This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/hrZOUXiKpKuDDowT4uX1TuG0e7M.roa File: hrZOUXiKpKuDDowT4uX1TuG0e7M.roa (raw, json) Hash identifier: ZbdCEpK+TB/WYJ98wQAIG5SPrJEYmPtmnrm6zC70wck= Subject key identifier: 86:B6:4E:51:78:8A:A4:AB:83:0E:8C:13:E2:E5:F5:4E:E1:B4:7B:B3 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019C054F55111B1944A1093FEAE418BAAB51 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/hrZOUXiKpKuDDowT4uX1TuG0e7M.roa Signing time: Wed 28 Jan 2026 15:53:31 +0000 ROA not before: Wed 28 Jan 2026 15:53:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54252 IP address blocks: 193.8.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 00:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:4f:55:11:1b:19:44:a1:09:3f:ea:e4:18:ba:ab:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 28 15:53:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86b64e51788aa4ab830e8c13e2e5f54ee1b47bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b7:88:17:fc:20:e5:a0:2e:36:85:28:dc:5d: 20:2e:bf:c5:0e:a9:cc:1f:5a:73:13:a2:02:5f:18: 7a:02:d3:2d:fe:ac:a7:68:6f:20:13:dd:7c:9a:c7: 73:c7:8c:28:f0:f1:9c:b5:c3:0d:33:1e:de:ec:53: 3a:8f:f1:1b:94:5c:61:33:ea:ea:5b:49:04:92:e1: dc:53:e1:b5:4f:2c:1a:de:38:ba:c2:81:4b:4c:f9: 09:62:66:ec:fa:5c:a5:45:5f:e5:06:ae:cd:a0:85: df:de:3e:37:3b:0e:1f:7a:d6:27:c8:d7:35:99:77: f6:f3:07:70:d4:f2:ee:ba:b2:c5:a4:16:2a:cf:98: 1e:ac:2a:89:86:9c:cd:f4:1f:e8:15:d5:dd:b0:b6: 0e:83:77:c5:be:8f:37:92:f0:46:fb:40:0f:4f:10: 2d:09:30:cf:bb:e1:95:4c:13:af:20:ce:83:20:fa: 39:84:f4:09:83:a3:cd:25:d3:e8:40:23:12:64:ff: ae:be:5e:ce:b1:88:4f:81:d3:ce:b4:ed:65:a6:60: 47:d3:8b:e3:f8:ed:d7:23:c1:04:ca:15:62:e0:2d: 5b:bf:f7:b8:3b:94:e2:d8:b8:a8:1d:e8:60:ba:f4: 9d:23:f8:b7:ac:76:bb:db:be:20:b8:9c:4e:19:f5: 55:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B6:4E:51:78:8A:A4:AB:83:0E:8C:13:E2:E5:F5:4E:E1:B4:7B:B3 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/hrZOUXiKpKuDDowT4uX1TuG0e7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.114.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:d3:c7:a5:74:c2:e2:25:6d:47:26:17:7b:e7:db:ad:6a:94: 71:59:9e:bd:6f:eb:43:90:90:e6:6c:a3:16:7a:fa:7d:46:48: 8a:dc:39:a9:52:67:1c:66:68:f4:ef:0b:45:47:f9:62:60:c7: d1:fd:b6:79:3d:99:ff:c9:0d:6e:f9:82:6e:10:44:6c:d1:64: 85:95:56:97:ec:21:76:8e:ec:e7:fc:bf:6b:6d:a2:c5:80:9c: 35:a7:b3:87:27:89:1c:b4:ae:07:49:7d:70:69:8b:29:7a:aa: af:6b:9a:e5:3d:86:f9:c3:41:e3:bd:ec:a3:c5:b0:ba:2e:82: a2:ca:56:1c:2c:38:44:8f:77:dc:cf:b9:a1:9e:02:81:c3:b8: ea:a5:93:b2:8f:fa:d3:f1:ee:fc:41:38:32:68:49:aa:ec:cb: 95:f2:74:4d:67:fc:22:15:5a:c4:44:ce:48:24:66:e4:6a:ff: 1a:b0:ef:ef:d6:a7:1d:3b:3c:e7:4c:c7:5b:d6:11:b4:e2:93: f9:3e:d8:5b:4d:95:55:27:7e:75:82:70:fc:e5:12:47:54:e1: ff:6b:7f:4a:c2:5d:8a:d7:3a:14:e2:94:3e:ec:79:13:38:11: 0e:c2:a3:0d:49:4a:20:8c:16:59:b3:5b:b8:f9:b3:10:d6:62: f0:49:e6:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwFT1URGxlEoQk/6uQYuqtRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTI4MTU1MzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmI2NGU1MTc4OGFhNGFiODMwZThjMTNlMmU1ZjU0ZWUxYjQ3YmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7beIF/wg5aAuNoUo3F0gLr/FDqnM H1pzE6ICXxh6AtMt/qynaG8gE918msdzx4wo8PGctcMNMx7e7FM6j/EblFxhM+rq W0kEkuHcU+G1Tywa3ji6woFLTPkJYmbs+lylRV/lBq7NoIXf3j43Ow4fetYnyNc1 mXf28wdw1PLuurLFpBYqz5gerCqJhpzN9B/oFdXdsLYOg3fFvo83kvBG+0APTxAt CTDPu+GVTBOvIM6DIPo5hPQJg6PNJdPoQCMSZP+uvl7OsYhPgdPOtO1lpmBH04vj +O3XI8EEyhVi4C1bv/e4O5Ti2LioHehguvSdI/i3rHa7274guJxOGfVVYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIa2TlF4iqSrgw6ME+Ll9U7htHuzMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvaHJaT1VYaUtwS3VERG93VDR1WDFUdUcwZTdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQhyMA0G CSqGSIb3DQEBCwUAA4IBAQA808eldMLiJW1HJhd759utapRxWZ69b+tDkJDmbKMW evp9RkiK3DmpUmccZmj07wtFR/liYMfR/bZ5PZn/yQ1u+YJuEERs0WSFlVaX7CF2 juzn/L9rbaLFgJw1p7OHJ4kctK4HSX1waYspeqqva5rlPYb5w0HjveyjxbC6LoKi ylYcLDhEj3fcz7mhngKBw7jqpZOyj/rT8e78QTgyaEmq7MuV8nRNZ/wiFVrERM5I JGbkav8asO/v1qcdOzznTMdb1hG04pP5PthbTZVVJ351gnD85RJHVOH/a39Kwl2K 1zoU4pQ+7HkTOBEOwqMNSUogjBZZs1u4+bMQ1mLwSeYt -----END CERTIFICATE-----Generated at Thu Jan 29 06:56:01 2026 by rpki-client