This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/HMo_pRRnRqJZqr644LvLDKbEvF0.roa File: HMo_pRRnRqJZqr644LvLDKbEvF0.roa (raw, json) Hash identifier: iH4M3snvNj6PFU+GFjuRkofzdO0jGEo8rVExACKxHtk= Subject key identifier: 1C:CA:3F:A5:14:67:46:A2:59:AA:BE:B8:E0:BB:CB:0C:A6:C4:BC:5D Certificate issuer: /CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee Certificate serial: 019B79EC50EE310F80F8EA2068F49F3C46A2 Authority key identifier: 4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/HMo_pRRnRqJZqr644LvLDKbEvF0.roa Signing time: Thu 01 Jan 2026 14:18:08 +0000 ROA not before: Thu 01 Jan 2026 14:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48966 IP address blocks: 95.130.88.0/23 maxlen: 23 95.130.88.0/24 maxlen: 24 95.130.89.0/24 maxlen: 24 95.130.90.0/23 maxlen: 23 95.130.91.0/24 maxlen: 24 95.130.92.0/23 maxlen: 23 95.130.92.0/24 maxlen: 24 95.130.93.0/24 maxlen: 24 95.130.94.0/24 maxlen: 24 185.88.80.0/23 maxlen: 23 185.88.80.0/24 maxlen: 24 185.88.81.0/24 maxlen: 24 185.88.82.0/23 maxlen: 23 185.88.82.0/24 maxlen: 24 185.88.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:50:ee:31:0f:80:f8:ea:20:68:f4:9f:3c:46:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee Validity Not Before: Jan 1 14:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cca3fa5146746a259aabeb8e0bbcb0ca6c4bc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0c:b1:4b:5e:21:b6:cd:f3:df:95:ad:2d:20: aa:fc:8b:b8:66:f5:c9:6c:ee:88:ac:41:48:68:d5: 9b:93:11:a2:08:40:6d:d6:21:bb:1d:8f:08:2d:20: 11:85:d9:97:ec:88:75:65:d3:23:16:65:d5:ed:cf: 4f:84:92:7f:b9:0a:63:eb:1e:b6:84:72:d8:1f:44: ea:44:ea:35:8e:43:c2:99:a5:e5:a4:ff:b0:e8:19: 9f:ac:02:c5:43:79:d5:95:52:9e:10:1d:0e:3b:50: f1:0e:32:fe:7f:4e:f2:02:3c:e7:2f:cd:8e:ed:9a: 0d:d2:c1:28:62:6a:c1:49:2c:d5:fa:93:8f:65:f8: eb:61:1a:a5:73:bb:3a:6e:c1:d6:1f:aa:b2:5a:45: ec:55:4e:cc:32:0d:67:c9:86:66:df:9a:37:64:f2: e8:3f:fb:c9:db:c9:b6:05:17:af:81:8e:0f:c1:aa: 17:fb:ca:6c:36:06:1b:0a:fb:03:bd:87:43:e2:9b: ac:34:8b:21:31:f2:f9:ac:44:e1:fe:4d:50:30:33: ae:c7:22:e2:2b:04:0c:88:dd:50:64:9a:2b:a0:1d: 1d:60:19:f3:d4:1b:40:70:b4:2e:92:70:9b:40:fb: 8f:88:b5:ea:d8:2e:cb:35:db:24:ab:5b:40:61:26: 87:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CA:3F:A5:14:67:46:A2:59:AA:BE:B8:E0:BB:CB:0C:A6:C4:BC:5D X509v3 Authority Key Identifier: keyid:4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/HMo_pRRnRqJZqr644LvLDKbEvF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.130.88.0-95.130.94.255 185.88.80.0/22 Signature Algorithm: