This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/Hmzl33O9ENxxpSkgQ-w_OKZuVqE.roa File: Hmzl33O9ENxxpSkgQ-w_OKZuVqE.roa (raw, json) Hash identifier: MINPErO1BGuqVLJnTV2HhR7juWWefaDwKRV1A+XQOf8= Subject key identifier: 1E:6C:E5:DF:73:BD:10:DC:71:A5:29:20:43:EC:3F:38:A6:6E:56:A1 Certificate issuer: /CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a Certificate serial: 019B7F1574B8175F8F1C1B892F0DE7CFDE9C Authority key identifier: A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/Hmzl33O9ENxxpSkgQ-w_OKZuVqE.roa Signing time: Fri 02 Jan 2026 14:21:11 +0000 ROA not before: Fri 02 Jan 2026 14:21:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216219 IP address blocks: 185.28.44.0/24 maxlen: 24 2a13:f740::/48 maxlen: 48 2a13:f740:1::/48 maxlen: 48 2a13:f740:2::/48 maxlen: 48 2a13:f740:3::/48 maxlen: 48 2a13:f740:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:74:b8:17:5f:8f:1c:1b:89:2f:0d:e7:cf:de:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a Validity Not Before: Jan 2 14:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e6ce5df73bd10dc71a5292043ec3f38a66e56a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:99:91:b0:fd:62:1b:c2:28:08:cc:f0:79:c0: 2e:97:61:c0:55:81:6b:65:30:58:b4:3f:9b:c9:6f: 71:d7:17:8d:87:35:e3:70:04:34:29:09:c5:0f:25: 70:7b:77:45:40:9a:51:3f:05:c0:ca:02:19:e6:b1: 9b:ad:10:44:34:50:5f:aa:56:06:fe:8f:2e:ad:de: 96:dd:eb:4e:69:c0:5e:f1:41:2c:59:3d:41:6e:ca: 53:07:e4:f4:e3:e0:93:81:09:3b:35:bf:0e:1f:5b: de:25:6c:71:87:1d:a6:6f:33:49:bf:c7:56:99:3d: 28:c8:e9:fb:58:07:b9:48:62:7d:47:6a:9a:63:15: 8a:f1:9e:19:04:8a:17:90:91:3e:82:45:cf:ad:25: 44:0d:fb:5f:e5:ca:53:71:f2:0f:22:a0:92:3c:ca: 63:64:b1:34:d6:48:c8:91:63:b6:69:bc:05:49:42: dd:e9:3c:0a:f1:e6:d2:64:91:ea:84:fa:e5:1a:cf: f1:dc:ee:23:39:9b:e5:78:79:9a:3f:2c:6c:a9:82: 4c:f9:93:54:5f:f9:da:6f:6b:5e:74:48:54:c5:a6: d4:cf:88:fe:2d:83:d2:15:45:84:85:01:64:c6:93: ce:45:7a:3d:18:36:67:f2:9c:bd:b5:74:7b:8c:f3: 75:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6C:E5:DF:73:BD:10:DC:71:A5:29:20:43:EC:3F:38:A6:6E:56:A1 X509v3 Authority Key Identifier: keyid:A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/Hmzl33O9ENxxpSkgQ-w_OKZuVqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.28.44.0/24 IPv6: 2a13:f740::-2a13:f740:4:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 60:d3:8d:6d:e7:ed:79:e4:7b:5a:7b:27:06:05:6b:4c:37:67: 72:9e:fd:83:23:bb:7d:7e:d0:e2:9d:de:10:73:02:73:93:06: