This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/HMK0XQoxdRxzLrSbOk3nRa3LDfU.roa File: HMK0XQoxdRxzLrSbOk3nRa3LDfU.roa (raw, json) Hash identifier: ULrE37Ak3LEpHtIRIUxe40WhUc8sSXQeL2cSCTuAsyw= Subject key identifier: 1C:C2:B4:5D:0A:31:75:1C:73:2E:B4:9B:3A:4D:E7:45:AD:CB:0D:F5 Certificate issuer: /CN=6c894ab1ebd30fb37ce229a374d3e3139d90518f Certificate serial: 019BCB67D7CE140E406B1662255482C3A143 Authority key identifier: 6C:89:4A:B1:EB:D3:0F:B3:7C:E2:29:A3:74:D3:E3:13:9D:90:51:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIlKsevTD7N84imjdNPjE52QUY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/HMK0XQoxdRxzLrSbOk3nRa3LDfU.roa Signing time: Sat 17 Jan 2026 10:02:18 +0000 ROA not before: Sat 17 Jan 2026 10:02:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205372 IP address blocks: 185.219.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.mft rsync://rpki.ripe.net/repository/DEFAULT/bIlKsevTD7N84imjdNPjE52QUY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cb:67:d7:ce:14:0e:40:6b:16:62:25:54:82:c3:a1:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c894ab1ebd30fb37ce229a374d3e3139d90518f Validity Not Before: Jan 17 10:02:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cc2b45d0a31751c732eb49b3a4de745adcb0df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a7:3a:78:9b:3e:3d:91:61:0f:04:e4:1f:fd: 08:8a:48:49:c7:72:1d:88:6e:49:90:9b:af:ff:f0: e4:b7:7a:6d:f7:27:3e:38:67:1a:ed:58:a6:b4:66: 62:db:4f:11:cb:73:f4:a9:fe:82:2f:b5:71:89:6b: c7:b2:17:ae:5a:dd:50:a4:24:cc:43:68:26:00:0e: c7:80:74:54:66:a2:a6:1c:c4:af:5c:04:21:ae:21: bb:43:98:58:44:d6:90:d5:f6:50:98:f1:07:12:97: e3:85:f8:5e:a9:1f:a3:ff:6b:5c:e5:d8:df:95:42: b8:e2:24:eb:fc:4b:d4:eb:1a:de:80:60:87:57:b6: 59:54:80:5f:e5:8e:2c:d6:f3:98:e3:39:24:74:c9: ae:60:d1:4a:5e:b5:16:c8:e0:fd:3b:e3:3f:d3:81: e6:55:b2:0e:b1:1f:dd:29:e1:ee:66:10:2a:bb:cb: 09:d9:c3:aa:0d:f8:3c:c2:32:c9:b6:1c:83:83:9d: 30:cf:5b:81:b2:5e:07:6f:46:b6:f6:49:dc:29:2d: c5:47:4f:02:cf:ce:3a:df:02:f4:df:71:ef:05:61: d9:35:54:64:7f:b3:87:09:1a:d5:da:e4:2a:f9:f2: e6:ab:39:ba:b4:4b:81:ef:c0:e5:da:75:8f:b5:6f: 61:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C2:B4:5D:0A:31:75:1C:73:2E:B4:9B:3A:4D:E7:45:AD:CB:0D:F5 X509v3 Authority Key Identifier: keyid:6C:89:4A:B1:EB:D3:0F:B3:7C:E2:29:A3:74:D3:E3:13:9D:90:51:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlKsevTD7N84imjdNPjE52QUY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/HMK0XQoxdRxzLrSbOk3nRa3LDfU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.219.72.