This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/hjOcsPBVdAJXSAwKdiUTWAmGopQ.roa File: hjOcsPBVdAJXSAwKdiUTWAmGopQ.roa (raw, json) Hash identifier: X6Ep2QeB8bOGHavV+XJT5rALDucLiATYg1DR3vQrIUc= Subject key identifier: 86:33:9C:B0:F0:55:74:02:57:48:0C:0A:76:25:13:58:09:86:A2:94 Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Certificate serial: 019B7C11F2747EF14169EB1F797F5119EF0F Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/hjOcsPBVdAJXSAwKdiUTWAmGopQ.roa Signing time: Fri 02 Jan 2026 00:18:29 +0000 ROA not before: Fri 02 Jan 2026 00:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1072 IP address blocks: 193.118.169.0/24 maxlen: 24 193.118.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:f2:74:7e:f1:41:69:eb:1f:79:7f:51:19:ef:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Validity Not Before: Jan 2 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86339cb0f055740257480c0a762513580986a294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4d:04:5d:e7:b6:82:b2:3b:a3:5d:b6:99:6c: 35:5d:90:6a:fd:38:86:de:5f:4c:1a:86:cf:c4:c6: 3f:a5:38:c2:af:cf:f3:53:4b:ee:f8:30:a8:92:30: 4b:1c:62:be:3f:8a:4e:9f:42:4c:f4:d3:32:b7:b0: c8:66:92:6c:63:ad:35:f4:4f:b2:95:a6:7c:d8:7e: 91:d4:d4:34:08:70:d0:65:01:20:aa:3c:e2:8e:88: f5:cb:1a:8b:63:8b:43:05:9c:9f:9f:cb:d1:ba:74: d9:65:41:e1:74:7f:46:17:fa:5e:17:42:68:2f:63: f5:87:9e:6a:dd:3b:25:08:e6:34:3d:75:48:5c:3d: e1:0f:bd:93:69:9e:65:f3:df:ca:f6:7d:23:05:fd: f7:1a:b7:26:18:99:1b:20:67:cf:32:ee:3e:e4:27: f7:71:2b:46:de:0b:7d:ed:90:95:b9:58:e4:f5:37: 99:ba:b8:69:08:ac:dc:c9:31:e9:bd:e2:47:b2:03: 7c:a9:7d:04:5b:74:81:87:c3:e1:d2:03:12:29:b8: f2:eb:fc:6b:13:32:85:4f:0d:95:b4:15:8e:95:44: d2:af:49:20:f7:a2:ed:3e:61:d1:16:c1:af:8e:68: 89:a9:ac:c0:83:bf:85:3d:d1:ac:2d:6d:e9:9a:f8: 13:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:33:9C:B0:F0:55:74:02:57:48:0C:0A:76:25:13:58:09:86:A2:94 X509v3 Authority Key Identifier: keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/hjOcsPBVdAJXSAwKdiUTWAmGopQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.118.169.0-193.118.170.255 Signature Algorithm: sha256WithRSAEncryption 6c:79:cc:b2:4c:3f:fb:ad:27:55:31:96:bf:2b:b2:b7:6b:1b: 58:38:4c:62:83:c5:ff:da:cc:04:8e:d2:fb:71:04:1e:83:6d: 35:28:ea:f9:3a:6c:36:31:77:63:1d:37:af:a6:c2:1b:81:d1: 84:77:65:36:a5:85:db:3e:8c:11:1a:ae:53:d0:98:44:f8:45: dc:1e:f1:9a:bb:81:d7:df:2f:ca:fc:60:df:81:ef:ee:83:1b: d2:4c:47:b0:af:6e:8c:f6:a2:e8:98:29:9b:c9:1f:bb:df:0c: b9:b8:c0:c6:c4:19:e4:7b:45:1f:9b:63:cd:0e:dd:e7:f1:9a: a1:10:18:dd:62:ee:73:a4:99:b5:ea:71:23:b6:2d:b5:e3:62: a1:96:de:ac:f0:18:d0:93:de:67:6f:b2:30:a5:c6:08:ed:f0: c7:2e:49:14:00:b7:74:31:19:61:3f:33:d0:bc:02:77:8e:85: 5d:96:26:37:b4:d6:7d:17:d2:9a:e4:c2:52:5d:65:3a:38:1c: e6:0a:0a:d7:ec:55:02:0c:8a:fa:7a:ff:d8:c4:d1:a0:05:69: 4f:4d:24:26:8b:c6:ab:4c:74:a3:6c:e7:ff:07:55:c9:06:1d: b7:b1:d0:83:cd:e3:04:20:97:f1:20:b3:7b:dd:80:f4:35:00: 70:3a:d5:f2 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8EfJ0fvFBaesfeX9RGe8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz NjYwMjYwHhcNMjYwMTAyMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjMzOWNiMGYwNTU3NDAyNTc0ODBjMGE3NjI1MTM1ODA5ODZhMjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo00EXee2grI7o122mWw1XZBq/TiG 3l9MGobPxMY/pTjCr8/zU0vu+DCokjBLHGK+P4pOn0JM9NMyt7DIZpJsY6019E+y laZ82H6R1NQ0CHDQZQEgqjzijoj1yxqLY4tDBZyfn8vRunTZZUHhdH9GF/peF0Jo L2P1h55q3TslCOY0PXVIXD3hD72TaZ5l89/K9n0jBf33GrcmGJkbIGfPMu4+5Cf3 cStG3gt97ZCVuVjk9TeZurhpCKzcyTHpveJHsgN8qX0EW3SBh8Ph0gMSKbjy6/xr EzKFTw2VtBWOlUTSr0kg96LtPmHRFsGvjmiJqazAg7+FPdGsLW3pmvgTwQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIYznLDwVXQCV0gMCnYlE1gJhqKUMB8GA1UdIwQY MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt YjNiNzhiMGI2NmVhLzEvaGpPY3NQQlZkQUpYU0F3S2RpVVRXQW1Hb3BRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADBdqkD BADBdqowDQYJKoZIhvcNAQELBQADggEBAGx5zLJMP/utJ1Uxlr8rsrdrG1g4TGKD xf/azASO0vtxBB6DbTUo6vk6bDYxd2MdN6+mwhuB0YR3ZTalhds+jBEarlPQmET4 Rdwe8Zq7gdffL8r8YN+B7+6DG9JMR7Cvboz2ouiYKZvJH7vfDLm4wMbEGeR7RR+b Y80O3efxmqEQGN1i7nOkmbXqcSO2LbXjYqGW3qzwGNCT3mdvsjClxgjt8McuSRQA t3QxGWE/M9C8AneOhV2WJje01n0X0prkwlJdZTo4HOYKCtfsVQIMivp6/9jE0aAF aU9NJCaLxqtMdKNs5/8HVckGHbex0IPN4wQgl/Egs3vdgPQ1AHA61fI= -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:42 2026 by rpki-client