This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/hLq5oWkJELQbNcRkoEuFG9HYL_U.roa File: hLq5oWkJELQbNcRkoEuFG9HYL_U.roa (raw, json) Hash identifier: yfA7tS4NCGXvzY+87zTkkeYt5A3me3y/07bpWLgYXqg= Subject key identifier: 84:BA:B9:A1:69:09:10:B4:1B:35:C4:64:A0:4B:85:1B:D1:D8:2F:F5 Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94 Certificate serial: 019B7BA4C4AE02A896EAF07227BCB6E183D4 Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/hLq5oWkJELQbNcRkoEuFG9HYL_U.roa Signing time: Thu 01 Jan 2026 22:19:14 +0000 ROA not before: Thu 01 Jan 2026 22:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204576 IP address blocks: 185.75.221.0/24 maxlen: 24 2a0d:a640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c4:ae:02:a8:96:ea:f0:72:27:bc:b6:e1:83:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94 Validity Not Before: Jan 1 22:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84bab9a1690910b41b35c464a04b851bd1d82ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ea:fc:38:7a:95:0c:15:4d:61:b8:d5:75:5a: 49:b9:c2:c2:e3:86:aa:07:25:a6:7d:37:4e:2f:84: 68:13:e7:9f:68:42:c1:94:a2:ad:41:36:41:6b:80: 03:97:5d:e9:9d:e2:41:a2:dc:51:b2:09:9f:76:82: e7:a3:0f:f2:d2:f4:4d:37:d8:5b:2e:4c:09:25:ba: df:a1:1e:17:8b:47:e0:3b:af:b5:85:64:af:fa:f5: 98:8a:0f:fe:b8:ca:38:c5:57:a5:36:bc:e5:91:03: 26:d1:21:ea:66:0c:aa:a2:59:42:65:01:1a:56:76: 28:10:64:9f:24:03:d9:a8:29:6a:01:9b:b3:37:7e: 4f:ab:46:2d:98:48:41:06:51:0f:b0:c6:c6:88:b9: 3a:4f:86:fd:83:57:4b:ff:23:d2:75:08:08:41:18: ef:88:90:74:59:80:ab:5e:cf:e5:d7:c8:29:0b:31: e0:5a:c5:c9:26:75:c8:f1:e8:e1:2d:23:e0:2f:47: e0:3a:c6:e3:b6:85:0a:31:30:49:20:57:6b:d3:7c: 22:00:4f:de:4a:8c:6f:98:83:31:64:5e:98:bc:ee: 0b:1b:0e:12:f3:95:8d:a3:64:e2:d4:b0:da:ae:2a: 51:14:3c:05:1d:c9:3b:51:b3:12:11:82:c8:3c:04: 43:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BA:B9:A1:69:09:10:B4:1B:35:C4:64:A0:4B:85:1B:D1:D8:2F:F5 X509v3 Authority Key Identifier: keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/hLq5oWkJELQbNcRkoEuFG9HYL_U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.221.0/24 IPv6: 2a0d:a640::/29 Signature Algorithm: sha256WithRSAEncryption 4c:24:e3:a8:e0:76:73:21:33:b6:48:01:bb:47:da:0b:45:e4: c4:cf:fc:9b:69:ef:15:ed:75:f4:1c:68:dc:db:b6:84:ee:a5: 71:fc:d2:95:c2:a4:c2:a2:fe:d6:21:6c:a9:e9:04:4d:30:63: ea:89:c0:99:14:bd:5f:8b:eb:2a:f9:4c:ea:6e:44:ac:2e:a5: 84:59:fd:e7:ec:50:5a:d6:df:b2:13:17:3f:74:e6:bf:ff:03: 85:ca:cb:73:05:2e:e0:16:84:af:0a:e3:c1:24:fd:e9:11:0e: 88:dd:c6:2e:5b:c5:90:19:17:1a:56:43:5b:69:1e:9f:ff:af: 09:78:dd:aa:08:07:6e:67:ee:be:12:8e:3a:52:0b:cb:97:6a: 8b:1e:de:25:99:cd:bb:56:5b:2f:3b:31:89:e0:6b:eb:cf:6d: fa:1d:c1:41:f6:8b:fb:cf:91:ee:c9:83:67:73:3d:fb:c4:79: 8b:bd:f8:9d:74:78:21:a4:d5:12:3f:0a:63:ac:af:a9:f8:40: 0d:8d:e4:1a:ec:87:d2:5c:d0:e1:a9:90:ab:ef:5c:a5:83:2e: 7d:d5:8c:50:85:e4:30:6b:c4:60:c2:84:e4:89:af:01:8a:93: 73:08:7c:e9:a2:de:20:4d:9f:81:40:e3:a1:c6:18:19:67:60: 59:d9:64:0f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pMSuAqiW6vByJ7y24YPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MzM0YWQ5YjNmYzUyMTAzMGJlOTlhNTE1NzIxMWI2NjMy MTZjOTQwHhcNMjYwMTAxMjIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGJhYjlhMTY5MDkxMGI0MWIzNWM0NjRhMDRiODUxYmQxZDgyZmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOr8OHqVDBVNYbjVdVpJucLC44aq ByWmfTdOL4RoE+efaELBlKKtQTZBa4ADl13pneJBotxRsgmfdoLnow/y0vRNN9hb LkwJJbrfoR4Xi0fgO6+1hWSv+vWYig/+uMo4xVelNrzlkQMm0SHqZgyqollCZQEa VnYoEGSfJAPZqClqAZuzN35Pq0YtmEhBBlEPsMbGiLk6T4b9g1dL/yPSdQgIQRjv iJB0WYCrXs/l18gpCzHgWsXJJnXI8ejhLSPgL0fgOsbjtoUKMTBJIFdr03wiAE/e SoxvmIMxZF6YvO4LGw4S85WNo2Ti1LDaripRFDwFHck7UbMSEYLIPARDWQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIS6uaFpCRC0GzXEZKBLhRvR2C/1MB8GA1UdIwQY MBaAFOczStmz/FIQML6ZpRVyEbZjIWyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXpOSzJiUDhVaEF3dnBtbEZYSVJ0bU1oYkpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iMDRiMmUtNzNlNi00ODg3LThkZjEt MzcyMmRmMDczNjAzLzEvaExxNW9Xa0pFTFFiTmNSa29FdUZHOUhZTF9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iMDRiMmUtNzNlNi00ODg3LThkZjEtMzcyMmRmMDczNjAz LzEvNXpOSzJiUDhVaEF3dnBtbEZYSVJ0bU1oYkpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuUvdMA0E AgACMAcDBQMqDaZAMA0GCSqGSIb3DQEBCwUAA4IBAQBMJOOo4HZzITO2SAG7R9oL ReTEz/ybae8V7XX0HGjc27aE7qVx/NKVwqTCov7WIWyp6QRNMGPqicCZFL1fi+sq +UzqbkSsLqWEWf3n7FBa1t+yExc/dOa//wOFystzBS7gFoSvCuPBJP3pEQ6I3cYu W8WQGRcaVkNbaR6f/68JeN2qCAduZ+6+Eo46UgvLl2qLHt4lmc27VlsvOzGJ4Gvr z236HcFB9ov7z5HuyYNncz37xHmLvfiddHghpNUSPwpjrK+p+EANjeQa7IfSXNDh qZCr71ylgy591YxQheQwa8RgwoTkia8BipNzCHzpot4gTZ+BQOOhxhgZZ2BZ2WQP -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:09 2026 by rpki-client