This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/hAy8VtAwci_v3cGOO19dEdefvMA.roa File: hAy8VtAwci_v3cGOO19dEdefvMA.roa (raw, json) Hash identifier: g1nY4ONoPi4/cXPph4hFcjnMaUzSfWsZYHkL3fHcL7Y= Subject key identifier: 84:0C:BC:56:D0:30:72:2F:EF:DD:C1:8E:3B:5F:5D:11:D7:9F:BC:C0 Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Certificate serial: 019B7F84A07BEDE24D108DDC6D4D8F1EA690 Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/hAy8VtAwci_v3cGOO19dEdefvMA.roa Signing time: Fri 02 Jan 2026 16:22:36 +0000 ROA not before: Fri 02 Jan 2026 16:22:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205575 IP address blocks: 185.137.104.0/22 maxlen: 22 185.137.104.0/24 maxlen: 24 185.137.105.0/24 maxlen: 24 185.137.106.0/24 maxlen: 24 185.137.107.0/24 maxlen: 24 185.234.156.0/22 maxlen: 22 185.234.156.0/24 maxlen: 24 185.234.157.0/24 maxlen: 24 185.234.158.0/24 maxlen: 24 185.234.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a0:7b:ed:e2:4d:10:8d:dc:6d:4d:8f:1e:a6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Validity Not Before: Jan 2 16:22:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=840cbc56d030722fefddc18e3b5f5d11d79fbcc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:57:93:76:c7:e9:3b:0c:61:bf:be:d9:a1:0b: c5:b1:4d:89:90:58:d9:ce:62:51:83:41:b9:17:c9: ac:ab:75:d7:d5:d8:25:42:84:b6:d8:be:9d:7d:0b: c0:b5:e7:7f:ce:b1:87:45:07:9d:89:63:1e:8d:cf: 24:a3:ae:db:99:0e:2c:d2:59:3e:ab:1c:6e:31:db: 16:43:43:87:93:44:54:a6:ef:f7:c1:85:18:40:41: d1:41:d5:a2:9a:f9:92:78:63:01:d1:c6:e3:35:c2: f7:a5:02:fe:6f:f2:a8:bf:61:5c:b3:2e:03:bd:6d: d0:08:3a:07:d4:e8:26:58:69:e3:3d:b6:a0:f1:c9: 98:da:2a:62:a5:5b:e4:d0:b9:27:6c:14:f4:37:5b: aa:af:33:96:a9:d3:1a:a8:fc:fc:a7:77:f9:eb:22: ee:72:29:27:01:70:db:99:f1:ca:4d:86:16:2c:69: f4:d6:a9:65:43:04:ac:cb:1f:ca:5c:86:72:d5:0d: 76:f2:95:ad:49:b7:0b:cd:64:8a:aa:e5:63:86:91: 92:db:5b:d7:92:0a:94:dd:e7:7e:9d:8b:e3:3e:79: 1f:02:c9:02:d9:07:b5:52:7c:2b:cd:93:44:ba:4c: 6a:11:1c:44:77:77:34:44:35:4c:2f:e3:d2:4e:ec: fc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0C:BC:56:D0:30:72:2F:EF:DD:C1:8E:3B:5F:5D:11:D7:9F:BC:C0 X509v3 Authority Key Identifier: keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/hAy8VtAwci_v3cGOO19dEdefvMA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.104.0/22 185.234.156.0/22 Signature Algorithm: sha256WithRSAEncryption af:92:15:fd:89:12:80:d4:d8:c9:f3:1d:58:3f:2f:96:0c:5b: dc:66:bd:0d:de:b3:06:88:a8:c0:4c:63:6f:d6:64:2d:35:ff: 76:52:67:13:cd:66:5e:b8:c0:70:73:72:3a:1f:ad:c4:b2:7f: 3b:b3:b7:86:14:58:fe:27:5f:df:40:07:80:26:3a:0d:b1:dc: a4:dd:81:37:9a:bc:6d:b0:ff:44:15:2c:31:ef:97:15:89:e9: b5:bd:2d:67:54:61:f4:0a:05:78:28:5a:15:bf:49:8d:89:7a: 13:5e:c4:f4:ef:a9:d5:e0:2c:f1:2e:44:23:85:da:15:13:28: db:0b:5a:0f:92:1c:6e:a6:d3:df:a3:58:f9:9f:2b:3d:b8:c0: f2:ff:a5:95:86:f3:e0:14:a2:fd:e7:42:ec:ce:92:8c:0e:40: 6d:6f:92:95:68:d0:b0:15:c7:74:1e:38:fa:53:95:e6:3a:cc: 1b:c0:ae:f8:b3:55:61:1f:f4:d2:5b:22:a3:af:14:56:35:76: 31:22:50:b7:f2:1a:97:7f:8e:d8:82:74:4d:d3:22:d2:d1:a3: ec:ca:8c:e4:6f:58:a4:90:93:95:cc:75:b3:d4:0c:8e:64:37: 95:54:5e:63:e1:2a:e6:3d:d2:60:d2:d6:d1:b6:b4:80:01:4f: dc:e3:f6:8f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hKB77eJNEI3cbU2PHqaQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1 MTBhYTkwHhcNMjYwMTAyMTYyMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDBjYmM1NmQwMzA3MjJmZWZkZGMxOGUzYjVmNWQxMWQ3OWZiY2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFeTdsfpOwxhv77ZoQvFsU2JkFjZ zmJRg0G5F8msq3XX1dglQoS22L6dfQvAted/zrGHRQediWMejc8ko67bmQ4s0lk+ qxxuMdsWQ0OHk0RUpu/3wYUYQEHRQdWimvmSeGMB0cbjNcL3pQL+b/Kov2Fcsy4D vW3QCDoH1OgmWGnjPbag8cmY2ipipVvk0LknbBT0N1uqrzOWqdMaqPz8p3f56yLu ciknAXDbmfHKTYYWLGn01qllQwSsyx/KXIZy1Q128pWtSbcLzWSKquVjhpGS21vX kgqU3ed+nYvjPnkfAskC2Qe1UnwrzZNEukxqERxEd3c0RDVML+PSTuz81QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIQMvFbQMHIv793BjjtfXRHXn7zAMB8GA1UdIwQY MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt M2FhMTUwYTkyYWI3LzEvaEF5OFZ0QXdjaV92M2NHT08xOWRFZGVmdk1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3 LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuYloAwQC ueqcMA0GCSqGSIb3DQEBCwUAA4IBAQCvkhX9iRKA1NjJ8x1YPy+WDFvcZr0N3rMG iKjATGNv1mQtNf92UmcTzWZeuMBwc3I6H63Esn87s7eGFFj+J1/fQAeAJjoNsdyk 3YE3mrxtsP9EFSwx75cViem1vS1nVGH0CgV4KFoVv0mNiXoTXsT076nV4CzxLkQj hdoVEyjbC1oPkhxuptPfo1j5nys9uMDy/6WVhvPgFKL950LszpKMDkBtb5KVaNCw Fcd0Hjj6U5XmOswbwK74s1VhH/TSWyKjrxRWNXYxIlC38hqXf47YgnRN0yLS0aPs yozkb1ikkJOVzHWz1AyOZDeVVF5j4SrmPdJg0tbRtrSAAU/c4/aP -----END CERTIFICATE-----Generated at Tue Feb 10 05:47:47 2026 by rpki-client