This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HC9Qy-RDAkttg3lKj9c9njgrwck.roa File: HC9Qy-RDAkttg3lKj9c9njgrwck.roa (raw, json) Hash identifier: 2hd7f3NSCuS3d9Mx3O5HxmJlKfoY1kpilJaMrjhqK04= Subject key identifier: 1C:2F:50:CB:E4:43:02:4B:6D:83:79:4A:8F:D7:3D:9E:38:2B:C1:C9 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3538ACA3BD54EA0E0DB08A00C4B87 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HC9Qy-RDAkttg3lKj9c9njgrwck.roa Signing time: Thu 01 Jan 2026 08:18:48 +0000 ROA not before: Thu 01 Jan 2026 08:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215787 IP address blocks: 31.13.230.0/24 maxlen: 24 85.209.133.0/24 maxlen: 24 91.200.192.0/22 maxlen: 24 92.249.48.0/24 maxlen: 24 94.154.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:53:8a:ca:3b:d5:4e:a0:e0:db:08:a0:0c:4b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c2f50cbe443024b6d83794a8fd73d9e382bc1c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d7:7e:73:21:12:53:18:96:1a:c2:f1:2d:f5: ac:44:13:8b:6f:4b:ed:bd:26:4c:ad:1f:25:3e:ae: 64:64:c2:5b:de:ea:1e:0c:eb:09:b4:89:10:c1:dc: 9e:f3:66:5c:a0:43:d5:bc:be:9e:a2:53:f7:b2:6f: 60:00:d0:50:85:ed:7c:94:df:ba:fe:b0:ca:9d:f7: e9:98:dd:14:cf:0a:86:60:f0:f9:ef:b4:ca:ea:3e: 14:d2:33:c7:1d:cd:1c:86:22:e4:40:ba:70:6f:43: 1a:8b:07:ac:b9:f9:95:de:8b:6b:2f:d5:af:60:c4: c6:05:a3:f4:19:3a:59:52:4d:ef:fb:81:91:05:04: f8:1b:63:71:cb:55:61:a8:e8:63:f3:41:42:38:0f: de:4c:36:8b:91:c4:36:64:c2:32:10:7f:85:33:f2: 9c:69:cd:19:0f:60:17:75:6b:b8:4d:cd:a5:cd:1c: 9d:b4:eb:6a:98:80:13:29:27:e3:ac:5f:f7:9e:2f: d6:32:07:6f:40:fc:b4:42:3e:64:90:4e:db:3e:fb: dc:62:2a:4b:66:01:8a:f0:4d:ac:a9:03:f9:a5:47: e8:48:ef:3f:ee:69:b0:b8:15:8f:ea:44:d8:96:6f: 33:11:74:55:2e:a9:e1:3b:bf:a1:0d:74:7c:6e:bb: ae:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2F:50:CB:E4:43:02:4B:6D:83:79:4A:8F:D7:3D:9E:38:2B:C1:C9 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HC9Qy-RDAkttg3lKj9c9njgrwck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.230.0/24 85.209.133.0/24 91.200.192.0/22 92.249.48.0/24 94.154.163.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:64:f1:be:81:bf:76:71:08:86:e2:42:d2:b6:af:15:6a:54: ab:92:01:fd:5e:b0:2d:d9:66:9e:79:06:0b:14:8c:24:d0:fd: 82:79:ee:fa:56:da:9e:84:a0:a6:97:34:86:66:e1:7d:d6:6b: e3:99:6f:f8:d4:d0:22:b7:80:78:a6:33:88:47:b2:e7:b1:29: 8c:ad:b5:90:a8:d6:0d:d3:94:48:41:24:88:70:8b:c9:eb:35: 4e:78:4e:22:32:13:1e:bc:e8:02:22:08:99:5e:27:11:87:94: 8a:7b:69:5b:49:b1:bc:d1:92:71:75:bf:22:9c:a0:16:58:f6: 36:0d:bc:19:9b:6e:0f:0b:e0:75:4c:39:ad:e6:38:eb:38:24: ca:d6:da:d6:fb:63:ee:ed:f9:14:bd:7f:f3:a8:c4:3f:20:15: 9d:b1:ca:a1:62:4b:b0:cb:1c:3b:95:43:93:44:cd:f5:e2:08: 28:ca:24:f8:59:17:f8:5d:fc:29:fa:00:d3:23:34:de:3f:e3: ca:01:a8:64:b6:30:04:5e:2d:4e:ed:2d:c0:4b:2c:e4:02:78: 89:a5:ef:a7:3a:08:92:c6:5a:ce:3d:e8:da:68:60:bc:c9:63: 2e:97:7b:1a:c8:9a:93:3e:14:8f:c9:1d:57:0c:02:25:82:de: d7:bb:cf:9b -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4o1OKyjvVTqDg2wigDEuHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzJmNTBjYmU0NDMwMjRiNmQ4Mzc5NGE4ZmQ3M2Q5ZTM4MmJjMWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutd+cyESUxiWGsLxLfWsRBOLb0vt vSZMrR8lPq5kZMJb3uoeDOsJtIkQwdye82ZcoEPVvL6eolP3sm9gANBQhe18lN+6 /rDKnffpmN0UzwqGYPD577TK6j4U0jPHHc0chiLkQLpwb0MaiwesufmV3otrL9Wv YMTGBaP0GTpZUk3v+4GRBQT4G2Nxy1VhqOhj80FCOA/eTDaLkcQ2ZMIyEH+FM/Kc ac0ZD2AXdWu4Tc2lzRydtOtqmIATKSfjrF/3ni/WMgdvQPy0Qj5kkE7bPvvcYipL ZgGK8E2sqQP5pUfoSO8/7mmwuBWP6kTYlm8zEXRVLqnhO7+hDXR8bruubwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFBwvUMvkQwJLbYN5So/XPZ44K8HJMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvSEM5UXktUkRBa3R0ZzNsS2o5Yzluamdyd2NrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHw3mAwQA VdGFAwQCW8jAAwQAXPkwAwQAXpqjMA0GCSqGSIb3DQEBCwUAA4IBAQCaZPG+gb92 cQiG4kLStq8ValSrkgH9XrAt2WaeeQYLFIwk0P2Cee76VtqehKCmlzSGZuF91mvj mW/41NAit4B4pjOIR7LnsSmMrbWQqNYN05RIQSSIcIvJ6zVOeE4iMhMevOgCIgiZ XicRh5SKe2lbSbG80ZJxdb8inKAWWPY2DbwZm24PC+B1TDmt5jjrOCTK1trW+2Pu 7fkUvX/zqMQ/IBWdscqhYkuwyxw7lUOTRM314ggoyiT4WRf4Xfwp+gDTIzTeP+PK AahktjAEXi1O7S3ASyzkAniJpe+nOgiSxlrOPejaaGC8yWMul3sayJqTPhSPyR1X DAIlgt7Xu8+b -----END CERTIFICATE-----Generated at Fri Jan 2 12:03:07 2026 by rpki-client