This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/HCkHGxOIl0AvSluH6FDwE5YOqmY.roa File: HCkHGxOIl0AvSluH6FDwE5YOqmY.roa (raw, json) Hash identifier: ZodFEdt/PdT+m5KjweAMGEU2ve/bYXAovApfHVhI2mg= Subject key identifier: 1C:29:07:1B:13:88:97:40:2F:4A:5B:87:E8:50:F0:13:96:0E:AA:66 Certificate issuer: /CN=e726926b6e8970cf84d6b4756fa9c56211200537 Certificate serial: 019B7B35850A02F2F62B01C4B3E09C05B8D6 Authority key identifier: E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/HCkHGxOIl0AvSluH6FDwE5YOqmY.roa Signing time: Thu 01 Jan 2026 20:17:43 +0000 ROA not before: Thu 01 Jan 2026 20:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47701 IP address blocks: 185.144.40.0/22 maxlen: 22 185.144.40.0/24 maxlen: 24 185.144.41.0/24 maxlen: 24 185.144.42.0/24 maxlen: 24 185.144.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:85:0a:02:f2:f6:2b:01:c4:b3:e0:9c:05:b8:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e726926b6e8970cf84d6b4756fa9c56211200537 Validity Not Before: Jan 1 20:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c29071b138897402f4a5b87e850f013960eaa66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:1b:d3:77:0f:b6:0a:72:90:ef:4e:90:e6: ae:5c:81:77:a9:ce:d5:63:0b:58:d7:a7:ed:ba:58: 9f:f5:71:83:31:17:c7:f3:23:e7:ac:bf:88:8b:9c: 21:1d:88:94:45:3e:ca:54:6b:6d:47:b0:8f:16:53: 94:bf:cb:57:a0:fc:85:bb:52:2a:70:a0:8a:cf:34: f9:b4:fa:ee:0b:f2:c6:46:93:12:e2:b9:d7:4b:7e: f9:b8:92:8c:3a:cb:31:c6:33:5e:30:cd:7f:f4:fa: e4:cc:d3:92:58:43:cc:e7:09:4e:9f:c3:a2:5e:9b: 87:fe:84:f3:4d:72:92:ef:07:75:8b:44:e9:89:71: 9f:34:fc:25:11:d1:25:5e:ec:df:53:f8:da:85:37: f5:d4:2a:a7:f6:d7:17:ea:43:5a:7a:86:29:38:bb: 98:6e:61:2d:4f:38:e0:ff:e0:2a:f5:fc:3d:60:7b: 79:ff:39:d4:16:fb:74:a5:96:59:ef:df:b1:74:90: dd:5f:b5:8d:97:93:47:c0:cd:3c:20:6b:fc:57:e8: 68:42:f8:e2:c6:c9:a9:98:ac:b6:e7:dd:5f:03:d5: 20:0d:25:92:f7:84:8a:95:18:25:47:dd:ee:25:f5: a3:f7:61:0c:da:b8:f5:07:dc:8d:a6:03:6a:74:64: 65:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:29:07:1B:13:88:97:40:2F:4A:5B:87:E8:50:F0:13:96:0E:AA:66 X509v3 Authority Key Identifier: keyid:E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/HCkHGxOIl0AvSluH6FDwE5YOqmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.40.0/22 Signature Algorithm: sha256WithRSAEncryption 32:b8:fd:1f:0a:b6:a2:f5:6e:46:d9:94:05:b0:aa:b3:9b:e9: dc:20:fc:59:9f:5d:54:07:97:8d:b3:d3:9d:9c:b2:54:97:28: 