sha256WithRSAEncryption 12:e0:26:0c:42:27:50:48:62:48:92:86:08:26:20:09:11:b8: b5:bd:cb:e3:ad:f9:68:21:28:aa:23:11:02:4a:e8:12:c6:2f: ec:8a:8a:ec:08:f3:7a:da:0a:c5:01:8f:e6:71:ab:63:c1:9c: b2:e0:da:8b:75:4d:57:80:0d:86:6a:f9:11:f2:76:90:d1:66: 5f:f0:5e:ce:e6:a3:84:dd:91:64:6f:03:13:4c:32:ed:bd:db: 7a:32:15:8a:81:fc:b2:5e:23:2d:f4:71:b5:cf:94:51:32:d3: 91:ba:21:bb:04:50:c2:9a:03:9d:c0:6d:1e:e3:0c:70:39:17: 5f:9b:46:b6:79:67:6e:ec:be:4a:91:57:d1:c9:5e:70:0a:09: be:da:79:f9:8b:69:aa:f5:18:08:eb:e0:e3:fb:ba:42:5a:98: d6:7a:9d:37:7c:ea:a9:57:c3:eb:9b:97:16:bd:9e:d0:17:ab: f3:0b:c4:2f:d0:ef:2d:be:ab:a9:7b:d7:87:e6:b3:d5:58:e1: 58:96:2a:d5:f0:5d:5a:a2:f4:74:10:34:a0:0c:4d:27:96:a3: 19:0e:77:ed:a8:3c:a6:64:c8:69:0f:70:7d:89:e6:3a:21:a7: f2:c2:a8:74:0b:38:90:73:98:c8:e0:00:de:59:1e:9c:49:2f: 19:22:6c:d0 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt57FDuMQ+A+OogaPSfPEaiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYjkzMmJjNjBlOWZkMTE4NmY4ZmE2YmQ3MTNjMjA3Mjlh ZTczZWUwHhcNMjYwMTAxMTQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2NhM2ZhNTE0Njc0NmEyNTlhYWJlYjhlMGJiY2IwY2E2YzRiYzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQyxS14hts3z35WtLSCq/Iu4ZvXJ bO6IrEFIaNWbkxGiCEBt1iG7HY8ILSARhdmX7Ih1ZdMjFmXV7c9PhJJ/uQpj6x62 hHLYH0TqROo1jkPCmaXlpP+w6BmfrALFQ3nVlVKeEB0OO1DxDjL+f07yAjznL82O 7ZoN0sEoYmrBSSzV+pOPZfjrYRqlc7s6bsHWH6qyWkXsVU7MMg1nyYZm35o3ZPLo P/vJ28m2BRevgY4PwaoX+8psNgYbCvsDvYdD4pusNIshMfL5rETh/k1QMDOuxyLi KwQMiN1QZJoroB0dYBnz1BtAcLQuknCbQPuPiLXq2C7LNdskq1tAYSaH6QIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFBzKP6UUZ0aiWaq+uOC7ywymxLxdMB8GA1UdIwQY MBaAFEy5Mrxg6f0Rhvj6a9cTwgcprnPuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVExreXZHRHBfUkdHLVBwcjF4UENCeW11Yy00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNDM4OTItNzgwYy00MzJhLTg4MmYt MWUwZDdjNDJkYTc2LzEvSE1vX3BSUm5ScUpacXI2NDRMdkxES2JFdkYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8zNDM4OTItNzgwYy00MzJhLTg4MmYtMWUwZDdjNDJkYTc2 LzEvVExreXZHRHBfUkdHLVBwcjF4UENCeW11Yy00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBANfglgD BABfgl4DBAK5WFAwDQYJKoZIhvcNAQELBQADggEBABLgJgxCJ1BIYkiShggmIAkR uLW9y+Ot+WghKKojEQJK6BLGL+yKiuwI83raCsUBj+Zxq2PBnLLg2ot1TVeADYZq +RHydpDRZl/wXs7mo4TdkWRvAxNMMu2923oyFYqB/LJeIy30cbXPlFEy05G6IbsE UMKaA53AbR7jDHA5F1+bRrZ5Z27svkqRV9HJXnAKCb7aefmLaar1GAjr4OP7ukJa mNZ6nTd86qlXw+ublxa9ntAXq/MLxC/Q7y2+q6l714fms9VY4ViWKtXwXVqi9HQQ NKAMTSeWoxkOd+2oPKZkyGkPcH2J5johp/LCqHQLOJBzmMjgAN5ZHpxJLxkibNA= -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:52 2026 by rpki-client