This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/hnLqnAEN_PSEnf5JXcTb3OnKqoo.roa File: hnLqnAEN_PSEnf5JXcTb3OnKqoo.roa (raw, json) Hash identifier: lSYPnPlDdlQoA0R4XN+dhc2P4+6Eu5g/f7zEImc1gKI= Subject key identifier: 86:72:EA:9C:01:0D:FC:F4:84:9D:FE:49:5D:C4:DB:DC:E9:CA:AA:8A Certificate issuer: /CN=1acbdd00d27b8a8befc866caf378f19027684769 Certificate serial: 019B7C1245C637485FFBA2FA6268A329B41D Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/hnLqnAEN_PSEnf5JXcTb3OnKqoo.roa Signing time: Fri 02 Jan 2026 00:18:50 +0000 ROA not before: Fri 02 Jan 2026 00:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.162.80.0/22 maxlen: 22 185.200.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:45:c6:37:48:5f:fb:a2:fa:62:68:a3:29:b4:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769 Validity Not Before: Jan 2 00:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8672ea9c010dfcf4849dfe495dc4dbdce9caaa8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:30:81:6b:45:ca:10:be:0b:e6:ca:f6:a5:4e: 0b:a5:b2:4e:73:89:b4:78:73:09:8c:f4:2f:70:a9: 25:42:80:ef:35:44:00:4d:71:8a:5c:0a:4c:70:4c: 3d:21:97:dd:bf:fb:d3:b2:d4:6f:ec:ee:2a:1d:13: ba:0c:14:e0:76:b0:67:2d:07:e3:5e:e1:f1:94:02: 71:8f:4d:fa:f4:a0:67:7f:96:db:17:99:3a:40:43: 89:06:d4:8c:c1:a5:1b:d9:ed:4f:b8:93:4e:dd:e9: 51:a2:a6:16:f9:08:77:e5:ca:04:ac:82:8b:5f:26: ca:b8:78:c7:d1:b8:e7:28:5d:50:ae:4a:b4:e9:cd: 6e:9a:a2:08:4b:da:9e:52:35:21:5b:fe:68:4f:5b: 94:29:81:16:9b:98:0a:6f:e6:6c:12:5d:9a:1b:40: 09:d2:5b:71:f0:aa:70:a3:96:e3:c2:aa:ae:e5:70: 77:7d:05:4e:f1:15:9c:11:39:83:e3:6c:01:54:6a: 1d:46:2d:65:3a:20:5b:d6:4c:54:0a:48:61:ff:0a: ba:29:c2:63:9a:cf:5b:42:e4:b6:ef:52:55:9f:ce: 7f:b9:67:52:3a:7e:dc:c7:06:0a:7c:18:bc:ca:76: 97:9a:8e:81:15:62:21:e9:92:40:9c:29:c3:19:53: 12:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:72:EA:9C:01:0D:FC:F4:84:9D:FE:49:5D:C4:DB:DC:E9:CA:AA:8A X509v3 Authority Key Identifier: keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/hnLqnAEN_PSEnf5JXcTb3OnKqoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.80.0/22 185.200.192.0/22 Signature Algorithm: sha256WithRSAEncryption 17:14:8e:51:ba:1e:99:37:88:74:7c:b3:e1:e9:2c:2b:52:fa: 02:92:16:65:d2:1a:77:a5:cc:d2:57:83:6d:0c:e0:a9:b7:c2: f1:b6:da:3f:18:31:c4:f0:15:d6:25:34:d0:73:63:79:bb:2d: ae:0d:23:9a:bf:a0:5b:2e:7a:96:90:0d:11:40:bc:0c:7a:00: 3b:37:b2:d6:60:0a:00:08:dc:0f:d5:f7:74:ef:5f:e8:e1:db: 6f:b8:d1:7d:15:2e:e7:98:4e:8d:0e:d5:b7:62:47:49:16:12: a9:fd:62:2f:75:6a:03:cb:c2:f8:f0:47:6e:22:b5:b0:1f:1c: cf:1f:d3:b4:7a:93:ea:72:38:a3:9c:57:93:35:69:25:47:73: 2a:4e:90:fa:3c:af:02:ea:4d:01:f1:b7:ff:58:cc:31:27:6c: b2:da:27:db:0f:04:d8:4e:bb:90:e7:69:2f:3c:fa:26:de:6a: 1b:00:b5:68:58:6f:0f:1b:28:75:cb:66:fc:cb:f4:07:08:91: cc:03:9b:90:fb:a9:a1:17:51:d4:ee:55:8a:09:9a:23:2d:23: 56:4b:e7:19:69:8a:fd:22:9f:6a:5b:d7:78:02:58:d9:cb:7c: aa:66:f1:04:b5:ba:b4:c4:c8:8a:25:85:4e:51:f5:65:d1:f7: 8f:8a:f0:45 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EkXGN0hf+6L6YmijKbQdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2JkZDAwZDI3YjhhOGJlZmM4NjZjYWYzNzhmMTkwMjc2 ODQ3NjkwHhcNMjYwMTAyMDAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjcyZWE5YzAxMGRmY2Y0ODQ5ZGZlNDk1ZGM0ZGJkY2U5Y2FhYThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TCBa0XKEL4L5sr2pU4LpbJOc4m0 eHMJjPQvcKklQoDvNUQATXGKXApMcEw9IZfdv/vTstRv7O4qHRO6DBTgdrBnLQfj XuHxlAJxj0369KBnf5bbF5k6QEOJBtSMwaUb2e1PuJNO3elRoqYW+Qh35coErIKL XybKuHjH0bjnKF1Qrkq06c1umqIIS9qeUjUhW/5oT1uUKYEWm5gKb+ZsEl2aG0AJ 0ltx8Kpwo5bjwqqu5XB3fQVO8RWcETmD42wBVGodRi1lOiBb1kxUCkhh/wq6KcJj ms9bQuS271JVn85/uWdSOn7cxwYKfBi8ynaXmo6BFWIh6ZJAnCnDGVMSAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIZy6pwBDfz0hJ3+SV3E29zpyqqKMB8GA1UdIwQY MBaAFBrL3QDSe4qL78hmyvN48ZAnaEdpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kYjQyMDUtZDU3Yy00Y2EyLTg4OTQt OWY5NTM2YmIyYzM3LzEvaG5McW5BRU5fUFNFbmY1SlhjVGIzT25LcW9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9kYjQyMDUtZDU3Yy00Y2EyLTg4OTQtOWY5NTM2YmIyYzM3 LzEvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuaJQAwQC ucjAMA0GCSqGSIb3DQEBCwUAA4IBAQAXFI5Ruh6ZN4h0fLPh6SwrUvoCkhZl0hp3 pczSV4NtDOCpt8Lxtto/GDHE8BXWJTTQc2N5uy2uDSOav6BbLnqWkA0RQLwMegA7 N7LWYAoACNwP1fd071/o4dtvuNF9FS7nmE6NDtW3YkdJFhKp/WIvdWoDy8L48Edu IrWwHxzPH9O0epPqcjijnFeTNWklR3MqTpD6PK8C6k0B8bf/WMwxJ2yy2ifbDwTY TruQ52kvPPom3mobALVoWG8PGyh1y2b8y/QHCJHMA5uQ+6mhF1HU7lWKCZojLSNW S+cZaYr9Ip9qW9d4AljZy3yqZvEEtbq0xMiKJYVOUfVl0fePivBF -----END CERTIFICATE-----Generated at Sat Jan 3 06:21:58 2026 by rpki-client