCtZQCguC49maYc8z+COwqQ1TtCIJSOzzO0N3Vva8X4i6LJ5tC2Nv 2WuuJyTtJuK5VJeiBOzDRkdoRPHcnRdGep34h3LakCOQszt5t+gCNp9nrNw9pNv/ rm/FVqRbAdcJ6j3npSe2Su8Ng8BNvs0MrSvQ2QAbYIelurOUIHhlLxEIH5THqzhT EQxw2LQZIbzGl8DyN0P9FIvpVlOOYFqb6z15j5BOs1nUlmZMjT8oz1DV+QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFB2nTqmwPs1u87gDLH2ebJwjv7iSMB8GA1UdIwQY MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt NDZiOTQ5MDkyY2JlLzEvSGFkT3FiQS16Vzd6dUFNc2ZaNXNuQ09fdUpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuY+RAwQB uevaAwQAuf3aMA0GCSqGSIb3DQEBCwUAA4IBAQBA3Wk+lTLMMsdZ/t1Ub8ntZYxc y3mQl0mf0pwlkZg1LUSblmC4ZFMoUAtOqIHXNORk7NCAiN8vr3zM6kheMCaGTUpn Adzchs7uq3dlNau+WOsZDz9iR/Ggg7pAieumCH2kzv6lHqW02blgS/u1C5JuT+ph yoK4IZctCrED61iADhcDdRyiqOOLE8YtgEmPfqRqXq7T6NqocdFoDmTq2fTE9/vw 6l0qj1+OU1nJIhqADeW73aRP9EK9U/LyGLl0gBToHP8pINauvvzo5udWhbJY5EnI eMO0v9nCDmRBkRxwxq4o62FMuCX2LAFaUNvjwuDQqmWGAbXSAd5t+kpbK2Dy -----END CERTIFICATE-----Generated at Mon Jan 12 02:31:00 2026 by rpki-client