This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/HD3Ku7wm-D2ZNqFQc0d3iaq3EpA.roa File: HD3Ku7wm-D2ZNqFQc0d3iaq3EpA.roa (raw, json) Hash identifier: aXoYi4sL26UfttU2AQRoMTdqaFswBst+yXFXy3bMFQI= Subject key identifier: 1C:3D:CA:BB:BC:26:F8:3D:99:36:A1:50:73:47:77:89:AA:B7:12:90 Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Certificate serial: 019B77C7729D3EC73694E4F7C426BAA059FA Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/HD3Ku7wm-D2ZNqFQc0d3iaq3EpA.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207684 IP address blocks: 194.92.64.0/21 maxlen: 21 194.92.72.0/23 maxlen: 23 2a0a:3a40:1001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:72:9d:3e:c7:36:94:e4:f7:c4:26:ba:a0:59:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c3dcabbbc26f83d9936a15073477789aab71290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c4:dc:f0:63:93:1b:12:92:15:ad:8d:83:f6: 4d:d7:f5:5d:a6:48:77:ac:8c:fe:e3:8e:1e:8f:ae: c1:ae:ba:02:41:7d:05:c6:f0:76:5c:fe:d0:fc:d0: b3:fe:b8:aa:8c:69:2e:9f:18:53:e5:04:f5:f0:4c: a7:1f:97:c0:94:05:fb:a2:5c:d2:ae:66:c3:b8:7b: 74:7f:24:55:92:88:06:71:cd:eb:cc:91:62:78:36: 32:dd:74:da:12:6e:ee:65:bb:c0:17:8a:b9:ae:cf: de:7f:2f:99:b1:80:f6:77:8d:cc:2d:21:ac:ab:85: 8e:47:b4:64:c2:e5:d4:fd:d7:34:8b:7f:b4:74:8e: 31:83:18:b3:84:f2:74:65:eb:13:cd:4b:e6:74:6d: f1:3d:e4:75:db:1c:a1:ba:67:23:9b:4c:eb:16:04: 71:4a:1c:5e:f4:62:81:8d:c6:07:c8:e1:bb:bb:57: 49:28:e6:ed:5f:89:77:95:7d:d8:a9:1a:73:d9:26: 71:40:c1:e0:2e:b9:84:5b:ee:dd:e5:6a:79:d5:26: 0c:3c:90:57:5c:bc:73:a1:66:9d:5b:5c:0c:d8:9f: 5a:d8:6f:5b:05:75:e3:de:0a:d6:c8:3b:ca:34:ba: 02:06:8c:9a:64:6f:1b:30:62:96:3e:35:44:fd:f2: 3d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3D:CA:BB:BC:26:F8:3D:99:36:A1:50:73:47:77:89:AA:B7:12:90 X509v3 Authority Key Identifier: keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/HD3Ku7wm-D2ZNqFQc0d3iaq3EpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.92.64.0-194.92.73.255 IPv6: 2a0a:3a40:1001::/48 Signature Algorithm: sha256WithRSAEncryption aa:00:d3:48:d9:c7:52:36:0e:a4:0c:25:79:8f:29:ec:05:79: 8a:96:3a:8b:ab:73:c6:11:53:3f:87:27:45:d8:b8:6a:0b:4c: fe:9d:e0:d0:3a:43:36:a2:b0:c5:85:02:37:7b:b3:10:b0:75: 9a:0f:2f:61:1b:0b:75:a8:26:86:0b:99:48:67:82:53:ec:93: 7c:dd:ef:0f:cb:e2:f3:d8:f6:91:1d:b0:6a:4f:cb:dd:53:fc: 04:a5:a4:45:be:14:f8:0b:93:9f:39:4e:23:c6:69:60:ea:f0: 68:1d:53:e2:8d:dc:f5:9d:d2:78:00:26:02:a8:d8:09:f8:fe: 16:81:6a:c2:7f:37:ba:b4:d0:67:fa:ba:1a:b9:55:29:4a:17: 66:6b:0d:84:f4:53:75:29:9f:33:fe:89:2a:50:a6:10:7d:a7: f2:fb:19:7f:01:e0:ad:50:65:f2:f1:75:3c:b3:46:c1:22:91: 2b:af:05:e7:f1:11:18:67:1f:44:0c:22:96:b1:e5:a4:fb:15: e3:d4:10:c3:8b:57:ae:8d:2a:a8:92:6d:79:ed:30:7b:6d:96: 1a:88:b8:68:0f:76:1e:b5:34:fa:1a:e6:fb:b2:26:ce:a8:4d: 00:e4:e4:83:67:a3:24:60:1c:ef:35:3e:f3:1d:74:d8:46:7d: 67:b6:c9:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3x3KdPsc2lOT3xCa6oFn6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOWU5Njk2ZGNjZjZjMWE0MzIwOTA0MDg1MTRhZWNkYzNm NjA3MzkwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzNkY2FiYmJjMjZmODNkOTkzNmExNTA3MzQ3Nzc4OWFhYjcxMjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcTc8GOTGxKSFa2Ng/ZN1/Vdpkh3 rIz+444ej67BrroCQX0FxvB2XP7Q/NCz/riqjGkunxhT5QT18EynH5fAlAX7olzS rmbDuHt0fyRVkogGcc3rzJFieDYy3XTaEm7uZbvAF4q5rs/efy+ZsYD2d43MLSGs q4WOR7RkwuXU/dc0i3+0dI4xgxizhPJ0ZesTzUvmdG3xPeR12xyhumcjm0zrFgRx Shxe9GKBjcYHyOG7u1dJKObtX4l3lX3YqRpz2SZxQMHgLrmEW+7d5Wp51SYMPJBX XLxzoWadW1wM2J9a2G9bBXXj3grWyDvKNLoCBoyaZG8bMGKWPjVE/fI9KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBw9yru8Jvg9mTahUHNHd4mqtxKQMB8GA1UdIwQY MBaAFG+elpbcz2waQyCQQIUUrs3D9gc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjIt YmFmNGUwYjRhNjllLzEvSEQzS3U3d20tRDJaTnFGUWMwZDNpYXEzRXBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjItYmFmNGUwYjRhNjll LzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAbCXEAD BAHCXEgwDwQCAAIwCQMHACoKOkAQATANBgkqhkiG9w0BAQsFAAOCAQEAqgDTSNnH UjYOpAwleY8p7AV5ipY6i6tzxhFTP4cnRdi4agtM/p3g0DpDNqKwxYUCN3uzELB1 mg8vYRsLdagmhguZSGeCU+yTfN3vD8vi89j2kR2wak/L3VP8BKWkRb4U+AuTnzlO I8ZpYOrwaB1T4o3c9Z3SeAAmAqjYCfj+FoFqwn83urTQZ/q6GrlVKUoXZmsNhPRT dSmfM/6JKlCmEH2n8vsZfwHgrVBl8vF1PLNGwSKRK68F5/ERGGcfRAwilrHlpPsV 49QQw4tXro0qqJJtee0we22WGoi4aA92HrU0+hrm+7ImzqhNAOTkg2ejJGAc7zU+ 8x102EZ9Z7bJ1Q== -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:59 2026 by rpki-client