This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/hGI3ocS-L58v4Or7ijp-3kbHDDI.roa File: hGI3ocS-L58v4Or7ijp-3kbHDDI.roa (raw, json) Hash identifier: KGbTVHSNg2+WZM2vF2JiCGPUm6fdzfEhTo+s9xkWkXI= Subject key identifier: 84:62:37:A1:C4:BE:2F:9F:2F:E0:EA:FB:8A:3A:7E:DE:46:C7:0C:32 Certificate issuer: /CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7 Certificate serial: 019B76EAFC9EC1BC8B3B079726B02B77895E Authority key identifier: 7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/hGI3ocS-L58v4Or7ijp-3kbHDDI.roa Signing time: Thu 01 Jan 2026 00:17:50 +0000 ROA not before: Thu 01 Jan 2026 00:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196972 IP address blocks: 193.105.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fc:9e:c1:bc:8b:3b:07:97:26:b0:2b:77:89:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7 Validity Not Before: Jan 1 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=846237a1c4be2f9f2fe0eafb8a3a7ede46c70c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a5:96:f0:db:09:f6:d3:0f:aa:ff:11:c2:17: 1c:85:ce:d4:55:ca:ca:6f:e5:37:42:58:e3:3e:de: 23:aa:df:2b:52:af:e6:fe:d0:96:70:37:c4:05:ef: 44:09:68:b1:a0:25:15:17:fa:4c:92:e7:3d:64:97: 1f:8a:24:0f:6b:4c:d3:b2:d0:61:be:c7:2e:39:58: 64:cc:2f:eb:5b:16:e1:9b:af:c5:d1:68:a0:bd:3e: 6d:96:37:89:b8:d3:aa:18:7a:71:14:fc:6b:1b:3b: 29:37:43:bb:78:da:11:5d:d8:e7:42:5d:39:d2:27: c7:81:9e:61:25:34:d3:d0:72:82:bf:ef:f9:5c:36: f2:b2:b0:8e:67:b2:31:15:27:9a:83:e6:82:fb:1b: f1:70:98:23:07:87:08:d6:55:6e:32:05:a6:65:b9: 5c:6a:67:5c:da:86:7e:c9:6f:7e:0b:b8:76:c8:51: db:29:73:0c:cf:32:8b:ff:27:25:2e:78:2a:71:ee: 66:bc:70:98:79:60:a7:7a:da:9f:1f:b9:12:7d:e5: 28:64:1a:df:53:97:8f:77:27:bc:a7:f7:a2:68:f5: 10:12:72:6f:ac:1a:24:93:18:1c:10:6b:9f:19:7a: 13:91:8d:ad:d9:b1:bc:81:d4:bc:bf:c1:c5:45:66: 89:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:62:37:A1:C4:BE:2F:9F:2F:E0:EA:FB:8A:3A:7E:DE:46:C7:0C:32 X509v3 Authority Key Identifier: keyid:7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/hGI3ocS-L58v4Or7ijp-3kbHDDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.192.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:e6:28:ce:e9:4d:15:58:b2:31:6b:c1:68:fc:05:45:5b:ed: fc:d9:7e:78:a6:d7:ae:62:dc:cf:67:0c:53:b1:bc:e6:8c:40: 5b:d1:dd:94:2d:1b:82:22:bb:5c:e0:62:72:e7:05:56:2c:39: f8:6f:ec:79:65:2e:fb:a9:b2:5f:d1:ed:35:39:4a:50:9a:0d: 69:da:6c:9a:5a:69:98:ab:59:61:5c:54:f5:3d:37:9d:aa:59: e0:73:bb:88:02:d6:e7:30:7f:a3:85:03:36:46:e1:ce:7d:3b: 4a:18:fe:e2:6e:2b:c2:4e:78:7c:e1:4d:bc:2b:08:6b:c7:30: 4f:d3:29:73:69:b3:87:2a:71:34:a4:57:f4:6a:0a:cd:07:0b: 05:cc:20:16:f1:20:3f:c2:61:c2:40:95:f2:8c:d9:d1:27:0a: 87:ac:9f:d1:3d:41:b2:51:62:88:73:29:21:04:ac:40:18:01: 73:bd:03:a6:a3:f2:5b:ad:bc:b6:2b:0c:a8:93:9c:af:19:98: 69:4d:9c:fd:2f:15:c6:cb:34:43:97:76:0f:c3:4c:bd:66:e9: 00:e7:db:35:e6:78:9f:73:d5:57:4e:06:43:d8:03:10:75:8f: 5f:18:b0:6e:1b:ea:d0:9e:87:ef:7d:ec:18:7f:b5:8c:63:4a: 04:16:f7:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vyewbyLOweXJrArd4leMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDBlZjRmM2JmNjViODdjZmEwMmVmN2I0YTY1ODliYTJk ZTRmZjcwHhcNMjYwMTAxMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDYyMzdhMWM0YmUyZjlmMmZlMGVhZmI4YTNhN2VkZTQ2YzcwYzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaWW8NsJ9tMPqv8Rwhcchc7UVcrK b+U3QljjPt4jqt8rUq/m/tCWcDfEBe9ECWixoCUVF/pMkuc9ZJcfiiQPa0zTstBh vscuOVhkzC/rWxbhm6/F0WigvT5tljeJuNOqGHpxFPxrGzspN0O7eNoRXdjnQl05 0ifHgZ5hJTTT0HKCv+/5XDbysrCOZ7IxFSeag+aC+xvxcJgjB4cI1lVuMgWmZblc amdc2oZ+yW9+C7h2yFHbKXMMzzKL/yclLngqce5mvHCYeWCnetqfH7kSfeUoZBrf U5ePdye8p/eiaPUQEnJvrBokkxgcEGufGXoTkY2t2bG8gdS8v8HFRWaJAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIRiN6HEvi+fL+Dq+4o6ft5GxwwyMB8GA1UdIwQY MBaAFH0A70879luHz6Au97SmWJui3k/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFEdlR6djJXNGZQb0M3M3RLWlltNkxlVF9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9kZDYxZTMtZjhjYy00ZjgzLWE4YzQt ZGU5ZDA0MDFhNmY2LzEvaEdJM29jUy1MNTh2NE9yN2lqcC0za2JIRERJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9kZDYxZTMtZjhjYy00ZjgzLWE4YzQtZGU5ZDA0MDFhNmY2 LzEvZlFEdlR6djJXNGZQb0M3M3RLWlltNkxlVF9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWnAMA0G CSqGSIb3DQEBCwUAA4IBAQB75ijO6U0VWLIxa8Fo/AVFW+382X54pteuYtzPZwxT sbzmjEBb0d2ULRuCIrtc4GJy5wVWLDn4b+x5ZS77qbJf0e01OUpQmg1p2myaWmmY q1lhXFT1PTedqlngc7uIAtbnMH+jhQM2RuHOfTtKGP7ibivCTnh84U28KwhrxzBP 0ylzabOHKnE0pFf0agrNBwsFzCAW8SA/wmHCQJXyjNnRJwqHrJ/RPUGyUWKIcykh BKxAGAFzvQOmo/Jbrby2Kwyok5yvGZhpTZz9LxXGyzRDl3YPw0y9ZukA59s15nif c9VXTgZD2AMQdY9fGLBuG+rQnofvfewYf7WMY0oEFvfq -----END CERTIFICATE-----Generated at Tue Feb 10 08:38:41 2026 by rpki-client