This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/HAOGr9qmEHLwQ55VEf6gl-wrCMY.roa File: HAOGr9qmEHLwQ55VEf6gl-wrCMY.roa (raw, json) Hash identifier: 2L0cffWPWFlhQ1pCasY0Pddusud0MCUWSHUpwa9HyyE= Subject key identifier: 1C:03:86:AF:DA:A6:10:72:F0:43:9E:55:11:FE:A0:97:EC:2B:08:C6 Certificate issuer: /CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c Certificate serial: 019B7FF20C241401E2619B668D4C4E5C6865 Authority key identifier: A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/HAOGr9qmEHLwQ55VEf6gl-wrCMY.roa Signing time: Fri 02 Jan 2026 18:22:07 +0000 ROA not before: Fri 02 Jan 2026 18:22:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12521 IP address blocks: 91.195.72.0/23 maxlen: 24 91.195.102.0/23 maxlen: 24 212.85.32.0/20 maxlen: 24 212.85.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:0c:24:14:01:e2:61:9b:66:8d:4c:4e:5c:68:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c Validity Not Before: Jan 2 18:22:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c0386afdaa61072f0439e5511fea097ec2b08c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:19:19:f8:e1:88:10:56:d4:4d:86:bc:5d:c0: b2:6c:c1:94:c2:53:77:b4:c1:cd:9f:bb:c6:e5:00: 99:3d:43:5d:73:b2:4b:21:3b:aa:69:fd:db:bc:0c: 28:4b:03:e3:e6:08:68:ff:9c:c7:3d:11:b2:76:25: b9:b3:7b:65:b0:18:91:dd:0f:ad:dd:7c:92:6b:3b: 6e:4b:dc:cc:fa:fb:69:fc:0c:5e:e0:24:b5:4b:34: 2b:a8:b8:2d:a0:30:18:f7:5b:9b:95:fa:43:09:06: 6c:ff:47:d1:47:f9:9c:b0:eb:51:0a:59:f3:0a:b5: fd:e7:11:37:69:49:c6:82:fb:c7:a4:df:4b:15:1a: 69:bd:40:f8:16:04:ce:f7:6f:85:84:b9:43:06:10: 58:60:3b:a4:3b:52:92:d3:09:f0:c5:42:24:fc:f0: 56:5f:1f:92:cf:ca:a6:6a:00:31:31:ed:95:0b:bc: 5c:1d:e9:d8:71:47:e6:36:6d:30:6e:60:c9:7b:c8: 42:a5:75:2a:5c:58:8d:27:b4:a6:49:a8:c6:c3:6f: 93:38:2f:ab:33:89:79:bf:a6:b9:bc:77:c2:2c:15: 0f:76:10:b5:94:60:74:0a:7d:ff:a5:9a:b0:b5:1b: a9:7c:a4:02:4e:f7:fc:c2:61:3e:14:f9:77:1f:b3: 3c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:03:86:AF:DA:A6:10:72:F0:43:9E:55:11:FE:A0:97:EC:2B:08:C6 X509v3 Authority Key Identifier: keyid:A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/HAOGr9qmEHLwQ55VEf6gl-wrCMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.72.0/23 91.195.102.0/23 212.85.32.0-212.85.55.255 Signature Algorithm: sha256WithRSAEncryption 91:fe:98:9a:7f:77:4a:54:2d:b7:92:e0:42:a6:48:cd:b2:0d: da:56:40:89:e5:5a:07:fc:0e:5b:e9:48:5e:b4:1b:2c:98:99: