This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/hze4A0V92MfHhyu7x2NvKYYAUsU.roa
File: hze4A0V92MfHhyu7x2NvKYYAUsU.roa (raw, json)
Hash identifier: dle1j6BffFc6fGo61Udoz+fPmbQB19nVhumxOtstYAI=
Subject key identifier: 87:37:B8:03:45:7D:D8:C7:C7:87:2B:BB:C7:63:6F:29:86:00:52:C5
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019B7E37F3D5073ADD2F34312E86D488AA15
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/hze4A0V92MfHhyu7x2NvKYYAUsU.roa
Signing time: Fri 02 Jan 2026 10:19:14 +0000
ROA not before: Fri 02 Jan 2026 10:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216169
IP address blocks: 185.26.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:f3:d5:07:3a:dd:2f:34:31:2e:86:d4:88:aa:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 2 10:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8737b803457dd8c7c7872bbbc7636f29860052c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:94:fa:b7:24:cd:bf:db:90:7e:5c:d6:ac:
d2:c0:58:ea:19:64:b1:ce:db:65:aa:3d:2c:b5:17:
04:4a:55:f9:f1:d4:2c:94:cf:5b:70:59:e0:d3:4d:
7f:5a:5a:5b:02:80:5a:48:8a:80:2d:e0:bf:97:0d:
a0:b3:ab:cc:c2:2b:7c:38:53:64:43:dd:a8:96:76:
da:22:6c:b1:6b:31:29:2f:35:8f:a8:6a:4d:48:8d:
2a:7a:64:52:12:61:49:a7:6d:13:eb:81:a3:83:b0:
b4:3a:17:31:d2:71:a7:64:76:8e:b9:7a:4e:f3:42:
1d:9b:f8:2e:90:06:a1:5a:2c:8c:5f:1a:34:d8:73:
c3:f3:40:05:6c:40:77:db:db:b7:4b:cc:3f:f3:1a:
5f:c5:c5:14:09:00:54:26:72:93:c5:b8:2b:c9:94:
bd:ad:4a:d9:11:d9:ee:1c:44:47:0d:82:f5:12:41:
f6:48:88:d6:a3:f1:20:7f:b6:c6:57:ef:75:8d:09:
b8:5f:72:a7:47:0c:50:e7:3b:db:43:73:b6:c3:97:
49:2b:d3:59:b7:04:91:77:9e:e0:b2:26:fa:5e:80:
0a:d7:4d:ff:69:52:dd:95:87:86:e7:b4:b0:22:33:
57:78:0d:d1:3d:bc:c8:3d:e2:16:71:39:91:d8:bf:
53:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:37:B8:03:45:7D:D8:C7:C7:87:2B:BB:C7:63:6F:29:86:00:52:C5
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/hze4A0V92MfHhyu7x2NvKYYAUsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.32.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:96:c5:0c:a0:e7:55:9d:a6:ab:cb:d0:f3:54:c8:97:da:30:
12:9d:85:fc:df:23:8e:54:25:b0:d1:c5:c5:65:eb:fc:ed:87:
c9:15:8d:7e:ae:06:4d:eb:1c:ee:e8:bd:fa:c1:af:46:1a:54:
f1:48:17:79:10:2b:7b:06:3c:80:4d:52:19:5b:e9:45:02:74:
e9:fb:07:1f:99:70:cd:69:4c:5b:81:fc:7d:d0:e7:99:be:0d:
57:0c:d4:3a:25:50:44:a5:73:f0:31:4d:4c:fc:35:ca:3b:10:
78:5d:1e:c5:1b:88:ec:59:9f:a5:e2:6d:3a:bf:42:cb:bb:8a:
d8:95:89:bd:53:bb:c0:50:f3:d6:5b:ad:79:27:2e:93:9d:4e:
45:f4:03:b2:84:bd:12:16:00:14:f2:81:e7:a1:b5:9c:12:f1:
67:67:76:de:29:aa:a4:12:6b:71:3a:2d:fc:23:a0:30:45:7b:
22:0b:8d:a6:90:65:3f:f0:de:ea:6b:04:5a:ac:cf:e1:d8:fe:
5e:43:69:d6:19:02:ee:56:4d:0f:2f:e4:27:79:f2:78:80:ee:
1a:28:a5:de:6b:97:96:31:57:83:06:6b:cc:62:a4:46:81:1c:
93:17:19:f3:b7:54:3a:2c:32:67:6d:76:71:35:ff:9b:f5:65:
e3:2d:e4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:24:30 2026 by rpki-client