This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/hmZ1mxVrzqjqx_1iP5op4hU25Ho.roa File: hmZ1mxVrzqjqx_1iP5op4hU25Ho.roa (raw, json) Hash identifier: pfSMpgk/ODrUlGox+4Mj+0AxVVPVgzj1yETRt0uvYPU= Subject key identifier: 86:66:75:9B:15:6B:CE:A8:EA:C7:FD:62:3F:9A:29:E2:15:36:E4:7A Certificate issuer: /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34 Certificate serial: 019B7EA71D6D66F0B4A6616810C405C1655F Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/hmZ1mxVrzqjqx_1iP5op4hU25Ho.roa Signing time: Fri 02 Jan 2026 12:20:39 +0000 ROA not before: Fri 02 Jan 2026 12:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1921 IP address blocks: 185.102.12.0/24 maxlen: 24 193.46.128.0/24 maxlen: 24 193.46.129.0/24 maxlen: 24 193.46.130.0/24 maxlen: 24 193.46.131.0/24 maxlen: 24 193.46.132.0/24 maxlen: 24 193.46.133.0/24 maxlen: 24 193.46.134.0/24 maxlen: 24 193.46.135.0/24 maxlen: 24 194.0.24.0/24 maxlen: 24 194.0.25.0/24 maxlen: 24 194.0.26.0/24 maxlen: 24 2001:678:20::/48 maxlen: 48 2001:678:24::/48 maxlen: 48 2001:67c:1bc::/48 maxlen: 48 2a02:850:ffe0::/48 maxlen: 48 2a02:850:ffe1::/48 maxlen: 48 2a02:850:ffe2::/48 maxlen: 48 2a02:850:ffe3::/48 maxlen: 48 2a02:850:ffe4::/48 maxlen: 48 2a02:850:ffe5::/48 maxlen: 48 2a02:850:ffe6::/48 maxlen: 48 2a02:850:ffe7::/48 maxlen: 48 2a02:850:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1d:6d:66:f0:b4:a6:61:68:10:c4:05:c1:65:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34 Validity Not Before: Jan 2 12:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8666759b156bcea8eac7fd623f9a29e21536e47a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2c:f1:06:a1:b0:50:6a:dd:32:97:36:bb:99: db:d1:30:41:8e:52:99:0f:51:79:31:4d:3f:97:9a: 9f:2c:1c:e8:2b:b8:8e:05:2a:68:ff:9a:86:c2:bd: 4b:85:49:fc:ac:e3:4b:68:7e:25:82:f4:2d:77:ba: a9:7a:27:e6:5d:69:3c:5d:6c:85:05:03:92:79:98: 1e:ba:40:3e:a0:bb:b3:04:8b:da:be:d6:96:e2:52: ee:52:e6:70:31:56:44:a5:90:52:b2:15:a7:61:61: 30:cd:42:c6:5f:30:05:b8:37:13:06:1b:87:ec:22: 1c:02:2f:8e:0f:7f:88:ee:ca:69:6c:7f:ae:9c:84: 20:12:1e:dd:5f:66:9e:33:71:e3:7b:6a:de:fa:c0: d9:cf:83:0f:67:fa:a7:81:00:bc:de:b6:2b:aa:96: 9a:35:65:62:30:a0:11:44:42:66:fb:64:bb:25:18: cd:f6:34:2a:b1:6f:4e:93:db:11:f6:b0:36:4e:49: 8c:f6:d0:2e:52:97:74:86:e3:ee:90:2d:53:7c:34: 78:2b:85:b9:d3:4f:30:95:15:85:81:22:a8:b1:52: 9d:24:a4:ab:49:70:6b:26:10:9d:72:8e:5f:92:4b: 9e:a3:63:ad:96:ac:84:8f:d9:1e:4c:8f:a8:55:d0: ff:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:66:75:9B:15:6B:CE:A8:EA:C7:FD:62:3F:9A:29:E2:15:36:E4:7A X509v3 Authority Key Identifier: keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/hmZ1mxVrzqjqx_1iP5op4hU25Ho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.102.12.0/24 