This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/hK5lLAYeEFCKLEcmlgGIxpgeFig.roa File: hK5lLAYeEFCKLEcmlgGIxpgeFig.roa (raw, json) Hash identifier: ya0PEJnK8zefLN3DEt7Na6bo0IiHLAvZHRV5UX0rkk8= Subject key identifier: 84:AE:65:2C:06:1E:10:50:8A:2C:47:26:96:01:88:C6:98:1E:16:28 Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a Certificate serial: 019B7AC85B882CB0C88615FDEA812925460B Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/hK5lLAYeEFCKLEcmlgGIxpgeFig.roa Signing time: Thu 01 Jan 2026 18:18:29 +0000 ROA not before: Thu 01 Jan 2026 18:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16086 IP address blocks: 185.174.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:5b:88:2c:b0:c8:86:15:fd:ea:81:29:25:46:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a Validity Not Before: Jan 1 18:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84ae652c061e10508a2c4726960188c6981e1628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:17:51:58:1a:8b:c7:9c:c3:4e:09:92:50:2f: 32:16:13:ba:e9:e1:08:f7:2f:71:32:63:5e:43:97: fc:2c:69:4a:c5:89:a5:71:ee:4e:99:ef:a3:95:ca: 81:3d:93:16:dc:07:c1:20:be:5c:d4:f6:3d:76:31: de:09:09:c2:10:19:61:e7:91:5b:5a:ee:29:cf:ab: d0:16:65:5a:31:13:dd:08:6c:cd:69:a2:03:b8:c8: 5b:f2:fd:f5:be:ef:23:6e:f9:95:fa:88:d1:64:54: 43:8e:dc:f9:24:ef:e4:1b:3d:9b:bf:02:fb:e0:7c: 10:01:ee:93:7c:3d:76:d4:ba:1f:29:cb:2b:31:b3: cd:72:bd:c3:b0:b0:7e:c5:33:39:c7:d3:56:7a:f6: e9:f1:04:bf:c6:8f:5d:eb:1f:93:b2:d2:37:86:ab: cb:19:bd:36:fe:73:c3:46:71:d3:6e:da:52:74:09: 79:2d:ed:29:74:c9:c7:ea:58:bc:c7:78:65:02:a4: 01:6b:0b:62:12:f9:e3:54:4d:1c:e6:10:e6:51:7e: 5d:7e:c5:77:d7:f3:53:8e:f0:d4:57:06:be:06:c2: b2:65:3f:f3:ae:31:d3:0d:7b:b1:b8:a1:eb:9f:a7: 5a:b3:ff:46:9c:2c:6a:55:94:56:a0:90:cc:44:1f: ed:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AE:65:2C:06:1E:10:50:8A:2C:47:26:96:01:88:C6:98:1E:16:28 X509v3 Authority Key Identifier: keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/hK5lLAYeEFCKLEcmlgGIxpgeFig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.174.24.0/22 Signature Algorithm: sha256WithRSAEncryption b2:d7:8e:cc:18:82:2c:52:96:91:a4:80:d7:a6:08:ed:ec:5c: a0:92:62:6f:0f:2d:69:24:b6:99:d8:20:11:bc:9b:ae:fb:37: 46:69:d9:11:af:a0:51:14:e6:35:4d:e4:e1:8a:ac:ca:37:45: 04:2e:9a:42:32:77:71:3b:0c:b2:98:37:75:d7:b7:4a:6b:df: d0:2f:87:91:f9:13:17:5e:b7:58:26:94:c7:0a:6c:4f:57:d0: b0:19:29:92:f7:b3:9c:7f:47:97:eb:82:e2:8c:50:e3:c4:8f: 9e:48:89:65:a6:64:4c:28:67:18:a5:bc:66:6b:db:d9:ef:c0: 4f:9f:fc:40:d6:3d:b7:99:cb:80:1d:64:cd:dc:84:17:74:44: 77:00:48:fb:c4:3a:c7:c8:07:fa:d9:e5:cf:3d:29:b8:86:c4: ab:08:69:04:ed:08:95:d1:5d:d5:ba:4c:e5:6c:a2:49:00:32: 5f:6e:6b:4a:0b:73:4b:da:7c:53:a4:dd:37:d3:8a:be:67:0b: ec:17:19:ad:ef:5e:ce:d4:f9:ec:3d:f4:40:33:dc:24:d3:ae: 20:eb:6b:0e:fe:47:5a:18:97:3d:84:a7:fc:24:77:03:0b:50: 5e:3c:b3:a4:c4:61:f4:b8:ac:d5:04:ad:a6:96:06:b3:3c:b4: cc:49:3d:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yFuILLDIhhX96oEpJUYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZTY5ODVjOGRhYzhjYzY3NzJiN2ZkMzljM2E3NTY0NGMy NWEyNWEwHhcNMjYwMTAxMTgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGFlNjUyYzA2MWUxMDUwOGEyYzQ3MjY5NjAxODhjNjk4MWUxNjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBdRWBqLx5zDTgmSUC8yFhO66eEI 9y9xMmNeQ5f8LGlKxYmlce5Ome+jlcqBPZMW3AfBIL5c1PY9djHeCQnCEBlh55Fb Wu4pz6vQFmVaMRPdCGzNaaIDuMhb8v31vu8jbvmV+ojRZFRDjtz5JO/kGz2bvwL7 4HwQAe6TfD121LofKcsrMbPNcr3DsLB+xTM5x9NWevbp8QS/xo9d6x+TstI3hqvL Gb02/nPDRnHTbtpSdAl5Le0pdMnH6li8x3hlAqQBawtiEvnjVE0c5hDmUX5dfsV3 1/NTjvDUVwa+BsKyZT/zrjHTDXuxuKHrn6das/9GnCxqVZRWoJDMRB/tAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFISuZSwGHhBQiixHJpYBiMaYHhYoMB8GA1UdIwQY MBaAFEXmmFyNrIzGdyt/05w6dWRMJaJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NGM0YTctMzYxYS00ODI5LWE0NjIt NjkyNDI1NzUzMGIwLzEvaEs1bExBWWVFRkNLTEVjbWxnR0l4cGdlRmlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82NGM0YTctMzYxYS00ODI5LWE0NjItNjkyNDI1NzUzMGIw LzEvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCua4YMA0G CSqGSIb3DQEBCwUAA4IBAQCy147MGIIsUpaRpIDXpgjt7FygkmJvDy1pJLaZ2CAR vJuu+zdGadkRr6BRFOY1TeThiqzKN0UELppCMndxOwyymDd117dKa9/QL4eR+RMX XrdYJpTHCmxPV9CwGSmS97Ocf0eX64LijFDjxI+eSIllpmRMKGcYpbxma9vZ78BP n/xA1j23mcuAHWTN3IQXdER3AEj7xDrHyAf62eXPPSm4hsSrCGkE7QiV0V3Vukzl bKJJADJfbmtKC3NL2nxTpN0304q+ZwvsFxmt717O1PnsPfRAM9wk064g62sO/kda GJc9hKf8JHcDC1BePLOkxGH0uKzVBK2mlgazPLTMST0i -----END CERTIFICATE-----Generated at Mon Jan 26 21:09:10 2026 by rpki-client