This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/hKL5QitdPai5IwAtGM4Ywcw5ujM.roa File: hKL5QitdPai5IwAtGM4Ywcw5ujM.roa (raw, json) Hash identifier: EwiyCLBBZHnOEl+iUCVn9fJpMBkap4IApaR4l/qmt84= Subject key identifier: 84:A2:F9:42:2B:5D:3D:A8:B9:23:00:2D:18:CE:18:C1:CC:39:BA:33 Certificate issuer: /CN=ae68c9518c2ad54c0acb821468c86e45ba161c18 Certificate serial: 019B7758D2859A4D6B78BF9A7CCE3C3EBA38 Authority key identifier: AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/hKL5QitdPai5IwAtGM4Ywcw5ujM.roa Signing time: Thu 01 Jan 2026 02:17:48 +0000 ROA not before: Thu 01 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202531 IP address blocks: 185.151.219.0/24 maxlen: 24 185.206.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d2:85:9a:4d:6b:78:bf:9a:7c:ce:3c:3e:ba:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae68c9518c2ad54c0acb821468c86e45ba161c18 Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84a2f9422b5d3da8b923002d18ce18c1cc39ba33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0a:cb:c0:fb:ea:bf:dd:dd:9d:c5:85:b5:fd: e6:08:4d:61:91:1c:79:e1:40:ac:02:78:cf:f0:ab: c3:13:e2:65:62:9e:c8:cf:49:7b:37:4f:a7:8d:2d: 05:f5:b8:27:d5:39:a5:70:12:13:c3:a4:11:49:7c: f2:b7:5c:0e:30:18:3e:21:60:8e:db:04:ed:fc:7c: 09:f0:d0:19:9f:cc:7b:9e:24:bd:d1:ae:24:1a:9a: 76:48:3e:41:0b:4c:68:c6:25:d9:7f:26:a4:56:cd: 43:e8:b4:e5:f1:fe:1c:3d:82:22:d3:c3:92:34:f0: bb:57:3b:8b:74:ab:81:88:1c:ee:8a:b3:9f:47:e1: a0:5a:29:1a:50:b2:1b:d9:47:d8:87:70:d1:84:fe: a1:21:0a:1d:ba:7a:55:01:3a:3d:aa:48:65:44:d1: 3f:c2:be:43:d6:20:ae:6e:c0:d5:b6:65:e5:86:68: f1:46:31:bd:86:ab:96:d2:e8:6d:93:6a:31:8e:00: 6a:3b:c9:4b:b5:50:76:9e:42:11:f8:0c:95:ee:61: 12:cf:b2:e4:5c:54:ff:d3:ce:b2:ff:e7:f2:a5:39: 0a:b1:ad:b0:5e:60:ff:23:0e:2d:bb:31:00:93:e2: 68:c0:94:c7:54:50:85:67:4e:9d:83:4a:d9:69:2e: 6a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A2:F9:42:2B:5D:3D:A8:B9:23:00:2D:18:CE:18:C1:CC:39:BA:33 X509v3 Authority Key Identifier: keyid:AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/hKL5QitdPai5IwAtGM4Ywcw5ujM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.151.219.0/24 185.206.254.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:54:1c:1f:7b:18:4a:a7:49:75:dc:66:06:dd:b4:16:13:91: 56:20:fa:41:c6:07:02:cb:16:4a:76:6d:08:8f:bf:aa:03:b1: 3d:30:e0:2c:3a:dc:2f:e7:6f:6d:6e:1f:f6:96:19:75:58:ce: ba:c8:17:35:4e:4b:99:00:94:4a:b2:ec:8e:ff:69:97:02:ea: b5:e7:51:08:ce:a3:5d:c2:ec:42:54:b5:21:a6:4b:fa:a4:5a: 56:88:63:3e:ec:29:40:fd:ad:79:37:a4:74:f9:3b:42:1e:f7: de:7d:31:36:f3:8b:27:40:18:85:bc:0c:03:a0:06:bd:55:56: ad:8c:61:5c:c6:90:c6:6a:b4:c3:33:d7:03:ad:5b:86:df:75: 38:16:2d:18:9a:25:9c:71:57:4f:15:e4:0b:88:65:c7:5c:03: 87:dd:b1:42:9a:c7:91:99:30:3a:f5:88:9f:f3:8e:c2:21:7d: b7:82:25:8f:25:de:e2:d5:5c:32:30:f9:57:da:08:04:12:b7: bc:7d:23:14:d1:e2:60:96:17:f9:05:d4:16:bc:ed:b2:a5:fe: 87:86:d7:b1:af:be:a6:90:75:30:64:22:c7:ff:0f:58:b5:9e: 85:72:dd:7b:ec:ae:76:c8:1a:5e:63:aa:7e:53:41:68:61:e8: 5d:09:a1:ad -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WNKFmk1reL+afM48Pro4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNjhjOTUxOGMyYWQ1NGMwYWNiODIxNDY4Yzg2ZTQ1YmEx NjFjMTgwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGEyZjk0MjJiNWQzZGE4YjkyMzAwMmQxOGNlMThjMWNjMzliYTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3grLwPvqv93dncWFtf3mCE1hkRx5 4UCsAnjP8KvDE+JlYp7Iz0l7N0+njS0F9bgn1TmlcBITw6QRSXzyt1wOMBg+IWCO 2wTt/HwJ8NAZn8x7niS90a4kGpp2SD5BC0xoxiXZfyakVs1D6LTl8f4cPYIi08OS NPC7VzuLdKuBiBzuirOfR+GgWikaULIb2UfYh3DRhP6hIQodunpVATo9qkhlRNE/ wr5D1iCubsDVtmXlhmjxRjG9hquW0uhtk2oxjgBqO8lLtVB2nkIR+AyV7mESz7Lk XFT/086y/+fypTkKsa2wXmD/Iw4tuzEAk+JowJTHVFCFZ06dg0rZaS5qXQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFISi+UIrXT2ouSMALRjOGMHMObozMB8GA1UdIwQY MBaAFK5oyVGMKtVMCsuCFGjIbkW6FhwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm1qSlVZd3ExVXdLeTRJVWFNaHVSYm9XSEJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83YjQyYjQtMWQxMi00MmNmLWE4ZjAt MTZiNmJlZGE4N2QwLzEvaEtMNVFpdGRQYWk1SXdBdEdNNFl3Y3c1dWpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS83YjQyYjQtMWQxMi00MmNmLWE4ZjAtMTZiNmJlZGE4N2Qw LzEvcm1qSlVZd3ExVXdLeTRJVWFNaHVSYm9XSEJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuZfbAwQA uc7+MA0GCSqGSIb3DQEBCwUAA4IBAQBOVBwfexhKp0l13GYG3bQWE5FWIPpBxgcC yxZKdm0Ij7+qA7E9MOAsOtwv529tbh/2lhl1WM66yBc1TkuZAJRKsuyO/2mXAuq1 51EIzqNdwuxCVLUhpkv6pFpWiGM+7ClA/a15N6R0+TtCHvfefTE284snQBiFvAwD oAa9VVatjGFcxpDGarTDM9cDrVuG33U4Fi0YmiWccVdPFeQLiGXHXAOH3bFCmseR mTA69Yif847CIX23giWPJd7i1VwyMPlX2ggEEre8fSMU0eJglhf5BdQWvO2ypf6H htexr76mkHUwZCLH/w9YtZ6Fct177K52yBpeY6p+U0FoYehdCaGt -----END CERTIFICATE-----Generated at Tue Feb 10 02:33:32 2026 by rpki-client