193.46.128.0/21 194.0.24.0-194.0.26.255 IPv6: 2001:678:20::/48 2001:678:24::/48 2001:67c:1bc::/48 2a02:850:ffe0::/45 2a02:850:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 1e:dd:82:9f:a7:fc:9b:c5:82:55:f6:f0:ec:41:b1:de:ed:30: 49:7d:1f:a4:92:81:c6:b0:19:3a:f3:f3:d2:ff:ca:4a:64:d7: a0:a6:dd:c3:e3:e9:c9:87:b6:95:00:29:69:bf:b7:d8:1f:18: 68:05:b6:90:b7:84:37:2d:05:cb:5c:8c:00:26:b0:7d:9e:da: 84:8a:a1:c5:ae:89:11:7d:77:fb:fa:8e:69:df:8b:6c:a3:87: 7e:a3:96:de:e2:5d:c5:fc:89:0e:21:27:82:14:c9:d8:de:7e: a8:4e:44:71:b1:f1:bb:a4:e4:86:55:74:62:59:5a:6d:ff:9e: 88:11:cc:8a:b6:bd:51:f5:95:9b:eb:be:75:b9:c0:59:7a:7f: af:59:3a:02:d0:19:4e:05:7c:8f:0d:ce:3f:c3:62:f9:97:a8: 30:f4:bd:29:5e:90:eb:bf:53:a7:7a:fd:13:10:f7:e3:0e:9b: e3:d3:ed:05:68:5b:8f:1a:a5:f2:40:da:83:8e:06:a0:a6:8a: 9f:ce:40:c8:cc:1b:1a:91:7f:11:95:c2:3b:0f:de:65:52:8d: a1:8f:c1:0d:a4:6d:da:68:81:be:de:09:96:54:31:da:59:8d: 88:80:ea:ae:4c:4f:39:3d:c4:2a:8b:a9:95:57:f7:5c:7e:b0: a0:b9:24:01 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgISAZt+px1tZvC0pmFoEMQFwWVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMzkwYmZmNjVkY2VkY2E4MTNkN2ExMGQ3ZWMzMjhjMmY2 ZWFjMzQwHhcNMjYwMTAyMTIyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjY2NzU5YjE1NmJjZWE4ZWFjN2ZkNjIzZjlhMjllMjE1MzZlNDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvizxBqGwUGrdMpc2u5nb0TBBjlKZ D1F5MU0/l5qfLBzoK7iOBSpo/5qGwr1LhUn8rONLaH4lgvQtd7qpeifmXWk8XWyF BQOSeZgeukA+oLuzBIvavtaW4lLuUuZwMVZEpZBSshWnYWEwzULGXzAFuDcTBhuH 7CIcAi+OD3+I7sppbH+unIQgEh7dX2aeM3Hje2re+sDZz4MPZ/qngQC83rYrqpaa NWViMKARREJm+2S7JRjN9jQqsW9Ok9sR9rA2TkmM9tAuUpd0huPukC1TfDR4K4W5 008wlRWFgSKosVKdJKSrSXBrJhCdco5fkkueo2OtlqyEj9keTI+oVdD/GwIDAQAB o4ICUjCCAk4wHQYDVR0OBBYEFIZmdZsVa86o6sf9Yj+aKeIVNuR6MB8GA1UdIwQY MBaAFBw5C/9l3O3KgT16ENfsMowvbqw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSERrTF8yWGM3Y3FCUFhvUTEtd3lqQzl1ckRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTIt YTk3NjVlZGM3OTVjLzEvaG1aMW14VnJ6cWpxeF8xaVA1b3A0aFUyNUhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTItYTk3NjVlZGM3OTVj LzEvSERrTF8yWGM3Y3FCUFhvUTEtd3lqQzl1ckRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzAgBAIAATAaAwQAuWYMAwQD wS6AMAwDBAPCABgDBADCABowMwQCAAIwLQMHACABBngAIAMHACABBngAJAMHACAB BnwBvAMHAyoCCFD/4AMHACoCCFD//zANBgkqhkiG9w0BAQsFAAOCAQEAHt2Cn6f8 m8WCVfbw7EGx3u0wSX0fpJKBxrAZOvPz0v/KSmTXoKbdw+PpyYe2lQApab+32B8Y aAW2kLeENy0Fy1yMACawfZ7ahIqhxa6JEX13+/qOad+LbKOHfqOW3uJdxfyJDiEn ghTJ2N5+qE5EcbHxu6TkhlV0Yllabf+eiBHMira9UfWVm+u+dbnAWXp/r1k6AtAZ TgV8jw3OP8Ni+ZeoMPS9KV6Q679Tp3r9ExD34w6b49PtBWhbjxql8kDag44GoKaK n85AyMwbGpF/EZXCOw/eZVKNoY/BDaRt2miBvt4JllQx2lmNiIDqrkxPOT3EKoup lVf3XH6woLkkAQ== -----END CERTIFICATE-----Generated at Tue Jan 27 03:54:27 2026 by rpki-client