This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/HoguhPYctq53_NeJpwMiGGaEYHE.roa
File: HoguhPYctq53_NeJpwMiGGaEYHE.roa (raw, json)
Hash identifier: 2Rg4I4psfcDKa015Nd8h+FBbuNVy5CBZXEFltS4HBbg=
Subject key identifier: 1E:88:2E:84:F6:1C:B6:AE:77:FC:D7:89:A7:03:22:18:66:84:60:71
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 019B77591D7ED20DD7E3DCA68863DAA7B095
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/HoguhPYctq53_NeJpwMiGGaEYHE.roa
Signing time: Thu 01 Jan 2026 02:18:07 +0000
ROA not before: Thu 01 Jan 2026 02:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 192.124.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Jan 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:1d:7e:d2:0d:d7:e3:dc:a6:88:63:da:a7:b0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Jan 1 02:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e882e84f61cb6ae77fcd789a703221866846071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:f9:f5:73:0f:c5:4e:c9:0c:59:72:16:bb:
7a:17:03:c4:68:03:3c:6d:84:c8:0a:8d:a7:49:63:
d9:70:5b:bc:27:b3:5b:09:e2:80:01:8d:4b:1c:92:
5b:84:59:28:bc:60:98:c6:e8:25:b8:dc:d9:e3:d4:
ad:22:35:27:ce:7a:2f:b0:96:90:b5:4d:bd:29:b8:
a7:8e:30:48:8b:d0:19:7c:10:78:0b:0a:dc:80:d1:
0c:6a:20:a5:4e:35:7c:4f:ca:8e:8f:c4:c6:00:5f:
f1:59:80:d3:bc:d9:42:c4:b6:50:cb:02:bc:7d:66:
6e:25:55:1c:35:26:58:96:46:4d:4b:bf:e2:41:2b:
55:f4:0b:0a:4c:9e:df:58:b1:90:c2:75:fe:66:6a:
0f:60:a9:e3:45:ac:35:b2:47:f8:d3:e1:f9:92:e4:
91:ee:e1:64:4c:45:5a:85:4d:a6:4e:ef:2b:bf:4d:
04:35:86:39:7f:3a:8f:82:ee:47:ae:02:0c:66:73:
54:41:7c:8f:08:ff:27:5b:42:75:34:98:c9:71:50:
97:78:d2:50:7f:c7:50:72:2c:23:ef:c8:da:ee:ef:
e0:2b:08:17:45:7c:04:cd:ed:f2:4d:63:73:49:e9:
ef:2e:53:f7:fd:a5:59:98:e9:1e:fc:26:7d:b9:d1:
24:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:88:2E:84:F6:1C:B6:AE:77:FC:D7:89:A7:03:22:18:66:84:60:71
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/HoguhPYctq53_NeJpwMiGGaEYHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.112.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:67:70:3a:f9:24:86:a8:3d:b5:77:24:8f:25:c7:49:19:e9:
95:4a:2f:cc:79:02:40:9b:b5:46:eb:68:80:85:be:e0:c1:57:
07:97:66:2e:45:86:37:39:1c:15:75:9e:39:56:33:18:2c:e5:
1f:32:84:4b:dd:37:8b:df:72:f6:b8:55:35:cd:97:93:45:11:
f1:f6:f1:a6:04:5d:56:12:6d:1a:8a:38:e5:73:72:d3:cf:76:
43:2c:d8:e8:30:61:0e:64:84:43:3e:04:88:c8:fb:7e:8b:f9:
b5:5e:2c:a3:e3:ce:1f:2e:c5:a6:60:33:46:ea:b7:f3:4a:0c:
55:62:64:d6:67:8e:41:1b:42:04:21:7b:b7:b7:7f:52:33:ab:
c9:5e:e5:22:89:fa:66:71:ed:f9:41:bb:a7:4f:39:21:15:b0:
1b:5e:d8:25:cf:ae:db:c0:02:ab:63:8d:46:2d:2b:9d:3c:a9:
4d:b8:63:7b:14:01:1a:67:8b:7f:04:4f:87:1d:a9:10:15:53:
82:fd:52:41:f9:b1:9b:2d:ae:92:4f:09:64:fd:38:02:71:b8:
5e:53:4d:5d:c2:b2:98:ff:ab:ae:c8:97:e5:bf:2f:a9:94:71:
3f:64:7a:e9:d7:49:ed:0e:a8:42:9f:80:dd:dc:09:65:38:47:
cf:97:ed:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 00:58:32 2026 by rpki-client