This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/hqUy8qtpbSzgGsth7bhGSC_Ob5o.roa File: hqUy8qtpbSzgGsth7bhGSC_Ob5o.roa (raw, json) Hash identifier: y0DH54HnscuJTZ0/mvHb9xk81GdngOIoXJepxEnN/Is= Subject key identifier: 86:A5:32:F2:AB:69:6D:2C:E0:1A:CB:61:ED:B8:46:48:2F:CE:6F:9A Certificate issuer: /CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486 Certificate serial: 019B7C80A1DE4445668C54A588AD16DF117E Authority key identifier: 32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/hqUy8qtpbSzgGsth7bhGSC_Ob5o.roa Signing time: Fri 02 Jan 2026 02:19:23 +0000 ROA not before: Fri 02 Jan 2026 02:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49621 IP address blocks: 185.105.200.0/22 maxlen: 22 188.64.48.0/21 maxlen: 21 2a03:8f00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a1:de:44:45:66:8c:54:a5:88:ad:16:df:11:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486 Validity Not Before: Jan 2 02:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86a532f2ab696d2ce01acb61edb846482fce6f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:78:32:2c:e5:b9:34:38:a8:0f:6e:72:3a: b6:98:a1:44:57:83:3b:ed:86:73:04:00:48:83:24: 33:d7:6c:5c:39:e2:57:fe:11:8b:15:15:68:16:f8: 37:1c:aa:8d:3d:5f:cd:a9:1f:65:7b:75:b5:84:78: 5b:50:f3:45:54:ef:36:58:38:88:eb:77:3b:d6:6d: 59:6d:23:25:2e:82:40:b8:ae:fa:db:45:aa:73:64: 7d:10:47:97:23:73:e6:31:af:86:f8:6b:f9:b8:ba: 16:cf:3a:35:31:80:0e:2f:1f:53:36:43:11:30:a8: b0:c1:a4:b9:58:9d:a4:ec:f4:e0:33:6d:1a:51:b7: 84:63:56:9b:58:d2:5d:80:d8:2e:1d:f5:d1:03:83: 4b:46:98:22:3d:73:ab:3e:82:3a:c5:3c:da:ab:fd: df:13:ed:73:ff:c8:9a:70:80:8f:9e:cd:e0:04:17: 42:f3:ca:fb:ac:a7:ab:50:80:d5:f8:ee:4c:4b:eb: d8:a6:3a:35:54:0a:37:9b:23:92:15:8a:44:05:83: 31:63:be:f8:5f:78:c9:cf:77:c9:1a:a4:9b:da:e7: 6b:0f:b5:4d:e0:d2:25:c4:21:86:61:14:8a:34:05: 7c:61:0a:72:cd:22:09:db:5c:30:67:fa:c0:ae:dc: 48:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A5:32:F2:AB:69:6D:2C:E0:1A:CB:61:ED:B8:46:48:2F:CE:6F:9A X509v3 Authority Key Identifier: keyid:32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/hqUy8qtpbSzgGsth7bhGSC_Ob5o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.105.200.0/22 188.64.48.0/21 IPv6: 2a03:8f00::/29 Signature Algorithm: sha256WithRSAEncryption 58:ed:f5:0b:e8:62:d6:7a:7f:f4:f2:55:f9:63:a1:7b:42:56: 93:48:cb:f9:8c:62:71:1b:c2:2c:1b:72:ec:55:69:f4:79:b5: 