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:ca:4e:44:aa:61:34:e1:d1:3d:58:be:f7:1a:7a:c2:52:14: 2d:3a:3e:5d:55:e6:52:67:a7:10:5e:d1:dc:85:89:6f:b3:80: fe:3a:ff:1a:04:59:25:3b:52:47:d2:28:be:08:9b:7a:d6:ce: 18:06:28:f6:21:45:85:70:a1:1f:c5:58:c1:6e:28:da:01:25: 27:15:fa:cb:0f:fe:05:ab:93:73:5f:d8:2e:5e:aa:81:92:4c: 7a:ef:94:fc:c9:3b:0a:f3:9a:13:f5:9d:6a:08:a1:80:14:ab: 39:83:94:d6:72:09:2d:53:11:82:3e:ff:e0:f4:37:d8:81:1f: 40:a1:0f:c6:56:4e:ec:6f:d1:fa:e4:34:ab:df:bb:b1:9c:d8: ad:12:6e:e2:a3:d2:b7:ac:50:bf:3f:09:55:29:38:b7:3b:97: 94:fe:fc:2c:24:bf:d3:16:70:f1:bc:72:d8:7c:3e:d5:d0:da: 2b:2b:02:f0:85:b1:c9:54:96:b5:bf:d9:83:6e:1f:11:1e:85: 9a:a4:8d:31:e5:d2:67:ad:3e:6b:c5:1e:5b:e8:db:bc:5a:99: 4a:18:a8:91:16:40:a7:28:53:31:0b:ee:ab:e6:f9:93:c2:db: 42:d6:9c:fc:7c:4b:e9:e7:95:b4:5a:eb:d4:59:69:7f:78:ad: 0b:73:be:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvLZ9fOFA5AaxZiJVSCw6FDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjODk0YWIxZWJkMzBmYjM3Y2UyMjlhMzc0ZDNlMzEzOWQ5 MDUxOGYwHhcNMjYwMTE3MTAwMjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2MyYjQ1ZDBhMzE3NTFjNzMyZWI0OWIzYTRkZTc0NWFkY2IwZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxac6eJs+PZFhDwTkH/0IikhJx3Id iG5JkJuv//Dkt3pt9yc+OGca7VimtGZi208Ry3P0qf6CL7VxiWvHsheuWt1QpCTM Q2gmAA7HgHRUZqKmHMSvXAQhriG7Q5hYRNaQ1fZQmPEHEpfjhfheqR+j/2tc5djf lUK44iTr/EvU6xregGCHV7ZZVIBf5Y4s1vOY4zkkdMmuYNFKXrUWyOD9O+M/04Hm VbIOsR/dKeHuZhAqu8sJ2cOqDfg8wjLJthyDg50wz1uBsl4Hb0a29kncKS3FR08C z8463wL033HvBWHZNVRkf7OHCRrV2uQq+fLmqzm6tEuB78Dl2nWPtW9h1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBzCtF0KMXUccy60mzpN50Wtyw31MB8GA1UdIwQY MBaAFGyJSrHr0w+zfOIpo3TT4xOdkFGPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklsS3NldlREN044NGltamROUGpFNTJRVVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZmFmNzYtMWJjMi00NzIxLTk0OTgt YTFhZTU5ZTE2ODczLzEvSE1LMFhRb3hkUnh6THJTYk9rM25SYTNMRGZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS81ZmFmNzYtMWJjMi00NzIxLTk0OTgtYTFhZTU5ZTE2ODcz LzEvYklsS3NldlREN044NGltamROUGpFNTJRVVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudtIMA0G CSqGSIb3DQEBCwUAA4IBAQCeyk5EqmE04dE9WL73GnrCUhQtOj5dVeZSZ6cQXtHc hYlvs4D+Ov8aBFklO1JH0ii+CJt61s4YBij2IUWFcKEfxVjBbijaASUnFfrLD/4F q5NzX9guXqqBkkx675T8yTsK85oT9Z1qCKGAFKs5g5TWcgktUxGCPv/g9DfYgR9A oQ/GVk7sb9H65DSr37uxnNitEm7io9K3rFC/PwlVKTi3O5eU/vwsJL/TFnDxvHLY fD7V0NorKwLwhbHJVJa1v9mDbh8RHoWapI0x5dJnrT5rxR5b6Nu8WplKGKiRFkCn KFMxC+6r5vmTwttC1pz8fEvp55W0WuvUWWl/eK0Lc768 -----END CERTIFICATE-----Generated at Tue Feb 10 00:01:40 2026 by rpki-client