This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/HNWOK-qSzLEKLOiT1RxncC81FBw.roa File: HNWOK-qSzLEKLOiT1RxncC81FBw.roa (raw, json) Hash identifier: VsSGzqx4mMKPsvTq4Mnx3YPfOOngg/lj8h0zkR3wf/A= Subject key identifier: 1C:D5:8E:2B:EA:92:CC:B1:0A:2C:E8:93:D5:1C:67:70:2F:35:14:1C Certificate issuer: /CN=2b73aa8437bc6723519d0f320bf1f1704141a53d Certificate serial: 019B775879F07C9EE701CD7CFFA1C7FA2DCB Authority key identifier: 2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/HNWOK-qSzLEKLOiT1RxncC81FBw.roa Signing time: Thu 01 Jan 2026 02:17:25 +0000 ROA not before: Thu 01 Jan 2026 02:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43274 IP address blocks: 91.194.190.0/23 maxlen: 23 91.226.120.0/22 maxlen: 22 176.114.128.0/18 maxlen: 18 176.114.189.0/24 maxlen: 24 194.125.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:79:f0:7c:9e:e7:01:cd:7c:ff:a1:c7:fa:2d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b73aa8437bc6723519d0f320bf1f1704141a53d Validity Not Before: Jan 1 02:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cd58e2bea92ccb10a2ce893d51c67702f35141c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:71:62:8e:28:b9:4d:78:33:15:20:27:cf:da: 8b:c0:9a:8d:bb:ed:13:81:af:3f:1d:b2:54:5d:41: d2:aa:df:64:c6:af:73:25:03:4b:c8:33:11:03:b2: 92:4c:14:48:85:47:0d:74:dd:ee:3f:e2:56:b7:76: 0a:43:18:01:35:46:ff:14:7a:d6:cf:f1:ca:48:97: 1f:4d:84:69:18:af:0a:d6:82:e4:46:80:8c:04:94: 73:3d:06:a2:c5:3e:53:cb:c8:c6:b9:cc:74:df:97: e4:d4:d6:6e:3f:b5:f6:ff:06:3d:54:c4:e7:7f:7a: ef:fa:1a:db:24:5e:64:5b:6a:b7:3a:35:5f:c8:9b: 66:18:78:7f:97:95:16:2a:0d:ea:5d:09:b5:8c:f4: a5:43:da:32:03:61:45:03:71:79:44:db:39:50:25: d7:45:c6:b9:33:14:7e:89:7a:a0:d8:b8:65:b0:71: 89:b1:23:cc:1b:62:25:a7:97:af:5a:94:42:49:53: 8c:5a:b0:d0:56:d6:b8:9f:51:9e:61:87:ff:6e:fc: bb:75:61:03:9d:ce:fd:52:da:2f:d7:af:94:ea:af: f8:be:41:f1:d6:e1:66:fe:03:d1:bd:fa:43:ae:2d: f9:e1:51:0f:50:60:5e:ba:01:ff:94:6f:22:ba:68: 8e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D5:8E:2B:EA:92:CC:B1:0A:2C:E8:93:D5:1C:67:70:2F:35:14:1C X509v3 Authority Key Identifier: keyid:2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/HNWOK-qSzLEKLOiT1RxncC81FBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.190.0/23 91.226.120.0/22 176.114.128.0/18 194.125.254.