This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/HVKPekSAYfYBLKctsLZVoL7Mj5E.roa File: HVKPekSAYfYBLKctsLZVoL7Mj5E.roa (raw, json) Hash identifier: tb5jaPHY9V+hpeGkHok+mvgC1VTbFiJt9yjOUi6BH+8= Subject key identifier: 1D:52:8F:7A:44:80:61:F6:01:2C:A7:2D:B0:B6:55:A0:BE:CC:8F:91 Certificate issuer: /CN=7f6a8e5d55c2498a82636f99f8fc9e319e07771e Certificate serial: 019B7AC9133340487048AEC8E31CBB1FAF8D Authority key identifier: 7F:6A:8E:5D:55:C2:49:8A:82:63:6F:99:F8:FC:9E:31:9E:07:77:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/HVKPekSAYfYBLKctsLZVoL7Mj5E.roa Signing time: Thu 01 Jan 2026 18:19:16 +0000 ROA not before: Thu 01 Jan 2026 18:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49855 IP address blocks: 91.212.95.0/24 maxlen: 24 202.49.88.0/23 maxlen: 23 2001:67c:18e8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.crl rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.mft rsync://rpki.ripe.net/repository/DEFAULT/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:13:33:40:48:70:48:ae:c8:e3:1c:bb:1f:af:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6a8e5d55c2498a82636f99f8fc9e319e07771e Validity Not Before: Jan 1 18:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d528f7a448061f6012ca72db0b655a0becc8f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1f:fd:13:d7:07:b0:62:b5:6f:98:70:69:eb: 78:ac:c7:a0:3c:e1:35:ee:33:a0:c1:70:e4:ab:59: 6a:ef:9f:95:3f:48:f6:31:69:64:9c:c2:0b:22:a2: 91:ee:74:b0:d2:d7:57:aa:96:59:04:d8:c7:22:0f: 02:42:13:75:88:23:a9:1d:4b:90:61:e4:e9:10:3a: 7d:8b:dd:c8:5c:1c:da:22:45:32:21:58:48:9f:44: 64:00:a0:97:53:71:d1:8a:38:be:6d:4c:ac:f0:78: 12:e7:99:26:cb:2c:6d:b7:3b:d7:93:7b:3d:7d:1c: 7f:15:65:8b:fa:53:59:50:b7:e2:8b:dc:df:69:b6: ef:74:20:bb:31:77:09:37:55:87:05:9d:2b:83:5e: 84:5a:5d:48:cb:11:6f:09:95:0d:eb:7c:ac:e3:34: 5a:46:06:5c:5d:9a:d6:9a:68:ae:39:b6:db:aa:16: be:af:99:17:54:4e:14:70:61:81:aa:8b:61:98:e9: bb:7f:c1:b4:b3:a2:cb:d5:77:b3:86:c2:c4:e8:d4: 63:7e:9c:ba:76:81:94:ab:35:a3:a9:c6:be:37:22: 32:fb:1f:19:13:13:d3:e6:49:f3:45:89:fc:fb:a2: 0e:ca:18:39:9f:0f:9c:10:f4:77:8a:e4:c3:56:b6: 2b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:52:8F:7A:44:80:61:F6:01:2C:A7:2D:B0:B6:55:A0:BE:CC:8F:91 X509v3 Authority Key Identifier: keyid:7F:6A:8E:5D:55:C2:49:8A:82:63:6F:99:F8:FC:9E:31:9E:07:77:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/HVKPekSAYfYBLKctsLZVoL7Mj5E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.95.0/24 202.49.88.0/23 IPv6: 2001:67c:18e8::/48 Signature Algorithm: sha256WithRSAEncryption 