This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/hiNoXDhQ3Bbn1_DpSesyiJvU0U4.roa File: hiNoXDhQ3Bbn1_DpSesyiJvU0U4.roa (raw, json) Hash identifier: AzYstRzFBaF+YCS7pGLTFHcZC75FnJUSCFUbexm0r0I= Subject key identifier: 86:23:68:5C:38:50:DC:16:E7:D7:F0:E9:49:EB:32:88:9B:D4:D1:4E Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B7F160BFB7C6A71D5BEADDE6504373906 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/hiNoXDhQ3Bbn1_DpSesyiJvU0U4.roa Signing time: Fri 02 Jan 2026 14:21:49 +0000 ROA not before: Fri 02 Jan 2026 14:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197537 IP address blocks: 92.62.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:0b:fb:7c:6a:71:d5:be:ad:de:65:04:37:39:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Jan 2 14:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8623685c3850dc16e7d7f0e949eb32889bd4d14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fe:37:e3:1f:aa:79:3a:5c:c6:f0:10:31:f0: 2d:c9:e6:fe:c4:96:fe:e5:a5:4c:b9:37:43:85:e7: bd:78:a8:b6:92:43:55:88:76:58:74:75:96:f1:85: e4:d9:a6:fc:92:27:79:9b:28:6b:47:c9:f9:c2:a1: 8a:98:d5:b9:d2:f0:9f:a7:b7:2e:61:63:63:d0:be: a5:12:23:d5:36:56:0c:ed:92:a0:d2:60:63:3a:cb: c2:39:ed:2a:02:8f:92:63:d3:35:68:ad:a7:25:33: 8e:af:d1:fc:da:9d:e7:ae:82:d4:ed:bc:f8:25:7d: 30:d2:0d:b2:52:77:e1:29:9e:1c:11:46:17:6a:f6: 97:9f:45:9d:ce:51:97:fc:0a:2c:4d:ad:ac:45:07: a0:2a:98:99:fd:3a:b6:1b:40:f2:14:b5:66:33:1f: 65:e3:95:3b:0e:70:bc:fa:e5:75:54:af:a7:f7:5e: 6d:17:91:83:ba:bd:d0:b9:08:29:3c:d1:52:a4:cc: 4c:ab:da:7b:95:20:a7:3c:72:78:81:ef:fc:ca:0a: 78:a5:d7:4b:df:4f:c9:f6:e7:9c:a7:70:d3:e2:12: 51:38:cf:0f:ca:b6:89:02:d1:09:af:6d:99:82:3c: f4:4b:8b:21:87:e6:e7:81:d4:58:32:0f:74:e4:b8: 26:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:23:68:5C:38:50:DC:16:E7:D7:F0:E9:49:EB:32:88:9B:D4:D1:4E X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/hiNoXDhQ3Bbn1_DpSesyiJvU0U4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.62.245.0/24 Signature Algorithm: sha256WithRSAEncryption 93:61:71:44:e7:13:45:de:73:f6:a9:fe:15:f5:58:18:6e:b3: 44:fe:1c:93:b5:e1:d0:5a:16:d9:1b:a6:3c:4f:23:08:08:4b: 59:80:4e:a3:27:13:dc:e6:3f:c8:09:61:79:2a:c8:4f:3c:02: c9:d9:6d:2c:34:2b:72:17:e8:ae:ec:4b:07:5b:68:f4:48:15: 43:a2:ac:a7:40:9f:34:65:b2:b3:97:75:6c:d2:11:0b:47:c6: 44:cc:c0:a0:f0:3f:0a:19:5a:af:be:13:56:bb:24:1f:0f:f8: f8:79:b3:77:a3:1b:1a:a8:5e:70:10:83:e6:26:72:96:50:b2: d1:34:39:9c:ec:89:2b:64:7b:b7:21:0d:8b:ab:61:a9:03:93: cd:97:0d:a6:66:b5:f5:c7:e3:c1:b7:16:b1:f5:29:6e:b0:7a: eb:10:38:7a:b4:4a:d0:9f:80:76:97:bc:71:5c:82:7a:f5:5c: a1:b8:fb:c1:bb:f0:3e:c9:0a:74:3a:fd:cf:76:75:99:ff:2d: 82:86:8d:a8:c9:88:ed:7f:db:30:92:ae:2f:8a:2c:e9:b3:95: a9:4a:6e:ac:65:5e:13:0a:66:68:68:bd:0f:be:73:46:ff:e9: f8:6b:9b:c3:b0:2b:b9:04:be:ec:88:83:1b:da:cf:52:b8:06: fa:fb:9c:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fgv7fGpx1b6t3mUENzkGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjYwMTAyMTQyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjIzNjg1YzM4NTBkYzE2ZTdkN2YwZTk0OWViMzI4ODliZDRkMTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP434x+qeTpcxvAQMfAtyeb+xJb+ 5aVMuTdDhee9eKi2kkNViHZYdHWW8YXk2ab8kid5myhrR8n5wqGKmNW50vCfp7cu YWNj0L6lEiPVNlYM7ZKg0mBjOsvCOe0qAo+SY9M1aK2nJTOOr9H82p3nroLU7bz4 JX0w0g2yUnfhKZ4cEUYXavaXn0WdzlGX/AosTa2sRQegKpiZ/Tq2G0DyFLVmMx9l 45U7DnC8+uV1VK+n915tF5GDur3QuQgpPNFSpMxMq9p7lSCnPHJ4ge/8ygp4pddL 30/J9uecp3DT4hJROM8PyraJAtEJr22Zgjz0S4shh+bngdRYMg905LgmxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIYjaFw4UNwW59fw6UnrMoib1NFOMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvaGlOb1hEaFEzQmJuMV9EcFNlc3lpSnZVMFU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD71MA0G CSqGSIb3DQEBCwUAA4IBAQCTYXFE5xNF3nP2qf4V9VgYbrNE/hyTteHQWhbZG6Y8 TyMICEtZgE6jJxPc5j/ICWF5KshPPALJ2W0sNCtyF+iu7EsHW2j0SBVDoqynQJ80 ZbKzl3Vs0hELR8ZEzMCg8D8KGVqvvhNWuyQfD/j4ebN3oxsaqF5wEIPmJnKWULLR NDmc7IkrZHu3IQ2Lq2GpA5PNlw2mZrX1x+PBtxax9SlusHrrEDh6tErQn4B2l7xx XIJ69VyhuPvBu/A+yQp0Ov3PdnWZ/y2Cho2oyYjtf9swkq4viizps5WpSm6sZV4T CmZoaL0PvnNG/+n4a5vDsCu5BL7siIMb2s9SuAb6+5yL -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:53 2026 by rpki-client