bc:9a:f7:df:5f:ec:a8:35:ee:8a:f8:75:cd:a5:42:e7:69:45: 71:44:f2:04:31:c0:dc:36:d4:ca:c3:65:b4:de:f8:2b:7e:31: 6f:51:fb:34:ab:d4:3c:38:6b:64:d6:80:46:dc:e2:71:10:74: 67:be:23:f4:d3:16:83:4a:2f:f9:a5:fc:14:98:d8:de:d3:19: 19:cc:57:4e:0e:4c:56:ca:2c:38:57:70:a0:d2:26:7e:be:d1: 82:58:4a:63:5a:48:6e:3b:8f:3b:26:04:a0:e7:0a:94:f1:c2: 76:8b:53:65:36:bc:d9:80:b1:d5:d0:68:e6:49:4c:f8:d2:d1: b0:31:3c:10:96:b4:8d:11:fa:48:00:cc:c4:28:92:15:fd:cb: 23:10:a4:c2:a8:89:06:de:11:4b:10:21:bc:c8:d3:a0:0e:4f: 6d:4c:5a:04:3e:cb:1d:f0:3d:5f:2d:48:43:dd:33:44:2c:ec: 8d:d0:69:39:23:eb:e5:29:fe:1f:15:c4:e9:87:ac:84:56:ba: 87:80:50:f9:5a:67:f0:50:0f:a2:c7:e5:a8:57:2c:e9:7f:d6: b0:51:76:89 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/FXS4F1+PHBuJLw3nz96cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YThhNjkwMDlhZDJlODkwOTg2YmRkNzZjNjMzYzFiMzFm MDZmM2EwHhcNMjYwMTAyMTQyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTZjZTVkZjczYmQxMGRjNzFhNTI5MjA0M2VjM2YzOGE2NmU1NmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JmRsP1iG8IoCMzwecAul2HAVYFr ZTBYtD+byW9x1xeNhzXjcAQ0KQnFDyVwe3dFQJpRPwXAygIZ5rGbrRBENFBfqlYG /o8urd6W3etOacBe8UEsWT1BbspTB+T04+CTgQk7Nb8OH1veJWxxhx2mbzNJv8dW mT0oyOn7WAe5SGJ9R2qaYxWK8Z4ZBIoXkJE+gkXPrSVEDftf5cpTcfIPIqCSPMpj ZLE01kjIkWO2abwFSULd6TwK8ebSZJHqhPrlGs/x3O4jOZvleHmaPyxsqYJM+ZNU X/nab2tedEhUxabUz4j+LYPSFUWEhQFkxpPORXo9GDZn8py9tXR7jPN1CwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFB5s5d9zvRDccaUpIEPsPzimblahMB8GA1UdIwQY MBaAFKWoppAJrS6JCYa912xjPBsx8G86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGFpbWtBbXRMb2tKaHIzWGJHTThHekh3YnpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jNGRhZGEtMWEyOS00NDlhLTlhYzYt YjEyZWJmMzQ1YmMzLzEvSG16bDMzTzlFTnh4cFNrZ1Etd19PS1p1VnFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9jNGRhZGEtMWEyOS00NDlhLTlhYzYtYjEyZWJmMzQ1YmMz LzEvcGFpbWtBbXRMb2tKaHIzWGJHTThHekh3YnpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAuRwsMBgE AgACMBIwEAMFBioT90ADBwAqE/dAAAQwDQYJKoZIhvcNAQELBQADggEBAGDTjW3n 7Xnke1p7JwYFa0w3Z3Ke/YMju31+0OKd3hBzAnOTBrya999f7Kg17or4dc2lQudp RXFE8gQxwNw21MrDZbTe+Ct+MW9R+zSr1Dw4a2TWgEbc4nEQdGe+I/TTFoNKL/ml /BSY2N7TGRnMV04OTFbKLDhXcKDSJn6+0YJYSmNaSG47jzsmBKDnCpTxwnaLU2U2 vNmAsdXQaOZJTPjS0bAxPBCWtI0R+kgAzMQokhX9yyMQpMKoiQbeEUsQIbzI06AO T21MWgQ+yx3wPV8tSEPdM0Qs7I3QaTkj6+Up/h8VxOmHrIRWuoeAUPlaZ/BQD6LH 5ahXLOl/1rBRdok= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:05 2026 by rpki-client