This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/hKVvr_-aCZpRix4ibxuUNSgCtto.roa File: hKVvr_-aCZpRix4ibxuUNSgCtto.roa (raw, json) Hash identifier: rliNtwotXP1DxwetaWAK+AjUBqpkTMwr5I+2We2lWL4= Subject key identifier: 84:A5:6F:AF:FF:9A:09:9A:51:8B:1E:22:6F:1B:94:35:28:02:B6:DA Certificate issuer: /CN=576d59494a0a927f7a68f909ecef577cd503db1c Certificate serial: 019B7FF29E8EC0DEFB04AC26E978170295BC Authority key identifier: 57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/hKVvr_-aCZpRix4ibxuUNSgCtto.roa Signing time: Fri 02 Jan 2026 18:22:45 +0000 ROA not before: Fri 02 Jan 2026 18:22:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50812 IP address blocks: 91.193.106.0/23 maxlen: 24 91.224.6.0/23 maxlen: 24 185.30.48.0/22 maxlen: 24 185.145.32.0/22 maxlen: 24 193.105.252.0/24 maxlen: 24 194.110.164.0/22 maxlen: 24 194.116.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:9e:8e:c0:de:fb:04:ac:26:e9:78:17:02:95:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576d59494a0a927f7a68f909ecef577cd503db1c Validity Not Before: Jan 2 18:22:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84a56fafff9a099a518b1e226f1b94352802b6da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:ff:5c:f7:26:1b:19:ac:1b:a4:ce:59:20: 87:32:8d:d6:a4:59:96:10:7e:ca:00:75:84:4f:f7: 06:35:94:52:8a:37:ce:ac:d7:35:c2:a9:4d:5f:64: b2:12:3e:02:3a:e2:ce:d1:ee:5b:61:ab:6c:b1:3a: e1:eb:9b:b6:f8:9f:36:c7:45:f1:b2:e0:0a:d0:33: b5:8f:73:af:3b:d3:ec:f0:f2:49:2e:b2:21:41:c6: 8b:0e:b2:78:8f:91:52:bf:09:bc:71:0c:da:14:a9: db:c2:1b:2f:29:95:1a:1a:bd:2e:4b:3b:14:b9:dc: de:4e:4f:08:6e:df:ad:25:fd:fa:c4:04:51:87:08: 8a:14:68:af:da:b4:42:9d:e0:8f:32:0a:fe:3a:2f: 04:13:99:0a:42:bf:cb:39:f9:ac:5b:17:4f:ef:44: fb:eb:65:98:85:f6:76:dd:0e:52:0f:a6:28:40:17: 66:dc:5f:d5:d2:2a:13:b3:f3:42:ef:7c:f4:14:09: 26:ff:5f:a5:00:0c:10:fc:e3:74:45:41:45:af:ff: 5e:34:df:cb:3b:72:a4:fb:7e:e6:25:03:02:39:c3: 29:64:2a:74:8b:4c:c6:a0:b5:52:c0:13:e3:a8:c0: 88:56:50:dd:c0:ee:31:1b:f9:e1:c8:b4:35:4b:8e: 73:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A5:6F:AF:FF:9A:09:9A:51:8B:1E:22:6F:1B:94:35:28:02:B6:DA X509v3 Authority Key Identifier: keyid:57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/hKVvr_-aCZpRix4ibxuUNSgCtto.