This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/hcaVaeZvXztSf4aHj-qxa48q3bE.roa File: hcaVaeZvXztSf4aHj-qxa48q3bE.roa (raw, json) Hash identifier: ugFszP+ktrSBaKI2i2I8QwNOIyOBse0/3j0sK41gSeU= Subject key identifier: 85:C6:95:69:E6:6F:5F:3B:52:7F:86:87:8F:EA:B1:6B:8F:2A:DD:B1 Certificate issuer: /CN=484855e70193968635ac4492ad702a8248e033e8 Certificate serial: 019B775972BD9002BA8F9DCF27384E18FEF5 Authority key identifier: 48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/hcaVaeZvXztSf4aHj-qxa48q3bE.roa Signing time: Thu 01 Jan 2026 02:18:29 +0000 ROA not before: Thu 01 Jan 2026 02:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44527 IP address blocks: 93.92.104.0/21 maxlen: 21 93.92.104.0/22 maxlen: 22 93.92.104.0/24 maxlen: 24 93.92.105.0/24 maxlen: 24 93.92.106.0/24 maxlen: 24 93.92.107.0/24 maxlen: 24 93.92.108.0/24 maxlen: 24 93.92.109.0/24 maxlen: 24 93.92.110.0/24 maxlen: 24 93.92.111.0/24 maxlen: 24 185.62.220.0/22 maxlen: 22 185.62.220.0/24 maxlen: 24 185.62.221.0/24 maxlen: 24 185.62.222.0/24 maxlen: 24 185.62.223.0/24 maxlen: 24 2a04:8040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:72:bd:90:02:ba:8f:9d:cf:27:38:4e:18:fe:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=484855e70193968635ac4492ad702a8248e033e8 Validity Not Before: Jan 1 02:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85c69569e66f5f3b527f86878feab16b8f2addb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4b:08:4b:4b:1b:57:1b:31:2c:17:91:95:fb: 17:77:9f:af:e1:ba:a0:4f:df:c6:9d:27:0c:18:d2: 0e:f3:1a:95:51:c6:30:bf:21:a4:6c:cb:d6:52:db: 9c:91:1b:df:c2:d5:a3:35:0f:41:9b:1a:bf:98:6f: d7:65:e9:20:b1:93:2d:ab:d2:da:85:ef:4c:7d:26: 77:bb:5d:db:f9:de:84:27:3e:13:1e:28:09:39:06: 7c:04:a5:2c:55:44:31:67:72:cd:c1:33:ce:16:9f: e7:c0:69:0e:c8:18:97:6f:7b:c7:75:6f:9f:3a:cf: 43:4a:35:9b:e4:e1:fd:f6:5e:59:f7:48:d8:36:27: 73:bf:89:2f:3e:ac:d3:18:1c:96:ba:17:72:47:70: 79:95:51:c1:a4:2b:db:1f:5d:2d:79:61:27:04:9a: 96:15:56:75:0a:a6:cf:2f:e9:5a:01:d3:df:58:dc: fa:93:3c:03:73:1c:c0:5c:a7:42:ce:f4:b0:fd:c2: 29:c6:f9:46:3d:78:cf:7e:05:dd:6c:46:f8:ca:24: 5a:63:35:07:9b:22:33:22:bf:0f:d8:37:24:2e:f4: 31:42:72:49:3c:71:22:8c:f1:c0:00:9a:ff:96:cd: 9f:53:5c:9b:64:14:8e:ad:df:a4:21:40:e5:06:ae: 6f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C6:95:69:E6:6F:5F:3B:52:7F:86:87:8F:EA:B1:6B:8F:2A:DD:B1 X509v3 Authority Key Identifier: keyid:48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/hcaVaeZvXztSf4aHj-qxa48q3bE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.92.104.0/21 185.62.220.0/22 IPv6: 2a04:8040::/29 