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:0d:cd:08:a6:70:57:f7:83:80:ab:90:83:10:46:63:61:06: 02:ee:a8:e5:4a:1a:0f:39:ba:6b:ca:6a:0a:d0:17:8a:62:0e: e7:65:69:59:9e:1b:5c:39:27:b3:87:af:6a:5b:4d:ec:ee:43: f2:f6:28:01:63:31:40:0d:8a:87:24:49:2c:de:ca:20:e8:30: 0c:23:73:80:a5:94:eb:a1:19:9e:29:a6:29:de:5e:33:80:8f: 1d:43:dc:e8:7b:2f:8f:df:b8:07:e9:f0:3b:79:f4:4f:7f:2e: 92:16:0c:6e:2c:06:09:81:a7:2f:26:36:10:60:a0:13:02:04: ed:87:2e:45:9f:49:28:5a:3e:36:a7:df:7b:00:4b:7c:10:92: f0:fd:5b:41:0a:39:4b:73:cf:63:a2:d8:b0:2f:7a:c0:f6:ad: 94:bc:50:ed:66:f8:77:0c:c9:b2:67:2c:63:30:1d:9b:a1:4d: b0:7a:cf:b2:68:57:6b:5f:a1:8a:23:f7:6f:7e:ef:3b:e4:28: c4:09:9d:10:c2:42:96:f0:d1:e1:85:05:5e:2c:92:ba:53:88: ff:0f:92:f1:49:44:d0:48:d5:fe:47:54:62:2f:1d:f4:8a:0a: f3:63:98:c1:e8:47:bb:31:60:df:d4:32:96:76:b8:ac:b0:17: b2:fd:c0:af -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WHnwfJ7nAc18/6HH+i3LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNzNhYTg0MzdiYzY3MjM1MTlkMGYzMjBiZjFmMTcwNDE0 MWE1M2QwHhcNMjYwMTAxMDIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2Q1OGUyYmVhOTJjY2IxMGEyY2U4OTNkNTFjNjc3MDJmMzUxNDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXFijii5TXgzFSAnz9qLwJqNu+0T ga8/HbJUXUHSqt9kxq9zJQNLyDMRA7KSTBRIhUcNdN3uP+JWt3YKQxgBNUb/FHrW z/HKSJcfTYRpGK8K1oLkRoCMBJRzPQaixT5Ty8jGucx035fk1NZuP7X2/wY9VMTn f3rv+hrbJF5kW2q3OjVfyJtmGHh/l5UWKg3qXQm1jPSlQ9oyA2FFA3F5RNs5UCXX Rca5MxR+iXqg2LhlsHGJsSPMG2Ilp5evWpRCSVOMWrDQVta4n1GeYYf/bvy7dWED nc79Utov16+U6q/4vkHx1uFm/gPRvfpDri354VEPUGBeugH/lG8iumiOLwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBzVjivqksyxCizok9UcZ3AvNRQcMB8GA1UdIwQY MBaAFCtzqoQ3vGcjUZ0PMgvx8XBBQaU9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzNPcWhEZThaeU5SblE4eUNfSHhjRUZCcFQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iMGNhOTQtMGYxYi00ODhmLTk3MjMt NTIxZmNlNmI2NGQ5LzEvSE5XT0stcVN6TEVLTE9pVDFSeG5jQzgxRkJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9iMGNhOTQtMGYxYi00ODhmLTk3MjMtNTIxZmNlNmI2NGQ5 LzEvSzNPcWhEZThaeU5SblE4eUNfSHhjRUZCcFQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBW8K+AwQC W+J4AwQGsHKAAwQBwn3+MA0GCSqGSIb3DQEBCwUAA4IBAQAaDc0IpnBX94OAq5CD EEZjYQYC7qjlShoPObprymoK0BeKYg7nZWlZnhtcOSezh69qW03s7kPy9igBYzFA DYqHJEks3sog6DAMI3OApZTroRmeKaYp3l4zgI8dQ9zoey+P37gH6fA7efRPfy6S FgxuLAYJgacvJjYQYKATAgTthy5Fn0koWj42p997AEt8EJLw/VtBCjlLc89jotiw L3rA9q2UvFDtZvh3DMmyZyxjMB2boU2wes+yaFdrX6GKI/dvfu875CjECZ0QwkKW 8NHhhQVeLJK6U4j/D5LxSUTQSNX+R1RiLx30igrzY5jB6Ee7MWDf1DKWdrissBey /cCv -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:08 2026 by rpki-client