This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/HcM0MMlDc98NpWgyf1DLj-FeWTQ.roa File: HcM0MMlDc98NpWgyf1DLj-FeWTQ.roa (raw, json) Hash identifier: Fdejh7hWUvlndyPqpsL2LjyC0dk2Hy6oTmIMsyHmHoI= Subject key identifier: 1D:C3:34:30:C9:43:73:DF:0D:A5:68:32:7F:50:CB:8F:E1:5E:59:34 Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019B7F816D802D0CD9E806A326C51B9DC0A6 Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/HcM0MMlDc98NpWgyf1DLj-FeWTQ.roa Signing time: Fri 02 Jan 2026 16:19:07 +0000 ROA not before: Fri 02 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1101 IP address blocks: 185.100.59.0/24 maxlen: 24 2001:67c:12d8::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:6d:80:2d:0c:d9:e8:06:a3:26:c5:1b:9d:c0:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Jan 2 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dc33430c94373df0da568327f50cb8fe15e5934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8c:d0:61:f6:a2:98:1c:ad:49:eb:aa:a1:e2: f7:05:f1:a8:e9:dc:0b:4c:2c:be:f6:ef:52:55:e9: 71:87:66:be:e8:62:f8:34:24:8f:e8:7d:98:29:39: 4d:4e:ee:6c:81:51:91:72:92:17:77:c5:ab:31:b1: ba:70:28:de:0b:4b:70:7c:37:6b:74:51:69:53:71: 2a:b7:53:69:d2:a2:ca:8b:c9:42:ee:85:f2:f9:a7: 96:06:3d:88:ef:dc:15:b8:a2:6c:d7:e8:7f:bf:95: 01:8a:03:d4:12:a4:30:6c:ec:de:ed:98:1f:02:d9: fa:bd:a1:e4:c9:b7:d4:a3:23:fa:c1:c5:27:3a:66: 5f:c9:12:82:ab:ff:cc:45:3f:28:b2:13:66:1a:eb: 29:55:61:00:fb:e4:65:73:6d:26:a7:8e:de:eb:cf: 7a:32:69:66:e6:00:20:4e:66:de:f0:9c:25:03:62: c6:37:8d:d3:cf:01:38:3a:6b:e3:0b:db:1b:5a:3a: d1:e3:c8:f9:cd:a9:6e:71:b3:91:91:a7:cd:e5:c9: e8:58:a7:0f:8a:ee:16:21:b4:01:5e:ee:22:de:06: 5b:ea:cc:ba:58:8f:4e:e1:b6:6e:c9:f3:c3:3b:07: 89:35:e3:60:f2:e0:ca:a4:9a:f9:ff:7f:48:9a:28: 01:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C3:34:30:C9:43:73:DF:0D:A5:68:32:7F:50:CB:8F:E1:5E:59:34 X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/HcM0MMlDc98NpWgyf1DLj-FeWTQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.59.0/24 IPv6: 2001:67c:12d8::/48 Signature Algorithm: sha256WithRSAEncryption 65:d1:62:04:13:eb:27:a1:dc:53:23:a0:38:c0:3a:0c:37:74: 04:03:50:ae:a0:96:19:18:cb:6d:3f:41:a3:06:11:13:83:f1: 64:21:c7:32:c8:64:d7:21:eb:50:a1:a9:3e:60:ec:02:6b:f1: 4b:68:d7:a3:76:39:e8:9f:c9:94:c2:0a:da:5f:46:0d:b1:1d: 29:01:c9:58:a8:73:e3:57:14:eb:71:e8:64:c6:1e:10:82:44: 9f:72:8a:34:04:c8:4b:d8:20:88:e0:b5:4d:bc:a2:22:21:fa: 1f:a3:f1:4f:9a:de:8f:7d:85:df:54:5d:54:bd:c3:d3:7a:41: a2:3c:08:de:47:4b:a1:4d:87:52:d4:56:2e:b7:85:90:6f:dd: b6:85:ef:07:0f:98:22:ee:7e:a5:63:99:d4:c3:2d:05:6b:ef: c9:25:95:c2:12:3b:ee:75:a0:a8:b1:11:a8:f4:70:7c:fd:b6: 3b:92:68:22:64:22:24:9e:ad:75:2a:99:3b:66:a1:62:7e:b9: f1:f4:bb:fb:c5:90:fb:b6:01:3f:1c:41:32:b2:7b:ac:29:14: c2:61:ab:80:db:91:f7:d1:b8:5e:62:64:cd:03:4e:12:46:88: aa:8f:23:c1:21:cf:6a:ff:30:bc:82:b3:25:b5:bd:19:60:cf: f7:e8:54:4f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/gW2ALQzZ6AajJsUbncCmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjYwMTAyMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGMzMzQzMGM5NDM3M2RmMGRhNTY4MzI3ZjUwY2I4ZmUxNWU1OTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ozQYfaimBytSeuqoeL3BfGo6dwL TCy+9u9SVelxh2a+6GL4NCSP6H2YKTlNTu5sgVGRcpIXd8WrMbG6cCjeC0twfDdr dFFpU3Eqt1Np0qLKi8lC7oXy+aeWBj2I79wVuKJs1+h/v5UBigPUEqQwbOze7Zgf Atn6vaHkybfUoyP6wcUnOmZfyRKCq//MRT8oshNmGuspVWEA++Rlc20mp47e6896 Mmlm5gAgTmbe8JwlA2LGN43TzwE4OmvjC9sbWjrR48j5zalucbORkafN5cnoWKcP iu4WIbQBXu4i3gZb6sy6WI9O4bZuyfPDOweJNeNg8uDKpJr5/39ImigBsQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFB3DNDDJQ3PfDaVoMn9Qy4/hXlk0MB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvSGNNME1NbERjOThOcFdneWYxRExqLUZlV1RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuWQ7MA8E AgACMAkDBwAgAQZ8EtgwDQYJKoZIhvcNAQELBQADggEBAGXRYgQT6yeh3FMjoDjA Ogw3dAQDUK6glhkYy20/QaMGEROD8WQhxzLIZNch61ChqT5g7AJr8Uto16N2Oeif yZTCCtpfRg2xHSkByVioc+NXFOtx6GTGHhCCRJ9yijQEyEvYIIjgtU28oiIh+h+j 8U+a3o99hd9UXVS9w9N6QaI8CN5HS6FNh1LUVi63hZBv3baF7wcPmCLufqVjmdTD LQVr78kllcISO+51oKixEaj0cHz9tjuSaCJkIiSerXUqmTtmoWJ+ufH0u/vFkPu2 AT8cQTKye6wpFMJhq4DbkffRuF5iZM0DThJGiKqPI8Ehz2r/MLyCsyW1vRlgz/fo VE8= -----END CERTIFICATE-----Generated at Fri Jan 9 16:51:11 2026 by rpki-client