This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/hiyOGHTEx6e3pltkvFRuxbvzeLk.roa File: hiyOGHTEx6e3pltkvFRuxbvzeLk.roa (raw, json) Hash identifier: uwxu9twQNiCx8BtLjPkkwtvyP6rLBJp+SJ2lIKbETp8= Subject key identifier: 86:2C:8E:18:74:C4:C7:A7:B7:A6:5B:64:BC:54:6E:C5:BB:F3:78:B9 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E3817460AC4CB4739EE72D2AF6F29C2 Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/hiyOGHTEx6e3pltkvFRuxbvzeLk.roa Signing time: Fri 02 Jan 2026 10:19:23 +0000 ROA not before: Fri 02 Jan 2026 10:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5433 IP address blocks: 91.151.176.0/20 maxlen: 20 91.151.186.0/24 maxlen: 24 91.151.189.0/24 maxlen: 24 91.151.190.0/24 maxlen: 24 2a01:8380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:17:46:0a:c4:cb:47:39:ee:72:d2:af:6f:29:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=862c8e1874c4c7a7b7a65b64bc546ec5bbf378b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:59:2c:65:e6:7c:7f:cf:55:ba:39:74:e5: 1e:f4:e5:21:11:c6:fe:c4:f7:05:87:27:27:4c:6c: 66:bf:a8:cc:69:b9:d8:4f:fb:2c:1e:20:9b:41:1e: 05:00:31:ab:55:06:4e:91:a2:ac:10:18:32:91:fe: 44:a5:9e:bc:3c:71:f3:c7:30:b3:29:60:61:8e:f8: 5b:d8:18:ad:cf:fb:b4:ab:8e:35:63:22:c8:e3:12: 14:f2:3a:55:f5:f3:13:be:96:47:d1:de:26:df:79: d1:dd:db:f7:f0:1a:fc:1c:88:a0:a2:ea:80:ba:c3: 55:5e:56:c8:20:b0:cb:7a:63:a6:1f:9a:c5:91:5c: 88:aa:6f:a6:b5:7d:7f:77:f5:df:db:40:a9:4c:63: 29:1b:e9:36:ca:66:5d:ef:df:c7:76:b8:40:6f:bd: be:e8:2f:42:78:e9:1f:cd:f3:7f:80:d2:a5:e8:ce: 43:c8:7c:1b:e1:a7:fd:9e:4b:1f:86:c0:b9:d8:be: fe:c9:33:9c:aa:b8:d5:90:d1:6a:74:9b:68:6b:5f: 36:07:06:13:a7:1a:2e:f8:a9:6d:9d:5e:43:5f:39: cd:ab:b3:d9:dd:70:f8:28:07:dc:fc:7c:7b:65:49: 49:98:b3:af:28:94:01:b4:26:67:34:7d:ca:62:a0: 97:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2C:8E:18:74:C4:C7:A7:B7:A6:5B:64:BC:54:6E:C5:BB:F3:78:B9 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/hiyOGHTEx6e3pltkvFRuxbvzeLk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.151.176.0/20 IPv6: 2a01:8380::/32 Signature Algorithm: sha256WithRSAEncryption b9:8c:ba:15:02:f4:0b:19:0d:9a:b8:34:21:e4:b2:0c:7f:df: 3e:ff:68:17:2c:f5:10:4e:f7:0a:4e:a2:b8:ab:40:90:84:6d: 82:09:76:d3:ee:9a:99:d6:75:42:5c:22:ce:af:7c:72:5d:72: 86:9f:1a:ae:c9:4c:b6:95:aa:ea:55:0b:f5:0b:27:ee:a6:1f: 62:81:9e:d3:49:93:f0:54:60:04:35:91:48:84:cb:e3:fa:93: 08:aa:1f:d6:6b:75:ab:b2:27:4f:cc:be:a5:48:a4:b7:20:20: 85:e6:a0:d3:41:3d:c0:35:a0:f8:71:ac:f3:23:5a:18:fd:b5: 6c:79:3b:5c:bf:80:19:93:be:5f:30:c5:55:21:2c:ac:45:e7: a1:a0:e1:8c:8a:d0:67:3f:00:93:52:ae:79:ba:bd:6b:b0:79: 7f:92:bc:33:1a:6d:e5:e1:93:cf:00:1f:d4:08:ef:e0:e4:6d: 11:da:6f:1d:71:f4:df:dd:05:0a:73:d8:2f:a4:06:c0:57:bb: bd:64:9f:65:c3:ad:06:92:b9:42:ca:ff:46:51:ed:88:3a:1a: 81:c3:26:57:77:bc:e3:f1:80:36:6b:4d:c4:26:4d:f1:c2:bc: 58:c8:01:8f:19:89:35:c0:28:fd:a1:1d:51:1a:5f:9a:73:2e: 62:1d:29:c6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OBdGCsTLRznuctKvbynCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjJjOGUxODc0YzRjN2E3YjdhNjViNjRiYzU0NmVjNWJiZjM3OGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd5ZLGXmfH/PVbo5dOUe9OUhEcb+ xPcFhycnTGxmv6jMabnYT/ssHiCbQR4FADGrVQZOkaKsEBgykf5EpZ68PHHzxzCz KWBhjvhb2Bitz/u0q441YyLI4xIU8jpV9fMTvpZH0d4m33nR3dv38Br8HIigouqA usNVXlbIILDLemOmH5rFkVyIqm+mtX1/d/Xf20CpTGMpG+k2ymZd79/HdrhAb72+ 6C9CeOkfzfN/gNKl6M5DyHwb4af9nksfhsC52L7+yTOcqrjVkNFqdJtoa182BwYT pxou+KltnV5DXznNq7PZ3XD4KAfc/Hx7ZUlJmLOvKJQBtCZnNH3KYqCXBwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIYsjhh0xMent6ZbZLxUbsW783i5MB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvaGl5T0dIVEV4NmUzcGx0a3ZGUnV4YnZ6ZUxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEW5ewMA0E AgACMAcDBQAqAYOAMA0GCSqGSIb3DQEBCwUAA4IBAQC5jLoVAvQLGQ2auDQh5LIM f98+/2gXLPUQTvcKTqK4q0CQhG2CCXbT7pqZ1nVCXCLOr3xyXXKGnxquyUy2larq VQv1Cyfuph9igZ7TSZPwVGAENZFIhMvj+pMIqh/Wa3WrsidPzL6lSKS3ICCF5qDT QT3ANaD4cazzI1oY/bVseTtcv4AZk75fMMVVISysReehoOGMitBnPwCTUq55ur1r sHl/krwzGm3l4ZPPAB/UCO/g5G0R2m8dcfTf3QUKc9gvpAbAV7u9ZJ9lw60GkrlC yv9GUe2IOhqBwyZXd7zj8YA2a03EJk3xwrxYyAGPGYk1wCj9oR1RGl+acy5iHSnG -----END CERTIFICATE-----Generated at Tue Jan 20 09:20:26 2026 by rpki-client