This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/HBiP4paC0MlxmT9TqUdXSCFpVek.roa File: HBiP4paC0MlxmT9TqUdXSCFpVek.roa (raw, json) Hash identifier: 5/zIGY+6xQLGjEfA2psYBflaTdU36mi9/74Ob0mM/kg= Subject key identifier: 1C:18:8F:E2:96:82:D0:C9:71:99:3F:53:A9:47:57:48:21:69:55:E9 Certificate issuer: /CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828 Certificate serial: 019B77593B7071DF9FF932594A21C7B76956 Authority key identifier: 76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/HBiP4paC0MlxmT9TqUdXSCFpVek.roa Signing time: Thu 01 Jan 2026 02:18:15 +0000 ROA not before: Thu 01 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215852 IP address blocks: 91.203.31.0/24 maxlen: 24 2001:67c:10bc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3b:70:71:df:9f:f9:32:59:4a:21:c7:b7:69:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828 Validity Not Before: Jan 1 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c188fe29682d0c971993f53a9475748216955e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:08:58:a4:00:3b:e2:82:0d:5d:40:93:fd:dd: 9b:b7:24:b2:4c:71:7e:38:2a:d1:1a:c6:8b:3e:5e: cc:aa:ef:ed:5b:d6:39:de:b5:42:d3:f8:4a:d4:01: e8:a8:09:60:d0:ea:8a:2f:bd:ab:7e:40:b3:e4:c4: ff:18:50:84:d7:28:f7:b4:0c:80:02:92:35:f0:fa: 6e:3e:f4:85:c1:55:8e:fd:76:1a:43:ec:82:66:14: b5:a0:83:d4:0d:86:cf:ba:f1:cd:e2:7f:d0:f1:90: 07:23:77:d4:f3:fe:b4:01:14:8c:25:a9:22:10:d1: a1:ee:4f:e9:b0:81:bd:0b:62:2b:0d:8e:df:99:c1: a9:15:bf:f6:6c:0b:52:96:0a:31:11:22:94:70:3a: 36:59:2b:44:da:90:5a:cf:f0:e0:af:9e:d1:0c:6b: 65:aa:e5:bf:2c:6c:7d:95:d4:f8:51:9c:5d:ac:3a: 83:3e:62:fb:b0:cf:66:98:f6:38:2f:68:6f:f1:ec: 3e:2a:f2:fd:25:2a:89:27:98:35:47:16:82:74:7d: df:1f:97:e5:c6:74:cc:74:b6:b4:60:9b:29:c3:5c: f6:b3:d7:93:bc:f6:56:56:55:68:b4:db:fc:86:af: d5:ff:09:0c:1e:0d:8a:81:c9:c6:c9:fa:48:08:85: a0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:18:8F:E2:96:82:D0:C9:71:99:3F:53:A9:47:57:48:21:69:55:E9 X509v3 Authority Key Identifier: keyid:76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/HBiP4paC0MlxmT9TqUdXSCFpVek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.31.0/24 IPv6: 2001:67c:10bc::/48 Signature Algorithm: sha256WithRSAEncryption 06:81:ef:54:f5:8b:fd:dd:30:9c:7f:d1:af:96:29:7a:8d:e2: e3:95:f8:2e:71:17:fd:cf:27:69:cc:be:b4:14:07:03:b7:4d: c2:46:0e:2f:e2:06:0e:77:a5:78:14:fd:78:f8:b1:71:c7:65: 66:78:d1:2e:14:e9:76:f9:4d:43:c6:29:82:67:56:7a:94:5d: 7d:04:32:18:05:ab:04:03:f2:80:95:e6:64:01:8d:5f:d7:9b: 6c:40:5b:19:40:87:4e:42:8f:f9:34:54:3f:44:c6:5a:41:8f: c3:57:bc:7b:8f:01:7a:aa:74:df:f0:17:9d:53:70:57:80:c0: 1b:32:91:7a:55:a2:37:18:01:5d:05:57:7c:6e:f8:6a:e7:02: 8d:5c:95:75:a5:83:7f:b4:db:b9:e7:27:85:1f:a0:06:d0:61: b8:89:06:07:0b:85:9f:a8:26:77:e8:69:8c:b3:86:24:a3:50: 76:45:65:11:02:2a:87:59:85:32:37:65:ab:08:bf:3c:39:1d: 24:27:db:26:c1:e9:bf:d3:c6:90:03:ed:15:fe:87:f9:cb:b6: db:a5:54:85:1c:32:3a:f3:3f:2b:85:13:b4:4b:8b:0f:02:01: 88:95:fa:fd:82:11:1b:29:e7:80:42:1c:ba:78:79:71:03:89: ec:d3:d3:f1 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3WTtwcd+f+TJZSiHHt2lWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YWQyYWJiNzNkZjk2YmNiMWIxZDFiOGQ5OWQzNWY1Yjlm ZDk4MjgwHhcNMjYwMTAxMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzE4OGZlMjk2ODJkMGM5NzE5OTNmNTNhOTQ3NTc0ODIxNjk1NWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwhYpAA74oINXUCT/d2btySyTHF+ OCrRGsaLPl7Mqu/tW9Y53rVC0/hK1AHoqAlg0OqKL72rfkCz5MT/GFCE1yj3tAyA ApI18PpuPvSFwVWO/XYaQ+yCZhS1oIPUDYbPuvHN4n/Q8ZAHI3fU8/60ARSMJaki ENGh7k/psIG9C2IrDY7fmcGpFb/2bAtSlgoxESKUcDo2WStE2pBaz/Dgr57RDGtl quW/LGx9ldT4UZxdrDqDPmL7sM9mmPY4L2hv8ew+KvL9JSqJJ5g1RxaCdH3fH5fl xnTMdLa0YJspw1z2s9eTvPZWVlVotNv8hq/V/wkMHg2KgcnGyfpICIWgtQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBwYj+KWgtDJcZk/U6lHV0ghaVXpMB8GA1UdIwQY MBaAFHatKrtz35a8sbHRuNmdNfW5/ZgoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zY2RkOTItNzI0YS00ZmQ4LWE1Zjgt MzcwYjNhODdiZjk4LzEvSEJpUDRwYUMwTWx4bVQ5VHFVZFhTQ0ZwVmVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8zY2RkOTItNzI0YS00ZmQ4LWE1ZjgtMzcwYjNhODdiZjk4 LzEvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW8sfMA8E AgACMAkDBwAgAQZ8ELwwDQYJKoZIhvcNAQELBQADggEBAAaB71T1i/3dMJx/0a+W KXqN4uOV+C5xF/3PJ2nMvrQUBwO3TcJGDi/iBg53pXgU/Xj4sXHHZWZ40S4U6Xb5 TUPGKYJnVnqUXX0EMhgFqwQD8oCV5mQBjV/Xm2xAWxlAh05Cj/k0VD9ExlpBj8NX vHuPAXqqdN/wF51TcFeAwBsykXpVojcYAV0FV3xu+GrnAo1clXWlg3+027nnJ4Uf oAbQYbiJBgcLhZ+oJnfoaYyzhiSjUHZFZRECKodZhTI3ZasIvzw5HSQn2ybB6b/T xpAD7RX+h/nLttulVIUcMjrzPyuFE7RLiw8CAYiV+v2CERsp54BCHLp4eXEDiezT 0/E= -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:39 2026 by rpki-client