This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/hTcOcp0L4y1cZE83wStrArF5yok.roa File: hTcOcp0L4y1cZE83wStrArF5yok.roa (raw, json) Hash identifier: IP49Cz4BtOS2hhS7C6rA+5mVBlMhuBxigxpjWGKIBVc= Subject key identifier: 85:37:0E:72:9D:0B:E3:2D:5C:64:4F:37:C1:2B:6B:02:B1:79:CA:89 Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5 Certificate serial: 019B77C69E668044B44B0836479A0010930F Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/hTcOcp0L4y1cZE83wStrArF5yok.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 185.161.88.0/22 maxlen: 24 2a00:ddc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9e:66:80:44:b4:4b:08:36:47:9a:00:10:93:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5 Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85370e729d0be32d5c644f37c12b6b02b179ca89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0a:51:15:36:67:56:31:1f:ad:db:01:7e:f6: f8:91:0d:6c:18:5d:cb:e2:a6:6b:a0:be:92:fd:54: 0e:0a:5b:32:0c:a2:83:4b:2b:1b:64:d8:c3:a4:82: 4b:03:a4:65:d9:4e:4e:b1:a2:d1:2c:6d:a3:70:00: 02:f4:d0:81:43:66:34:1f:0d:ab:27:57:f0:c1:94: 3e:7f:c6:5c:0a:c3:e1:cb:2b:11:8a:d1:d8:f8:54: e2:23:90:8f:56:cb:8b:46:8f:19:11:ee:d4:86:42: 91:b6:8c:e3:18:b5:ff:4d:c1:0f:9b:de:3e:60:66: b6:51:8c:60:d2:35:7d:d6:c3:39:80:f8:19:25:e8: 69:00:98:b6:ea:61:4c:fb:22:34:1f:f3:a6:e0:9c: 85:26:75:f5:9f:04:e0:52:fe:1d:86:31:a3:ac:df: e4:29:b6:ed:8c:d6:ad:04:83:2c:f1:f7:6f:9e:7b: 4d:3a:62:cd:86:b7:81:58:bb:94:7d:0c:53:e5:7d: 54:1e:51:be:66:c6:bf:dd:24:73:8f:ab:f1:48:9b: 9d:87:bd:dd:a3:22:0b:6b:ef:0b:df:af:fc:76:ba: 26:ca:23:ff:c2:da:c2:4a:2c:6f:bf:da:37:28:73: 8f:6f:4e:fd:89:be:d2:b4:55:da:03:f3:ad:29:02: 41:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:37:0E:72:9D:0B:E3:2D:5C:64:4F:37:C1:2B:6B:02:B1:79:CA:89 X509v3 Authority Key Identifier: keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/hTcOcp0L4y1cZE83wStrArF5yok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.88.0/22 IPv6: 2a00:ddc0::/32 Signature Algorithm: sha256WithRSAEncryption 67:ce:00:77:9a:d3:1c:72:df:51:15:bf:6f:d1:82:2d:ea:2f: a2:21:6e:30:92:4e:50:de:36:45:a1:35:b4:7d:52:89:4f:94: 76:3d:ea:b4:e2:6b:6f:9f:99:e2:c9:8a:80:44:8f:0b:66:1c: e9:0c:97:71:26:fb:14:14:23:56:89:13:14:6b:7f:b3:60:8c: f2:74:06:69:94:f5:5b:bc:f9:5e:05:39:13:5c:cf:b5:cd:81: 66:ad:2d:b5:78:1c:ed:39:1e:f0:45:e5:94:6f:44:ff:a0:37: 7c:a7:21:bb:7d:ad:64:b8:49:2d:54:3c:17:5e:e4:18:9b:b8: 22:4e:30:8a:fe:0f:b8:62:97:a3:b4:8d:91:35:30:f7:5e:42: 3d:69:cb:dd:ce:f0:50:f7:d0:59:ca:2a:24:14:b3:69:a0:27: 97:8c:1b:3d:5f:e8:7d:8a:b2:13:56:bc:db:e1:89:1d:b3:05: fa:88:c6:36:e1:61:88:8e:60:42:1e:68:ba:72:a4:97:1c:a4: ef:29:d5:fe:50:ae:52:71:dc:0c:37:fc:b0:c5:4a:1f:e1:8e: 5b:6d:c1:8e:98:a1:63:82:4f:85:0d:cc:67:0e:f5:de:a1:0d: d7:28:59:f0:14:76:ca:e7:d4:97:ba:5e:16:e9:d1:44:d8:81: 51:2e:98:24 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xp5mgES0Swg2R5oAEJMPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMjQ2MGI3OGY2ZThmNDY2MmFlYzc4NThlOTIwNTFlODU2 MDk5ZjUwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTM3MGU3MjlkMGJlMzJkNWM2NDRmMzdjMTJiNmIwMmIxNzljYTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQpRFTZnVjEfrdsBfvb4kQ1sGF3L 4qZroL6S/VQOClsyDKKDSysbZNjDpIJLA6Rl2U5OsaLRLG2jcAAC9NCBQ2Y0Hw2r J1fwwZQ+f8ZcCsPhyysRitHY+FTiI5CPVsuLRo8ZEe7UhkKRtozjGLX/TcEPm94+ YGa2UYxg0jV91sM5gPgZJehpAJi26mFM+yI0H/Om4JyFJnX1nwTgUv4dhjGjrN/k KbbtjNatBIMs8fdvnntNOmLNhreBWLuUfQxT5X1UHlG+Zsa/3SRzj6vxSJudh73d oyILa+8L36/8dromyiP/wtrCSixvv9o3KHOPb079ib7StFXaA/OtKQJB8QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIU3DnKdC+MtXGRPN8ErawKxecqJMB8GA1UdIwQY MBaAFJMkYLePbo9GYq7HhY6SBR6FYJn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jMjUxZjEtY2I3MC00MjgzLTg0MzMt OGM5ZmNiYjNlYzUyLzEvaFRjT2NwMEw0eTFjWkU4M3dTdHJBckY1eW9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9jMjUxZjEtY2I3MC00MjgzLTg0MzMtOGM5ZmNiYjNlYzUy LzEva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaFYMA0E AgACMAcDBQAqAN3AMA0GCSqGSIb3DQEBCwUAA4IBAQBnzgB3mtMcct9RFb9v0YIt 6i+iIW4wkk5Q3jZFoTW0fVKJT5R2Peq04mtvn5niyYqARI8LZhzpDJdxJvsUFCNW iRMUa3+zYIzydAZplPVbvPleBTkTXM+1zYFmrS21eBztOR7wReWUb0T/oDd8pyG7 fa1kuEktVDwXXuQYm7giTjCK/g+4YpejtI2RNTD3XkI9acvdzvBQ99BZyiokFLNp oCeXjBs9X+h9irITVrzb4YkdswX6iMY24WGIjmBCHmi6cqSXHKTvKdX+UK5ScdwM N/ywxUof4Y5bbcGOmKFjgk+FDcxnDvXeoQ3XKFnwFHbK59SXul4W6dFE2IFRLpgk -----END CERTIFICATE-----Generated at Wed Jan 21 07:22:15 2026 by rpki-client