Signature Algorithm: sha256WithRSAEncryption 72:66:ef:29:85:aa:23:f9:19:c2:a2:f0:76:f0:1a:7e:50:a1: 50:72:7b:0a:e6:43:eb:14:d1:9d:13:95:b9:e0:1a:8c:62:f7: a0:94:f8:7b:b6:ee:cb:e0:0f:1e:91:41:27:56:0a:bc:59:fd: 2d:4f:00:9e:36:f3:cc:17:9c:36:fe:4b:cf:d0:d3:b7:93:78: 30:82:b0:9f:c5:ee:ac:a0:de:f6:1f:e0:f3:6f:d6:3f:06:06: 01:a8:85:c9:8d:2a:e8:25:3d:1a:42:4e:3e:c5:44:1c:26:c3: 39:eb:76:f3:65:c2:66:94:71:4f:7b:90:6e:55:4d:77:57:6d: c9:3e:98:fd:d5:bf:42:f2:8a:0b:d5:a7:64:0a:c7:b0:f6:c8: d0:0c:9d:38:7d:90:4a:21:4d:fd:5f:bd:94:fd:e5:83:ac:c8: a0:fc:ea:5d:67:14:ca:a1:86:a1:10:3a:26:c7:16:0b:38:2c: 9a:42:f6:cc:ec:1d:a2:6e:63:2d:01:25:61:12:4c:fe:dd:50: 64:90:12:fc:a9:0b:1b:a1:0c:4d:d5:2b:43:12:44:d2:15:16: eb:5a:65:7c:1e:42:62:54:c5:f2:2f:c0:a0:6b:bf:77:5e:77: d4:42:95:eb:6a:8b:45:1f:5a:8c:50:a8:03:ea:05:d5:95:e6: 84:59:8f:94 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WXK9kAK6j53PJzhOGP71MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NDg1NWU3MDE5Mzk2ODYzNWFjNDQ5MmFkNzAyYTgyNDhl MDMzZTgwHhcNMjYwMTAxMDIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWM2OTU2OWU2NmY1ZjNiNTI3Zjg2ODc4ZmVhYjE2YjhmMmFkZGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUsIS0sbVxsxLBeRlfsXd5+v4bqg T9/GnScMGNIO8xqVUcYwvyGkbMvWUtuckRvfwtWjNQ9Bmxq/mG/XZekgsZMtq9La he9MfSZ3u13b+d6EJz4THigJOQZ8BKUsVUQxZ3LNwTPOFp/nwGkOyBiXb3vHdW+f Os9DSjWb5OH99l5Z90jYNidzv4kvPqzTGByWuhdyR3B5lVHBpCvbH10teWEnBJqW FVZ1CqbPL+laAdPfWNz6kzwDcxzAXKdCzvSw/cIpxvlGPXjPfgXdbEb4yiRaYzUH myIzIr8P2DckLvQxQnJJPHEijPHAAJr/ls2fU1ybZBSOrd+kIUDlBq5v5QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIXGlWnmb187Un+Gh4/qsWuPKt2xMB8GA1UdIwQY MBaAFEhIVecBk5aGNaxEkq1wKoJI4DPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0VoVjV3R1Rsb1kxckVTU3JYQXFna2pnTS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9hNzYyMzQtNjdkMy00ODMxLWE4YzIt ZTJjM2QzMjAzNGM0LzEvaGNhVmFlWnZYenRTZjRhSGotcXhhNDhxM2JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9hNzYyMzQtNjdkMy00ODMxLWE4YzItZTJjM2QzMjAzNGM0 LzEvU0VoVjV3R1Rsb1kxckVTU3JYQXFna2pnTS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXVxoAwQC uT7cMA0EAgACMAcDBQMqBIBAMA0GCSqGSIb3DQEBCwUAA4IBAQByZu8phaoj+RnC ovB28Bp+UKFQcnsK5kPrFNGdE5W54BqMYveglPh7tu7L4A8ekUEnVgq8Wf0tTwCe NvPMF5w2/kvP0NO3k3gwgrCfxe6soN72H+Dzb9Y/BgYBqIXJjSroJT0aQk4+xUQc JsM563bzZcJmlHFPe5BuVU13V23JPpj91b9C8ooL1adkCsew9sjQDJ04fZBKIU39 X72U/eWDrMig/OpdZxTKoYahEDomxxYLOCyaQvbM7B2ibmMtASVhEkz+3VBkkBL8 qQsboQxN1StDEkTSFRbrWmV8HkJiVMXyL8Cga793XnfUQpXraotFH1qMUKgD6gXV leaEWY+U -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:44 2026 by rpki-client