46:c8:45:5c:51:da:c2:b6:77:f6:e4:6d:f5:2a:b3:75:89:b0: 37:c1:bf:f4:f9:6a:7f:4e:5a:f5:fb:ad:b1:27:91:36:a5:7a: 6d:53:45:a1:5a:96:04:50:c0:e7:40:33:95:d3:f4:14:da:ca: 02:2d:58:89:bf:cd:72:53:09:5e:4e:6b:c0:36:4f:ef:a4:9d: 11:55:a2:8d:6b:48:8b:42:f0:8c:03:42:50:6b:58:8b:c2:5b: 8f:98:d9:5f:03:fb:76:7a:a1:4a:02:36:2a:1e:60:10:d3:d3: 5a:05:df:89:8a:75:5b:73:e9:ae:69:6d:79:e6:ca:74:8e:be: 38:bb:14:1f:96:6a:8f:4f:7c:db:2f:13:ef:b8:46:30:a2:ed: 24:d9:d7:0a:67:a7:46:61:5c:48:9c:dc:0c:21:74:8d:5c:9f: 49:54:21:33:8d:7a:6f:2b:5b:e8:a2:07:cd:47:8c:cb:35:a7: cf:80:2c:71:9c:c8:c2:df:eb:21:f2:d1:88:f8:6c:f6:db:b7: 77:91:78:d8:cf:c5:63:46:55:bf:b2:b6:74:18:63:7b:25:0e: d5:20:ee:33:05:7f:a8:27:72:ab:2d:19:98:6b:c1:6e:87:93: 31:c3:92:3c:61:e7:70:19:3d:0c:99:e2:da:25:4a:de:ca:7f: 7c:57:50:71 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6yRMzQEhwSK7I4xy7H6+NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNmE4ZTVkNTVjMjQ5OGE4MjYzNmY5OWY4ZmM5ZTMxOWUw Nzc3MWUwHhcNMjYwMTAxMTgxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDUyOGY3YTQ0ODA2MWY2MDEyY2E3MmRiMGI2NTVhMGJlY2M4ZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR/9E9cHsGK1b5hwaet4rMegPOE1 7jOgwXDkq1lq75+VP0j2MWlknMILIqKR7nSw0tdXqpZZBNjHIg8CQhN1iCOpHUuQ YeTpEDp9i93IXBzaIkUyIVhIn0RkAKCXU3HRiji+bUys8HgS55kmyyxttzvXk3s9 fRx/FWWL+lNZULfii9zfabbvdCC7MXcJN1WHBZ0rg16EWl1IyxFvCZUN63ys4zRa RgZcXZrWmmiuObbbqha+r5kXVE4UcGGBqothmOm7f8G0s6LL1XezhsLE6NRjfpy6 doGUqzWjqca+NyIy+x8ZExPT5knzRYn8+6IOyhg5nw+cEPR3iuTDVrYrsQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFB1Sj3pEgGH2ASynLbC2VaC+zI+RMB8GA1UdIwQY MBaAFH9qjl1VwkmKgmNvmfj8njGeB3ceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjJxT1hWWENTWXFDWTItWi1QeWVNWjRIZHg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yN2ZjZTEtMTFjZS00YTMyLWE2NDkt ZTA3NmI1MTcyMWFkLzEvSFZLUGVrU0FZZllCTEtjdHNMWlZvTDdNajVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8yN2ZjZTEtMTFjZS00YTMyLWE2NDktZTA3NmI1MTcyMWFk LzEvZjJxT1hWWENTWXFDWTItWi1QeWVNWjRIZHg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW9RfAwQB yjFYMA8EAgACMAkDBwAgAQZ8GOgwDQYJKoZIhvcNAQELBQADggEBAEbIRVxR2sK2 d/bkbfUqs3WJsDfBv/T5an9OWvX7rbEnkTalem1TRaFalgRQwOdAM5XT9BTaygIt WIm/zXJTCV5Oa8A2T++knRFVoo1rSItC8IwDQlBrWIvCW4+Y2V8D+3Z6oUoCNioe YBDT01oF34mKdVtz6a5pbXnmynSOvji7FB+Wao9PfNsvE++4RjCi7STZ1wpnp0Zh XEic3AwhdI1cn0lUITONem8rW+iiB81HjMs1p8+ALHGcyMLf6yHy0Yj4bPbbt3eR eNjPxWNGVb+ytnQYY3slDtUg7jMFf6gncqstGZhrwW6HkzHDkjxh53AZPQyZ4tol St7Kf3xXUHE= -----END CERTIFICATE-----Generated at Tue Feb 10 05:47:47 2026 by rpki-client