This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa File: HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa (raw, json) Hash identifier: Y2NgeeXh3CWzQ6WzeXvUZMOxEVVMsrRGPKbZGQKApUE= Subject key identifier: 1D:C3:97:18:70:5A:08:49:86:2E:A0:D6:C3:E2:06:45:CA:ED:F5:33 Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828 Certificate serial: 019C048F10836549FA39BADD0B37B40BFAAF Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa Signing time: Wed 28 Jan 2026 12:23:30 +0000 ROA not before: Wed 28 Jan 2026 12:23:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210236 IP address blocks: 194.110.160.0/22 maxlen: 24 2a05:3a40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:8f:10:83:65:49:fa:39:ba:dd:0b:37:b4:0b:fa:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828 Validity Not Before: Jan 28 12:23:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dc39718705a0849862ea0d6c3e20645caedf533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:57:d7:4c:05:3e:22:3e:e5:69:da:20:10:25: 37:f3:11:6d:71:79:19:4f:9f:6a:e6:67:54:d5:9c: c4:c4:84:89:14:64:31:04:66:b6:e9:85:a5:73:2c: 01:a4:49:43:8a:ac:88:45:55:5a:4d:4a:f5:ed:be: a7:92:b0:ee:e5:31:2a:28:41:f0:0c:2c:6a:ba:3b: 56:42:05:45:cb:a4:a6:3f:5f:10:60:1f:93:c6:36: fe:12:e5:50:7c:90:04:04:fc:ad:50:ae:9a:a8:25: 6a:f2:ea:9e:34:06:d1:be:59:00:e8:f4:9b:e3:9d: 20:62:a1:45:b2:6e:63:4f:6f:b9:43:8b:66:98:d0: 10:4d:02:eb:85:54:fd:ff:de:27:4b:3a:32:a4:ad: e2:f0:fc:7c:32:2f:38:90:87:02:5c:f2:17:f6:f1: 0f:e5:09:4a:e4:3f:ad:6e:ff:ad:9f:63:30:23:7d: 65:14:be:dd:fb:22:1f:65:db:73:fa:ab:f6:55:32: 2d:3b:68:3e:bb:43:df:3f:a3:28:c7:91:68:03:d1: 93:8c:08:fc:bb:d3:19:12:26:6f:57:a9:46:9b:b9: 9f:0a:3d:54:06:94:e7:55:bd:7f:5e:9a:24:cc:1c: 9a:3e:da:07:20:f4:51:64:d4:3a:04:cd:ec:8f:a3: ba:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C3:97:18:70:5A:08:49:86:2E:A0:D6:C3:E2:06:45:CA:ED:F5:33 X509v3 Authority Key Identifier: keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.160.0/22 IPv6: 2a05:3a40::/32 Signature Algorithm: sha256WithRSAEncryption 2c:f6:fb:76:d7:b1:a3:f3:f0:e1:4c:38:77:dd:27:dc:d6:09: 33:1e:f3:5a:8d:a7:fb:1c:58:b0:58:e0:d2:2d:81:e8:e5:73: 61:12:2b:43:2f:8d:93:86:51:91:86:80:c3:fe:9f:76:8b:83: 34:90:3f:f4:52:bc:f8:cb:97:3e:60:de:89:75:3f:96:e7:d3: 42:55:46:2f:aa:e5:ca:03:a9:fc:f9:49:eb:1b:38:0c:e7:54: 05:48:f2:17:b4:8e:fb:4d:27:e0:f8:d9:a4:0f:2f:b0:1f:8a: 6e:1e:c6:31:e9:0a:ad:9d:d6:07:39:20:88:ee:56:7d:b1:32: 56:85:0c:d7:37:e3:37:39:97:5f:5e:bd:01:88:1f:eb:55:dc: 72:f8:0d:d7:54:47:2c:7b:63:9c:89:e8:5e:95:92:3e:d7:ad: 69:6b:cb:92:b2:46:ae:77:e9:eb:eb:29:62:bf:66:8d:2c:76: 45:10:9f:c3:ef:a8:b6:e9:f5:33:40:3d:61:e0:1c:10:c1:a3: bc:4c:07:a7:67:e9:53:b0:4e:09:8c:3d:77:07:02:36:5d:e3: a0:83:30:73:c3:cf:de:15:2e:f4:07:c0:62:a0:ff:d1:30:a5: 37:8b:40:15:89:26:62:16:2b:57:2b:8c:f7:a4:a8:76:e3:1e: 97:e5:b4:cf -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZwEjxCDZUn6ObrdCze0C/qvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGVjOWM3ZjFlY2MyN2NiMmVjNzEzYzI3NjRhMDIxNGZj ZTc4MjgwHhcNMjYwMTI4MTIyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGMzOTcxODcwNWEwODQ5ODYyZWEwZDZjM2UyMDY0NWNhZWRmNTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVfXTAU+Ij7ladogECU38xFtcXkZ T59q5mdU1ZzExISJFGQxBGa26YWlcywBpElDiqyIRVVaTUr17b6nkrDu5TEqKEHw DCxqujtWQgVFy6SmP18QYB+Txjb+EuVQfJAEBPytUK6aqCVq8uqeNAbRvlkA6PSb 450gYqFFsm5jT2+5Q4tmmNAQTQLrhVT9/94nSzoypK3i8Px8Mi84kIcCXPIX9vEP 5QlK5D+tbv+tn2MwI31lFL7d+yIfZdtz+qv2VTItO2g+u0PfP6Mox5FoA9GTjAj8 u9MZEiZvV6lGm7mfCj1UBpTnVb1/XpokzByaPtoHIPRRZNQ6BM3sj6O6HwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFB3DlxhwWghJhi6g1sPiBkXK7fUzMB8GA1UdIwQY MBaAFMaOycfx7MJ8suxxPCdkoCFPzngoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kNzRjOWUtMDRmMC00ZTYzLWFmMzAt ODYzMmVlOTQxNDViLzEvSGNPWEdIQmFDRW1HTHFEV3ctSUdSY3J0OVRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kNzRjOWUtMDRmMC00ZTYzLWFmMzAtODYzMmVlOTQxNDVi LzEveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwm6gMA0E AgACMAcDBQAqBTpAMA0GCSqGSIb3DQEBCwUAA4IBAQAs9vt217Gj8/DhTDh33Sfc 1gkzHvNajaf7HFiwWODSLYHo5XNhEitDL42ThlGRhoDD/p92i4M0kD/0Urz4y5c+ YN6JdT+W59NCVUYvquXKA6n8+UnrGzgM51QFSPIXtI77TSfg+NmkDy+wH4puHsYx 6QqtndYHOSCI7lZ9sTJWhQzXN+M3OZdfXr0BiB/rVdxy+A3XVEcse2OciehelZI+ 161pa8uSskaud+nr6yliv2aNLHZFEJ/D76i26fUzQD1h4BwQwaO8TAenZ+lTsE4J jD13BwI2XeOggzBzw8/eFS70B8BioP/RMKU3i0AViSZiFitXK4z3pKh24x6X5bTP -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:36 2026 by rpki-client