This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/hpQK8Ct69QedB3MH-Zduh7fwfI0.roa File: hpQK8Ct69QedB3MH-Zduh7fwfI0.roa (raw, json) Hash identifier: tMKgnvO9EBwmVGsim8vR529voYsTaPvcU9t25lxh9c8= Subject key identifier: 86:94:0A:F0:2B:7A:F5:07:9D:07:73:07:F9:97:6E:87:B7:F0:7C:8D Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 019B7C804CDE65274130406E6183991BE8EE Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/hpQK8Ct69QedB3MH-Zduh7fwfI0.roa Signing time: Fri 02 Jan 2026 02:19:01 +0000 ROA not before: Fri 02 Jan 2026 02:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57142 IP address blocks: 91.230.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:4c:de:65:27:41:30:40:6e:61:83:99:1b:e8:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Jan 2 02:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86940af02b7af5079d077307f9976e87b7f07c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:21:1b:50:ba:2a:f6:21:02:19:70:57:91:d3: 63:5b:a5:2b:30:1d:dd:d4:54:f4:6a:f2:90:13:ce: 7d:6a:7e:5d:a9:b2:82:51:58:6b:eb:4c:1e:78:81: f8:74:6f:78:ba:2b:cd:9d:63:fd:af:82:95:85:af: 09:ba:c6:b7:02:43:0d:f4:1a:3e:5b:3d:83:b9:f0: eb:31:af:7e:bb:23:09:1b:60:c8:29:ab:84:75:d1: 66:63:a8:c3:46:05:52:3d:13:46:7b:4c:d1:90:c5: 82:c4:c3:14:ab:da:fe:bc:61:03:64:79:a7:ad:1f: 40:18:0b:4e:3b:0a:dc:82:76:15:00:2d:45:1e:25: 91:e7:ee:4e:99:5d:a9:09:88:96:33:4d:1d:b9:d9: 83:df:13:be:20:9c:a4:d0:c3:18:81:d0:e1:51:e5: a8:3c:48:1b:74:17:75:ad:73:27:cf:0a:1b:5a:b3: 48:b4:30:a1:e3:c1:da:1a:37:c2:71:b0:32:4f:fc: 46:15:c4:6b:a4:95:1e:ee:fd:2e:c0:83:f0:39:91: fe:bf:3e:60:75:a0:d4:16:57:73:e8:96:77:60:07: 12:11:75:a6:88:03:e4:b0:fb:57:42:20:84:1f:8c: 3f:ab:2d:92:06:7a:ac:14:9c:20:9c:4b:09:f4:19: ea:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:94:0A:F0:2B:7A:F5:07:9D:07:73:07:F9:97:6E:87:B7:F0:7C:8D X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/hpQK8Ct69QedB3MH-Zduh7fwfI0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.247.0/24 Signature Algorithm: sha256WithRSAEncryption 04:ef:aa:78:53:03:bb:a7:ec:59:5b:82:48:81:30:b5:64:18: a8:53:a1:54:c7:4d:5a:8f:e0:fe:b5:c3:65:4a:3d:de:07:32: fb:47:32:5e:73:f2:8c:46:00:11:0f:35:fc:0b:04:eb:0c:05: ed:2c:c4:7e:13:7c:ff:73:db:e2:ea:64:2b:af:75:f2:43:15: 65:f4:ca:38:8d:7c:73:c4:90:9b:c9:1c:ce:28:69:9d:c2:e5: bc:df:72:6d:81:24:c2:60:45:fb:c4:22:b7:d8:2c:13:25:e3: 09:1a:71:1c:a8:49:c2:c9:c2:c8:85:94:07:94:f7:a5:b1:83: 1c:f8:64:02:11:22:e1:a3:1f:b2:f9:c3:51:90:f0:0a:b7:3c: eb:6c:8a:19:2c:86:97:4e:6c:e0:1e:cb:d2:d2:f1:4b:8e:ce: 0e:a1:ea:10:90:83:e5:f8:35:9b:da:1f:db:26:8b:4e:40:8e: 09:7c:56:5c:58:97:7e:03:9c:9f:98:d1:2d:46:75:6d:e6:32: cf:f0:b7:b8:3e:bd:bd:3f:33:be:42:99:76:fb:c8:db:b9:0d: f5:48:95:a5:7f:99:5c:48:ec:34:2f:24:96:ca:6d:34:7b:f2: 2c:59:bc:96:b1:0b:5e:39:ef:3a:30:df:86:7f:ef:ef:1f:d7: 79:5a:0e:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gEzeZSdBMEBuYYOZG+juMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjYwMTAyMDIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Njk0MGFmMDJiN2FmNTA3OWQwNzczMDdmOTk3NmU4N2I3ZjA3YzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCEbULoq9iECGXBXkdNjW6UrMB3d 1FT0avKQE859an5dqbKCUVhr60weeIH4dG94uivNnWP9r4KVha8Jusa3AkMN9Bo+ Wz2DufDrMa9+uyMJG2DIKauEddFmY6jDRgVSPRNGe0zRkMWCxMMUq9r+vGEDZHmn rR9AGAtOOwrcgnYVAC1FHiWR5+5OmV2pCYiWM00dudmD3xO+IJyk0MMYgdDhUeWo PEgbdBd1rXMnzwobWrNItDCh48HaGjfCcbAyT/xGFcRrpJUe7v0uwIPwOZH+vz5g daDUFldz6JZ3YAcSEXWmiAPksPtXQiCEH4w/qy2SBnqsFJwgnEsJ9BnqmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIaUCvArevUHnQdzB/mXboe38HyNMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvaHBRSzhDdDY5UWVkQjNNSC1aZHVoN2Z3ZkkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+b3MA0G CSqGSIb3DQEBCwUAA4IBAQAE76p4UwO7p+xZW4JIgTC1ZBioU6FUx01aj+D+tcNl Sj3eBzL7RzJec/KMRgARDzX8CwTrDAXtLMR+E3z/c9vi6mQrr3XyQxVl9Mo4jXxz xJCbyRzOKGmdwuW833JtgSTCYEX7xCK32CwTJeMJGnEcqEnCycLIhZQHlPelsYMc +GQCESLhox+y+cNRkPAKtzzrbIoZLIaXTmzgHsvS0vFLjs4OoeoQkIPl+DWb2h/b JotOQI4JfFZcWJd+A5yfmNEtRnVt5jLP8Le4Pr29PzO+Qpl2+8jbuQ31SJWlf5lc SOw0LySWym00e/IsWbyWsQteOe86MN+Gf+/vH9d5Wg7o -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:49 2026 by rpki-client