This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/1Hoyrylcn8m_wR_RB6kG1AoUkbs.roa File: 1Hoyrylcn8m_wR_RB6kG1AoUkbs.roa (raw, json) Hash identifier: i7cfjhCZOPLGdCo7zGnFGevBuRCXnZkz1NQPc21PRUI= Subject key identifier: D4:7A:32:AF:29:5C:9F:C9:BF:C1:1F:D1:07:A9:06:D4:0A:14:91:BB Certificate issuer: /CN=b522787599f1798e245f993f8cb8182f99cfd104 Certificate serial: 019B79ED2A58027C3B60056B46F24DA396BF Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/1Hoyrylcn8m_wR_RB6kG1AoUkbs.roa Signing time: Thu 01 Jan 2026 14:19:04 +0000 ROA not before: Thu 01 Jan 2026 14:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50767 IP address blocks: 91.206.154.0/23 maxlen: 23 91.224.128.0/23 maxlen: 23 91.227.0.0/22 maxlen: 22 185.233.24.0/22 maxlen: 22 193.106.228.0/22 maxlen: 22 193.107.248.0/22 maxlen: 22 2a0c:d300::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2a:58:02:7c:3b:60:05:6b:46:f2:4d:a3:96:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104 Validity Not Before: Jan 1 14:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d47a32af295c9fc9bfc11fd107a906d40a1491bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b6:a8:cf:e7:18:05:fe:ea:8b:17:52:bc:7a: 2f:95:f5:76:e2:e7:37:2f:bf:49:c5:ae:f7:41:79: cf:60:05:aa:01:5f:43:db:e1:60:39:36:67:b2:4e: a5:23:9e:79:8c:b4:9d:98:e0:31:19:a6:ee:3f:9b: 8a:ed:18:c8:1c:26:3b:e7:65:81:09:bc:49:eb:51: 37:c1:0b:86:7e:ed:7d:11:c6:68:62:95:3f:1b:ec: eb:aa:22:7a:c3:e5:f6:82:e4:87:e6:61:24:ba:6b: 81:77:ce:74:91:46:a5:3e:8d:d9:29:4c:bd:65:1c: 96:e9:48:3a:4a:17:3c:88:c5:96:54:d0:48:9e:bd: 79:c6:f4:a9:70:74:a2:b0:a5:d0:2a:a4:d3:44:ea: 28:82:f6:03:93:1c:9f:8b:d1:14:d2:4c:7a:72:aa: 8b:db:81:7a:05:83:33:a9:2a:f3:df:7f:50:1d:ea: ff:94:90:13:04:62:fd:0a:63:6d:9a:39:2e:b7:a7: d1:91:8c:70:06:96:ba:6b:17:e5:ef:99:0c:8c:17: ef:fe:22:ad:2d:c2:2e:59:c3:8a:0e:cb:a6:fe:0c: 0a:20:4e:57:b1:ac:4f:51:be:2f:4a:ef:b8:ac:6a: 40:f1:ed:aa:3f:10:d6:c8:b9:14:b8:64:47:7c:b3: 4e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7A:32:AF:29:5C:9F:C9:BF:C1:1F:D1:07:A9:06:D4:0A:14:91:BB X509v3 Authority Key Identifier: keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/1Hoyrylcn8m_wR_RB6kG1AoUkbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.154.0/23 91.224.128.0/23 91.227.0.0/22 185.233.24.0/22 193.106.228.0/22 193.107.248.0/22 IPv6: 2a0c:d300::/29 Signature Algorithm: sha256WithRSAEncryption 51:24:30:8c:7f:d0:90:83:80:44:e1:33:34:68:56:08:9c:36: 92:3b:b6:a9:2d:06:f4:5f:90:e4:68:d4:1a:1f:55:fe:2c:75: 