This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/hoY7TRtX71iQSTCpB8yUnQstJqU.roa File: hoY7TRtX71iQSTCpB8yUnQstJqU.roa (raw, json) Hash identifier: UfJNcOGp5HlQifRIVOL9loSbUAzIQ2xloYvkwD8PITA= Subject key identifier: 86:86:3B:4D:1B:57:EF:58:90:49:30:A9:07:CC:94:9D:0B:2D:26:A5 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019C0F87E6C434F625F40E7DC5586FBC3559 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/hoY7TRtX71iQSTCpB8yUnQstJqU.roa Signing time: Fri 30 Jan 2026 15:31:30 +0000 ROA not before: Fri 30 Jan 2026 15:31:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35682 IP address blocks: 138.249.7.0/24 maxlen: 24 170.168.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0f:87:e6:c4:34:f6:25:f4:0e:7d:c5:58:6f:bc:35:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 30 15:31:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86863b4d1b57ef58904930a907cc949d0b2d26a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bf:83:4a:6b:16:3e:60:48:32:e9:86:4a:16: 42:f8:65:af:4d:a0:ea:c4:cf:e3:27:6b:cb:6a:2f: b3:db:4d:b7:44:1e:61:bc:78:40:12:4e:53:47:5b: e2:05:f8:03:13:30:7c:5d:5b:21:7c:44:e9:1b:0c: 1a:17:b3:7e:ee:a5:d2:94:66:68:09:96:9a:65:cf: 24:37:c4:85:44:f8:69:86:c7:25:b5:68:8c:64:0c: c5:69:3e:ab:9f:ca:1c:20:27:2d:06:28:bb:7f:71: da:3a:ce:2d:4a:eb:ba:e5:aa:e4:53:94:05:5c:83: be:f3:d6:c4:33:15:ab:26:cd:81:90:ee:96:82:70: 74:ef:62:e8:cf:33:f1:22:76:28:34:cf:38:8c:f8: 23:2d:aa:20:19:8a:ee:c2:f2:02:ee:9e:a5:f0:f7: e7:80:ef:bb:9d:39:47:30:d7:c0:bd:c2:04:aa:7a: 59:19:e1:1d:d7:b5:91:c4:92:17:d6:11:c3:3e:e2: 86:64:3e:ff:73:e5:c6:91:ba:40:24:c4:d9:a4:d2: 24:2e:c8:ab:dd:dd:a6:15:7a:44:e9:3f:ae:aa:4e: 65:b9:ca:96:a4:20:81:72:9c:ca:1d:27:3d:ac:f4: f8:1f:ec:47:e8:d5:b1:33:a6:72:37:cb:b6:b3:1b: 37:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:86:3B:4D:1B:57:EF:58:90:49:30:A9:07:CC:94:9D:0B:2D:26:A5 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/hoY7TRtX71iQSTCpB8yUnQstJqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.7.0/24 170.168.6.0/24 Signature Algorithm: sha256WithRSAEncryption 54:30:99:98:eb:c4:dd:24:57:a4:15:3f:70:32:81:cb:da:00: 7d:8b:43:3c:5c:40:11:5c:7f:c6:f3:e0:51:1a:9b:c3:73:1b: 0b:45:53:c7:8d:23:b3:13:14:c2:64:e0:0b:d2:b8:0e:a6:b5: e1:4a:06:01:69:0a:89:5e:94:be:80:72:c9:4e:3f:05:29:9f: 7a:0d:ad:67:b8:ba:c4:36:30:5d:22:53:f5:40:b4:d5:5e:15: c1:4d:92:32:e4:37:a0:76:3d:16:24:7b:9c:fc:4e:d0:86:75: c2:4e:66:ac:fa:ca:5a:be:89:b5:22:ec:4d:d9:99:88:2c:5c: a7:6c:40:b7:5f:2e:bf:31:89:12:a7:a8:17:e7:fb:f4:7d:6a: de:38:ec:17:a3:7a:7c:2a:40:10:f8:41:e4:40:5a:87:83:be: 0b:92:95:5a:cc:7b:21:81:cd:d6:ec:cf:7b:64:88:9f:67:ef: 76:8e:96:d6:79:6e:ce:a8:ab:81:d8:8d:f7:53:09:5a:67:93: a3:5f:a5:c2:0d:de:d6:58:b0:92:ca:5b:1a:0d:1f:99:38:5a: 8c:f3:16:8d:84:9c:bd:0d:50:de:91:c6:80:56:1f:16:a6:4b: e2:82:9a:3f:7e:96:7a:6a:47:55:1b:ea:55:f1:80:7c:98:67: c8:da:79:4a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwPh+bENPYl9A59xVhvvDVZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTMwMTUzMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Njg2M2I0ZDFiNTdlZjU4OTA0OTMwYTkwN2NjOTQ5ZDBiMmQyNmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb+DSmsWPmBIMumGShZC+GWvTaDq xM/jJ2vLai+z2023RB5hvHhAEk5TR1viBfgDEzB8XVshfETpGwwaF7N+7qXSlGZo CZaaZc8kN8SFRPhphscltWiMZAzFaT6rn8ocICctBii7f3HaOs4tSuu65arkU5QF XIO+89bEMxWrJs2BkO6WgnB072LozzPxInYoNM84jPgjLaogGYruwvIC7p6l8Pfn gO+7nTlHMNfAvcIEqnpZGeEd17WRxJIX1hHDPuKGZD7/c+XGkbpAJMTZpNIkLsir 3d2mFXpE6T+uqk5lucqWpCCBcpzKHSc9rPT4H+xH6NWxM6ZyN8u2sxs3awIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIaGO00bV+9YkEkwqQfMlJ0LLSalMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvaG9ZN1RSdFg3MWlRU1RDcEI4eVVuUXN0SnFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAivkHAwQA qqgGMA0GCSqGSIb3DQEBCwUAA4IBAQBUMJmY68TdJFekFT9wMoHL2gB9i0M8XEAR XH/G8+BRGpvDcxsLRVPHjSOzExTCZOAL0rgOprXhSgYBaQqJXpS+gHLJTj8FKZ96 Da1nuLrENjBdIlP1QLTVXhXBTZIy5Degdj0WJHuc/E7QhnXCTmas+spavom1IuxN 2ZmILFynbEC3Xy6/MYkSp6gX5/v0fWreOOwXo3p8KkAQ+EHkQFqHg74LkpVazHsh gc3W7M97ZIifZ+92jpbWeW7OqKuB2I33UwlaZ5OjX6XCDd7WWLCSylsaDR+ZOFqM 8xaNhJy9DVDekcaAVh8Wpkvigpo/fpZ6akdVG+pV8YB8mGfI2nlK -----END CERTIFICATE-----Generated at Wed Feb 4 23:34:20 2026 by rpki-client