This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/HsES3beeVskG3iQcc6xV4E3VNgU.roa File: HsES3beeVskG3iQcc6xV4E3VNgU.roa (raw, json) Hash identifier: 9DQDSN5ehI0ToqCW5TSIeQDcZ9d/UApN36lln/HMjAg= Subject key identifier: 1E:C1:12:DD:B7:9E:56:C9:06:DE:24:1C:73:AC:55:E0:4D:D5:36:05 Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040 Certificate serial: 019B79EC1A366E73FAC33C4071894FBC4737 Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/HsES3beeVskG3iQcc6xV4E3VNgU.roa Signing time: Thu 01 Jan 2026 14:17:54 +0000 ROA not before: Thu 01 Jan 2026 14:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63150 IP address blocks: 185.241.40.0/24 maxlen: 24 185.241.41.0/24 maxlen: 24 185.241.42.0/24 maxlen: 24 185.241.43.0/24 maxlen: 24 2a14:4900:2000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:1a:36:6e:73:fa:c3:3c:40:71:89:4f:bc:47:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040 Validity Not Before: Jan 1 14:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ec112ddb79e56c906de241c73ac55e04dd53605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9e:d4:53:69:56:29:44:74:bd:d0:ae:95:f4: ec:66:2b:dd:51:32:35:4b:7e:7a:8b:60:36:2c:93: 88:c7:e3:48:d8:f0:e0:cc:19:1a:55:33:32:a7:b4: 6b:6f:5a:a9:e5:67:f0:14:0a:73:4d:76:4e:aa:ee: 33:59:2a:05:f0:25:9a:63:e8:cd:f1:5c:f8:ac:a0: 1d:33:65:ca:dd:88:a8:84:52:d4:b3:c7:63:b6:c5: fc:b9:c3:ec:7c:4a:04:73:97:cd:54:ae:1b:04:ff: 76:e5:b8:33:fc:ab:4e:d5:29:15:b5:6f:78:5b:96: 77:51:1e:88:c0:6e:b4:e3:65:fe:99:3c:01:e0:b0: 30:a2:2f:08:c9:81:ab:5f:7c:24:02:7d:6a:72:92: 1e:a6:34:8d:1e:c1:23:66:0b:7b:02:e9:0e:7a:fe: 77:b3:3f:b3:1b:96:3e:0c:ea:11:57:eb:e3:89:95: d3:91:56:4e:46:ff:f9:34:8e:bb:8b:1f:b6:83:d5: c5:3e:51:7f:3a:a8:9f:a0:dc:09:86:ee:4a:25:d4: 0a:ba:ec:a7:c7:16:0b:b3:91:da:5f:5b:c3:c7:56: a3:a9:3a:67:2d:72:b0:3d:c4:41:ca:17:f5:d3:3c: 71:ca:73:6f:22:0e:67:9e:42:0c:b1:a7:10:7a:34: cc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C1:12:DD:B7:9E:56:C9:06:DE:24:1C:73:AC:55:E0:4D:D5:36:05 X509v3 Authority Key Identifier: keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/HsES3beeVskG3iQcc6xV4E3VNgU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.241.40.0/22 IPv6: 2a14:4900:2000::/36 Signature Algorithm: sha256WithRSAEncryption 48:91:8c:37:5d:b5:79:a0:32:c3:43:b2:3a:d0:8d:41:0f:b4: 98:60:09:13:78:49:67:bd:fe:1e:33:a0:86:ae:09:7b:05:9c: 90:5c:5e:63:1b:04:63:b2:32:b2:19:53:d6:ce:0b:4d:4d:6f: 8e:be:81:e4:b2:4e:fb:cf:7f:17:5f:81:06:55:66:0c:46:39: e4:04:9e:87:96:d9:f6:b7:1b:7a:e7:b3:2a:75:8d:a6:a7:34: 41:bc:23:13:0f:12:1f:6e:82:b4:ca:07:b0:0f:1a:34:14:b7: 8f:ff:18:bd:46:f4:0d:41:b2:cd:c2:48:1c:52:31:e9:8a:b0: e4:24:8e:31:7b:5b:7b:93:4b:d6:70:3e:0c:e4:59:4c:5d:6c: c6:3b:82:16:15:a5:3c:1d:8d:56:36:3e:b2:7f:d1:14:aa:2f: 73:d0:8d:48:fc:32:95:5e:ba:e7:82:dc:81:5a:e2:1c:2e:a6: 9c:ae:7e:31:b0:5b:45:74:c4:5c:c0:a5:fc:4d:72:ed:44:ff: b9:c8:24:3f:08:f9:64:42:16:70:a4:ab:7d:b3:a0:37:5a:4d: 4c:87:5e:71:1a:91:f6:36:59:4c:bd:45:72:21:c9:8c:35:2b: 73:df:9d:61:fd:00:5a:3e:66:84:cf:e0:f2:f1:c6:89:d2:9e: 08:69:cb:01 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt57Bo2bnP6wzxAcYlPvEc3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMGJmMThkNmJiZGIzM2RhODJmZTYxYTI4NjI0YmE3MmUy MzUwNDAwHhcNMjYwMTAxMTQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWMxMTJkZGI3OWU1NmM5MDZkZTI0MWM3M2FjNTVlMDRkZDUzNjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo57UU2lWKUR0vdCulfTsZivdUTI1 S356i2A2LJOIx+NI2PDgzBkaVTMyp7Rrb1qp5WfwFApzTXZOqu4zWSoF8CWaY+jN 8Vz4rKAdM2XK3YiohFLUs8djtsX8ucPsfEoEc5fNVK4bBP925bgz/KtO1SkVtW94 W5Z3UR6IwG6042X+mTwB4LAwoi8IyYGrX3wkAn1qcpIepjSNHsEjZgt7AukOev53 sz+zG5Y+DOoRV+vjiZXTkVZORv/5NI67ix+2g9XFPlF/OqifoNwJhu5KJdQKuuyn xxYLs5HaX1vDx1ajqTpnLXKwPcRByhf10zxxynNvIg5nnkIMsacQejTMOQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFB7BEt23nlbJBt4kHHOsVeBN1TYFMB8GA1UdIwQY MBaAFDsL8Y1rvbM9qC/mGihiS6cuI1BAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81ZGRlZTktYzFjNC00YjU3LWI2Yjgt ZDQ5OTE2YjVmMmI0LzEvSHNFUzNiZWVWc2tHM2lRY2M2eFY0RTNWTmdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS81ZGRlZTktYzFjNC00YjU3LWI2YjgtZDQ5OTE2YjVmMmI0 LzEvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCufEoMA4E AgACMAgDBgQqFEkAIDANBgkqhkiG9w0BAQsFAAOCAQEASJGMN121eaAyw0OyOtCN QQ+0mGAJE3hJZ73+HjOghq4JewWckFxeYxsEY7IyshlT1s4LTU1vjr6B5LJO+89/ F1+BBlVmDEY55ASeh5bZ9rcbeuezKnWNpqc0QbwjEw8SH26CtMoHsA8aNBS3j/8Y vUb0DUGyzcJIHFIx6Yqw5CSOMXtbe5NL1nA+DORZTF1sxjuCFhWlPB2NVjY+sn/R FKovc9CNSPwylV6654LcgVriHC6mnK5+MbBbRXTEXMCl/E1y7UT/ucgkPwj5ZEIW cKSrfbOgN1pNTIdecRqR9jZZTL1FciHJjDUrc9+dYf0AWj5mhM/g8vHGidKeCGnL AQ== -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:50 2026 by rpki-client