This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/Hfq2hHkukqsFqywTjHsioREmNS4.roa File: Hfq2hHkukqsFqywTjHsioREmNS4.roa (raw, json) Hash identifier: paBdvdH/DYPPTu1rMzb8b23iJRlSlCeY0XMWLizu13w= Subject key identifier: 1D:FA:B6:84:79:2E:92:AB:05:AB:2C:13:8C:7B:22:A1:11:26:35:2E Certificate issuer: /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588 Certificate serial: 019B7D5C4F6EC14C9CAD1287A8CED8FC24EC Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/Hfq2hHkukqsFqywTjHsioREmNS4.roa Signing time: Fri 02 Jan 2026 06:19:19 +0000 ROA not before: Fri 02 Jan 2026 06:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8538 IP address blocks: 192.162.104.0/22 maxlen: 22 195.8.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:4f:6e:c1:4c:9c:ad:12:87:a8:ce:d8:fc:24:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588 Validity Not Before: Jan 2 06:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dfab684792e92ab05ab2c138c7b22a11126352e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:09:43:3c:20:b8:49:44:74:cc:7c:cb:62:29: a6:59:4f:b4:97:72:d7:8f:df:74:10:36:7a:ad:17: 6b:50:c3:9e:92:aa:28:d9:b1:95:63:91:b6:d6:72: 84:e5:1c:54:a0:b9:84:b8:83:31:3e:46:f6:57:dc: e7:54:0b:e1:4f:91:13:18:6f:03:ce:8b:c8:e1:a8: 95:e7:96:d1:f0:22:0e:70:e5:ce:95:26:9e:42:a4: 27:9f:7b:02:11:1a:c6:3c:29:86:a1:5a:d4:ad:d0: e0:74:48:5c:5d:24:26:2f:57:3b:6f:0d:a6:9a:aa: e0:ad:e8:ac:41:21:63:4f:ac:09:18:ec:4d:da:2f: c2:a6:71:ec:a6:c8:4c:80:59:2e:e9:7d:ae:55:ae: 65:30:82:d8:45:cb:b7:a5:ea:8a:73:6f:6a:bd:ae: b4:79:68:b9:36:e9:3c:f5:db:d8:eb:79:6e:90:a6: 89:d6:02:b4:2d:37:d3:2f:31:ab:a8:f8:4a:f2:18: c1:70:3e:27:46:d8:34:ae:bd:ac:42:52:38:7c:bf: b8:37:34:61:b2:0f:0b:b5:f4:bb:f4:96:ee:83:9d: 8c:a7:30:94:97:f7:cb:88:81:97:4a:d7:34:3c:18: 24:0e:4c:77:48:53:51:2c:4c:7a:c4:a1:00:76:da: a3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FA:B6:84:79:2E:92:AB:05:AB:2C:13:8C:7B:22:A1:11:26:35:2E X509v3 Authority Key Identifier: keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/Hfq2hHkukqsFqywTjHsioREmNS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.162.104.0/22 195.8.115.0/24 Signature Algorithm: sha256WithRSAEncryption ab:60:10:f1:57:11:f4:0d:1a:5f:85:ea:4c:c1:7a:7f:ae:0a: 77:b7:55:37:06:90:38:da:bb:dc:cd:86:12:7f:58:48:7a:61: f9:1d:41:0a:27:2d:11:df:d4:f0:d7:a8:07:6f:3b:18:98:53: b9:7e:8d:9e:61:d5:58:ad:2d:23:b3:65:9d:3e:a7:b5:39:f9: 7c:8f:2c:44:95:57:22:af:e4:43:e7:20:4b:a8:d4:47:0e:07: dd:b1:16:97:5a:cc:59:3c:9c:21:a7:0b:1e:d8:54:ff:0e:96: eb:73:fc:07:06:13:b3:33:fb:1e:05:ba:d4:12:5e:b8:f1:79: 40:9d:16:b5:ef:b4:6b:03:a9:7e:f9:14:15:99:e4:ef:00:eb: 3d:56:d8:e6:41:58:30:69:e3:fc:9d:70:19:ab:c7:68:0f:ee: 79:01:99:52:59:f1:50:ef:f0:bf:ed:fb:43:d1:ac:ba:ba:0d: 51:a3:1a:42:03:ea:10:0d:3e:ac:6d:52:c7:78:f4:0c:28:fc: 5e:ce:f0:6c:72:46:b8:19:e6:b3:c3:6e:f6:fb:51:69:ef:e9: 03:37:4f:cd:20:4b:93:9d:5a:99:03:ca:6d:38:ce:0e:50:ca: c1:f4:2b:2b:da:c2:71:7b:d5:a7:15:33:cd:ae:3c:c0:e3:72: 79:a1:e3:70 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XE9uwUycrRKHqM7Y/CTsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYzg4MjMyYzA3ZGUyY2RjYjk2ZWFmOWU3NTE1NTBiYWE2 NmM1ODgwHhcNMjYwMTAyMDYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGZhYjY4NDc5MmU5MmFiMDVhYjJjMTM4YzdiMjJhMTExMjYzNTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwlDPCC4SUR0zHzLYimmWU+0l3LX j990EDZ6rRdrUMOekqoo2bGVY5G21nKE5RxUoLmEuIMxPkb2V9znVAvhT5ETGG8D zovI4aiV55bR8CIOcOXOlSaeQqQnn3sCERrGPCmGoVrUrdDgdEhcXSQmL1c7bw2m mqrgreisQSFjT6wJGOxN2i/CpnHspshMgFku6X2uVa5lMILYRcu3peqKc29qva60 eWi5Nuk89dvY63lukKaJ1gK0LTfTLzGrqPhK8hjBcD4nRtg0rr2sQlI4fL+4NzRh sg8LtfS79Jbug52MpzCUl/fLiIGXStc0PBgkDkx3SFNRLEx6xKEAdtqjJwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB36toR5LpKrBassE4x7IqERJjUuMB8GA1UdIwQY MBaAFN3IgjLAfeLNy5bq+edRVQuqZsWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2NpQ01zQjk0czNMbHVyNTUxRlZDNnBteFlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wYzk2ZDQtYzc2MC00YWE2LTg1ZGIt NDJjNzliMDNiNGRmLzEvSGZxMmhIa3VrcXNGcXl3VGpIc2lvUkVtTlM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wYzk2ZDQtYzc2MC00YWE2LTg1ZGItNDJjNzliMDNiNGRm LzEvM2NpQ01zQjk0czNMbHVyNTUxRlZDNnBteFlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwKJoAwQA wwhzMA0GCSqGSIb3DQEBCwUAA4IBAQCrYBDxVxH0DRpfhepMwXp/rgp3t1U3BpA4 2rvczYYSf1hIemH5HUEKJy0R39Tw16gHbzsYmFO5fo2eYdVYrS0js2WdPqe1Ofl8 jyxElVcir+RD5yBLqNRHDgfdsRaXWsxZPJwhpwse2FT/Dpbrc/wHBhOzM/seBbrU El648XlAnRa177RrA6l++RQVmeTvAOs9VtjmQVgwaeP8nXAZq8doD+55AZlSWfFQ 7/C/7ftD0ay6ug1RoxpCA+oQDT6sbVLHePQMKPxezvBscka4Geazw272+1Fp7+kD N0/NIEuTnVqZA8ptOM4OUMrB9Csr2sJxe9WnFTPNrjzA43J5oeNw -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:58 2026 by rpki-client