This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/HOQgDGpmkekCim3x5F8I9zAUeqI.roa File: HOQgDGpmkekCim3x5F8I9zAUeqI.roa (raw, json) Hash identifier: APa++J/yausGprAIdzd9v9TnFhQUsORY2w2EDIGBbfg= Subject key identifier: 1C:E4:20:0C:6A:66:91:E9:02:8A:6D:F1:E4:5F:08:F7:30:14:7A:A2 Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Certificate serial: 019B7EA7450B0D3A878864A6AE8FF051A41E Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/HOQgDGpmkekCim3x5F8I9zAUeqI.roa Signing time: Fri 02 Jan 2026 12:20:49 +0000 ROA not before: Fri 02 Jan 2026 12:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47902 IP address blocks: 31.223.240.0/20 maxlen: 24 46.19.232.0/21 maxlen: 24 46.254.232.0/21 maxlen: 24 82.193.32.0/19 maxlen: 24 93.189.184.0/21 maxlen: 24 185.100.108.0/22 maxlen: 24 185.202.184.0/22 maxlen: 24 2a02:9a8::/29 maxlen: 48 2a03:6800::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:45:0b:0d:3a:87:88:64:a6:ae:8f:f0:51:a4:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Validity Not Before: Jan 2 12:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ce4200c6a6691e9028a6df1e45f08f730147aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c1:91:a2:c7:58:10:78:9a:d0:55:69:d8:f5: 34:85:f2:d6:27:38:59:89:f4:2e:c4:2d:5d:19:84: d1:a8:81:2d:38:1f:59:f4:4d:e8:57:78:dd:75:db: bb:c5:66:54:52:a4:49:ee:06:1c:9c:b8:eb:3b:5c: d8:fd:b9:23:40:6a:06:00:ca:ef:8c:dc:49:c1:32: 3f:6f:91:df:58:48:b0:e4:2f:ec:c7:2a:17:74:43: 39:aa:f5:d7:94:2c:7f:86:1f:f8:b7:3e:7f:33:5a: 53:66:ff:09:48:66:a0:17:ab:92:36:b1:88:57:6c: d1:2d:ab:58:82:4a:28:04:96:9b:a7:80:45:0a:28: 3e:e1:34:78:bc:5d:6a:4c:9b:9d:dd:ec:74:1b:10: 8d:64:c1:b9:fa:11:fc:b4:27:7b:c3:aa:8b:e6:e9: 30:fe:fc:a0:ec:31:4e:d6:fa:ba:14:0a:03:29:ef: d0:d1:d1:1c:b9:76:19:88:64:b6:21:8f:34:80:6a: be:5c:dd:56:13:9a:c1:18:9f:9f:c4:f7:9b:2c:cc: d8:8d:1a:10:58:23:c9:6b:be:dd:74:52:00:02:a6: d4:d9:77:11:7d:7a:38:11:b6:a4:fc:90:17:9e:b5: 15:09:d7:6e:8c:2d:1a:be:ae:2d:16:96:4d:d1:52: 1e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E4:20:0C:6A:66:91:E9:02:8A:6D:F1:E4:5F:08:F7:30:14:7A:A2 X509v3 Authority Key Identifier: keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/HOQgDGpmkekCim3x5F8I9zAUeqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.223.240.0/20 46.19.232.0/21 46.254.232.0/21 82.193.32.0/19 93.189.184.0/21 185.100.108.0/22 