This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/HOp2jzb00JVG7hGcpmwz-YejBiA.roa File: HOp2jzb00JVG7hGcpmwz-YejBiA.roa (raw, json) Hash identifier: az7il00pr1Ws5fJ/aExDjxq5+Lv6ZMAjzs01eExhQbQ= Subject key identifier: 1C:EA:76:8F:36:F4:D0:95:46:EE:11:9C:A6:6C:33:F9:87:A3:06:20 Certificate issuer: /CN=571456649692e60566de008e126bbdd1d2ebed45 Certificate serial: 019B7FF1FBE0551F07A8F6B37A0CFC5B7B86 Authority key identifier: 57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/HOp2jzb00JVG7hGcpmwz-YejBiA.roa Signing time: Fri 02 Jan 2026 18:22:03 +0000 ROA not before: Fri 02 Jan 2026 18:22:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59853 IP address blocks: 178.216.246.0/24 maxlen: 24 185.68.228.0/23 maxlen: 23 185.68.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:fb:e0:55:1f:07:a8:f6:b3:7a:0c:fc:5b:7b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571456649692e60566de008e126bbdd1d2ebed45 Validity Not Before: Jan 2 18:22:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cea768f36f4d09546ee119ca66c33f987a30620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:96:91:b7:8b:5e:2c:49:68:0b:88:d1:48:b1: f7:96:90:ae:40:ca:8f:45:94:0b:3c:7e:eb:b2:bc: 9d:5f:02:f4:62:d8:df:18:f1:76:1c:3d:af:ed:97: e5:aa:25:10:5e:34:9c:43:ff:61:43:e1:cb:f4:53: 55:95:54:7c:58:8e:9c:61:7d:af:36:f7:f2:bc:ec: af:40:85:f2:3a:36:ad:07:cd:37:ab:c7:74:d5:f4: 8b:f1:56:40:31:11:81:34:87:51:77:26:16:c4:8e: 21:a8:d6:40:d4:fa:97:e6:2b:37:29:8f:ed:44:de: b0:ef:ff:33:76:ab:eb:e3:86:d2:35:ca:54:ff:96: fa:f3:0b:d8:58:75:d6:7d:4e:a4:78:d5:95:2e:85: da:ec:5d:3f:0b:92:72:19:cd:a2:39:5c:2d:fb:32: 61:16:0d:f9:cd:42:c8:a5:99:40:9b:21:a3:9b:ae: 8a:3f:f5:2a:e9:87:6e:26:e8:17:40:fa:e7:cf:c5: c4:82:64:5b:da:e9:88:d6:c5:b5:3e:63:c6:69:d0: 01:96:8d:82:10:f1:85:e3:ee:ab:65:2f:94:af:fc: 04:a1:cc:50:61:ba:bc:15:9b:43:1d:6d:53:c4:51: 45:08:78:fd:c7:25:12:16:b9:99:2c:3c:c2:2b:1d: 32:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EA:76:8F:36:F4:D0:95:46:EE:11:9C:A6:6C:33:F9:87:A3:06:20 X509v3 Authority Key Identifier: keyid:57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/HOp2jzb00JVG7hGcpmwz-YejBiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.216.246.0/24 185.68.228.0/22 Signature Algorithm: sha256WithRSAEncryption ad:2a:9d:77:35:f5:0c:f5:ef:c4:04:a1:8f:3e:0e:c8:b5:85: 0f:ff:cf:5d:ef:fe:a6:ab:10:e6:6a:d4:b2:04:15:82:88:80: 