This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hgqlmkOMJ5-XWW5A2rJs0-u1V-c.roa File: hgqlmkOMJ5-XWW5A2rJs0-u1V-c.roa (raw, json) Hash identifier: l9Qb7xU5RkeUkhzAu2h8G1q2zFwYaco04e+Qnnl1daE= Subject key identifier: 86:0A:A5:9A:43:8C:27:9F:97:59:6E:40:DA:B2:6C:D3:EB:B5:57:E7 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BD0C6FA7CFCAB990091C0D47552F3AAA4 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hgqlmkOMJ5-XWW5A2rJs0-u1V-c.roa Signing time: Sun 18 Jan 2026 11:04:19 +0000 ROA not before: Sun 18 Jan 2026 11:04:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43260 IP address blocks: 77.90.54.0/24 maxlen: 24 217.69.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:c6:fa:7c:fc:ab:99:00:91:c0:d4:75:52:f3:aa:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 18 11:04:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=860aa59a438c279f97596e40dab26cd3ebb557e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ca:30:c1:fb:5c:20:48:e8:c2:91:22:bb:22: 16:83:77:c5:73:4c:78:6c:6f:67:97:a3:18:76:1c: 2f:75:79:cd:b0:74:8e:98:f4:38:68:4f:df:40:3d: 60:c9:72:ec:24:c1:ec:a2:1f:6b:e0:9e:60:de:c8: 20:4d:13:94:32:56:96:d7:87:70:a2:45:f6:39:2f: ca:41:18:83:5b:1e:e9:14:6d:70:98:6d:60:e8:9a: 35:7c:0d:41:66:14:89:b7:30:b2:ad:8a:16:ca:5a: b5:d0:d0:0f:9d:a3:23:2d:76:ed:cb:43:42:5c:d5: b2:87:e4:45:e9:16:12:bc:ea:c5:05:3b:84:bd:e2: f0:e3:38:12:d4:30:56:9d:10:2f:92:77:84:c4:82: f3:e4:a5:2a:a1:80:5e:c5:22:41:0a:12:6a:4b:cb: 49:57:f1:dc:e8:d0:83:74:16:15:77:83:1d:be:86: 3a:ee:f4:e9:6d:1b:a0:e3:d6:2f:dd:70:01:93:7b: 13:27:64:f2:cd:ec:45:ad:6d:c5:5c:0a:0e:05:8b: 33:e3:b3:0b:b7:c3:d3:ec:d8:0f:14:15:65:91:fa: 36:67:c9:03:a3:4e:d7:e2:47:ae:e0:b9:a9:d8:de: ad:e8:f8:6d:d0:47:8c:d0:88:04:e5:ce:44:bf:62: ce:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0A:A5:9A:43:8C:27:9F:97:59:6E:40:DA:B2:6C:D3:EB:B5:57:E7 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hgqlmkOMJ5-XWW5A2rJs0-u1V-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.54.0/24 217.69.166.0/24 Signature Algorithm: sha256WithRSAEncryption 19:c4:d6:24:e4:2e:e5:2d:b7:ed:29:07:7f:98:c1:37:be:93: 7b:3e:1a:c5:9f:dc:1d:ab:89:7a:cb:b4:64:c2:36:ef:9c:5b: b9:e1:7b:07:de:48:03:bf:aa:9d:15:b1:f6:b3:82:e5:ef:00: a0:d6:d4:3f:8d:c3:de:0f:f1:c9:47:0d:29:d7:bf:c8:b4:0f: 5b:87:e0:eb:be:0a:f4:dc:93:89:c3:66:a5:ef:fe:42:43:71: 27:72:7c:1a:1e:7e:2d:11:58:7a:69:be:be:b2:ab:b3:5f:a7: b7:af:d6:da:65:97:03:ad:77:65:77:f0:bb:52:56:71:93:ee: b7:5d:0a:40:79:13:f9:0d:1b:71:7f:96:86:ab:4e:1d:7d:e2: b7:94:9e:2d:2a:14:bc:af:e0:aa:f2:97:85:99:ab:22:b3:ae: 0b:35:78:09:64:90:9f:e9:b4:d2:68:c6:b1:7b:17:fe:98:a9: 53:41:06:74:b9:9a:eb:ac:78:14:5a:5d:fa:ff:8d:54:1a:01: df:ef:7c:ea:0a:4c:b8:f5:4c:82:92:5a:14:ce:91:bf:93:b4: f5:3a:2e:39:d8:f4:8e:f3:bb:7c:35:9b:b8:ad:1e:7c:92:fd: 13:cb:6b:54:2f:b5:bd:bc:26:48:60:93:71:83:69:aa:00:31: 2f:0e:70:71 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvQxvp8/KuZAJHA1HVS86qkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTE4MTEwNDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjBhYTU5YTQzOGMyNzlmOTc1OTZlNDBkYWIyNmNkM2ViYjU1N2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsowwftcIEjowpEiuyIWg3fFc0x4 bG9nl6MYdhwvdXnNsHSOmPQ4aE/fQD1gyXLsJMHsoh9r4J5g3sggTROUMlaW14dw okX2OS/KQRiDWx7pFG1wmG1g6Jo1fA1BZhSJtzCyrYoWylq10NAPnaMjLXbty0NC XNWyh+RF6RYSvOrFBTuEveLw4zgS1DBWnRAvkneExILz5KUqoYBexSJBChJqS8tJ V/Hc6NCDdBYVd4MdvoY67vTpbRug49Yv3XABk3sTJ2TyzexFrW3FXAoOBYsz47ML t8PT7NgPFBVlkfo2Z8kDo07X4keu4Lmp2N6t6Pht0EeM0IgE5c5Ev2LO2wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIYKpZpDjCefl1luQNqybNPrtVfnMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvaGdxbG1rT01KNS1YV1c1QTJySnMwLXUxVi1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVo2AwQA 2UWmMA0GCSqGSIb3DQEBCwUAA4IBAQAZxNYk5C7lLbftKQd/mME3vpN7PhrFn9wd q4l6y7RkwjbvnFu54XsH3kgDv6qdFbH2s4Ll7wCg1tQ/jcPeD/HJRw0p17/ItA9b h+Drvgr03JOJw2al7/5CQ3EncnwaHn4tEVh6ab6+squzX6e3r9baZZcDrXdld/C7 UlZxk+63XQpAeRP5DRtxf5aGq04dfeK3lJ4tKhS8r+Cq8peFmasis64LNXgJZJCf 6bTSaMaxexf+mKlTQQZ0uZrrrHgUWl36/41UGgHf73zqCky49UyCkloUzpG/k7T1 Oi452PSO87t8NZu4rR58kv0Ty2tUL7W9vCZIYJNxg2mqADEvDnBx -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:42 2026 by rpki-client