This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/hSwCFfAMZo5yVWbMV5K9ObCQvKY.roa File: hSwCFfAMZo5yVWbMV5K9ObCQvKY.roa (raw, json) Hash identifier: jeAEpuN/HE5QdtOdLvtK62ZQhjVUah/8+ds413hTyyw= Subject key identifier: 85:2C:02:15:F0:0C:66:8E:72:55:66:CC:57:92:BD:39:B0:90:BC:A6 Certificate issuer: /CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b Certificate serial: 019B7D5CF2CC8752D2EF0AC229223DCC96B8 Authority key identifier: 17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/hSwCFfAMZo5yVWbMV5K9ObCQvKY.roa Signing time: Fri 02 Jan 2026 06:20:01 +0000 ROA not before: Fri 02 Jan 2026 06:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12480 IP address blocks: 91.201.100.0/22 maxlen: 24 194.76.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.crl rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f2:cc:87:52:d2:ef:0a:c2:29:22:3d:cc:96:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b Validity Not Before: Jan 2 06:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=852c0215f00c668e725566cc5792bd39b090bca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9b:19:25:1e:5f:37:96:f9:7e:31:39:f8:1d: 72:2e:73:c0:a9:33:a9:d5:a1:55:89:5f:40:e6:13: c4:44:83:d1:b9:fd:fc:9b:4f:f8:d9:3d:08:22:4b: c6:72:03:3a:0a:6c:bd:05:f3:ac:3b:e0:f3:4e:66: 58:9b:a4:11:be:03:b5:1e:0d:af:20:8c:b2:af:3a: 48:fc:e0:9f:fc:0c:b3:b9:e0:d1:4d:15:58:b2:5e: a1:22:6f:0a:f7:80:d0:e1:67:12:c3:8d:94:52:bf: 0a:bb:b7:7a:e0:9f:a0:af:60:02:02:49:a1:bf:bd: 42:c5:2a:09:dd:7d:ea:6c:f4:de:83:d3:ab:81:1f: 1e:0d:51:67:5d:9c:b2:78:69:34:39:d4:ec:d5:01: 2d:8c:66:45:4a:bd:1e:55:d7:f5:55:94:49:3c:c3: 1f:f7:21:a9:b8:c0:7d:d9:7f:53:c6:2c:6d:20:a7: f0:31:cb:bd:04:9f:57:a6:2e:ae:fb:8f:57:b7:09: cb:6c:f2:19:bb:05:5c:b5:b0:b0:ca:d5:5c:1c:0e: d4:3a:87:cd:1b:2c:38:a8:df:f9:b4:b0:0f:22:57: 61:34:23:fe:f6:9c:7b:1d:05:30:de:81:40:e4:bb: c1:d2:a6:9f:c4:2d:d4:26:f8:0d:da:f5:a7:b0:c0: f9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2C:02:15:F0:0C:66:8E:72:55:66:CC:57:92:BD:39:B0:90:BC:A6 X509v3 Authority Key Identifier: keyid:17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/hSwCFfAMZo5yVWbMV5K9ObCQvKY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.100.0/22 194.76.193.0/24 Signature Algorithm: sha256WithRSAEncryption 25:df:3d:fa:f6:38:a7:3b:af:2d:7e:08:40:14:20:de:68:f2: fd:9f:7c:80:a3:2b:59:05:47:c2:b0:55:20:9f:6c:3e:95:ad: 1f:5a:94:22:f6:3a:95:6e:c0:be:f4:43:e5:47:10:f8:78:d2: 9d:92:db:1c:c5:37:49:ea:a8:e4:99:aa:f7:4c:f6:d3:8f:24: ce:9d:55:1c:d3:28:1e:24:92:80:76:c0:55:bf:06:1c:56:f6: 31:ed:4e:c8:e9:90:0f:32:ce:b3:21:ca:2f:1a:a2:f1:4c:04: 32:02:e6:c4:bd:a9:b8:ac:e0:50:9f:75:ba:87:4b:bc:9c:46: af:8e:10:a6:96:e9:37:79:57:f3:33:52:ac:70:cd:a3:b1:fa: 6e:c5:93:ad:01:10:70:de:c2:8d:20:52:93:62:5d:8e:5a:dc: 94:21:8b:54:ef:26:3f:2b:f1:94:ed:51:8d:5c:8c:13:0c:90: 7a:0e:51:9e:53:cb:c0:e4:90:8d:8a:e8:cf:04:0c:1d:32:02: 7f:cb:74:6d:7a:5a:b8:f6:02:27:30:9b:d6:2a:3b:35:ff:a8: c4:1a:6e:67:b6:96:4d:87:61:83:6a:08:ea:50:a8:96:e6:08: 48:e0:99:9b:f8:01:54:73:4a:35:4c:b9:aa:63:10:3f:96:49: 21:85:57:59 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XPLMh1LS7wrCKSI9zJa4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YTEwMjM0Y2ZiNTUyMmFhMjliMzI2MGE3NWY4YTlmNzk5 MzNlN2IwHhcNMjYwMTAyMDYyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTJjMDIxNWYwMGM2NjhlNzI1NTY2Y2M1NzkyYmQzOWIwOTBiY2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZsZJR5fN5b5fjE5+B1yLnPAqTOp 1aFViV9A5hPERIPRuf38m0/42T0IIkvGcgM6Cmy9BfOsO+DzTmZYm6QRvgO1Hg2v IIyyrzpI/OCf/AyzueDRTRVYsl6hIm8K94DQ4WcSw42UUr8Ku7d64J+gr2ACAkmh v71CxSoJ3X3qbPTeg9OrgR8eDVFnXZyyeGk0OdTs1QEtjGZFSr0eVdf1VZRJPMMf 9yGpuMB92X9TxixtIKfwMcu9BJ9Xpi6u+49XtwnLbPIZuwVctbCwytVcHA7UOofN Gyw4qN/5tLAPIldhNCP+9px7HQUw3oFA5LvB0qafxC3UJvgN2vWnsMD5zQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIUsAhXwDGaOclVmzFeSvTmwkLymMB8GA1UdIwQY MBaAFBehAjTPtVIqopsyYKdfip95kz57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjZFQ05NLTFVaXFpbXpKZ3AxLUtuM21UUG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85ZjEwOGEtNzc4NS00ZDNmLTlmMGMt MmFkMmJiNTMyNjEzLzEvaFN3Q0ZmQU1abzV5VldiTVY1SzlPYkNRdktZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi85ZjEwOGEtNzc4NS00ZDNmLTlmMGMtMmFkMmJiNTMyNjEz LzEvRjZFQ05NLTFVaXFpbXpKZ3AxLUtuM21UUG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8lkAwQA wkzBMA0GCSqGSIb3DQEBCwUAA4IBAQAl3z369jinO68tfghAFCDeaPL9n3yAoytZ BUfCsFUgn2w+la0fWpQi9jqVbsC+9EPlRxD4eNKdktscxTdJ6qjkmar3TPbTjyTO nVUc0ygeJJKAdsBVvwYcVvYx7U7I6ZAPMs6zIcovGqLxTAQyAubEvam4rOBQn3W6 h0u8nEavjhCmluk3eVfzM1KscM2jsfpuxZOtARBw3sKNIFKTYl2OWtyUIYtU7yY/ K/GU7VGNXIwTDJB6DlGeU8vA5JCNiujPBAwdMgJ/y3Rtelq49gInMJvWKjs1/6jE Gm5ntpZNh2GDagjqUKiW5ghI4Jmb+AFUc0o1TLmqYxA/lkkhhVdZ -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:05 2026 by rpki-client