This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/hdNCABPIWSKjzwuzDhnhKyCtFMY.roa File: hdNCABPIWSKjzwuzDhnhKyCtFMY.roa (raw, json) Hash identifier: S6v1PFLMZ4fBXkE2JupwrwrFL+vUqpbqMjBcV5qYv+A= Subject key identifier: 85:D3:42:00:13:C8:59:22:A3:CF:0B:B3:0E:19:E1:2B:20:AD:14:C6 Certificate issuer: /CN=369c713c51987e1ffa5482277f5f1c8cb722f44b Certificate serial: 019B775898CA4ED0DA488BEA8EA2E8382F93 Authority key identifier: 36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/hdNCABPIWSKjzwuzDhnhKyCtFMY.roa Signing time: Thu 01 Jan 2026 02:17:33 +0000 ROA not before: Thu 01 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199773 IP address blocks: 92.60.155.0/24 maxlen: 24 92.60.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:98:ca:4e:d0:da:48:8b:ea:8e:a2:e8:38:2f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369c713c51987e1ffa5482277f5f1c8cb722f44b Validity Not Before: Jan 1 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85d3420013c85922a3cf0bb30e19e12b20ad14c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d4:fd:8a:57:3d:9b:61:93:4b:39:63:e4:8f: c4:f3:a6:27:e1:7e:6e:22:c7:fe:91:e6:3b:46:9f: 15:11:be:49:bb:0d:57:4c:3c:06:4f:7e:d1:11:10: 69:a6:d4:98:b9:b4:9f:65:76:85:3b:a6:f3:30:5b: f2:ba:94:ee:47:1b:90:9f:cd:b8:a8:b4:b7:5a:96: 6c:39:1c:58:95:f7:e2:6c:49:69:dc:06:c2:21:86: b5:2a:18:57:31:f4:22:2a:d7:2b:0e:16:45:a1:f3: 08:a2:41:b5:40:95:cb:7e:b2:05:55:86:5e:c6:9e: db:93:00:a7:aa:ee:b3:b4:e9:2c:a1:68:e7:80:af: 4e:61:4a:53:40:b8:25:ed:31:bb:ac:78:11:dd:83: 67:58:b9:8e:6c:91:6a:4a:88:7d:70:56:30:e7:47: 05:ed:0d:ed:02:8f:60:e9:75:2f:f4:4b:a5:65:cc: 89:87:51:78:05:d5:fe:49:f5:72:91:7b:e7:4a:a7: bb:27:01:bc:a1:fd:30:02:0b:5b:7d:bc:13:2c:27: 47:83:f2:c5:44:2c:c5:b7:11:f9:49:26:32:14:fa: bf:25:4e:18:0b:2c:ac:c2:09:1c:f1:1f:f3:e4:f1: fb:48:a3:f3:f6:2a:3b:8a:ba:c5:9e:2a:a4:a7:40: 95:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D3:42:00:13:C8:59:22:A3:CF:0B:B3:0E:19:E1:2B:20:AD:14:C6 X509v3 Authority Key Identifier: keyid:36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/hdNCABPIWSKjzwuzDhnhKyCtFMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.60.155.0/24 92.60.159.0/24 Signature Algorithm: sha256WithRSAEncryption 46:17:5c:47:54:f3:65:9f:70:a9:5e:84:25:90:29:dd:44:d6: 4f:0d:4f:1c:5e:66:c5:f4:d6:f1:0c:30:e1:75:f4:97:48:5f: c9:6a:88:e8:2a:de:b3:aa:a3:f2:26:1c:6f:26:7e:ed:75:0c: 6a:13:5b:2d:07:e4:0d:27:b2:03:75:df:60:9f:a0:d8:13:4c: 2b:c8:12:a3:0f:5f:3e:13:f0:16:f1:5e:fa:c7:84:95:f4:30: aa:9d:fc:5e:80:3b:23:5b:1f:d0:ad:e4:b1:df:27:61:bc:92: 99:1b:4a:05:2f:a1:fc:18:fb:5c:cd:27:32:08:ad:21:e3:00: 9c:72:4a:82:01:5e:92:5f:57:83:76:49:92:4a:34:3f:8a:8b: 79:33:7f:0c:20:42:f8:31:f1:0e:a7:3c:36:5e:1b:5f:26:b2: 8e:ef:a9:30:b5:ea:8b:31:43:ba:41:94:a3:68:ca:c2:e5:fe: ad:0f:78:b5:35:7b:d8:73:20:b0:b8:8b:e2:dd:f6:30:9d:72: 98:cc:55:bd:a1:b6:ca:cf:82:20:cc:33:ba:7b:b5:8b:8a:59: 89:7c:68:85:d7:97:ff:17:b6:67:9c:23:c0:e4:40:1f:3b:58: 75:49:51:a6:39:1c:82:c8:75:98:e8:be:03:82:72:60:18:09: d3:42:21:a6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WJjKTtDaSIvqjqLoOC+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OWM3MTNjNTE5ODdlMWZmYTU0ODIyNzdmNWYxYzhjYjcy MmY0NGIwHhcNMjYwMTAxMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWQzNDIwMDEzYzg1OTIyYTNjZjBiYjMwZTE5ZTEyYjIwYWQxNGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktT9ilc9m2GTSzlj5I/E86Yn4X5u Isf+keY7Rp8VEb5Juw1XTDwGT37RERBpptSYubSfZXaFO6bzMFvyupTuRxuQn824 qLS3WpZsORxYlffibElp3AbCIYa1KhhXMfQiKtcrDhZFofMIokG1QJXLfrIFVYZe xp7bkwCnqu6ztOksoWjngK9OYUpTQLgl7TG7rHgR3YNnWLmObJFqSoh9cFYw50cF 7Q3tAo9g6XUv9EulZcyJh1F4BdX+SfVykXvnSqe7JwG8of0wAgtbfbwTLCdHg/LF RCzFtxH5SSYyFPq/JU4YCyyswgkc8R/z5PH7SKPz9io7irrFniqkp0CVhwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIXTQgATyFkio88Lsw4Z4SsgrRTGMB8GA1UdIwQY MBaAFDaccTxRmH4f+lSCJ39fHIy3IvRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnB4eFBGR1lmaF82VklJbmYxOGNqTGNpOUVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84MDJlOWUtZjk4Mi00NDlkLThiNzAt NzZjMDVjZjVmMmU2LzEvaGROQ0FCUElXU0tqend1ekRobmhLeUN0Rk1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84MDJlOWUtZjk4Mi00NDlkLThiNzAtNzZjMDVjZjVmMmU2 LzEvTnB4eFBGR1lmaF82VklJbmYxOGNqTGNpOUVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXDybAwQA XDyfMA0GCSqGSIb3DQEBCwUAA4IBAQBGF1xHVPNln3CpXoQlkCndRNZPDU8cXmbF 9NbxDDDhdfSXSF/JaojoKt6zqqPyJhxvJn7tdQxqE1stB+QNJ7IDdd9gn6DYE0wr yBKjD18+E/AW8V76x4SV9DCqnfxegDsjWx/QreSx3ydhvJKZG0oFL6H8GPtczScy CK0h4wCcckqCAV6SX1eDdkmSSjQ/iot5M38MIEL4MfEOpzw2XhtfJrKO76kwteqL MUO6QZSjaMrC5f6tD3i1NXvYcyCwuIvi3fYwnXKYzFW9obbKz4IgzDO6e7WLilmJ fGiF15f/F7ZnnCPA5EAfO1h1SVGmORyCyHWY6L4DgnJgGAnTQiGm -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:33 2026 by rpki-client