This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/HZePOmsjkPsg7dlktNrDrbvkEoQ.roa File: HZePOmsjkPsg7dlktNrDrbvkEoQ.roa (raw, json) Hash identifier: EMtZKX87wa385GEwMyBcWWCzgkUjroenf3wknZ0qOr8= Subject key identifier: 1D:97:8F:3A:6B:23:90:FB:20:ED:D9:64:B4:DA:C3:AD:BB:E4:12:84 Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d Certificate serial: 019B7B35402A05F5E77508A07998EF45F0AD Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/HZePOmsjkPsg7dlktNrDrbvkEoQ.roa Signing time: Thu 01 Jan 2026 20:17:25 +0000 ROA not before: Thu 01 Jan 2026 20:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197138 IP address blocks: 91.188.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:40:2a:05:f5:e7:75:08:a0:79:98:ef:45:f0:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d Validity Not Before: Jan 1 20:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d978f3a6b2390fb20edd964b4dac3adbbe41284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ef:36:a4:8b:63:05:3b:0b:c1:d8:8e:19:78: f9:9b:d2:51:91:c5:23:e2:5b:40:cc:4d:96:5e:e3: 09:30:c5:e7:68:3e:c2:f6:ed:1d:84:db:d7:9b:f4: 02:37:c7:72:20:05:b8:7e:7a:b2:cb:e4:8b:cb:fd: 83:0e:09:4d:33:a8:67:c6:98:2a:8c:e5:c3:74:f5: 48:ca:c9:d0:c5:4b:54:5d:67:43:da:ab:bb:9c:80: 09:c9:35:1f:f8:b9:6e:1d:83:db:bc:11:14:2d:b7: bb:78:9b:23:c9:a8:46:8d:c6:2e:c7:08:8f:a5:4b: f1:1e:cd:1d:ee:34:f6:d0:39:ce:e8:12:cd:e8:5a: 63:0c:79:dc:f0:bf:d3:2a:09:be:b4:7e:6e:de:2a: 5c:39:13:38:4e:ce:0b:30:a0:3f:65:66:f2:71:46: 6d:6f:ad:fe:a9:32:8b:5d:4a:d6:67:94:96:c4:3b: 21:ec:61:10:d7:c2:7c:1e:b9:a4:1d:91:70:48:a0: 64:d0:88:0f:6c:af:f6:85:c5:87:75:f1:98:49:f4: 0a:e7:7e:e8:9e:c4:05:d8:89:1e:73:40:52:f2:4f: 65:43:6f:54:8b:1b:29:0e:4e:75:65:32:b3:86:d3: de:89:c1:e2:e7:48:b0:07:2e:c5:2f:25:87:e1:91: f9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:97:8F:3A:6B:23:90:FB:20:ED:D9:64:B4:DA:C3:AD:BB:E4:12:84 X509v3 Authority Key Identifier: keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/HZePOmsjkPsg7dlktNrDrbvkEoQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.188.77.0/24 Signature Algorithm: sha256WithRSAEncryption 35:76:59:fa:6a:57:50:f6:d1:49:ef:55:5d:1f:64:04:0f:1a: d4:41:3c:0a:7b:1c:ac:9e:87:56:a7:2f:70:2c:d8:ff:37:37: af:5c:e3:d1:45:b5:77:e7:37:41:f8:c6:39:fb:f5:98:e2:72: 5f:70:5d:7d:95:3e:ee:b9:e0:d3:9a:98:63:b7:a9:9a:c6:48: e5:70:fe:1e:b4:21:5e:65:a5:06:a4:8d:99:d5:6a:ea:b3:cc: 63:d9:ce:a9:4f:27:a2:84:42:ed:91:7e:eb:fd:03:43:99:cc: 95:d6:1f:e5:e7:44:f0:e3:69:6f:a2:2b:d6:a6:c3:e4:bf:51: f2:fd:0f:85:2f:a6:af:cd:ac:0e:2f:17:39:e1:0c:f1:bc:53: d4:7d:96:63:2c:0c:26:02:0f:e0:a9:3e:65:68:7f:e5:5f:da: 18:66:2d:22:c3:55:68:99:97:de:f1:a8:5a:23:cc:7a:bd:12: 67:c5:1e:a5:e3:f7:d8:47:f5:c3:cb:9b:77:c6:ca:04:85:50: c5:7a:01:de:a4:a5:3e:f9:44:57:26:7a:7e:dd:2c:8a:f6:c5: c4:c3:d4:70:6c:13:13:06:d8:57:60:67:b7:8b:44:e9:09:a4: f0:13:75:46:1a:5c:6e:6e:5f:fc:9d:a9:bf:d2:cd:6c:d0:97: f3:c8:64:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NUAqBfXndQigeZjvRfCtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YTViMDQyZmU0OGVlYjEyM2JlNTZkYmY5ZThkZGEyMGMx ZWExMWQwHhcNMjYwMTAxMjAxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDk3OGYzYTZiMjM5MGZiMjBlZGQ5NjRiNGRhYzNhZGJiZTQxMjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre82pItjBTsLwdiOGXj5m9JRkcUj 4ltAzE2WXuMJMMXnaD7C9u0dhNvXm/QCN8dyIAW4fnqyy+SLy/2DDglNM6hnxpgq jOXDdPVIysnQxUtUXWdD2qu7nIAJyTUf+LluHYPbvBEULbe7eJsjyahGjcYuxwiP pUvxHs0d7jT20DnO6BLN6FpjDHnc8L/TKgm+tH5u3ipcORM4Ts4LMKA/ZWbycUZt b63+qTKLXUrWZ5SWxDsh7GEQ18J8HrmkHZFwSKBk0IgPbK/2hcWHdfGYSfQK537o nsQF2Ikec0BS8k9lQ29UixspDk51ZTKzhtPeicHi50iwBy7FLyWH4ZH5hQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB2XjzprI5D7IO3ZZLTaw6275BKEMB8GA1UdIwQY MBaAFPSlsEL+SO6xI75W2/no3aIMHqEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUtXd1F2NUk3ckVqdmxiYi1lamRvZ3dlb1IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zODkyMzEtMmI1Zi00YzllLTk0MWQt YjRiMjg0MzdmZTZjLzEvSFplUE9tc2prUHNnN2Rsa3ROckRyYnZrRW9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zODkyMzEtMmI1Zi00YzllLTk0MWQtYjRiMjg0MzdmZTZj LzEvOUtXd1F2NUk3ckVqdmxiYi1lamRvZ3dlb1IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7xNMA0G CSqGSIb3DQEBCwUAA4IBAQA1dln6aldQ9tFJ71VdH2QEDxrUQTwKexysnodWpy9w LNj/NzevXOPRRbV35zdB+MY5+/WY4nJfcF19lT7uueDTmphjt6maxkjlcP4etCFe ZaUGpI2Z1Wrqs8xj2c6pTyeihELtkX7r/QNDmcyV1h/l50Tw42lvoivWpsPkv1Hy /Q+FL6avzawOLxc54QzxvFPUfZZjLAwmAg/gqT5laH/lX9oYZi0iw1VomZfe8aha I8x6vRJnxR6l4/fYR/XDy5t3xsoEhVDFegHepKU++URXJnp+3SyK9sXEw9RwbBMT BthXYGe3i0TpCaTwE3VGGlxubl/8nam/0s1s0JfzyGQu -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:54 2026 by rpki-client