This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/hkDILjMkkdM5vhdicPcOC_rPPAk.roa File: hkDILjMkkdM5vhdicPcOC_rPPAk.roa (raw, json) Hash identifier: 5pbYYSt+DRX/pDl00GSjYc7pEFz9SrosjpZf7GRqg18= Subject key identifier: 86:40:C8:2E:33:24:91:D3:39:BE:17:62:70:F7:0E:0B:FA:CF:3C:09 Certificate issuer: /CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b Certificate serial: 019B79EC6552153AC8B83DD4B86FDA83AFC4 Authority key identifier: C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/hkDILjMkkdM5vhdicPcOC_rPPAk.roa Signing time: Thu 01 Jan 2026 14:18:14 +0000 ROA not before: Thu 01 Jan 2026 14:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29013 IP address blocks: 188.239.64.0/18 maxlen: 18 188.239.120.0/21 maxlen: 21 188.239.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:65:52:15:3a:c8:b8:3d:d4:b8:6f:da:83:af:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b Validity Not Before: Jan 1 14:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8640c82e332491d339be176270f70e0bfacf3c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f3:a4:ef:4c:43:21:bc:31:43:ee:30:79:8a: 21:98:52:da:b4:9f:78:f9:b7:2a:e5:5f:d1:37:0a: 45:4d:0c:54:84:8f:60:af:bc:3c:9d:d1:47:08:c5: ad:9a:08:c5:f4:aa:1a:1c:6c:ca:95:80:39:05:84: 81:cc:f3:0a:c1:33:e6:b3:9c:65:00:2a:aa:01:39: fc:97:c7:b5:af:6f:c0:74:bf:4e:24:42:e8:49:3c: 6e:f0:37:41:31:42:6b:ba:4e:29:5c:87:c8:12:71: dc:78:8c:27:ac:57:8d:3e:dd:8c:7f:78:e6:36:16: 22:85:c4:54:bd:0e:7d:4c:0b:17:e1:4c:3a:00:59: 5c:47:d6:2d:82:32:82:3b:f1:ed:21:10:9e:b5:da: 8e:c3:a6:6d:e6:e5:95:4a:cd:4d:61:78:c9:35:d8: 53:6d:24:48:61:20:48:c6:47:58:c3:4f:57:c5:91: 16:14:df:0a:00:4a:7e:41:7b:fe:a8:ce:58:d5:e0: 5c:85:24:ea:71:89:ce:84:55:20:06:3f:e0:9f:89: 4c:f6:14:11:f4:85:b6:f9:26:d1:e3:a9:75:19:83: 5d:46:53:4a:2a:2e:88:18:20:df:46:66:70:88:88: 1f:d0:da:10:21:6f:79:21:aa:c5:1f:ec:8a:d7:32: 33:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:40:C8:2E:33:24:91:D3:39:BE:17:62:70:F7:0E:0B:FA:CF:3C:09 X509v3 Authority Key Identifier: keyid:C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/hkDILjMkkdM5vhdicPcOC_rPPAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.239.64.0/18 Signature Algorithm: sha256WithRSAEncryption 54:71:96:71:64:da:b1:78:7c:df:0a:f8:0a:ca:1b:d7:57:9f: a4:50:34:05:dc:19:c8:7e:86:a8:37:e7:63:e2:7f:63:81:74: 52:cb:e0:dc:ec:70:83:f1:01:92:0d:26:80:0a:cc:fa:50:50: 36:a7:06:f8:3d:87:bf:d9:ec:dd:1f:b8:aa:cf:2b:c1:db:18: 05:e8:29:ba:b2:09:39:8c:91:48:b1:f0:f8:94:cd:cc:1a:bf: 6b:dc:da:85:f6:3c:a2:27:12:3d:2e:74:81:5d:74:16:1d:ea: 80:f6:66:dd:39:48:e8:3b:75:ee:e7:ee:4e:8a:23:ab:a8:5f: 86:3d:e9:78:53:d9:bf:ea:2c:66:da:cd:dc:13:b3:6b:5c:60: ac:ed:97:96:2a:ee:1b:54:3c:f4:be:a3:6d:74:c1:28:ba:2e: d4:61:b6:fc:35:7f:1f:91:cf:4b:4c:67:c5:df:58:d8:c5:47: 6b:20:e9:ab:5a:03:02:a8:a8:c0:45:da:04:24:77:2d:f1:f5: b2:23:70:1c:7c:5e:c2:20:f3:4b:6e:67:ec:ff:cf:52:72:aa: 3f:f0:04:e8:ce:45:81:53:2d:de:db:1d:d4:48:75:c8:a8:01: 6c:30:b7:f3:3f:fa:fb:fb:1d:81:e5:fa:5e:12:4d:24:75:c1: 3d:ff:ed:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57GVSFTrIuD3UuG/ag6/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyOTAyZjc2OWJmNjgxYjEwMzlmMmNlZTYxZTllMGY5NzVl NGU1NmIwHhcNMjYwMTAxMTQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjQwYzgyZTMzMjQ5MWQzMzliZTE3NjI3MGY3MGUwYmZhY2YzYzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/Ok70xDIbwxQ+4weYohmFLatJ94 +bcq5V/RNwpFTQxUhI9gr7w8ndFHCMWtmgjF9KoaHGzKlYA5BYSBzPMKwTPms5xl ACqqATn8l8e1r2/AdL9OJELoSTxu8DdBMUJruk4pXIfIEnHceIwnrFeNPt2Mf3jm NhYihcRUvQ59TAsX4Uw6AFlcR9YtgjKCO/HtIRCetdqOw6Zt5uWVSs1NYXjJNdhT bSRIYSBIxkdYw09XxZEWFN8KAEp+QXv+qM5Y1eBchSTqcYnOhFUgBj/gn4lM9hQR 9IW2+SbR46l1GYNdRlNKKi6IGCDfRmZwiIgf0NoQIW95IarFH+yK1zIzMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIZAyC4zJJHTOb4XYnD3Dgv6zzwJMB8GA1UdIwQY MBaAFMKQL3ab9oGxA58s7mHp4Pl15OVrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3BBdmRwdjJnYkVEbnl6dVllbmctWFhrNVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My81NGQ0MTMtNDBmNS00YWUyLWFjYTkt ZmYzOTM2ZmU5OTQ2LzEvaGtESUxqTWtrZE01dmhkaWNQY09DX3JQUEFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My81NGQ0MTMtNDBmNS00YWUyLWFjYTktZmYzOTM2ZmU5OTQ2 LzEvd3BBdmRwdjJnYkVEbnl6dVllbmctWFhrNVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGvO9AMA0G CSqGSIb3DQEBCwUAA4IBAQBUcZZxZNqxeHzfCvgKyhvXV5+kUDQF3BnIfoaoN+dj 4n9jgXRSy+Dc7HCD8QGSDSaACsz6UFA2pwb4PYe/2ezdH7iqzyvB2xgF6Cm6sgk5 jJFIsfD4lM3MGr9r3NqF9jyiJxI9LnSBXXQWHeqA9mbdOUjoO3Xu5+5OiiOrqF+G Pel4U9m/6ixm2s3cE7NrXGCs7ZeWKu4bVDz0vqNtdMEoui7UYbb8NX8fkc9LTGfF 31jYxUdrIOmrWgMCqKjARdoEJHct8fWyI3AcfF7CIPNLbmfs/89Scqo/8ATozkWB Uy3e2x3USHXIqAFsMLfzP/r7+x2B5fpeEk0kdcE9/+2Y -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:21 2026 by rpki-client