This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/hoKwY0QvUnBi-tDDbTH_cLv23NY.roa File: hoKwY0QvUnBi-tDDbTH_cLv23NY.roa (raw, json) Hash identifier: fFAQMbRSBb2iS8m9HUDJs1yeCJEv1rp7JgjV+mMT+oE= Subject key identifier: 86:82:B0:63:44:2F:52:70:62:FA:D0:C3:6D:31:FF:70:BB:F6:DC:D6 Certificate issuer: /CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7 Certificate serial: 019BCFD62EDA12B09CBBFADA7E8BC8911870 Authority key identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/hoKwY0QvUnBi-tDDbTH_cLv23NY.roa Signing time: Sun 18 Jan 2026 06:41:18 +0000 ROA not before: Sun 18 Jan 2026 06:41:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202269 IP address blocks: 89.106.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cf:d6:2e:da:12:b0:9c:bb:fa:da:7e:8b:c8:91:18:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7 Validity Not Before: Jan 18 06:41:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8682b063442f527062fad0c36d31ff70bbf6dcd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a8:33:d4:97:8a:b5:c1:7a:45:9b:25:f2:95: 15:0b:45:1d:93:5f:ec:56:cc:7b:e1:a0:71:a1:27: ec:b4:87:74:bc:7f:bb:21:af:f8:8f:5b:8d:25:d7: f1:3c:1b:8e:ed:b4:28:86:de:0f:1a:6f:fe:1e:39: f6:fc:af:2b:84:18:b1:a4:d7:fe:cb:3a:77:bd:ab: c1:8e:d7:73:18:6c:a8:bb:1f:84:cd:a9:c0:95:f0: 0c:af:8b:3d:7b:6d:a2:e8:16:66:87:44:89:02:15: 2c:16:4e:09:15:6d:69:be:5a:26:8e:f7:71:37:19: e4:8b:1d:79:01:52:9a:4d:70:85:9d:a4:50:46:bd: 9b:b6:c5:f2:a7:12:ee:e9:41:18:55:55:fb:d7:a9: ec:8c:1d:bc:02:ab:ce:9a:8e:26:27:82:6b:57:7e: 12:51:28:c6:30:3c:1d:ff:3f:fe:36:02:b8:38:29: 66:61:78:75:09:45:a8:45:85:87:fc:9b:f5:02:2e: 54:61:ce:36:0f:ab:87:36:46:99:d6:3d:aa:f0:0c: 2c:f9:93:96:99:8a:25:4b:76:38:35:5a:b8:8b:60: ca:c7:29:b7:0c:19:18:a1:da:0f:62:fb:19:67:36: 21:d9:cc:cd:3c:58:7a:76:ba:66:5d:1c:01:d8:48: 9d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:82:B0:63:44:2F:52:70:62:FA:D0:C3:6D:31:FF:70:BB:F6:DC:D6 X509v3 Authority Key Identifier: keyid:9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/hoKwY0QvUnBi-tDDbTH_cLv23NY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.206.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:1b:ea:e0:c0:d7:72:47:99:62:e1:62:c6:6d:4a:be:1c:47: 8d:ae:69:47:c7:9a:78:53:4d:ee:48:fe:b0:e7:a1:bb:ab:5e: 37:c7:3e:78:16:89:cd:07:29:41:14:df:02:8e:c1:e4:a7:e1: fa:82:78:40:7e:2d:9a:18:06:41:f5:81:51:ab:12:a1:72:57: 06:44:c2:50:74:28:47:28:88:9d:7b:47:cb:5a:d0:3c:65:94: b4:95:29:7d:11:cc:a1:ed:36:1f:b1:60:df:80:a2:5b:b9:7f: 32:a6:b7:5b:52:6d:3d:8f:85:9e:9b:3d:e5:57:0f:83:1c:51: 56:73:bc:e6:11:2c:eb:96:d1:99:b5:d8:c1:46:02:b6:0d:b0: 47:dd:93:37:45:12:14:d3:34:09:0a:5e:ba:27:47:c3:42:27: e9:4c:34:35:22:75:42:61:8e:53:75:ed:f5:2e:11:d3:a0:a4: 20:a0:b8:ea:51:c4:ea:bf:7d:3c:b8:3d:72:72:85:09:15:cb: 12:6a:aa:85:d9:24:aa:36:8a:bb:ef:95:16:0f:02:dd:1b:2f: 03:92:98:b8:28:84:f4:fd:3b:5f:f3:4f:b4:f2:7e:fb:5d:45: b5:b3:43:e8:ce:6b:e4:48:06:22:60:02:60:a2:4f:ea:8c:9a: 96:23:77:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvP1i7aErCcu/rafovIkRhwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMzgwYzU1YzQ2MTE3ZjlkMGY5Zjg5Zjg4NWZkOGFjNTg0 YzcyZTcwHhcNMjYwMTE4MDY0MTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjgyYjA2MzQ0MmY1MjcwNjJmYWQwYzM2ZDMxZmY3MGJiZjZkY2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qgz1JeKtcF6RZsl8pUVC0Udk1/s Vsx74aBxoSfstId0vH+7Ia/4j1uNJdfxPBuO7bQoht4PGm/+Hjn2/K8rhBixpNf+ yzp3vavBjtdzGGyoux+EzanAlfAMr4s9e22i6BZmh0SJAhUsFk4JFW1pvlomjvdx Nxnkix15AVKaTXCFnaRQRr2btsXypxLu6UEYVVX716nsjB28AqvOmo4mJ4JrV34S USjGMDwd/z/+NgK4OClmYXh1CUWoRYWH/Jv1Ai5UYc42D6uHNkaZ1j2q8Aws+ZOW mYolS3Y4NVq4i2DKxym3DBkYodoPYvsZZzYh2czNPFh6drpmXRwB2EidDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIaCsGNEL1JwYvrQw20x/3C79tzWMB8GA1UdIwQY MBaAFJo4DFXEYRf50Pn4n4hf2KxYTHLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wZjI2ODItOTg3OC00MTZiLTk2NWMt NDBhYWM2Mzk2Nzc3LzEvaG9Ld1kwUXZVbkJpLXRERGJUSF9jTHYyM05ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8wZjI2ODItOTg3OC00MTZiLTk2NWMtNDBhYWM2Mzk2Nzc3 LzEvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWrOMA0G CSqGSIb3DQEBCwUAA4IBAQBfG+rgwNdyR5li4WLGbUq+HEeNrmlHx5p4U03uSP6w 56G7q143xz54FonNBylBFN8CjsHkp+H6gnhAfi2aGAZB9YFRqxKhclcGRMJQdChH KIide0fLWtA8ZZS0lSl9Ecyh7TYfsWDfgKJbuX8yprdbUm09j4Wemz3lVw+DHFFW c7zmESzrltGZtdjBRgK2DbBH3ZM3RRIU0zQJCl66J0fDQifpTDQ1InVCYY5Tde31 LhHToKQgoLjqUcTqv308uD1ycoUJFcsSaqqF2SSqNoq775UWDwLdGy8Dkpi4KIT0 /Ttf80+08n77XUW1s0PozmvkSAYiYAJgok/qjJqWI3ck -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:43 2026 by rpki-client