12:d8:08:eb:29:27:52:86:a3:ed:32:96:6a:b5:87:81:66:ff: f3:f1:21:b3:e7:ea:43:d3:52:e7:d4:52:41:b3:7d:3f:bd:4e: 65:99:ed:09:25:8a:39:5b:75:d6:9d:73:e8:3a:0c:c2:96:99: 09:b4:13:1a:be:8f:c7:5e:f4:94:3d:10:4c:87:36:84:0d:98: 84:50:1d:ee:df:58:6e:dc:7a:4a:e4:39:eb:75:d8:dd:67:5b: f9:4a:9b:0c:c3:3d:82:70:9b:aa:35:7a:47:c3:82:de:74:b1: 4b:33:72:d5:25:e9:2a:09:31:a5:0f:5e:45:84:7a:5d:81:26: 19:2e:74:20:fe:aa:38:6f:18:61:6a:06:27:15:c4:a7:47:df: db:f3:28:30:e0:81:76:2d:56:5a:c4:ea:3b:f6:1a:91:51:22: 21:51:db:9b:91:ff:f8:d0:1b:6c:27:05:5d:67:70:27:27:83: 25:96:28:30:74:8e:e7:8c:b1:84:49:f0:57:af:0a:4b:7c:a4: 5f:53:50:4e:ae:e1:25:13:06:23:7d:73:6c:93:ec:c1:d0:4e: 99:51:2c:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NYUKAvL2KwHEs+CcBbjWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MjY5MjZiNmU4OTcwY2Y4NGQ2YjQ3NTZmYTljNTYyMTEy MDA1MzcwHhcNMjYwMTAxMjAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzI5MDcxYjEzODg5NzQwMmY0YTViODdlODUwZjAxMzk2MGVhYTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU0b03cPtgpykO9OkOauXIF3qc7V YwtY16ftulif9XGDMRfH8yPnrL+Ii5whHYiURT7KVGttR7CPFlOUv8tXoPyFu1Iq cKCKzzT5tPruC/LGRpMS4rnXS375uJKMOssxxjNeMM1/9PrkzNOSWEPM5wlOn8Oi XpuH/oTzTXKS7wd1i0TpiXGfNPwlEdElXuzfU/jahTf11Cqn9tcX6kNaeoYpOLuY bmEtTzjg/+Aq9fw9YHt5/znUFvt0pZZZ79+xdJDdX7WNl5NHwM08IGv8V+hoQvji xsmpmKy2591fA9UgDSWS94SKlRglR93uJfWj92EM2rj1B9yNpgNqdGRlgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBwpBxsTiJdAL0pbh+hQ8BOWDqpmMB8GA1UdIwQY MBaAFOcmkmtuiXDPhNa0dW+pxWIRIAU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXlhU2EyNkpjTS1FMXJSMWI2bkZZaEVnQlRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kNzE4ZTQtOGFiYy00YjIzLWFjMTAt YzEwMmVlOTY4NThlLzEvSENrSEd4T0lsMEF2U2x1SDZGRHdFNVlPcW1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9kNzE4ZTQtOGFiYy00YjIzLWFjMTAtYzEwMmVlOTY4NThl LzEvNXlhU2EyNkpjTS1FMXJSMWI2bkZZaEVnQlRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZAoMA0G CSqGSIb3DQEBCwUAA4IBAQAyuP0fCrai9W5G2ZQFsKqzm+ncIPxZn11UB5eNs9Od nLJUlygS2AjrKSdShqPtMpZqtYeBZv/z8SGz5+pD01Ln1FJBs30/vU5lme0JJYo5 W3XWnXPoOgzClpkJtBMavo/HXvSUPRBMhzaEDZiEUB3u31hu3HpK5DnrddjdZ1v5 SpsMwz2CcJuqNXpHw4LedLFLM3LVJekqCTGlD15FhHpdgSYZLnQg/qo4bxhhagYn FcSnR9/b8ygw4IF2LVZaxOo79hqRUSIhUdubkf/40BtsJwVdZ3AnJ4MlligwdI7n jLGESfBXrwpLfKRfU1BOruElEwYjfXNsk+zB0E6ZUSzZ -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:57 2026 by rpki-client