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.106.0/23 91.224.6.0/23 185.30.48.0/22 185.145.32.0/22 193.105.252.0/24 194.110.164.0/22 194.116.202.0/23 Signature Algorithm: sha256WithRSAEncryption 03:5d:40:cd:40:95:98:09:88:73:84:23:61:cc:cf:a0:f7:c0: ac:a1:71:a9:23:2a:bc:6c:fc:72:b3:ec:20:e4:84:bb:77:35: 56:24:c9:34:79:ee:21:99:b7:25:40:e9:17:c6:8d:f7:9c:e0: d1:71:97:ae:5a:c4:3f:33:c3:66:8e:d0:5f:60:c7:31:40:ce: 48:d3:94:ff:21:8c:82:5a:4a:b1:91:48:2c:cf:44:fa:46:7c: 1a:d1:35:f2:68:e0:c9:ee:85:ef:57:d2:ff:46:06:15:98:e3: 8b:19:ac:77:64:ae:23:ef:42:2b:0a:a2:bd:e5:b1:bf:62:cd: 51:4d:09:b4:d1:a0:9e:8c:89:af:15:88:54:7c:27:fa:e3:da: a9:ca:9f:22:9b:08:88:dd:b8:27:76:97:b5:9f:f4:c7:d2:70: 8c:8b:6c:0c:16:ed:c1:ce:11:41:30:0f:82:9e:cd:1e:e9:12: 89:62:c3:33:cf:a6:e9:40:7a:16:b9:ae:87:74:d5:48:ad:48: 92:ae:ce:97:a3:60:01:71:e9:0e:e7:e6:46:09:46:3f:b2:ac: 56:aa:ae:a3:7f:5b:c4:c4:cb:41:ad:98:ed:8d:04:55:f2:2c: 41:7c:5d:b7:22:97:9a:61:47:77:43:04:64:82:8e:fa:eb:78: 82:09:03:cf -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt/8p6OwN77BKwm6XgXApW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NmQ1OTQ5NGEwYTkyN2Y3YTY4ZjkwOWVjZWY1NzdjZDUw M2RiMWMwHhcNMjYwMTAyMTgyMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGE1NmZhZmZmOWEwOTlhNTE4YjFlMjI2ZjFiOTQzNTI4MDJiNmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl3/XPcmGxmsG6TOWSCHMo3WpFmW EH7KAHWET/cGNZRSijfOrNc1wqlNX2SyEj4COuLO0e5bYatssTrh65u2+J82x0Xx suAK0DO1j3OvO9Ps8PJJLrIhQcaLDrJ4j5FSvwm8cQzaFKnbwhsvKZUaGr0uSzsU udzeTk8Ibt+tJf36xARRhwiKFGiv2rRCneCPMgr+Oi8EE5kKQr/LOfmsWxdP70T7 62WYhfZ23Q5SD6YoQBdm3F/V0ioTs/NC73z0FAkm/1+lAAwQ/ON0RUFFr/9eNN/L O3Kk+37mJQMCOcMpZCp0i0zGoLVSwBPjqMCIVlDdwO4xG/nhyLQ1S45zvwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFISlb6//mgmaUYseIm8blDUoArbaMB8GA1UdIwQY MBaAFFdtWUlKCpJ/emj5CezvV3zVA9scMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjIxWlNVb0trbjk2YVBrSjdPOVhmTlVEMnh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hODk2NDQtOTMxNi00ZThiLTgxYTQt MWYxOWE4YmRhM2VkLzEvaEtWdnJfLWFDWnBSaXg0aWJ4dVVOU2dDdHRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9hODk2NDQtOTMxNi00ZThiLTgxYTQtMWYxOWE4YmRhM2Vk LzEvVjIxWlNVb0trbjk2YVBrSjdPOVhmTlVEMnh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBW8FqAwQB W+AGAwQCuR4wAwQCuZEgAwQAwWn8AwQCwm6kAwQBwnTKMA0GCSqGSIb3DQEBCwUA A4IBAQADXUDNQJWYCYhzhCNhzM+g98CsoXGpIyq8bPxys+wg5IS7dzVWJMk0ee4h mbclQOkXxo33nODRcZeuWsQ/M8NmjtBfYMcxQM5I05T/IYyCWkqxkUgsz0T6Rnwa 0TXyaODJ7oXvV9L/RgYVmOOLGax3ZK4j70IrCqK95bG/Ys1RTQm00aCejImvFYhU fCf649qpyp8imwiI3bgndpe1n/TH0nCMi2wMFu3BzhFBMA+Cns0e6RKJYsMzz6bp QHoWua6HdNVIrUiSrs6Xo2ABcekO5+ZGCUY/sqxWqq6jf1vExMtBrZjtjQRV8ixB fF23IpeaYUd3QwRkgo7663iCCQPP -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:32 2026 by rpki-client