This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/hUoQ0TpU-X9GlLheCyO-wfvH5kc.roa File: hUoQ0TpU-X9GlLheCyO-wfvH5kc.roa (raw, json) Hash identifier: McwvJ1iO5xbO5tc5urCHd+wPP0AiWFFllzKeNdIvGeM= Subject key identifier: 85:4A:10:D1:3A:54:F9:7F:46:94:B8:5E:0B:23:BE:C1:FB:C7:E6:47 Certificate issuer: /CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7 Certificate serial: 019B78A25ADEE9949DBF56989DC1DDF56871 Authority key identifier: 4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/hUoQ0TpU-X9GlLheCyO-wfvH5kc.roa Signing time: Thu 01 Jan 2026 08:17:44 +0000 ROA not before: Thu 01 Jan 2026 08:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49952 IP address blocks: 91.213.224.0/24 maxlen: 24 185.197.208.0/24 maxlen: 24 185.197.209.0/24 maxlen: 24 2a00:e4a0:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:5a:de:e9:94:9d:bf:56:98:9d:c1:dd:f5:68:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7 Validity Not Before: Jan 1 08:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=854a10d13a54f97f4694b85e0b23bec1fbc7e647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:92:14:ea:1a:c6:ce:50:af:23:2f:86:2b:95: 77:fd:20:77:7e:7f:fe:8e:4b:b5:c1:d2:0b:30:0a: 0a:bf:c2:c6:b7:82:f8:4d:6b:a1:cd:9a:05:73:32: b6:4b:05:2e:31:04:67:89:7e:77:72:25:e6:02:71: cd:a5:2d:79:a8:fa:4d:e0:bd:d5:4b:f3:d3:44:c8: 30:8c:a2:c2:62:74:9c:e8:78:89:a5:01:97:dd:da: 2d:49:59:b8:78:ac:57:78:63:3f:b2:03:13:f0:78: 7f:4c:ba:dd:f3:c7:23:98:43:98:31:e4:ed:34:2f: de:7d:43:2f:6a:99:63:16:4d:20:67:c0:27:14:3c: bb:4d:e1:c4:1e:cb:f6:3a:41:b1:ad:ee:1f:ae:fe: f5:76:c1:27:0e:83:8c:86:c8:47:6f:b5:d7:2d:df: 84:7e:62:05:d0:95:36:11:9e:5f:13:41:e6:16:9a: 9f:9f:15:fa:f2:ad:b9:7b:30:dd:14:d5:da:85:96: 13:1f:c2:8b:d8:a9:16:37:ae:a6:5f:85:93:88:66: 24:25:b7:a0:19:eb:6a:0e:10:1c:8c:45:ee:ab:ec: 9a:90:24:5d:c3:c8:c7:07:9f:94:84:ad:6a:78:d3: 07:8b:d0:9a:af:45:90:84:3c:a4:0f:31:1a:7f:4e: 85:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4A:10:D1:3A:54:F9:7F:46:94:B8:5E:0B:23:BE:C1:FB:C7:E6:47 X509v3 Authority Key Identifier: keyid:4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/hUoQ0TpU-X9GlLheCyO-wfvH5kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.224.0/24 185.197.208.0/23 IPv6: 2a00:e4a0:100::/40 Signature Algorithm: sha256WithRSAEncryption 42:1a:ed:2d:4b:70:9e:a5:ec:35:b6:bf:0d:b7:74:31:9e:af: 21:aa:64:25:a5:e8:fb:28:62:2b:02:f0:e3:47:b8:a1:47:d8: