This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/HGl9Qwuz4ZJwgTQuqeKM6u5ORyM.roa File: HGl9Qwuz4ZJwgTQuqeKM6u5ORyM.roa (raw, json) Hash identifier: SUjodA/dI5A0s+KYacIdyRRRh5mYVureSPecJRIPWYM= Subject key identifier: 1C:69:7D:43:0B:B3:E1:92:70:81:34:2E:A9:E2:8C:EA:EE:4E:47:23 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B2CAF46AF97DE57DA9139D10C29A7 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/HGl9Qwuz4ZJwgTQuqeKM6u5ORyM.roa Signing time: Fri 02 Jan 2026 06:18:05 +0000 ROA not before: Fri 02 Jan 2026 06:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216272 IP address blocks: 93.92.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:2c:af:46:af:97:de:57:da:91:39:d1:0c:29:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c697d430bb3e1927081342ea9e28ceaee4e4723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e4:c7:ff:42:4c:f0:af:d3:13:18:b2:71:53: 7f:0e:3f:a7:ef:ef:e0:4d:5a:b2:49:3f:e3:73:18: 60:b1:72:96:2a:77:82:7c:aa:c8:49:e0:06:9c:f3: c5:14:d1:3a:a5:a6:74:78:db:5f:fe:36:e1:9f:4f: 4b:bd:e5:a4:8b:b5:ba:71:0a:90:82:a3:09:9a:e7: a9:96:b4:69:28:2a:2f:fe:09:c3:77:73:79:8b:a5: a5:54:f5:26:6d:5e:4b:e0:97:91:6b:1f:52:7d:86: cb:a0:42:b1:09:3f:69:97:ac:e7:54:2c:06:9f:8e: 95:82:93:65:e2:92:0d:65:55:c6:24:ae:15:bd:14: d0:dd:52:b2:7f:3c:71:39:31:b8:67:df:d8:46:84: 73:6d:e5:ff:0e:18:08:22:ce:6b:ab:4b:ec:fa:c8: 9b:85:db:f3:b4:44:71:cb:a3:94:67:53:f2:ef:10: ae:38:93:d6:06:54:53:37:28:34:b2:84:1a:f5:bc: 49:71:84:37:63:f4:9e:ac:a0:38:d5:e4:fb:4d:cf: e8:4d:ac:eb:0a:0f:24:a5:50:77:cf:3d:11:48:a9: e0:b0:87:c4:bb:a5:c2:8e:c1:54:4e:bd:44:b1:e5: 61:4d:da:5f:2a:8f:e3:f7:21:e2:9d:c8:33:a7:1e: c1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:69:7D:43:0B:B3:E1:92:70:81:34:2E:A9:E2:8C:EA:EE:4E:47:23 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/HGl9Qwuz4ZJwgTQuqeKM6u5ORyM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.92.16.0/24 Signature Algorithm: sha256WithRSAEncryption 29:5f:67:ad:cf:74:59:c6:d1:6e:83:07:e8:2f:7b:f3:85:cd: 09:a6:fe:3c:d8:53:e2:9f:06:ba:0c:34:41:66:74:5d:b1:f5: ae:11:c0:dc:79:b5:d3:33:32:d7:16:c8:82:6b:a4:9b:52:69: 0a:c6:53:59:f0:e9:0c:cd:af:b8:79:34:2a:42:5b:6d:d2:5e: 36:19:b4:7b:8f:14:a1:97:7c:e0:43:8c:01:90:71:62:c5:d0: 7f:f4:a4:2a:10:be:0e:0d:4b:54:7f:3d:d0:e9:de:ee:14:cb: b8:c6:85:c5:d8:b9:79:fb:20:14:33:f0:45:3d:e7:bd:78:05: 77:a3:89:16:1f:11:76:d5:b1:62:18:8a:d5:4a:d8:37:8d:94: 4e:e7:33:03:07:fc:54:66:2f:5e:19:4b:84:d5:9d:b4:4d:64: a3:f0:bd:16:1b:ce:1b:57:90:68:a5:d6:87:84:8f:1f:c2:1f: fe:9d:fd:c8:e0:12:7b:e0:37:16:ac:13:d0:68:68:93:1f:6a: 5e:72:7d:cf:97:48:9a:29:4e:01:41:a1:31:65:42:d8:79:3b: e7:f9:ec:a2:80:67:d1:9e:9d:ca:c4:11:97:92:71:c1:72:1e: 5c:a8:95:3b:c0:e5:73:5b:c6:88:6b:f2:50:d0:8d:49:0d:36: f6:40:ac:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WyyvRq+X3lfakTnRDCmnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzY5N2Q0MzBiYjNlMTkyNzA4MTM0MmVhOWUyOGNlYWVlNGU0NzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+TH/0JM8K/TExiycVN/Dj+n7+/g TVqyST/jcxhgsXKWKneCfKrISeAGnPPFFNE6paZ0eNtf/jbhn09LveWki7W6cQqQ gqMJmueplrRpKCov/gnDd3N5i6WlVPUmbV5L4JeRax9SfYbLoEKxCT9pl6znVCwG n46VgpNl4pINZVXGJK4VvRTQ3VKyfzxxOTG4Z9/YRoRzbeX/DhgIIs5rq0vs+sib hdvztERxy6OUZ1Py7xCuOJPWBlRTNyg0soQa9bxJcYQ3Y/SerKA41eT7Tc/oTazr Cg8kpVB3zz0RSKngsIfEu6XCjsFUTr1EseVhTdpfKo/j9yHincgzpx7BGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBxpfUMLs+GScIE0LqnijOruTkcjMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvSEdsOVF3dXo0Wkp3Z1RRdXFlS002dTVPUnlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVwQMA0G CSqGSIb3DQEBCwUAA4IBAQApX2etz3RZxtFugwfoL3vzhc0Jpv482FPinwa6DDRB ZnRdsfWuEcDcebXTMzLXFsiCa6SbUmkKxlNZ8OkMza+4eTQqQltt0l42GbR7jxSh l3zgQ4wBkHFixdB/9KQqEL4ODUtUfz3Q6d7uFMu4xoXF2Ll5+yAUM/BFPee9eAV3 o4kWHxF21bFiGIrVStg3jZRO5zMDB/xUZi9eGUuE1Z20TWSj8L0WG84bV5BopdaH hI8fwh/+nf3I4BJ74DcWrBPQaGiTH2pecn3Pl0iaKU4BQaExZULYeTvn+eyigGfR np3KxBGXknHBch5cqJU7wOVzW8aIa/JQ0I1JDTb2QKx2 -----END CERTIFICATE-----Generated at Fri Jan 23 18:49:55 2026 by rpki-client