This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/hcNgV5pro-JzVwRO6d1L6k9hBSE.roa File: hcNgV5pro-JzVwRO6d1L6k9hBSE.roa (raw, json) Hash identifier: USRsxqk8iLeOL2/A7LGzQ4Uv1QZgrw1Kv+J+q/x2MDE= Subject key identifier: 85:C3:60:57:9A:6B:A3:E2:73:57:04:4E:E9:DD:4B:EA:4F:61:05:21 Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d Certificate serial: 019B7DCB1503BEE767E91B35288CE281A265 Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/hcNgV5pro-JzVwRO6d1L6k9hBSE.roa Signing time: Fri 02 Jan 2026 08:20:19 +0000 ROA not before: Fri 02 Jan 2026 08:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62095 IP address blocks: 188.132.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:15:03:be:e7:67:e9:1b:35:28:8c:e2:81:a2:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d Validity Not Before: Jan 2 08:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85c360579a6ba3e27357044ee9dd4bea4f610521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:97:ff:25:9d:00:e2:bb:ec:62:f9:c7:45:4f: a6:2b:8a:43:38:2a:cb:6d:a6:33:45:52:1b:c4:6c: f0:0f:15:6a:67:00:2d:9f:19:72:81:e2:b5:00:4f: 63:78:0d:34:51:47:ae:3e:3b:df:59:b4:98:c5:97: 09:f8:3d:69:1b:d3:27:6f:50:3f:6a:a5:31:4a:f7: 60:cd:8c:f5:5b:33:76:17:81:b8:a1:32:9f:a6:19: bf:1c:ee:f2:17:ac:cb:d3:d7:1e:6d:af:fb:ae:c8: 8d:55:ba:37:a5:e8:13:00:0f:16:98:f8:c9:cd:f8: 98:83:4b:97:43:55:84:d6:ac:f4:24:5c:8c:03:ca: 97:78:8d:4d:08:7a:46:66:f3:47:bf:6a:5f:f1:7e: f5:f4:5d:bb:e4:8a:d3:65:26:4b:5f:56:8f:50:1b: d6:6b:7d:63:96:b7:18:af:b7:e8:00:db:8b:82:c7: 66:6a:09:c0:c2:0d:41:67:7b:f6:ad:af:2d:b8:e7: a2:78:4b:94:ab:82:a6:43:fc:aa:fa:85:ac:78:9d: bd:bf:54:1a:df:f0:46:a3:f1:ff:b5:f0:d7:60:00: 0f:a8:30:47:b9:c1:87:93:57:96:5d:27:1e:d9:79: f9:aa:d0:32:d0:82:49:35:51:dd:8d:ee:9d:fb:97: 8a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C3:60:57:9A:6B:A3:E2:73:57:04:4E:E9:DD:4B:EA:4F:61:05:21 X509v3 Authority Key Identifier: keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/hcNgV5pro-JzVwRO6d1L6k9hBSE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.177.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:d9:84:7c:8a:fd:f0:9a:9a:9f:33:89:8c:df:87:91:71:8e: 09:db:17:b2:bd:15:07:61:44:e6:1e:d0:68:72:21:94:53:c8: 81:f2:7e:f5:0a:c6:c9:e5:6d:32:95:a7:2d:bb:2b:8d:b0:47: 4a:13:65:db:05:ef:94:37:bd:fe:81:19:07:35:3e:16:28:a4: 88:4c:7d:73:7d:77:e5:be:d2:a2:2f:07:8c:95:b2:b8:7e:d5: 7b:d5:d4:51:fd:d2:69:31:00:9d:7c:18:22:f1:39:de:f7:24: 8a:23:6e:75:cc:c5:07:11:57:c1:82:63:09:c9:b7:a2:51:fe: ec:73:b6:8f:0a:52:2e:02:09:bf:0b:90:95:f5:fd:98:aa:84: 1d:89:3c:fb:d4:f6:93:b7:ad:bb:41:ad:07:0e:f2:83:18:bc: 9d:f9:f9:ac:40:f4:e3:9d:c2:e7:dd:a4:ce:b6:61:96:e8:56: fe:81:3b:75:5e:78:bb:e4:25:54:2e:87:2e:15:81:23:0c:fe: 37:44:0a:ac:71:0b:05:b6:ab:70:70:a4:82:4d:c0:8f:0a:63: a5:b5:52:9d:b7:b3:8e:d5:1e:f7:9c:df:bb:02:ee:e4:4c:a7: 0e:90:5e:37:82:c1:7e:da:3f:6a:59:62:c8:6a:d7:23:3b:f6: 94:bc:da:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yxUDvudn6Rs1KIzigaJlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YTJiOGU5MGQxNTdlYTAyMmY4ZTcwMDAyNGE5M2RjMzU2 YTUxNGQwHhcNMjYwMTAyMDgyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWMzNjA1NzlhNmJhM2UyNzM1NzA0NGVlOWRkNGJlYTRmNjEwNTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJf/JZ0A4rvsYvnHRU+mK4pDOCrL baYzRVIbxGzwDxVqZwAtnxlygeK1AE9jeA00UUeuPjvfWbSYxZcJ+D1pG9Mnb1A/ aqUxSvdgzYz1WzN2F4G4oTKfphm/HO7yF6zL09ceba/7rsiNVbo3pegTAA8WmPjJ zfiYg0uXQ1WE1qz0JFyMA8qXeI1NCHpGZvNHv2pf8X719F275IrTZSZLX1aPUBvW a31jlrcYr7foANuLgsdmagnAwg1BZ3v2ra8tuOeieEuUq4KmQ/yq+oWseJ29v1Qa 3/BGo/H/tfDXYAAPqDBHucGHk1eWXSce2Xn5qtAy0IJJNVHdje6d+5eKGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIXDYFeaa6Pic1cETundS+pPYQUhMB8GA1UdIwQY MBaAFOSiuOkNFX6gIvjnAAJKk9w1alFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUtLNDZRMFZmcUFpLU9jQUFrcVQzRFZxVVUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82OTllODUtMTAyNy00YzdlLThhZTct ZGY0YTJlNzYwY2NiLzEvaGNOZ1Y1cHJvLUp6VndSTzZkMUw2azloQlNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny82OTllODUtMTAyNy00YzdlLThhZTctZGY0YTJlNzYwY2Ni LzEvNUtLNDZRMFZmcUFpLU9jQUFrcVQzRFZxVVUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvISxMA0G CSqGSIb3DQEBCwUAA4IBAQBt2YR8iv3wmpqfM4mM34eRcY4J2xeyvRUHYUTmHtBo ciGUU8iB8n71CsbJ5W0ylactuyuNsEdKE2XbBe+UN73+gRkHNT4WKKSITH1zfXfl vtKiLweMlbK4ftV71dRR/dJpMQCdfBgi8Tne9ySKI251zMUHEVfBgmMJybeiUf7s c7aPClIuAgm/C5CV9f2YqoQdiTz71PaTt627Qa0HDvKDGLyd+fmsQPTjncLn3aTO tmGW6Fb+gTt1Xni75CVULocuFYEjDP43RAqscQsFtqtwcKSCTcCPCmOltVKdt7OO 1R73nN+7Au7kTKcOkF43gsF+2j9qWWLIatcjO/aUvNrj -----END CERTIFICATE-----Generated at Mon Jan 26 22:35:59 2026 by rpki-client