185.202.184.0/22 IPv6: 2a02:9a8::/29 2a03:6800::/29 Signature Algorithm: sha256WithRSAEncryption 68:9b:0a:bd:e6:c5:af:dc:3f:29:9a:47:5e:d9:04:16:76:ae: 7c:33:ec:d4:2b:7b:65:c2:89:8b:c5:b9:b4:81:cc:c2:d5:7d: 69:6e:a7:c1:f1:21:99:de:3d:64:9f:c8:fd:13:c8:c5:cb:3e: 03:0b:99:1b:ce:13:a4:ab:e9:57:3f:f6:4d:2b:d9:d5:9f:14: 92:e1:c2:49:e8:3b:c7:4d:c4:7a:85:13:d6:b9:4c:34:13:f4: ad:03:a6:14:e5:60:8d:c6:54:ac:40:18:5a:c3:a3:a7:32:b1: e8:70:da:5b:08:e4:ec:6e:ce:3e:a0:92:c7:ad:c3:4e:a7:8a: 96:a3:97:e7:45:41:84:28:b6:7c:e2:a1:1e:cd:27:0b:77:34: 5c:19:41:d1:18:21:69:af:cf:28:fc:3c:a7:d7:35:06:5a:61: 21:3c:e9:ff:24:de:01:fa:86:eb:1a:23:50:8d:29:91:05:50: be:96:98:29:b3:ec:c3:57:37:6c:bf:a7:e2:9b:9b:03:36:a0: 67:c7:2f:e2:22:95:8e:3e:3f:60:68:a1:57:ec:0c:8c:cb:24: 5a:55:c0:43:d1:92:ac:ef:ff:e3:39:e8:4c:8b:02:07:93:f6: be:e8:9c:6a:39:66:5e:92:bb:97:a1:bb:7e:c4:cb:ce:97:f3: 35:5e:9e:c0 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt+p0ULDTqHiGSmro/wUaQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1 NTYwY2MwHhcNMjYwMTAyMTIyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2U0MjAwYzZhNjY5MWU5MDI4YTZkZjFlNDVmMDhmNzMwMTQ3YWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8GRosdYEHia0FVp2PU0hfLWJzhZ ifQuxC1dGYTRqIEtOB9Z9E3oV3jdddu7xWZUUqRJ7gYcnLjrO1zY/bkjQGoGAMrv jNxJwTI/b5HfWEiw5C/sxyoXdEM5qvXXlCx/hh/4tz5/M1pTZv8JSGagF6uSNrGI V2zRLatYgkooBJabp4BFCig+4TR4vF1qTJud3ex0GxCNZMG5+hH8tCd7w6qL5ukw /vyg7DFO1vq6FAoDKe/Q0dEcuXYZiGS2IY80gGq+XN1WE5rBGJ+fxPebLMzYjRoQ WCPJa77ddFIAAqbU2XcRfXo4Ebak/JAXnrUVCddujC0avq4tFpZN0VIePQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFBzkIAxqZpHpAopt8eRfCPcwFHqiMB8GA1UdIwQY MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct MWNmMTViMmJhN2JlLzEvSE9RZ0RHcG1rZWtDaW0zeDVGOEk5ekFVZXFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQEH9/wAwQD LhPoAwQDLv7oAwQFUsEgAwQDXb24AwQCuWRsAwQCucq4MBQEAgACMA4DBQMqAgmo AwUDKgNoADANBgkqhkiG9w0BAQsFAAOCAQEAaJsKvebFr9w/KZpHXtkEFnaufDPs 1Ct7ZcKJi8W5tIHMwtV9aW6nwfEhmd49ZJ/I/RPIxcs+AwuZG84TpKvpVz/2TSvZ 1Z8UkuHCSeg7x03EeoUT1rlMNBP0rQOmFOVgjcZUrEAYWsOjpzKx6HDaWwjk7G7O PqCSx63DTqeKlqOX50VBhCi2fOKhHs0nC3c0XBlB0Rghaa/PKPw8p9c1BlphITzp /yTeAfqG6xojUI0pkQVQvpaYKbPsw1c3bL+n4pubAzagZ8cv4iKVjj4/YGihV+wM jMskWlXAQ9GSrO//4znoTIsCB5P2vuicajlmXpK7l6G7fsTLzpfzNV6ewA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:57:06 2026 by rpki-client