This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/hOWBX1aqOOkBBDPmSf04HK0FDdQ.roa File: hOWBX1aqOOkBBDPmSf04HK0FDdQ.roa (raw, json) Hash identifier: TNZ6xI5xHtE38+sW0p4MVYqN1AjK+nGsdspXM65hmqg= Subject key identifier: 84:E5:81:5F:56:AA:38:E9:01:04:33:E6:49:FD:38:1C:AD:05:0D:D4 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 019B7C804E7F89C406C21EAD95AE7228EC3B Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/hOWBX1aqOOkBBDPmSf04HK0FDdQ.roa Signing time: Fri 02 Jan 2026 02:19:02 +0000 ROA not before: Fri 02 Jan 2026 02:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202613 IP address blocks: 91.230.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:4e:7f:89:c4:06:c2:1e:ad:95:ae:72:28:ec:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Jan 2 02:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84e5815f56aa38e9010433e649fd381cad050dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:22:4d:70:1d:36:c8:99:a8:95:30:88:a3:05: d4:d9:91:43:fa:ee:73:0f:05:60:c5:51:42:fe:50: 46:8c:3f:b5:4c:5f:7f:c9:6e:07:5f:b7:d4:0e:f8: 16:fa:b2:9c:d4:1a:85:88:c2:d1:0d:47:aa:5c:fa: c6:1b:39:0e:1b:1d:ce:54:33:b4:2e:de:66:b7:99: 83:22:a4:7e:8a:d9:9e:b6:37:c6:17:73:77:54:e4: 8e:83:17:e4:1d:b7:0c:19:f0:be:2f:46:9d:e3:32: 4c:66:d7:4d:9e:1f:ff:4d:7b:c3:7b:60:4c:e2:d4: 50:52:e3:c2:0f:1e:72:53:83:6d:23:9b:e0:5a:1d: fd:fd:57:59:6b:28:1d:cf:34:bd:41:35:94:c5:2a: 73:38:a8:c3:0a:b7:2f:54:89:9c:c8:a9:94:21:51: 23:91:2b:20:47:c9:76:a5:03:3d:1f:bb:f8:00:b1: 7e:a7:09:1e:ae:0b:c2:bd:30:a1:2e:66:8c:17:d5: f1:c3:62:8c:8a:55:7f:48:9c:9b:01:bd:64:a8:4c: da:a3:ad:62:1e:0c:92:39:70:b4:69:6f:43:9e:1a: 7c:0b:c2:b9:56:dc:2d:e0:e6:97:50:46:40:dd:a3: 58:51:73:e3:a2:a5:67:93:54:20:66:18:80:72:75: d7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E5:81:5F:56:AA:38:E9:01:04:33:E6:49:FD:38:1C:AD:05:0D:D4 X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/hOWBX1aqOOkBBDPmSf04HK0FDdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.247.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:6a:5e:80:8d:d9:6e:e6:76:9a:66:ac:9f:b5:54:40:93:7c: e6:f8:bd:78:e5:ae:80:fa:c0:5b:fb:47:38:8f:e7:3c:ae:de: 78:1c:0c:c4:32:e1:e0:9c:84:a1:0e:7a:5c:f4:1b:de:35:56: b8:0c:a0:f6:9b:ef:0c:d4:a7:a7:8f:8b:7b:b1:3b:86:15:10: 74:9e:30:5e:53:d8:61:7f:0c:92:9a:16:f8:a3:68:a0:66:96: 35:66:a0:b1:ff:62:0d:43:cd:be:c4:60:dc:8e:b0:3d:aa:08: 6b:c0:b6:db:06:e3:f2:97:6d:1e:ee:10:4a:e9:ce:59:90:65: 32:2e:0d:be:a6:cc:c2:80:19:63:50:5f:e1:eb:ff:e0:f3:c8: 6a:8d:7a:cf:4a:45:21:d3:bb:0c:00:81:2f:85:20:2f:1d:c2: 4b:8a:b0:88:88:d9:df:a6:fd:2e:7d:fb:a5:a6:74:f2:6b:95: aa:c2:8d:41:55:88:bd:b6:47:0a:ff:d1:02:b1:b8:45:5d:e4: 7a:4e:27:81:dc:0c:2b:73:67:98:79:3e:51:21:6c:3b:57:aa: df:0a:35:74:8c:7c:6e:d7:87:23:22:7e:9a:30:66:55:26:ee: 62:f2:47:8c:2e:fe:3c:17:4b:b4:24:5a:88:1f:13:e5:10:c1: cf:e7:2e:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gE5/icQGwh6tla5yKOw7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjYwMTAyMDIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGU1ODE1ZjU2YWEzOGU5MDEwNDMzZTY0OWZkMzgxY2FkMDUwZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iJNcB02yJmolTCIowXU2ZFD+u5z DwVgxVFC/lBGjD+1TF9/yW4HX7fUDvgW+rKc1BqFiMLRDUeqXPrGGzkOGx3OVDO0 Lt5mt5mDIqR+itmetjfGF3N3VOSOgxfkHbcMGfC+L0ad4zJMZtdNnh//TXvDe2BM 4tRQUuPCDx5yU4NtI5vgWh39/VdZaygdzzS9QTWUxSpzOKjDCrcvVImcyKmUIVEj kSsgR8l2pQM9H7v4ALF+pwkergvCvTChLmaMF9Xxw2KMilV/SJybAb1kqEzao61i HgySOXC0aW9Dnhp8C8K5Vtwt4OaXUEZA3aNYUXPjoqVnk1QgZhiAcnXXqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFITlgV9WqjjpAQQz5kn9OBytBQ3UMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvaE9XQlgxYXFPT2tCQkRQbVNmMDRISzBGRGRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+b3MA0G CSqGSIb3DQEBCwUAA4IBAQAfal6Ajdlu5naaZqyftVRAk3zm+L145a6A+sBb+0c4 j+c8rt54HAzEMuHgnIShDnpc9BveNVa4DKD2m+8M1Kenj4t7sTuGFRB0njBeU9hh fwySmhb4o2igZpY1ZqCx/2INQ82+xGDcjrA9qghrwLbbBuPyl20e7hBK6c5ZkGUy Lg2+pszCgBljUF/h6//g88hqjXrPSkUh07sMAIEvhSAvHcJLirCIiNnfpv0ufful pnTya5Wqwo1BVYi9tkcK/9ECsbhFXeR6TieB3Awrc2eYeT5RIWw7V6rfCjV0jHxu 14cjIn6aMGZVJu5i8keMLv48F0u0JFqIHxPlEMHP5y64 -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:49 2026 by rpki-client