This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/hOkQmF7Lw2-BvISqqDLTuUkkq5w.roa File: hOkQmF7Lw2-BvISqqDLTuUkkq5w.roa (raw, json) Hash identifier: NgSV6JkTSImeWP6gCSVbJkpIH9ZghYaqVNR51xDKH60= Subject key identifier: 84:E9:10:98:5E:CB:C3:6F:81:BC:84:AA:A8:32:D3:B9:49:24:AB:9C Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Certificate serial: 019B77C7735BF538C058AE272CFF68CD8F84 Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/hOkQmF7Lw2-BvISqqDLTuUkkq5w.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209316 IP address blocks: 194.92.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:73:5b:f5:38:c0:58:ae:27:2c:ff:68:cd:8f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84e910985ecbc36f81bc84aaa832d3b94924ab9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:98:20:a5:c3:63:0f:53:b8:23:84:81:ae: aa:46:1c:a2:91:fb:b4:c7:76:13:36:ae:8e:9a:c2: a4:52:ae:6a:68:2c:fc:4c:72:27:36:94:72:32:8f: 45:92:d2:31:f0:83:ee:af:a2:c0:a1:44:9d:4b:f6: d6:f9:c6:ad:1e:5e:74:75:a4:8e:3e:d3:41:e9:20: dd:a2:b8:6a:ee:4e:97:f0:1e:a5:ed:20:0c:44:3a: 6f:56:d4:45:72:5d:b9:82:21:34:00:27:c1:4a:60: b6:d2:95:fb:8b:39:9c:5b:cc:70:fb:2e:bd:50:ef: e8:29:64:61:c1:e5:9c:aa:40:e2:87:0d:76:2a:dc: 1d:96:46:89:ee:00:2a:6f:d3:0b:3d:5a:7d:3a:b5: bf:55:59:58:f5:d2:e9:71:c0:59:45:19:7a:a4:a3: 21:9d:50:41:56:ae:c4:a7:61:6d:e9:10:35:43:99: ec:ab:d6:62:09:e3:33:af:42:00:ab:67:a8:3e:e3: 64:75:a5:da:e7:a7:ea:2d:f0:4e:19:39:5d:b7:2a: 68:b0:fe:91:a1:48:1c:3d:df:e6:48:c4:5f:02:aa: 66:a3:7a:3f:cf:ca:04:57:ed:60:b2:60:fe:0d:58: ad:03:3d:07:33:b5:fc:9d:9a:d7:36:e8:91:1e:03: cf:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E9:10:98:5E:CB:C3:6F:81:BC:84:AA:A8:32:D3:B9:49:24:AB:9C X509v3 Authority Key Identifier: keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/hOkQmF7Lw2-BvISqqDLTuUkkq5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.92.92.0/22 Signature Algorithm: sha256WithRSAEncryption 46:9a:15:85:ac:a8:89:f2:ff:f0:9f:e3:d2:12:a2:00:62:70: 27:4f:d3:78:0f:93:a3:13:56:b1:75:9d:fd:ad:22:0a:af:03: 5c:5b:57:33:96:97:db:75:f5:f6:4b:49:3b:0d:97:d9:48:d8: 25:05:9d:9b:29:f1:4f:94:c7:f3:ed:2e:6f:59:23:73:3c:18: 9c:93:c2:4c:31:7c:ce:50:ef:6c:a6:17:6f:93:ec:cc:25:b5: cf:db:03:f7:10:53:27:7a:f9:4d:0d:f8:a6:ef:a8:e4:b7:a7: bb:67:83:39:c9:74:2d:bc:6d:56:2d:71:c3:db:b9:41:fb:ad: 3b:17:62:c7:2b:60:56:7a:73:98:8e:d7:a8:13:6b:99:9a:8d: d6:14:2f:06:ac:39:bc:68:e7:d0:e0:3e:94:bd:ca:cf:c1:14: dd:09:03:01:2b:0a:4e:5e:71:58:6a:ed:ed:93:a4:f1:17:02: 50:7d:da:13:83:b8:44:93:4b:3d:f5:d1:f5:50:af:a7:e9:42: c0:19:3d:c1:9c:a2:18:99:f3:86:d1:a9:d3:4f:0e:11:ba:80: 10:f4:d6:18:e9:68:1b:c9:49:3e:f4:ad:c0:d9:73:56:69:a6: fa:d2:c2:a7:23:5f:12:8c:ee:75:30:35:46:36:b3:a4:93:be: e8:57:2b:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3Nb9TjAWK4nLP9ozY+EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOWU5Njk2ZGNjZjZjMWE0MzIwOTA0MDg1MTRhZWNkYzNm NjA3MzkwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGU5MTA5ODVlY2JjMzZmODFiYzg0YWFhODMyZDNiOTQ5MjRhYjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYCYIKXDYw9TuCOEga6qRhyikfu0 x3YTNq6OmsKkUq5qaCz8THInNpRyMo9FktIx8IPur6LAoUSdS/bW+catHl50daSO PtNB6SDdorhq7k6X8B6l7SAMRDpvVtRFcl25giE0ACfBSmC20pX7izmcW8xw+y69 UO/oKWRhweWcqkDihw12KtwdlkaJ7gAqb9MLPVp9OrW/VVlY9dLpccBZRRl6pKMh nVBBVq7Ep2Ft6RA1Q5nsq9ZiCeMzr0IAq2eoPuNkdaXa56fqLfBOGTldtyposP6R oUgcPd/mSMRfAqpmo3o/z8oEV+1gsmD+DVitAz0HM7X8nZrXNuiRHgPPWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFITpEJhey8NvgbyEqqgy07lJJKucMB8GA1UdIwQY MBaAFG+elpbcz2waQyCQQIUUrs3D9gc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjIt YmFmNGUwYjRhNjllLzEvaE9rUW1GN0x3Mi1CdklTcXFETFR1VWtrcTV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjItYmFmNGUwYjRhNjll LzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwlxcMA0G CSqGSIb3DQEBCwUAA4IBAQBGmhWFrKiJ8v/wn+PSEqIAYnAnT9N4D5OjE1axdZ39 rSIKrwNcW1czlpfbdfX2S0k7DZfZSNglBZ2bKfFPlMfz7S5vWSNzPBick8JMMXzO UO9sphdvk+zMJbXP2wP3EFMnevlNDfim76jkt6e7Z4M5yXQtvG1WLXHD27lB+607 F2LHK2BWenOYjteoE2uZmo3WFC8GrDm8aOfQ4D6UvcrPwRTdCQMBKwpOXnFYau3t k6TxFwJQfdoTg7hEk0s99dH1UK+n6ULAGT3BnKIYmfOG0anTTw4RuoAQ9NYY6Wgb yUk+9K3A2XNWaab60sKnI18SjO51MDVGNrOkk77oVyuD -----END CERTIFICATE-----Generated at Mon Jan 26 14:08:16 2026 by rpki-client