This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/HWfGqv8oEWKGFm4N1ldYQYMduNo.roa File: HWfGqv8oEWKGFm4N1ldYQYMduNo.roa (raw, json) Hash identifier: uTYmV2Hm5c1uRirFhMhd0UK85oM2m8rhW7jcfLm/RrA= Subject key identifier: 1D:67:C6:AA:FF:28:11:62:86:16:6E:0D:D6:57:58:41:83:1D:B8:DA Certificate issuer: /CN=d0e80414b947f1931f22bc9c878c17b7d23078eb Certificate serial: 019B77C666D34450EA23FC6A39BB5898A3AE Authority key identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/HWfGqv8oEWKGFm4N1ldYQYMduNo.roa Signing time: Thu 01 Jan 2026 04:17:29 +0000 ROA not before: Thu 01 Jan 2026 04:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204947 IP address blocks: 185.63.100.0/22 maxlen: 24 185.234.172.0/22 maxlen: 24 2a0d:2100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:66:d3:44:50:ea:23:fc:6a:39:bb:58:98:a3:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e80414b947f1931f22bc9c878c17b7d23078eb Validity Not Before: Jan 1 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d67c6aaff28116286166e0dd6575841831db8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ff:da:07:30:98:a8:bc:f1:83:16:f4:eb:7f: 7c:e5:0a:bb:76:e3:36:ed:08:09:ab:df:13:f8:85: 24:97:3b:08:8b:94:5b:fd:0d:6e:c1:65:e3:f5:d8: 17:5f:ac:1e:e3:cd:46:77:82:c0:03:cd:d9:71:56: 7f:5c:0d:4b:c0:0f:82:88:ca:e4:a8:db:29:4d:6f: 4a:76:78:4d:28:62:33:0d:9a:a2:75:28:a3:9d:e2: 5e:80:60:89:f3:18:e6:86:1f:9d:6a:1c:3e:e2:5e: 52:68:d6:2b:f8:90:14:d3:85:09:0a:35:bb:37:02: c9:02:f1:f3:2a:94:42:8f:b0:db:d7:dc:9b:58:ce: 48:46:5e:4b:fa:1f:65:e1:73:b3:71:5b:f5:60:6a: 04:c5:7b:a2:fd:c6:fa:9d:b9:14:0b:1d:32:17:05: 5a:92:d6:3a:fc:ce:a4:92:f7:7d:21:de:6d:18:6d: bd:f9:ce:6c:17:3e:1d:73:2d:92:d1:45:87:6a:9a: 38:9d:c4:12:20:a6:e9:37:71:e1:85:31:98:0c:e4: 2c:d4:89:08:bc:61:8a:46:fc:29:bc:f4:cf:c6:83: 29:0b:78:6f:5d:4c:f8:51:bb:ed:ea:cc:a4:b8:47: d1:31:d5:3c:7b:67:d2:23:3d:a8:01:2a:a5:62:2d: 2d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:67:C6:AA:FF:28:11:62:86:16:6E:0D:D6:57:58:41:83:1D:B8:DA X509v3 Authority Key Identifier: keyid:D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/HWfGqv8oEWKGFm4N1ldYQYMduNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.100.0/22 185.234.172.0/22 IPv6: 2a0d:2100::/29 Signature Algorithm: sha256WithRSAEncryption 63:33:24:3b:b8:42:d8:9c:9f:87:0f:ff:c4:fb:0d:3b:3d:4f: 7b:a4:04:31:ad:0c:ea:a6:30:62:da:ee:0b:08:2b:af:4b:95: 