This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/hIBCTAF4jPl4w6CfRMM-f4mZ7kU.roa File: hIBCTAF4jPl4w6CfRMM-f4mZ7kU.roa (raw, json) Hash identifier: hkaJOUcZPZPAgS9PFSnb4vIYJ+knLjrEjTxc0J+IkfQ= Subject key identifier: 84:80:42:4C:01:78:8C:F9:78:C3:A0:9F:44:C3:3E:7F:89:99:EE:45 Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10 Certificate serial: 019B77C6CE451D5F3D4AB01D00E13E4EE93A Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/hIBCTAF4jPl4w6CfRMM-f4mZ7kU.roa Signing time: Thu 01 Jan 2026 04:17:56 +0000 ROA not before: Thu 01 Jan 2026 04:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206092 IP address blocks: 185.92.25.0/24 maxlen: 24 185.92.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 10:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ce:45:1d:5f:3d:4a:b0:1d:00:e1:3e:4e:e9:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10 Validity Not Before: Jan 1 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8480424c01788cf978c3a09f44c33e7f8999ee45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:76:74:fa:a9:3f:53:69:27:b2:c1:fc:49:62: d3:9f:2e:04:24:52:71:58:4c:74:bb:50:0e:0b:6c: 60:63:9a:5f:66:6f:1e:23:8a:b3:06:54:14:6d:2d: 1a:4f:54:ea:12:e9:6e:8e:d3:44:8d:8b:38:1d:8f: a6:5d:67:0e:cf:1f:8d:8a:ac:d5:4c:8c:77:29:12: 91:83:ca:2b:4b:60:20:15:26:f7:3c:2a:a6:e8:06: c1:c1:dd:25:40:93:8f:46:da:40:dd:3c:95:13:c2: a5:34:3d:07:8d:15:a4:bd:10:f6:d3:f9:d5:8f:1e: 26:25:a0:98:1f:42:d5:50:a8:38:6a:1b:d8:9b:05: 6f:ae:b1:c3:97:45:bf:50:d6:f9:9a:fc:dc:a9:84: 1a:aa:08:4d:4a:21:cb:32:e3:4d:19:a3:99:39:5c: 6a:86:96:8f:3b:9f:34:c0:12:73:25:6b:35:5e:9f: 2a:cc:ab:87:db:af:83:b4:8d:ad:1e:16:4f:9d:2d: 48:56:e0:ce:ec:ae:a4:b5:db:3c:85:a7:11:fb:09: b6:9a:d4:01:c8:c7:78:ac:4e:19:f2:00:17:f2:91: be:fa:b3:1f:2b:3c:86:53:65:11:4d:9a:1a:c7:de: c5:28:db:e2:c0:29:8e:dc:07:65:13:58:9d:40:ea: ef:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:80:42:4C:01:78:8C:F9:78:C3:A0:9F:44:C3:3E:7F:89:99:EE:45 X509v3 Authority Key Identifier: keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/hIBCTAF4jPl4w6CfRMM-f4mZ7kU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.92.25.0-185.92.26.255 Signature Algorithm: sha256WithRSAEncryption 50:58:b5:4f:5e:c7:19:e2:7a:09:a9:e7:65:46:0a:29:ac:2f: 93:5c:c1:db:ac:86:e6:83:eb:c7:7c:06:fc:f5:04:16:51:8a: fe:c3:ce:aa:d8:2b:eb:90:8b:99:9c:ba:03:26:5a:89:3c:dd: 98:1f:38:b3:35:a0:38:53:04:60:a2:3e:59:a6:54:9a:ed:d0: fd:85:c3:fb:94:c1:10:7b:8f:47:da:ca:f5:cd:25:4b:e4:56: ea:ec:85:85:93:1f:84:2c:31:23:c7:1c:ed:b7:f6:43:d0:e4: 6e:de:33:a7:af:06:ba:31:5a:0f:f1:c6:2a:3f:d3:16:26:54: b9:3c:5c:5a:9d:16:f3:17:3c:aa:b1:cf:ef:e8:89:8e:c3:08: 7b:e5:18:40:f2:f3:03:bd:d0:b5:9d:d4:8a:20:6c:29:81:9f: fb:6c:2a:63:70:24:a9:09:11:59:ae:6f:bf:92:2a:b6:d4:92: 80:91:f2:5c:33:c3:56:63:c7:8a:00:eb:16:f2:11:cc:04:ec: 1b:51:f9:b2:98:90:8e:e3:ef:60:58:45:45:70:6b:b6:13:d7: ac:77:e2:3f:2b:71:77:b0:63:90:c6:a7:37:79:12:ae:78:24: 62:13:0f:51:8f:f8:d1:8b:c0:ec:0d:9b:31:08:af:24:16:50: b8:b3:dd:6e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xs5FHV89SrAdAOE+Tuk6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy NzFlMTAwHhcNMjYwMTAxMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDgwNDI0YzAxNzg4Y2Y5NzhjM2EwOWY0NGMzM2U3Zjg5OTllZTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3Z0+qk/U2knssH8SWLTny4EJFJx WEx0u1AOC2xgY5pfZm8eI4qzBlQUbS0aT1TqEulujtNEjYs4HY+mXWcOzx+NiqzV TIx3KRKRg8orS2AgFSb3PCqm6AbBwd0lQJOPRtpA3TyVE8KlND0HjRWkvRD20/nV jx4mJaCYH0LVUKg4ahvYmwVvrrHDl0W/UNb5mvzcqYQaqghNSiHLMuNNGaOZOVxq hpaPO580wBJzJWs1Xp8qzKuH26+DtI2tHhZPnS1IVuDO7K6ktds8hacR+wm2mtQB yMd4rE4Z8gAX8pG++rMfKzyGU2URTZoax97FKNviwCmO3AdlE1idQOrv7QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFISAQkwBeIz5eMOgn0TDPn+Jme5FMB8GA1UdIwQY MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt NjM0MTEzNjdkOTBhLzEvaElCQ1RBRjRqUGw0dzZDZlJNTS1mNG1aN2tVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5XBkD BAC5XBowDQYJKoZIhvcNAQELBQADggEBAFBYtU9exxniegmp52VGCimsL5Ncwdus huaD68d8Bvz1BBZRiv7DzqrYK+uQi5mcugMmWok83ZgfOLM1oDhTBGCiPlmmVJrt 0P2Fw/uUwRB7j0fayvXNJUvkVurshYWTH4QsMSPHHO239kPQ5G7eM6evBroxWg/x xio/0xYmVLk8XFqdFvMXPKqxz+/oiY7DCHvlGEDy8wO90LWd1IogbCmBn/tsKmNw JKkJEVmub7+SKrbUkoCR8lwzw1Zjx4oA6xbyEcwE7BtR+bKYkI7j72BYRUVwa7YT 16x34j8rcXewY5DGpzd5Eq54JGITD1GP+NGLwOwNmzEIryQWULiz3W4= -----END CERTIFICATE-----Generated at Tue Jan 20 17:19:09 2026 by rpki-client