2f:1b:d5:6d:84:79:04:97:70:d3:0c:49:ec:c7:cb:e1:e6:9b: a5:ee:92:77:eb:a1:55:00:0a:dc:91:22:c4:b2:67:fa:26:1c: f6:a4:8c:ab:22:91:04:53:36:75:f6:5d:32:d7:3a:59:e1:34: ee:57:7f:b8:21:5e:2a:bb:85:a7:3b:c3:68:86:15:08:7e:61: 09:62:27:b8:c3:b2:56:37:16:16:b4:3d:87:20:d7:99:1b:f7: 39:3a:d7:8f:9c:a4:63:7f:2c:1c:16:3d:b1:bd:18:8d:eb:1d: 60:94:3a:f5:08:84:e9:be:12:09:a3:09:3c:01:c1:79:a0:03: 31:45:05:55:23:93:52:2b:20:24:7e:c2:15:76:e8:b9:7f:09: c5:62:be:11:2f:c0:da:d8:42:da:7a:e8:0f:ef:81:dc:01:31: 62:75:9d:84:24:a7:52:36:a3:6e:9c:40:7f:89:e5:c7:69:62: 8e:c3:92:e7:25:ab:84:2d:b1:3f:b4:72:12:29:bb:1e:79:15: 37:f5:90:03:3b:e0:24:1c:6d:61:4b:c7:55:fa:1c:c8:be:db: 64:b7:52:da -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8gKHeREVmjFSliK0W3xF+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyM2FiNWJhOThiZWY1ZDBkOWJkMGNlYTAzMWExZmUxMzc3 N2E0ODYwHhcNMjYwMTAyMDIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmE1MzJmMmFiNjk2ZDJjZTAxYWNiNjFlZGI4NDY0ODJmY2U2ZjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHN4MizluTQ4qA9ucjq2mKFEV4M7 7YZzBABIgyQz12xcOeJX/hGLFRVoFvg3HKqNPV/NqR9le3W1hHhbUPNFVO82WDiI 63c71m1ZbSMlLoJAuK7620Wqc2R9EEeXI3PmMa+G+Gv5uLoWzzo1MYAOLx9TNkMR MKiwwaS5WJ2k7PTgM20aUbeEY1abWNJdgNguHfXRA4NLRpgiPXOrPoI6xTzaq/3f E+1z/8iacICPns3gBBdC88r7rKerUIDV+O5MS+vYpjo1VAo3myOSFYpEBYMxY774 X3jJz3fJGqSb2udrD7VN4NIlxCGGYRSKNAV8YQpyzSIJ21wwZ/rArtxInwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIalMvKraW0s4BrLYe24Rkgvzm+aMB8GA1UdIwQY MBaAFDI6tbqYvvXQ2b0M6gMaH+E3d6SGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWpxMXVwaS05ZERadlF6cUF4b2Y0VGQzcElZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iMDEyOTAtZDc2ZC00MmQ4LWEyMzQt Zjk1MTI0OTllMDVjLzEvaHFVeThxdHBiU3pnR3N0aDdiaEdTQ19PYjVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9iMDEyOTAtZDc2ZC00MmQ4LWEyMzQtZjk1MTI0OTllMDVj LzEvTWpxMXVwaS05ZERadlF6cUF4b2Y0VGQzcElZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuWnIAwQD vEAwMA0EAgACMAcDBQMqA48AMA0GCSqGSIb3DQEBCwUAA4IBAQBY7fUL6GLWen/0 8lX5Y6F7QlaTSMv5jGJxG8IsG3LsVWn0ebUvG9VthHkEl3DTDEnsx8vh5pul7pJ3 66FVAArckSLEsmf6Jhz2pIyrIpEEUzZ19l0y1zpZ4TTuV3+4IV4qu4WnO8NohhUI fmEJYie4w7JWNxYWtD2HINeZG/c5OtePnKRjfywcFj2xvRiN6x1glDr1CITpvhIJ owk8AcF5oAMxRQVVI5NSKyAkfsIVdui5fwnFYr4RL8Da2ELaeugP74HcATFidZ2E JKdSNqNunEB/ieXHaWKOw5LnJauELbE/tHISKbseeRU39ZADO+AkHG1hS8dV+hzI vttkt1La -----END CERTIFICATE-----Generated at Tue Feb 10 07:12:47 2026 by rpki-client