6e:c6:8c:b1:28:33:46:db:a4:1c:5d:d8:5e:9d:ca:c0:a4:85: 92:11:82:bc:1d:99:0b:b6:6a:a9:47:71:01:37:1f:c7:01:7f: 1e:07:d6:aa:b7:a6:1a:b6:1a:da:3e:50:04:03:e1:f3:a0:ac: bc:df:a6:8e:00:b9:e9:ef:e2:d4:4e:32:15:3e:34:d8:7a:f3: 70:75:06:76:2f:3b:72:5c:b0:f6:c4:64:ba:f6:12:95:f6:58: 2c:17:c5:1f:99:ae:a4:3b:e0:e6:4d:70:7c:ed:70:60:39:00: 97:f6:0e:05:3d:60:11:b5:ef:d4:8b:5c:c7:dd:15:41:9a:41: 0d:d3:aa:a3:ac:3f:07:59:28:1f:ac:3d:28:03:c1:f0:aa:a2: 3f:76:b3:79:0e:f7:07:10:3f:fc:6b:de:ca:4b:c3:73:01:1c: 86:7d:bf:c7:5b:f1:9c:88:1e:67:b6:97:34:6d:ce:29:74:a6: 89:94:84:47:40:0d:13:41:af:b8:e0:aa:0e:f2:68:73:0e:08: c1:7a:f4:cd:f9:9b:f9:13:98:9e:19:33:9c:c8:1c:95:56:d9: 86:93:f3:bf -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3xmbTRFDqI/xqObtYmKOuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZTgwNDE0Yjk0N2YxOTMxZjIyYmM5Yzg3OGMxN2I3ZDIz MDc4ZWIwHhcNMjYwMTAxMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDY3YzZhYWZmMjgxMTYyODYxNjZlMGRkNjU3NTg0MTgzMWRiOGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4v/aBzCYqLzxgxb063985Qq7duM2 7QgJq98T+IUklzsIi5Rb/Q1uwWXj9dgXX6we481Gd4LAA83ZcVZ/XA1LwA+CiMrk qNspTW9KdnhNKGIzDZqidSijneJegGCJ8xjmhh+dahw+4l5SaNYr+JAU04UJCjW7 NwLJAvHzKpRCj7Db19ybWM5IRl5L+h9l4XOzcVv1YGoExXui/cb6nbkUCx0yFwVa ktY6/M6kkvd9Id5tGG29+c5sFz4dcy2S0UWHapo4ncQSIKbpN3HhhTGYDOQs1IkI vGGKRvwpvPTPxoMpC3hvXUz4Ubvt6sykuEfRMdU8e2fSIz2oASqlYi0ttwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFB1nxqr/KBFihhZuDdZXWEGDHbjaMB8GA1UdIwQY MBaAFNDoBBS5R/GTHyK8nIeMF7fSMHjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME9nRUZMbEg4Wk1mSXJ5Y2g0d1h0OUl3ZU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8zNmZkNDMtYjVmMy00MGNmLTg2MzEt NTE4ZTdhMzU2NjBhLzEvSFdmR3F2OG9FV0tHRm00TjFsZFlRWU1kdU5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8zNmZkNDMtYjVmMy00MGNmLTg2MzEtNTE4ZTdhMzU2NjBh LzEvME9nRUZMbEg4Wk1mSXJ5Y2g0d1h0OUl3ZU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuT9kAwQC ueqsMA0EAgACMAcDBQMqDSEAMA0GCSqGSIb3DQEBCwUAA4IBAQBjMyQ7uELYnJ+H D//E+w07PU97pAQxrQzqpjBi2u4LCCuvS5VuxoyxKDNG26QcXdhencrApIWSEYK8 HZkLtmqpR3EBNx/HAX8eB9aqt6YathraPlAEA+HzoKy836aOALnp7+LUTjIVPjTY evNwdQZ2LztyXLD2xGS69hKV9lgsF8Ufma6kO+DmTXB87XBgOQCX9g4FPWARte/U i1zH3RVBmkEN06qjrD8HWSgfrD0oA8HwqqI/drN5DvcHED/8a97KS8NzARyGfb/H W/GciB5ntpc0bc4pdKaJlIRHQA0TQa+44KoO8mhzDgjBevTN+Zv5E5ieGTOcyByV VtmGk/O/ -----END CERTIFICATE-----Generated at Thu Jan 1 08:44:14 2026 by rpki-client