72:ce:d8:36:64:11:f6:15:3e:b2:0e:de:57:44:c6:f2:e6:86: 5a:ef:44:3c:ea:29:b8:cb:02:73:d1:e1:88:3c:be:ff:74:27: 9b:ad:c3:35:63:d5:51:3e:e5:9d:c7:79:4d:9b:54:7c:6e:7d: e9:81:f8:f9:49:a6:e3:53:d1:f9:60:10:a6:cc:d1:fd:05:5b: 15:c9:33:f8:88:51:33:d8:ed:fb:51:54:78:8c:4e:6a:62:6f: af:14:6e:16:28:ca:3b:6a:e8:ed:c4:23:2e:74:f3:96:ee:f7: 91:5d:e6:30:d1:19:35:53:25:64:89:fa:18:43:51:77:c7:54: 7a:50:fd:15:51:43:c8:e9:f8:85:b0:fb:85:aa:21:0a:c7:29: 69:a8:ec:1e:fd:26:2f:a1:c7:26:4c:0e:40:f2:4d:89:70:fd: be:d6:36:bf:bc:47:6d:93:fd:67:34:d5:1e:fe:eb:56:43:af: d3:d3:eb:25:30:e0:c8:86:f4:fe:5e:49:47:c3:42:2d:88:29: 03:79:b0:07:67:ef:73:83:1a:b4:f1:64:c1:3f:62:7b:d7:84: 6a:09:a6:99 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt57SpYAnw7YAVrRvJNo5a/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MjI3ODc1OTlmMTc5OGUyNDVmOTkzZjhjYjgxODJmOTlj ZmQxMDQwHhcNMjYwMTAxMTQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDdhMzJhZjI5NWM5ZmM5YmZjMTFmZDEwN2E5MDZkNDBhMTQ5MWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnraoz+cYBf7qixdSvHovlfV24uc3 L79Jxa73QXnPYAWqAV9D2+FgOTZnsk6lI555jLSdmOAxGabuP5uK7RjIHCY752WB CbxJ61E3wQuGfu19EcZoYpU/G+zrqiJ6w+X2guSH5mEkumuBd850kUalPo3ZKUy9 ZRyW6Ug6Shc8iMWWVNBInr15xvSpcHSisKXQKqTTROoogvYDkxyfi9EU0kx6cqqL 24F6BYMzqSrz339QHer/lJATBGL9CmNtmjkut6fRkYxwBpa6axfl75kMjBfv/iKt LcIuWcOKDsum/gwKIE5XsaxPUb4vSu+4rGpA8e2qPxDWyLkUuGRHfLNOQQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFNR6Mq8pXJ/Jv8Ef0QepBtQKFJG7MB8GA1UdIwQY MBaAFLUieHWZ8XmOJF+ZP4y4GC+Zz9EEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFNKNGRabnhlWTRrWDVrX2pMZ1lMNW5QMFFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85YTRjY2UtZmQxMi00NzA3LWJlOTUt MGEyNDZhYjA1OTQ2LzEvMUhveXJ5bGNuOG1fd1JfUkI2a0cxQW9Va2JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85YTRjY2UtZmQxMi00NzA3LWJlOTUtMGEyNDZhYjA1OTQ2 LzEvdFNKNGRabnhlWTRrWDVrX2pMZ1lMNW5QMFFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQBW86aAwQB W+CAAwQCW+MAAwQCuekYAwQCwWrkAwQCwWv4MA0EAgACMAcDBQMqDNMAMA0GCSqG SIb3DQEBCwUAA4IBAQBRJDCMf9CQg4BE4TM0aFYInDaSO7apLQb0X5DkaNQaH1X+ LHVyztg2ZBH2FT6yDt5XRMby5oZa70Q86im4ywJz0eGIPL7/dCebrcM1Y9VRPuWd x3lNm1R8bn3pgfj5SabjU9H5YBCmzNH9BVsVyTP4iFEz2O37UVR4jE5qYm+vFG4W KMo7aujtxCMudPOW7veRXeYw0Rk1UyVkifoYQ1F3x1R6UP0VUUPI6fiFsPuFqiEK xylpqOwe/SYvoccmTA5A8k2JcP2+1ja/vEdtk/1nNNUe/utWQ6/T0+slMODIhvT+ XklHw0ItiCkDebAHZ+9zgxq08WTBP2J714RqCaaZ -----END CERTIFICATE-----Generated at Mon Feb 9 22:57:36 2026 by rpki-client