This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hPluaz2ce72z5Cezy2XMePaJEmA.roa File: hPluaz2ce72z5Cezy2XMePaJEmA.roa (raw, json) Hash identifier: l8ELIU5y8+HQtxJL1W6JSqmakct+AgSg22KUXwRKNOY= Subject key identifier: 84:F9:6E:6B:3D:9C:7B:BD:B3:E4:27:B3:CB:65:CC:78:F6:89:12:60 Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520 Certificate serial: 019B7BA34F465C99EA3DFEADAE1EDA2C92C8 Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hPluaz2ce72z5Cezy2XMePaJEmA.roa Signing time: Thu 01 Jan 2026 22:17:38 +0000 ROA not before: Thu 01 Jan 2026 22:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57357 IP address blocks: 185.11.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:4f:46:5c:99:ea:3d:fe:ad:ae:1e:da:2c:92:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520 Validity Not Before: Jan 1 22:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84f96e6b3d9c7bbdb3e427b3cb65cc78f6891260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fa:1c:dc:02:d6:77:72:53:fe:98:d0:bb:18: 8b:45:2f:46:85:71:56:79:02:e0:a9:ab:53:c1:8b: f5:fa:44:7f:22:d2:e8:34:5c:2c:b5:23:0c:03:9b: b8:34:6b:4d:75:77:20:86:b3:9e:94:84:a6:9b:da: c1:35:e8:14:91:1b:d5:1d:40:af:aa:65:bc:cf:24: d1:c4:04:c3:6f:16:b6:e3:81:a8:24:3e:af:bd:09: 01:bd:c7:84:14:7f:d5:e3:54:17:fd:fa:6d:80:dd: 97:fe:34:4e:10:f2:1f:58:ce:48:43:b3:34:c2:c7: e2:1e:c7:3f:2a:e0:72:05:32:56:fd:72:0d:7d:97: 88:f3:ae:c1:1a:71:58:fc:42:5e:c8:81:fc:18:34: c0:6a:8f:39:d4:5c:a1:b5:cb:93:3b:b4:04:b8:20: 1c:ca:c2:04:aa:f7:87:6d:04:fa:5f:52:70:d1:78: 87:61:1e:86:f9:24:7d:a3:2f:d0:85:8d:63:65:b6: 44:12:bc:d7:8f:b6:a5:89:ee:69:96:42:e9:82:a4: 4c:fb:11:22:a4:52:cc:84:d0:df:56:18:01:42:45: 2b:04:5c:b2:75:46:85:fb:89:91:5e:c5:a4:1f:db: c6:f1:2a:0b:67:4c:de:73:cc:2f:1f:99:af:19:a4: 24:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F9:6E:6B:3D:9C:7B:BD:B3:E4:27:B3:CB:65:CC:78:F6:89:12:60 X509v3 Authority Key Identifier: keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hPluaz2ce72z5Cezy2XMePaJEmA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.11.68.0/22 Signature Algorithm: sha256WithRSAEncryption b0:c0:82:cd:03:88:6e:b5:5e:60:22:b0:23:61:2b:c8:c0:6b: 47:81:21:21:40:c9:ef:8c:d7:f3:b9:2e:b9:cd:0f:bb:12:fe: 95:8f:a7:8b:6c:cd:54:da:0a:aa:9c:7c:30:3b:6c:ce:76:3f: 64:1e:48:d3:19:bc:42:a2:bb:e4:d7:19:1a:fe:b6:e8:6b:fe: 41:48:1c:2a:89:a5:dc:0c:fa:4a:85:3f:08:08:ae:90:e9:e5: 32:c3:15:52:3c:7f:94:16:1f:35:15:ec:30:8c:89:5c:bc:60: 53:42:8f:c7:38:e5:e5:e7:2e:0c:d6:b8:d6:18:37:53:0f:f4: 15:9a:f2:bb:2e:6f:88:2a:35:a5:b5:fd:4e:ec:0e:2b:a8:a9: 03:56:ab:b2:9f:8b:8a:14:53:e8:3f:11:18:19:47:8b:e7:f3: 74:27:e8:02:5b:33:f0:31:b5:ff:12:de:66:57:f7:79:06:43: a4:86:b9:62:43:3b:2a:37:01:a2:57:3f:37:8d:05:dd:30:cf: ea:8a:b4:e8:bd:ef:9d:e8:20:72:03:3d:ef:22:8f:e2:2d:d8: a3:b3:ce:99:8a:12:a6:7a:05:d2:86:39:28:2b:47:79:e8:53: 15:b8:dd:55:e5:07:b9:93:3c:cf:74:c2:b6:81:1d:2b:27:e0: 9f:2c:3c:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o09GXJnqPf6trh7aLJLIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MTg0Y2U5MTkwMjM2NDBiYjkyNTZjMmQ4ZDFhMDQ5ZmEx MDI1MjAwHhcNMjYwMTAxMjIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGY5NmU2YjNkOWM3YmJkYjNlNDI3YjNjYjY1Y2M3OGY2ODkxMjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvoc3ALWd3JT/pjQuxiLRS9GhXFW eQLgqatTwYv1+kR/ItLoNFwstSMMA5u4NGtNdXcghrOelISmm9rBNegUkRvVHUCv qmW8zyTRxATDbxa244GoJD6vvQkBvceEFH/V41QX/fptgN2X/jROEPIfWM5IQ7M0 wsfiHsc/KuByBTJW/XINfZeI867BGnFY/EJeyIH8GDTAao851FyhtcuTO7QEuCAc ysIEqveHbQT6X1Jw0XiHYR6G+SR9oy/QhY1jZbZEErzXj7alie5plkLpgqRM+xEi pFLMhNDfVhgBQkUrBFyydUaF+4mRXsWkH9vG8SoLZ0zec8wvH5mvGaQk5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIT5bms9nHu9s+Qns8tlzHj2iRJgMB8GA1UdIwQY MBaAFIQYTOkZAjZAu5JWwtjRoEn6ECUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEJoTTZSa0NOa0M3a2xiQzJOR2dTZm9RSlNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yOTIyY2YtMTg2MS00MTlkLTllZWEt MGE3OWQ1NDk2NWE5LzEvaFBsdWF6MmNlNzJ6NUNlenkyWE1lUGFKRW1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8yOTIyY2YtMTg2MS00MTlkLTllZWEtMGE3OWQ1NDk2NWE5 LzEvaEJoTTZSa0NOa0M3a2xiQzJOR2dTZm9RSlNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQtEMA0G CSqGSIb3DQEBCwUAA4IBAQCwwILNA4hutV5gIrAjYSvIwGtHgSEhQMnvjNfzuS65 zQ+7Ev6Vj6eLbM1U2gqqnHwwO2zOdj9kHkjTGbxCorvk1xka/rboa/5BSBwqiaXc DPpKhT8ICK6Q6eUywxVSPH+UFh81FewwjIlcvGBTQo/HOOXl5y4M1rjWGDdTD/QV mvK7Lm+IKjWltf1O7A4rqKkDVquyn4uKFFPoPxEYGUeL5/N0J+gCWzPwMbX/Et5m V/d5BkOkhrliQzsqNwGiVz83jQXdMM/qirTove+d6CByAz3vIo/iLdijs86ZihKm egXShjkoK0d56FMVuN1V5Qe5kzzPdMK2gR0rJ+CfLDzn -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:51 2026 by rpki-client