This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/hqaui3y0dJBb-G_swK9JTqsP15I.roa File: hqaui3y0dJBb-G_swK9JTqsP15I.roa (raw, json) Hash identifier: IYmlHOKbbIfZroL4w4V7fPkYaUorBcPfFwoIP2cIOs8= Subject key identifier: 86:A6:AE:8B:7C:B4:74:90:5B:F8:6F:EC:C0:AF:49:4E:AB:0F:D7:92 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019B7E388FFCD55E07ADD6B7239DF38F6CCC Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/hqaui3y0dJBb-G_swK9JTqsP15I.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 188.66.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8f:fc:d5:5e:07:ad:d6:b7:23:9d:f3:8f:6c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86a6ae8b7cb474905bf86fecc0af494eab0fd792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:ce:63:ca:6b:23:96:46:e9:a4:24:69:72: ea:80:60:08:a0:f9:5a:63:a9:4c:8e:ac:04:bf:11: d0:b5:97:b9:28:e9:c6:f7:95:fe:5e:9c:d4:fd:e3: 71:03:41:1e:9b:db:1a:9d:91:bf:ce:37:7d:bb:9c: c0:e4:f9:b2:83:2d:db:d3:cc:9d:26:85:dd:14:21: a4:d3:61:95:d0:53:ce:7f:82:c3:bf:2f:94:59:fd: 4c:d7:d8:5b:27:8e:23:d1:f4:8e:c0:77:19:d3:99: 78:47:76:b6:ad:1e:37:02:48:2b:2c:78:8b:f6:fd: a2:3d:b8:fd:43:06:f4:f2:f1:c2:64:32:fe:f4:57: 78:dd:73:bf:8e:52:79:8b:3c:5c:15:d4:88:b8:b3: 9b:c0:33:48:d0:d8:69:cc:f8:f9:ce:8d:23:9f:04: 2a:4b:b6:ef:aa:6e:01:34:7c:84:03:88:0d:3f:7e: 99:17:b9:85:e3:e0:58:b6:59:75:8e:26:88:d1:af: eb:e5:47:a6:25:88:08:0c:7f:50:87:e5:c2:ba:6b: 07:2d:46:bb:bb:ab:eb:b5:14:cf:54:45:04:f4:23: e3:40:90:37:0f:25:50:0e:a6:81:b9:96:24:89:a4: db:0e:8c:bc:80:90:59:eb:e8:40:29:50:a4:a7:06: d8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A6:AE:8B:7C:B4:74:90:5B:F8:6F:EC:C0:AF:49:4E:AB:0F:D7:92 X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/hqaui3y0dJBb-G_swK9JTqsP15I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.66.25.0/24 Signature Algorithm: sha256WithRSAEncryption 07:d7:5d:56:17:c0:10:5d:f3:3d:55:a7:71:c1:83:7e:06:99: ef:50:65:51:aa:aa:9b:c6:f0:9f:f6:93:cd:df:4c:9f:0f:1c: 46:65:0b:f0:b1:6b:a3:e1:21:4c:d9:ac:20:80:d7:43:9e:86: 11:85:92:bd:29:41:f1:27:21:df:14:65:fd:72:02:c1:f3:28: f9:57:9b:b4:8b:56:47:9b:c5:bc:ea:67:ae:01:94:69:e7:2f: 60:bc:92:87:23:66:35:f5:17:e2:19:ce:4c:e0:c5:18:01:a9: 4e:15:6c:eb:b3:89:1d:9f:13:a9:d8:ca:2b:27:2b:29:06:5e: d5:6a:8a:2d:a0:14:6e:97:4f:b7:4c:f9:0d:9c:4d:3d:4d:cd: 9f:53:70:03:b5:fc:a7:43:ea:8c:37:eb:f1:26:4f:23:e2:9e: be:2b:39:ad:42:41:46:bb:39:63:d4:2c:8d:01:3d:4a:ad:15: d2:0e:68:d7:bc:cd:f4:2d:d9:b7:a7:f8:e6:59:ba:a9:eb:ec: 9b:b1:87:6c:47:96:ec:2e:c8:d9:90:dc:16:54:91:06:68:b2: a5:2a:78:80:06:d3:45:5c:63:58:ca:03:ef:b1:34:dd:2c:be: 44:bd:b7:cd:01:91:88:45:45:aa:34:d0:50:72:ea:99:60:72: 2b:c6:9e:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OI/81V4Hrda3I53zj2zMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmE2YWU4YjdjYjQ3NDkwNWJmODZmZWNjMGFmNDk0ZWFiMGZkNzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbfOY8prI5ZG6aQkaXLqgGAIoPla Y6lMjqwEvxHQtZe5KOnG95X+XpzU/eNxA0Eem9sanZG/zjd9u5zA5Pmygy3b08yd JoXdFCGk02GV0FPOf4LDvy+UWf1M19hbJ44j0fSOwHcZ05l4R3a2rR43AkgrLHiL 9v2iPbj9Qwb08vHCZDL+9Fd43XO/jlJ5izxcFdSIuLObwDNI0NhpzPj5zo0jnwQq S7bvqm4BNHyEA4gNP36ZF7mF4+BYtll1jiaI0a/r5UemJYgIDH9Qh+XCumsHLUa7 u6vrtRTPVEUE9CPjQJA3DyVQDqaBuZYkiaTbDoy8gJBZ6+hAKVCkpwbYjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIamrot8tHSQW/hv7MCvSU6rD9eSMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvaHFhdWkzeTBkSkJiLUdfc3dLOUpUcXNQMTVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEIZMA0G CSqGSIb3DQEBCwUAA4IBAQAH111WF8AQXfM9VadxwYN+BpnvUGVRqqqbxvCf9pPN 30yfDxxGZQvwsWuj4SFM2awggNdDnoYRhZK9KUHxJyHfFGX9cgLB8yj5V5u0i1ZH m8W86meuAZRp5y9gvJKHI2Y19RfiGc5M4MUYAalOFWzrs4kdnxOp2MorJyspBl7V aootoBRul0+3TPkNnE09Tc2fU3ADtfynQ+qMN+vxJk8j4p6+KzmtQkFGuzlj1CyN AT1KrRXSDmjXvM30Ldm3p/jmWbqp6+ybsYdsR5bsLsjZkNwWVJEGaLKlKniABtNF XGNYygPvsTTdLL5EvbfNAZGIRUWqNNBQcuqZYHIrxp7t -----END CERTIFICATE-----Generated at Sun Jan 18 08:55:00 2026 by rpki-client