This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/hQ65-JJPcn9XxnJlMV8R8YaKILg.roa File: hQ65-JJPcn9XxnJlMV8R8YaKILg.roa (raw, json) Hash identifier: BnQj/39qzfqqWoNJrrD5UWocu4HxdA3qcueXigYXVac= Subject key identifier: 85:0E:B9:F8:92:4F:72:7F:57:C6:72:65:31:5F:11:F1:86:8A:20:B8 Certificate issuer: /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1 Certificate serial: 019B7A5AE02B3DDA8A945C29462B2E9C36D6 Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/hQ65-JJPcn9XxnJlMV8R8YaKILg.roa Signing time: Thu 01 Jan 2026 16:18:54 +0000 ROA not before: Thu 01 Jan 2026 16:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50531 IP address blocks: 185.53.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e0:2b:3d:da:8a:94:5c:29:46:2b:2e:9c:36:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1 Validity Not Before: Jan 1 16:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=850eb9f8924f727f57c67265315f11f1868a20b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1b:99:90:6a:7e:81:25:55:d1:1a:88:61:0a: f6:31:18:e1:0f:97:ae:fa:48:0b:c8:6d:54:44:b3: a3:52:e4:e5:ff:05:33:e2:5d:04:a1:c3:80:4a:83: 46:d5:84:e5:c0:fb:13:8d:7c:bc:41:68:bb:5b:8b: 64:a6:5f:80:ba:9c:82:6f:54:92:52:7a:92:df:2d: ff:68:15:2f:86:31:1d:41:17:70:4c:5c:5f:64:0e: 75:de:5d:2a:0a:1c:9a:cc:89:05:13:a2:91:d6:18: 6e:b5:ae:42:9d:69:1e:e3:61:99:35:0b:28:b1:4b: ba:a5:8a:3b:00:52:b1:53:3c:2e:6e:ad:85:6a:12: 3e:4c:02:aa:77:e4:c7:3c:4b:09:d9:f6:38:a8:4b: fc:55:5a:33:99:83:32:5f:82:a6:9b:a8:c4:ca:00: 01:b5:3b:a2:74:55:cc:3a:ae:e9:ef:5b:98:c6:aa: 87:c7:5f:a8:a5:52:9e:10:e5:a8:37:5d:7e:47:17: e5:40:b6:26:d6:c6:87:51:d5:39:67:20:80:75:8a: 5d:c7:3c:69:ae:c2:f2:ee:82:33:74:c3:d9:ae:cc: 2b:34:2a:ed:59:64:f6:3f:3c:b0:9b:11:2b:13:5c: 01:10:8a:49:33:93:e1:6e:0f:89:ee:f5:07:15:de: 2f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0E:B9:F8:92:4F:72:7F:57:C6:72:65:31:5F:11:F1:86:8A:20:B8 X509v3 Authority Key Identifier: keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/hQ65-JJPcn9XxnJlMV8R8YaKILg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.53.191.0/24 Signature Algorithm: sha256WithRSAEncryption c5:b9:7f:12:a0:8b:8e:b4:55:5a:b3:c8:a7:91:f1:2c:90:b1: 81:bd:c0:67:0a:a4:d7:da:b5:d7:00:0a:a9:1e:bf:79:b2:28: 80:12:9d:c9:d7:1f:a8:59:31:64:2a:a1:10:67:f3:86:f6:d2: 00:2c:b2:37:20:e2:68:1a:54:0b:a9:fe:ae:8a:f5:bb:0b:c3: e4:e8:78:80:45:b4:24:3a:1f:6d:16:49:1f:19:fa:d2:49:28: 91:fe:52:52:33:b7:08:ce:22:45:58:de:97:1a:72:cd:d5:f9: 03:f6:1e:3e:c4:ef:ac:2f:66:b8:1c:35:4c:34:5b:28:f6:ff: 27:2d:a1:f1:62:e7:7d:fa:0c:be:a6:3e:d0:81:2e:30:35:2c: 39:6b:ae:f3:a9:5c:0b:5d:6a:c2:12:85:01:f2:5b:5a:fc:83: b6:ad:11:25:5d:09:f2:6f:92:89:83:9e:b9:1f:72:ec:d6:d7: 13:8b:c8:14:ce:6f:3a:d3:cf:5d:50:c3:c8:c3:72:ae:99:2e: fb:42:1a:e9:16:fc:58:13:85:7a:bc:ae:b8:fd:a7:68:5c:09: b4:a3:57:a0:63:04:9a:b1:55:5e:64:7a:e7:ae:0d:38:4d:15: 3e:25:13:6f:67:3c:58:9a:fc:ad:a9:7c:07:7e:20:47:aa:92: 06:a7:f4:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WuArPdqKlFwpRisunDbWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTgyMDJiNGQwYzVjMTExZDM3NGYxZTk4YjczZGI0OTI0 ZDY0YjEwHhcNMjYwMTAxMTYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTBlYjlmODkyNGY3MjdmNTdjNjcyNjUzMTVmMTFmMTg2OGEyMGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBuZkGp+gSVV0RqIYQr2MRjhD5eu +kgLyG1URLOjUuTl/wUz4l0EocOASoNG1YTlwPsTjXy8QWi7W4tkpl+AupyCb1SS UnqS3y3/aBUvhjEdQRdwTFxfZA513l0qChyazIkFE6KR1hhuta5CnWke42GZNQso sUu6pYo7AFKxUzwubq2FahI+TAKqd+THPEsJ2fY4qEv8VVozmYMyX4Kmm6jEygAB tTuidFXMOq7p71uYxqqHx1+opVKeEOWoN11+RxflQLYm1saHUdU5ZyCAdYpdxzxp rsLy7oIzdMPZrswrNCrtWWT2PzywmxErE1wBEIpJM5Phbg+J7vUHFd4vCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIUOufiST3J/V8ZyZTFfEfGGiiC4MB8GA1UdIwQY MBaAFCqoICtNDFwRHTdPHpi3PbSSTWSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yN2IzYjMtNGIyMi00NzQwLWE2NWEt NmU3YmFlNWZmODk4LzEvaFE2NS1KSlBjbjlYeG5KbE1WOFI4WWFLSUxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8yN2IzYjMtNGIyMi00NzQwLWE2NWEtNmU3YmFlNWZmODk4 LzEvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTW/MA0G CSqGSIb3DQEBCwUAA4IBAQDFuX8SoIuOtFVas8inkfEskLGBvcBnCqTX2rXXAAqp Hr95siiAEp3J1x+oWTFkKqEQZ/OG9tIALLI3IOJoGlQLqf6uivW7C8Pk6HiARbQk Oh9tFkkfGfrSSSiR/lJSM7cIziJFWN6XGnLN1fkD9h4+xO+sL2a4HDVMNFso9v8n LaHxYud9+gy+pj7QgS4wNSw5a67zqVwLXWrCEoUB8lta/IO2rRElXQnyb5KJg565 H3Ls1tcTi8gUzm86089dUMPIw3KumS77QhrpFvxYE4V6vK64/adoXAm0o1egYwSa sVVeZHrnrg04TRU+JRNvZzxYmvytqXwHfiBHqpIGp/Q0 -----END CERTIFICATE-----Generated at Tue Feb 10 00:10:06 2026 by rpki-client