This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/hyfFakadnytXl4p0xrQCeFJgUhU.roa File: hyfFakadnytXl4p0xrQCeFJgUhU.roa (raw, json) Hash identifier: OoK7VERj3Hnh56OBMYeBHkMVOjO2QMd8/KNIimfFc/Y= Subject key identifier: 87:27:C5:6A:46:9D:9F:2B:57:97:8A:74:C6:B4:02:78:52:60:52:15 Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc Certificate serial: 019B7A5AB90FE7F9419A53EBAD15EFEFF29C Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/hyfFakadnytXl4p0xrQCeFJgUhU.roa Signing time: Thu 01 Jan 2026 16:18:44 +0000 ROA not before: Thu 01 Jan 2026 16:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57152 IP address blocks: 185.226.92.0/24 maxlen: 24 185.226.93.0/24 maxlen: 24 185.226.94.0/24 maxlen: 24 185.226.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 22:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b9:0f:e7:f9:41:9a:53:eb:ad:15:ef:ef:f2:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc Validity Not Before: Jan 1 16:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8727c56a469d9f2b57978a74c6b4027852605215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dc:03:16:73:ad:4f:34:9a:7b:13:f5:ec:8f: 2f:97:07:fc:ee:39:a5:be:c4:df:7b:42:c8:b8:c9: 57:0e:ad:dc:a1:4f:40:79:5c:51:ce:7b:2b:3e:62: 6a:56:99:89:59:e4:a3:2f:af:e3:74:49:12:b9:44: 08:22:b9:4c:5d:c3:7f:ac:31:9f:e6:69:09:5c:31: 4e:f3:4f:63:e2:4e:06:39:8e:55:5e:41:7c:6e:87: 50:07:e8:a0:98:b0:0a:87:f7:e3:09:b9:cb:da:a5: 8b:21:ec:c4:8b:da:97:53:28:9d:f3:34:d6:2a:73: 48:dd:69:30:63:f1:19:2c:a8:a3:93:63:70:58:e4: 1f:22:58:48:97:8f:82:38:aa:61:31:a6:d0:9a:47: 9d:24:d6:ca:83:26:e5:1e:d8:66:85:9b:4f:4b:e4: c6:2b:ed:87:ac:b4:ab:09:94:2c:91:6e:5b:59:ba: 78:a9:59:53:bb:1b:7d:c0:7f:fb:04:f2:2e:20:18: d9:9f:5d:14:df:f9:78:98:f5:22:87:bc:89:a3:3b: ff:18:c4:5d:2f:b4:cd:bd:a0:22:d2:6b:4d:d8:45: a6:19:93:4d:72:a8:f1:2f:f0:e2:c5:86:71:96:0a: 30:b9:d0:8f:90:42:64:9a:c0:d0:67:51:90:5f:89: 35:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:27:C5:6A:46:9D:9F:2B:57:97:8A:74:C6:B4:02:78:52:60:52:15 X509v3 Authority Key Identifier: keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/hyfFakadnytXl4p0xrQCeFJgUhU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.92.0/22 Signature Algorithm: sha256WithRSAEncryption 97:b1:18:23:7e:bc:e4:37:58:ed:35:a3:9d:94:10:39:12:93: cd:04:6e:48:10:fb:f0:e6:3b:31:79:20:89:0f:1b:e6:54:7d: 2a:f2:e8:6a:8e:91:d2:3a:7f:d6:68:c0:59:cf:f5:3d:74:6a: 21:94:1c:a8:29:03:bb:64:f5:14:4d:29:1f:ff:5e:a7:ba:93: db:e3:bb:ca:c2:32:6e:59:ac:f0:92:4d:3c:04:b1:c4:ef:cd: 64:dc:f3:59:6a:45:53:09:9d:3e:c7:d9:f0:00:e0:9a:5b:de: 63:8e:1a:92:60:a7:e2:b2:b4:82:fa:87:b3:1f:5b:1e:67:00: 15:ae:5f:84:e9:af:ae:2c:ec:ed:92:ca:5c:20:4e:07:87:c4: ac:6d:b8:5c:e9:fe:87:bc:28:b1:ae:bf:2d:90:8c:d2:f0:ce: ab:ff:53:0f:85:ad:21:a1:14:04:18:9c:34:34:96:c3:a2:54: 79:6a:75:98:78:c2:33:27:f4:1e:71:c3:bf:a2:1e:3e:2e:f2: 31:d7:98:86:ee:9f:c5:e0:40:77:ab:94:70:ff:ee:64:e4:4a: ad:70:cd:d4:aa:70:89:56:fc:81:99:7a:64:88:3e:3e:14:88: 2b:25:f4:fa:bd:9d:e6:60:4c:a9:38:f3:3f:aa:d0:0c:30:17: 9b:c5:2b:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrkP5/lBmlPrrRXv7/KcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MmFjMzgyNjg5Njg3YjYwZmNlNWNlOWRiODg3YjIxZDY4 YTZhYmMwHhcNMjYwMTAxMTYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzI3YzU2YTQ2OWQ5ZjJiNTc5NzhhNzRjNmI0MDI3ODUyNjA1MjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29wDFnOtTzSaexP17I8vlwf87jml vsTfe0LIuMlXDq3coU9AeVxRznsrPmJqVpmJWeSjL6/jdEkSuUQIIrlMXcN/rDGf 5mkJXDFO809j4k4GOY5VXkF8bodQB+igmLAKh/fjCbnL2qWLIezEi9qXUyid8zTW KnNI3WkwY/EZLKijk2NwWOQfIlhIl4+COKphMabQmkedJNbKgyblHthmhZtPS+TG K+2HrLSrCZQskW5bWbp4qVlTuxt9wH/7BPIuIBjZn10U3/l4mPUih7yJozv/GMRd L7TNvaAi0mtN2EWmGZNNcqjxL/DixYZxlgowudCPkEJkmsDQZ1GQX4k1xQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIcnxWpGnZ8rV5eKdMa0AnhSYFIVMB8GA1UdIwQY MBaAFAQqw4Joloe2D85c6duIeyHWimq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUt NzBiYzY2ODkzZTVjLzEvaHlmRmFrYWRueXRYbDRwMHhyUUNlRkpnVWhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUtNzBiYzY2ODkzZTVj LzEvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueJcMA0G CSqGSIb3DQEBCwUAA4IBAQCXsRgjfrzkN1jtNaOdlBA5EpPNBG5IEPvw5jsxeSCJ DxvmVH0q8uhqjpHSOn/WaMBZz/U9dGohlByoKQO7ZPUUTSkf/16nupPb47vKwjJu Wazwkk08BLHE781k3PNZakVTCZ0+x9nwAOCaW95jjhqSYKfisrSC+oezH1seZwAV rl+E6a+uLOztkspcIE4Hh8Ssbbhc6f6HvCixrr8tkIzS8M6r/1MPha0hoRQEGJw0 NJbDolR5anWYeMIzJ/QeccO/oh4+LvIx15iG7p/F4EB3q5Rw/+5k5EqtcM3UqnCJ VvyBmXpkiD4+FIgrJfT6vZ3mYEypOPM/qtAMMBebxSvb -----END CERTIFICATE-----Generated at Wed Jan 7 07:16:05 2026 by rpki-client