This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/hcmTopOGcUOsiCqEYzcUlZ5xjQY.roa File: hcmTopOGcUOsiCqEYzcUlZ5xjQY.roa (raw, json) Hash identifier: HVgRQP2yNGzef8LGwlA7gXHy01Gc/bnVtBhxAcSZ6Eg= Subject key identifier: 85:C9:93:A2:93:86:71:43:AC:88:2A:84:63:37:14:95:9E:71:8D:06 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C777738D4883D890F1CE0AC723B6AF Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/hcmTopOGcUOsiCqEYzcUlZ5xjQY.roa Signing time: Thu 01 Jan 2026 04:18:39 +0000 ROA not before: Thu 01 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49664 IP address blocks: 82.177.48.0/24 maxlen: 24 88.220.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:77:73:8d:48:83:d8:90:f1:ce:0a:c7:23:b6:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85c993a293867143ac882a84633714959e718d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:05:fb:36:a4:d4:6a:2f:f8:e2:3f:44:dd:f6: 78:6c:43:d8:9c:aa:bd:b2:81:56:89:41:89:07:b1: 80:c8:9a:82:fe:ea:d0:0c:ed:33:8f:2c:88:14:b1: 49:15:f8:a7:8d:4b:ad:8a:d9:7e:94:b6:23:c3:c2: be:9f:22:7b:6f:07:11:6b:b0:92:6a:91:56:b8:c0: 6c:78:5f:e3:39:20:d2:41:a9:89:0b:21:24:76:41: c3:7d:e9:c9:34:cf:8c:54:10:7a:e8:49:21:7c:53: c2:b6:65:2a:27:27:21:04:9c:b6:12:db:59:3d:7b: 41:c9:f5:18:40:84:36:6d:5b:69:d8:f6:60:c0:f9: 08:6a:34:95:ef:46:11:8c:24:bb:45:2f:de:67:a2: 41:cb:de:d1:be:0f:9c:f3:7a:80:a8:d6:24:4c:d7: 91:9f:d7:fa:b7:a3:37:72:44:34:54:bf:25:a3:35: fb:0f:f6:62:3b:ec:a0:0f:54:ff:7e:c3:35:e8:a0: ce:63:86:fe:3c:e9:5f:28:87:23:eb:a6:f0:c1:7c: 80:93:d9:e4:3f:b0:d1:7e:d0:82:96:ed:5e:37:7e: 45:34:04:36:8e:ab:e5:51:af:56:9f:96:2e:9c:8b: e7:a1:52:d0:53:f5:9d:d7:f6:5f:4f:f5:ff:c8:9d: 91:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C9:93:A2:93:86:71:43:AC:88:2A:84:63:37:14:95:9E:71:8D:06 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/hcmTopOGcUOsiCqEYzcUlZ5xjQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.177.48.0/24 88.220.107.0/24 Signature Algorithm: sha256WithRSAEncryption 35:c5:46:06:8e:69:b1:10:f1:64:0b:ef:c1:7f:6e:e8:6e:5f: 79:0d:21:8e:34:5a:9f:b1:4f:40:6f:8e:24:63:0c:5d:69:0c: f0:9a:9a:a6:36:cc:79:b9:e3:cf:a0:29:21:3d:fe:be:c5:50: 42:5e:7e:5f:36:27:6f:a6:c9:b7:67:db:e2:29:39:41:e5:71: dc:b5:a3:80:12:cd:67:41:c1:0d:bf:82:1e:95:8c:ed:a5:71: 94:2e:82:02:9f:fe:ad:6f:0a:a5:37:f9:a7:a4:51:cd:75:0b: 04:59:a9:aa:72:c7:2c:97:ff:7d:5c:36:2d:ae:94:61:a6:65: 26:36:4d:d2:a3:ea:67:b6:b0:59:6a:c8:10:5d:90:c5:42:4e: 9e:fb:1e:de:9b:6b:32:c0:fc:62:4e:91:0c:7b:14:8a:b9:29: c6:98:a4:91:f4:b6:a6:56:1b:15:e0:37:db:e8:c1:38:80:73: fe:58:fc:80:f5:9b:96:bb:52:26:5a:49:ac:bf:62:e0:0c:01: 92:bb:48:d2:55:5a:3c:5a:70:ae:02:e6:11:62:69:14:04:30: d0:76:f8:8b:f0:3b:12:98:fb:77:21:67:93:95:a7:61:60:ff: c7:0b:a7:43:77:16:40:74:fe:78:34:b8:7e:76:69:4e:10:ff: 6e:64:6f:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x3dzjUiD2JDxzgrHI7avMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWM5OTNhMjkzODY3MTQzYWM4ODJhODQ2MzM3MTQ5NTllNzE4ZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgX7NqTUai/44j9E3fZ4bEPYnKq9 soFWiUGJB7GAyJqC/urQDO0zjyyIFLFJFfinjUutitl+lLYjw8K+nyJ7bwcRa7CS apFWuMBseF/jOSDSQamJCyEkdkHDfenJNM+MVBB66EkhfFPCtmUqJychBJy2EttZ PXtByfUYQIQ2bVtp2PZgwPkIajSV70YRjCS7RS/eZ6JBy97Rvg+c83qAqNYkTNeR n9f6t6M3ckQ0VL8lozX7D/ZiO+ygD1T/fsM16KDOY4b+POlfKIcj66bwwXyAk9nk P7DRftCClu1eN35FNAQ2jqvlUa9Wn5YunIvnoVLQU/Wd1/ZfT/X/yJ2RlwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIXJk6KThnFDrIgqhGM3FJWecY0GMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvaGNtVG9wT0djVU9zaUNxRVl6Y1VsWjV4alFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUrEwAwQA WNxrMA0GCSqGSIb3DQEBCwUAA4IBAQA1xUYGjmmxEPFkC+/Bf27obl95DSGONFqf sU9Ab44kYwxdaQzwmpqmNsx5uePPoCkhPf6+xVBCXn5fNidvpsm3Z9viKTlB5XHc taOAEs1nQcENv4IelYztpXGULoICn/6tbwqlN/mnpFHNdQsEWamqcscsl/99XDYt rpRhpmUmNk3So+pntrBZasgQXZDFQk6e+x7em2sywPxiTpEMexSKuSnGmKSR9Lam VhsV4Dfb6ME4gHP+WPyA9ZuWu1ImWkmsv2LgDAGSu0jSVVo8WnCuAuYRYmkUBDDQ dviL8DsSmPt3IWeTladhYP/HC6dDdxZAdP54NLh+dmlOEP9uZG/2 -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:38 2026 by rpki-client