bc:68:c0:8f:46:01:0f:cd:62:11:2d:82:03:00:5d:9a:f4:07: a5:08:0b:2f:5c:f0:59:24:91:b6:19:87:9b:3f:41:2e:97:c0: 3f:de:62:93:37:3a:eb:2f:e4:02:29:a7:db:aa:b4:a4:86:6b: 18:36:b4:63:6e:30:dc:74:49:f8:16:4f:df:6d:a5:84:50:8c: df:84:29:b4:9b:38:04:f2:3e:b3:e5:a8:cb:19:a6:92:92:27: 1a:78:3b:ee:9f:78:98:1d:56:4f:e3:a6:d4:e2:ed:72:96:1a: 0a:8b:8e:7b:7c:ab:0c:24:aa:7d:44:d1:4a:52:82:cf:98:2f: 1f:2e:63:31:c6:13:94:52:fa:3d:55:b7:e2:a1:21:a8:b7:fa: 7a:c3:29:1e:f8:f3:e3:ae:97:e7:a3:6c:b4:6c:ae:8a:48:d6: ba:be:f4:b9:c7:1d:83:27:fd:f2:cd:c3:20:f1:3e:2f:41:a2: 34:6e:60:fd:ac:25:54:0b:65:48:70:6a:49:ce:9f:37:14:f6: 17:62:06:08:74:28:b3:0d:e1:03:2c:76:ee:df:9d:85:45:18: a3:b8:2e:9b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt4olre6ZSdv1aYncHd9WhxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMjIyZWQxYjhhNTMzODU4ZjQ2NThjNWQyNTM5ZmFmNTJh YmRhYTcwHhcNMjYwMTAxMDgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTRhMTBkMTNhNTRmOTdmNDY5NGI4NWUwYjIzYmVjMWZiYzdlNjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJIU6hrGzlCvIy+GK5V3/SB3fn/+ jku1wdILMAoKv8LGt4L4TWuhzZoFczK2SwUuMQRniX53ciXmAnHNpS15qPpN4L3V S/PTRMgwjKLCYnSc6HiJpQGX3dotSVm4eKxXeGM/sgMT8Hh/TLrd88cjmEOYMeTt NC/efUMvapljFk0gZ8AnFDy7TeHEHsv2OkGxre4frv71dsEnDoOMhshHb7XXLd+E fmIF0JU2EZ5fE0HmFpqfnxX68q25ezDdFNXahZYTH8KL2KkWN66mX4WTiGYkJbeg GetqDhAcjEXuq+yakCRdw8jHB5+UhK1qeNMHi9Car0WQhDykDzEaf06FGQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFIVKENE6VPl/RpS4XgsjvsH7x+ZHMB8GA1UdIwQY MBaAFEoiLtG4pTOFj0ZYxdJTn69Sq9qnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2lJdTBiaWxNNFdQUmxqRjBsT2ZyMUtyMnFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84ZDdjMDItYjM4ZC00ZDY1LWFmMzUt ODM3ZDAwMzFiM2QxLzEvaFVvUTBUcFUtWDlHbExoZUN5Ty13ZnZINWtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC84ZDdjMDItYjM4ZC00ZDY1LWFmMzUtODM3ZDAwMzFiM2Qx LzEvU2lJdTBiaWxNNFdQUmxqRjBsT2ZyMUtyMnFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAW9XgAwQB ucXQMA4EAgACMAgDBgAqAOSgATANBgkqhkiG9w0BAQsFAAOCAQEAQhrtLUtwnqXs Nba/Dbd0MZ6vIapkJaXo+yhiKwLw40e4oUfYvGjAj0YBD81iES2CAwBdmvQHpQgL L1zwWSSRthmHmz9BLpfAP95ikzc66y/kAimn26q0pIZrGDa0Y24w3HRJ+BZP322l hFCM34QptJs4BPI+s+WoyxmmkpInGng77p94mB1WT+Om1OLtcpYaCouOe3yrDCSq fUTRSlKCz5gvHy5jMcYTlFL6PVW34qEhqLf6esMpHvjz466X56NstGyuikjWur70 uccdgyf98s3DIPE+L0GiNG5g/awlVAtlSHBqSc6fNxT2F2IGCHQosw3hAyx27t+d hUUYo7gumw== -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:17 2026 by rpki-client