c5:dd:a1:b5:f9:8f:08:eb:de:7c:4c:38:b2:7f:92:22:ce:17: 17:fe:aa:6d:6e:cc:95:36:7d:75:55:88:ec:40:d4:66:0e:c6: 2b:bf:ea:8a:f5:d2:56:5b:75:2d:93:1a:f4:82:24:12:0d:b5: dd:0b:db:e3:5c:bb:e3:ca:e2:fb:50:ba:c3:48:5e:b2:e7:b2: dd:e5:16:36:c7:3e:0f:13:fd:2a:a9:ac:12:f7:ba:57:2e:85: 7c:cd:67:d5:f3:a9:c4:c6:91:03:0e:11:6b:62:19:e9:dc:09: 2a:1a:53:0d:b3:57:46:53:fb:79:2a:81:d3:0c:b8:a2:37:e3: 59:dd:a5:16:69:ae:b6:0a:ee:c7:85:d4:d2:bf:3a:f5:5c:50: c1:18:c8:02:59:14:71:17:b0:3c:ea:2c:9f:c9:ee:d1:93:f0: 24:c1:45:99:b3:34:a8:f7:42:51:65:b0:10:bb:cc:70:df:d5: f1:09:9a:7d:fe:d8:af:cf:48:1c:53:e3:19:c0:bb:a0:16:ff: d8:d4:93:cf:47:18:55:05:71:63:31:3e:8f:5a:7b:55:af:e6: ae:37:24:46 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/8gwkFAHiYZtmjUxOXGhlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NGRlMDkyZGMyZTRkNzJhYTdlNmE5NjBkMjFhZDRlNzk3 NThiM2MwHhcNMjYwMTAyMTgyMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzAzODZhZmRhYTYxMDcyZjA0MzllNTUxMWZlYTA5N2VjMmIwOGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthkZ+OGIEFbUTYa8XcCybMGUwlN3 tMHNn7vG5QCZPUNdc7JLITuqaf3bvAwoSwPj5gho/5zHPRGydiW5s3tlsBiR3Q+t 3XySaztuS9zM+vtp/Axe4CS1SzQrqLgtoDAY91ublfpDCQZs/0fRR/mcsOtRClnz CrX95xE3aUnGgvvHpN9LFRppvUD4FgTO92+FhLlDBhBYYDukO1KS0wnwxUIk/PBW Xx+Sz8qmagAxMe2VC7xcHenYcUfmNm0wbmDJe8hCpXUqXFiNJ7SmSajGw2+TOC+r M4l5v6a5vHfCLBUPdhC1lGB0Cn3/pZqwtRupfKQCTvf8wmE+FPl3H7M8gQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFBwDhq/aphBy8EOeVRH+oJfsKwjGMB8GA1UdIwQY MBaAFKdN4JLcLk1yqn5qlg0hrU55dYs8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDAzZ2t0d3VUWEtxZm1xV0RTR3RUbmwxaXp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80Njk5NzQtMTE4NC00ODI0LTkxODEt ZjRhMjc1ZDZiNTg0LzEvSEFPR3I5cW1FSEx3UTU1VkVmNmdsLXdyQ01ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi80Njk5NzQtMTE4NC00ODI0LTkxODEtZjRhMjc1ZDZiNTg0 LzEvcDAzZ2t0d3VUWEtxZm1xV0RTR3RUbmwxaXp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBW8NIAwQB W8NmMAwDBAXUVSADBAPUVTAwDQYJKoZIhvcNAQELBQADggEBAJH+mJp/d0pULbeS 4EKmSM2yDdpWQInlWgf8DlvpSF60GyyYmcXdobX5jwjr3nxMOLJ/kiLOFxf+qm1u zJU2fXVViOxA1GYOxiu/6or10lZbdS2TGvSCJBINtd0L2+Ncu+PK4vtQusNIXrLn st3lFjbHPg8T/SqprBL3ulcuhXzNZ9XzqcTGkQMOEWtiGencCSoaUw2zV0ZT+3kq gdMMuKI341ndpRZprrYK7seF1NK/OvVcUMEYyAJZFHEXsDzqLJ/J7tGT8CTBRZmz NKj3QlFlsBC7zHDf1fEJmn3+2K/PSBxT4xnAu6AW/9jUk89HGFUFcWMxPo9ae1Wv 5q43JEY= -----END CERTIFICATE-----Generated at Mon Feb 9 20:02:49 2026 by rpki-client