This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/HqGTGlJNCwD8iNo3O2yITxmeCwc.roa File: HqGTGlJNCwD8iNo3O2yITxmeCwc.roa (raw, json) Hash identifier: lYCD20DI0iQge3ODQugwP5cP7vicqwIE+12AsMdZEFg= Subject key identifier: 1E:A1:93:1A:52:4D:0B:00:FC:88:DA:37:3B:6C:88:4F:19:9E:0B:07 Certificate issuer: /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31 Certificate serial: 019B797E5696D1BBD9AFD06285C2A23B6322 Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/HqGTGlJNCwD8iNo3O2yITxmeCwc.roa Signing time: Thu 01 Jan 2026 12:18:01 +0000 ROA not before: Thu 01 Jan 2026 12:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 77.90.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:56:96:d1:bb:d9:af:d0:62:85:c2:a2:3b:63:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31 Validity Not Before: Jan 1 12:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ea1931a524d0b00fc88da373b6c884f199e0b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:36:c9:11:c4:13:31:a7:27:71:0d:50:31:42: 5e:00:0a:f5:90:6a:25:2e:8a:40:40:5e:49:65:aa: 87:ae:23:0c:0f:8c:dd:8c:95:a4:f8:41:57:03:fd: 96:5a:76:f7:00:84:0e:11:84:b6:e6:10:b5:64:33: d8:fa:ad:49:23:e0:c9:7d:d6:74:f2:05:7b:af:51: b3:79:ae:76:c2:76:98:9f:9f:c1:31:c7:18:7e:b8: 31:50:a9:71:b4:c3:74:05:2b:6a:cf:7a:fd:ef:8a: 55:24:ac:6c:02:54:97:b0:a6:7d:55:8a:75:31:70: 86:3c:5c:29:77:4b:ce:b0:fb:98:70:15:13:88:3d: e7:77:c7:78:35:5e:7e:d4:87:2d:19:8e:d3:25:6c: b0:02:fc:a4:c0:96:f1:a7:fe:6f:ef:12:e4:f7:1a: 87:20:c7:a9:e7:40:cd:fc:d3:c6:26:9b:f7:d7:3d: 11:3e:48:42:ea:3a:2e:3e:bf:db:a5:9f:57:86:34: 42:d6:99:45:41:12:6b:c8:98:93:59:7e:3e:02:d9: f4:3d:a4:b8:dc:8d:1c:da:c0:b1:8a:fc:0c:04:67: a9:07:42:7d:e8:9f:7d:55:da:ba:a2:f3:c6:00:23: 9c:0c:0d:51:c5:d6:34:53:e0:70:6f:29:f0:c5:47: 96:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A1:93:1A:52:4D:0B:00:FC:88:DA:37:3B:6C:88:4F:19:9E:0B:07 X509v3 Authority Key Identifier: keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/HqGTGlJNCwD8iNo3O2yITxmeCwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.102.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:27:ea:2f:8b:d7:02:b4:10:ac:77:b0:75:8c:e4:99:94:d6: cc:23:97:11:67:d6:01:78:6c:f8:22:1c:77:18:1d:bb:22:57: f3:e0:a6:4a:79:56:a1:df:ec:d1:b5:7e:03:d6:c0:39:0d:4b: 30:c0:a2:88:42:e8:96:9a:7a:f9:e7:39:2b:42:aa:90:8f:84: 97:41:32:0b:52:c7:03:48:d0:71:df:96:85:c1:fd:29:0f:6f: b9:f6:f4:15:6d:b2:18:b5:0e:63:e1:6b:ab:1b:0e:04:5d:99: cf:c2:c0:ca:dd:18:98:40:bf:1c:9f:f9:4b:56:cc:82:1a:bb: 47:74:3f:b8:7e:89:95:fc:d7:14:d3:9c:88:2d:14:08:0b:47: 12:53:2b:55:66:bc:5c:29:a4:b4:3d:5c:a1:8b:00:3a:fe:14: 70:b9:cf:a8:da:8f:a2:23:90:c1:d1:a7:c3:17:4a:5e:a5:c3: 32:8f:51:6a:d7:27:28:9b:65:f0:35:aa:7c:84:df:ad:56:8b: db:50:cb:cd:39:19:62:0f:16:48:c7:d1:59:1e:2b:d2:e6:62: 1a:03:0b:9b:ea:09:e8:12:39:ed:b8:46:e9:ef:6a:55:31:f1: 05:14:32:6e:bf:48:f1:9b:73:be:d7:6a:e2:a1:11:77:f4:5a: de:ba:45:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5flaW0bvZr9BihcKiO2MiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZDc5NGFjNjAxY2UyNTA1YjY1Zjk3NWE3ZDUxNmEyZjAw YTViMzEwHhcNMjYwMTAxMTIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWExOTMxYTUyNGQwYjAwZmM4OGRhMzczYjZjODg0ZjE5OWUwYjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDbJEcQTMacncQ1QMUJeAAr1kGol LopAQF5JZaqHriMMD4zdjJWk+EFXA/2WWnb3AIQOEYS25hC1ZDPY+q1JI+DJfdZ0 8gV7r1Gzea52wnaYn5/BMccYfrgxUKlxtMN0BStqz3r974pVJKxsAlSXsKZ9VYp1 MXCGPFwpd0vOsPuYcBUTiD3nd8d4NV5+1IctGY7TJWywAvykwJbxp/5v7xLk9xqH IMep50DN/NPGJpv31z0RPkhC6jouPr/bpZ9XhjRC1plFQRJryJiTWX4+Atn0PaS4 3I0c2sCxivwMBGepB0J96J99Vdq6ovPGACOcDA1RxdY0U+BwbynwxUeWtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB6hkxpSTQsA/IjaNztsiE8ZngsHMB8GA1UdIwQY MBaAFMrXlKxgHOJQW2X5dafVFqLwClsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMt M2I5ODhmMTg4ZDkxLzEvSHFHVEdsSk5Dd0Q4aU5vM08yeUlUeG1lQ3djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMtM2I5ODhmMTg4ZDkx LzEveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVpmMA0G CSqGSIb3DQEBCwUAA4IBAQAcJ+ovi9cCtBCsd7B1jOSZlNbMI5cRZ9YBeGz4Ihx3 GB27Ilfz4KZKeVah3+zRtX4D1sA5DUswwKKIQuiWmnr55zkrQqqQj4SXQTILUscD SNBx35aFwf0pD2+59vQVbbIYtQ5j4WurGw4EXZnPwsDK3RiYQL8cn/lLVsyCGrtH dD+4fomV/NcU05yILRQIC0cSUytVZrxcKaS0PVyhiwA6/hRwuc+o2o+iI5DB0afD F0pepcMyj1Fq1ycom2XwNap8hN+tVovbUMvNORliDxZIx9FZHivS5mIaAwub6gno EjntuEbp72pVMfEFFDJuv0jxm3O+12rioRF39FreukVO -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:07 2026 by rpki-client