1f:a5:a7:56:c1:c2:2e:2b:c6:b7:ca:48:29:c4:4e:13:d1:e2: f5:be:aa:c9:08:4e:a0:43:fb:51:3f:0e:92:f9:9c:32:20:40: 72:f1:32:89:4e:b6:c7:c3:40:6e:5a:45:c4:a7:28:ba:1a:38: 39:a0:9e:0e:30:b4:17:40:b0:4d:a9:c6:aa:6e:26:b9:28:12: f2:e9:90:2a:49:94:6f:34:82:cd:e8:d9:fb:62:f6:ec:3f:b3: a7:ed:47:56:d4:ef:cc:17:f3:d4:2e:01:4f:eb:6c:b1:29:b5: 3c:2c:f9:51:80:3e:23:95:74:d7:b3:2e:ed:f0:ba:ee:04:ab: 4c:0b:39:2f:ef:db:90:88:a0:2c:8b:1e:22:c8:00:92:4d:41: 1a:0a:44:3a:65:51:8a:60:1e:4e:d5:b6:13:29:35:4f:f2:a3: b7:b3:67:aa:07:f6:23:b4:bc:99:c4:41:be:20:db:f6:50:42: fb:de:fc:48:52:74:db:ad:ed:08:1a:7a:ec:87:5a:c6:22:7d: ff:0a:9f:0c:1c:4b:7a:3f:43:21:1f:77:6e:6c:e6:ff:c5:14: 0c:b6:b4:97 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8fvgVR8HqPazegz8W3uGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MTQ1NjY0OTY5MmU2MDU2NmRlMDA4ZTEyNmJiZGQxZDJl YmVkNDUwHhcNMjYwMTAyMTgyMjAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2VhNzY4ZjM2ZjRkMDk1NDZlZTExOWNhNjZjMzNmOTg3YTMwNjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZaRt4teLEloC4jRSLH3lpCuQMqP RZQLPH7rsrydXwL0YtjfGPF2HD2v7ZflqiUQXjScQ/9hQ+HL9FNVlVR8WI6cYX2v NvfyvOyvQIXyOjatB803q8d01fSL8VZAMRGBNIdRdyYWxI4hqNZA1PqX5is3KY/t RN6w7/8zdqvr44bSNcpU/5b68wvYWHXWfU6keNWVLoXa7F0/C5JyGc2iOVwt+zJh Fg35zULIpZlAmyGjm66KP/Uq6YduJugXQPrnz8XEgmRb2umI1sW1PmPGadABlo2C EPGF4+6rZS+Ur/wEocxQYbq8FZtDHW1TxFFFCHj9xyUSFrmZLDzCKx0y4wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBzqdo829NCVRu4RnKZsM/mHowYgMB8GA1UdIwQY MBaAFFcUVmSWkuYFZt4AjhJrvdHS6+1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhSV1pKYVM1Z1ZtM2dDT0VtdTkwZExyN1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wOGE3ZmYtMmNlZi00MjQ4LTlmZTgt MDRjOGYzZWVjZWViLzEvSE9wMmp6YjAwSlZHN2hHY3Btd3otWWVqQmlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wOGE3ZmYtMmNlZi00MjQ4LTlmZTgtMDRjOGYzZWVjZWVi LzEvVnhSV1pKYVM1Z1ZtM2dDT0VtdTkwZExyN1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAstj2AwQC uUTkMA0GCSqGSIb3DQEBCwUAA4IBAQCtKp13NfUM9e/EBKGPPg7ItYUP/89d7/6m qxDmatSyBBWCiIAfpadWwcIuK8a3ykgpxE4T0eL1vqrJCE6gQ/tRPw6S+ZwyIEBy 8TKJTrbHw0BuWkXEpyi6Gjg5oJ4OMLQXQLBNqcaqbia5KBLy6ZAqSZRvNILN6Nn7 YvbsP7On7UdW1O/MF/PULgFP62yxKbU8LPlRgD4jlXTXsy7t8LruBKtMCzkv79uQ iKAsix4iyACSTUEaCkQ6ZVGKYB5O1bYTKTVP8qO3s2eqB/YjtLyZxEG+INv2UEL7 3vxIUnTbre0IGnrsh1rGIn3/Cp8MHEt6P0MhH3dubOb/xRQMtrSX -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:19 2026 by rpki-client