This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/hq6cHZZmfTc8iDuXctwL9j8vYGA.roa File: hq6cHZZmfTc8iDuXctwL9j8vYGA.roa (raw, json) Hash identifier: gnwIM65nm0H3pqLfxC4cpwXQNNz6WAkiHxWYF953SRw= Subject key identifier: 86:AE:9C:1D:96:66:7D:37:3C:88:3B:97:72:DC:0B:F6:3F:2F:60:60 Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af Certificate serial: 019B78351725DE7CDEBA7D8B1087E2024791 Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/hq6cHZZmfTc8iDuXctwL9j8vYGA.roa Signing time: Thu 01 Jan 2026 06:18:23 +0000 ROA not before: Thu 01 Jan 2026 06:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49321 IP address blocks: 185.245.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:17:25:de:7c:de:ba:7d:8b:10:87:e2:02:47:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af Validity Not Before: Jan 1 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86ae9c1d96667d373c883b9772dc0bf63f2f6060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c4:ab:a9:3d:a8:f2:34:65:4e:7c:1b:1d:d5: 5b:2b:84:71:81:4e:26:fd:b3:82:56:d4:2e:13:7b: cb:7f:04:21:22:7f:70:62:b1:9f:2c:f4:39:d5:7e: b3:7c:70:fd:c0:cd:57:a2:2f:62:30:0f:ce:0d:8b: 60:55:05:31:dc:d2:2c:b6:19:e1:30:a7:75:5d:9f: 71:ac:66:58:4a:25:50:09:83:bd:a2:b9:cc:86:c0: c8:95:4a:3b:3c:cd:f1:a4:15:4e:ba:d0:e2:a0:a0: 1b:d3:43:1a:c8:98:27:4d:29:d1:a8:c4:0c:09:56: 68:e9:ad:fb:be:00:74:7e:fa:06:2f:b7:c6:ef:ac: e0:1d:14:79:ad:a9:6e:e3:34:04:c4:ca:d7:ea:94: bf:c2:ad:05:ea:f4:8b:ea:ed:e3:d9:b7:30:8c:f9: 91:6c:96:8e:79:2e:c7:2a:37:77:25:7a:28:78:b5: 37:2a:e4:b2:bb:1c:75:b8:78:b8:e6:ad:80:37:eb: e7:07:6a:73:51:ce:be:ae:ac:ca:17:fa:05:b7:57: 80:cd:d9:45:1b:c7:d9:67:f3:7e:d2:d5:7d:2f:da: 29:f8:8f:6d:db:68:e1:c1:b4:29:d0:75:02:66:37: 1b:fa:2a:0f:f3:e0:76:ec:c2:76:ef:88:56:94:50: ed:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AE:9C:1D:96:66:7D:37:3C:88:3B:97:72:DC:0B:F6:3F:2F:60:60 X509v3 Authority Key Identifier: keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/hq6cHZZmfTc8iDuXctwL9j8vYGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.58.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:c8:a8:b0:f3:ea:bc:8d:b5:48:3a:66:0e:16:96:d8:25:1c: 32:18:aa:35:8a:cd:3b:b5:9b:f9:01:a6:07:5e:67:a9:ff:5e: d7:db:93:89:bb:30:fb:19:4c:62:c1:97:6e:66:f3:df:f8:7f: 67:05:76:9c:9e:40:9a:ec:32:9d:1e:3f:33:66:31:0d:87:dc: 48:6e:9c:b2:6b:cc:4d:ca:8f:af:bc:f6:4e:16:0f:0e:65:21: fc:b8:f1:35:8c:f1:70:85:b2:e2:71:a1:d7:ae:b2:9e:f2:18: 43:e4:73:f8:f7:f9:cb:74:ad:69:81:b3:2f:f5:d7:64:81:bf: e6:67:b2:b9:e5:8f:f8:11:68:4e:92:16:68:a0:d3:80:48:61: 90:16:b2:28:a3:b3:6e:7d:2f:64:d1:a2:9c:af:f2:93:4c:cc: 2d:a5:b6:5f:24:c7:93:b2:50:ac:00:d1:d4:9e:78:be:c0:26: 88:55:07:7a:d1:cb:8a:ee:0e:3d:eb:90:7e:e0:81:1d:a2:4f: b9:31:08:ea:5f:e5:27:e4:f1:a5:40:d1:99:ab:b3:34:a1:9a: 23:ea:d1:c3:25:2a:dc:14:ea:35:5c:50:a3:bc:20:c3:e4:e1: 5e:32:51:6f:ba:00:93:b5:86:9c:2b:31:a1:ac:1a:ea:88:7b: 96:a2:e0:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NRcl3nzeun2LEIfiAkeRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMzllNmJlNDBkODAxMjg4OTZjY2QxMzFmNjVhNTVhZDk4 YTQwYWYwHhcNMjYwMTAxMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmFlOWMxZDk2NjY3ZDM3M2M4ODNiOTc3MmRjMGJmNjNmMmY2MDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cSrqT2o8jRlTnwbHdVbK4RxgU4m /bOCVtQuE3vLfwQhIn9wYrGfLPQ51X6zfHD9wM1Xoi9iMA/ODYtgVQUx3NIsthnh MKd1XZ9xrGZYSiVQCYO9ornMhsDIlUo7PM3xpBVOutDioKAb00MayJgnTSnRqMQM CVZo6a37vgB0fvoGL7fG76zgHRR5ralu4zQExMrX6pS/wq0F6vSL6u3j2bcwjPmR bJaOeS7HKjd3JXooeLU3KuSyuxx1uHi45q2AN+vnB2pzUc6+rqzKF/oFt1eAzdlF G8fZZ/N+0tV9L9op+I9t22jhwbQp0HUCZjcb+ioP8+B27MJ274hWlFDtgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIaunB2WZn03PIg7l3LcC/Y/L2BgMB8GA1UdIwQY MBaAFMw55r5A2AEoiWzNEx9lpVrZikCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iMmZmOTEtZDRjZS00MDViLWJlYmYt NjA5ZDhmNTY1ZmZjLzEvaHE2Y0haWm1mVGM4aUR1WGN0d0w5ajh2WUdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iMmZmOTEtZDRjZS00MDViLWJlYmYtNjA5ZDhmNTY1ZmZj LzEvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufU6MA0G CSqGSIb3DQEBCwUAA4IBAQBfyKiw8+q8jbVIOmYOFpbYJRwyGKo1is07tZv5AaYH Xmep/17X25OJuzD7GUxiwZduZvPf+H9nBXacnkCa7DKdHj8zZjENh9xIbpyya8xN yo+vvPZOFg8OZSH8uPE1jPFwhbLicaHXrrKe8hhD5HP49/nLdK1pgbMv9ddkgb/m Z7K55Y/4EWhOkhZooNOASGGQFrIoo7NufS9k0aKcr/KTTMwtpbZfJMeTslCsANHU nni+wCaIVQd60cuK7g4965B+4IEdok+5MQjqX+Un5PGlQNGZq7M0oZoj6tHDJSrc FOo1XFCjvCDD5OFeMlFvugCTtYacKzGhrBrqiHuWouDG -----END CERTIFICATE-----Generated at Fri Jan 2 11:34:15 2026 by rpki-client