This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/HgjQlaKjOcxyBGYejwW2nEs1AV4.roa File: HgjQlaKjOcxyBGYejwW2nEs1AV4.roa (raw, json) Hash identifier: A/JVdLkAtd7xSgRJY34UCglbvZrgY4rTBx9M0XvHris= Subject key identifier: 1E:08:D0:95:A2:A3:39:CC:72:04:66:1E:8F:05:B6:9C:4B:35:01:5E Certificate issuer: /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3 Certificate serial: 019B7BA3FEF1A52D5F8CB1E454AE20CA4916 Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/HgjQlaKjOcxyBGYejwW2nEs1AV4.roa Signing time: Thu 01 Jan 2026 22:18:23 +0000 ROA not before: Thu 01 Jan 2026 22:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2119 IP address blocks: 194.246.8.0/23 maxlen: 23 194.246.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:fe:f1:a5:2d:5f:8c:b1:e4:54:ae:20:ca:49:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3 Validity Not Before: Jan 1 22:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e08d095a2a339cc7204661e8f05b69c4b35015e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fa:a8:5c:6e:58:30:4b:0f:a1:ae:25:91:ed: 34:cd:b6:b7:93:c0:d4:ca:8c:27:98:00:fd:46:f0: 01:33:2a:12:10:94:1e:23:72:9d:b6:9e:59:3e:bb: 63:df:28:ac:8e:46:e8:a4:93:3f:89:31:7f:e1:2d: 15:dc:27:a8:9d:16:61:e0:47:fa:fd:ee:30:62:13: d5:2d:f9:90:d9:50:f0:e9:09:e5:c6:c9:e7:8d:01: 02:cf:d5:a5:be:4f:93:f5:74:b9:e2:26:d1:8d:4c: 0a:c9:df:b3:60:16:0c:55:c5:f2:35:87:78:24:d2: 56:d6:1d:e9:ca:09:99:88:7b:df:84:05:ad:0a:dd: fa:01:e6:61:f4:a3:33:d5:f0:a1:ae:18:f8:4c:65: 01:1b:56:21:e2:66:31:fe:4b:a8:9d:b6:c7:a4:3d: 31:d4:93:57:c1:c3:dc:31:5d:0e:cd:c2:0c:51:f7: bc:8f:87:b6:20:2c:9a:70:6a:57:b8:d1:bc:9e:36: f1:40:ff:71:6d:23:c3:c7:5f:0f:03:12:8a:9d:3a: 0e:b2:77:0c:24:84:78:8f:1c:5d:d9:4d:6f:dd:c9: 8c:e2:a3:12:2e:b2:c6:e9:87:e4:08:9b:73:09:58: 3c:47:42:37:44:42:ae:7b:bd:2f:c7:80:b4:6f:d0: 5e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:08:D0:95:A2:A3:39:CC:72:04:66:1E:8F:05:B6:9C:4B:35:01:5E X509v3 Authority Key Identifier: keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/HgjQlaKjOcxyBGYejwW2nEs1AV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.246.8.0/23 194.246.14.0/23 Signature Algorithm: sha256WithRSAEncryption 96:e7:33:50:de:e1:7b:02:91:a8:aa:f6:d1:2c:5d:a2:a0:4d: 4c:20:19:df:1f:93:0a:04:50:91:a3:c3:bd:bf:0f:b1:0d:7e: fc:90:55:5d:c3:ca:73:d4:7b:bb:11:1b:73:6b:4d:a2:05:73: c0:16:96:9a:27:4d:d4:1a:37:be:95:f6:8f:9f:f2:90:e8:45: 65:18:d3:ab:d8:3a:4c:97:38:c9:5e:09:c2:25:7a:ed:0c:b4: 4b:5a:eb:60:7f:34:78:f4:8a:99:e3:bc:b2:50:47:83:48:3b: 62:ba:1c:14:4c:df:7b:bb:b0:60:81:66:4f:6f:4e:17:ec:36: 41:f9:df:b4:d2:bf:78:b8:e2:b7:f6:55:72:79:eb:9d:98:d3: 2d:b6:03:cf:23:40:47:04:fa:dc:cf:13:a9:b5:68:fb:06:d0: bd:ff:cb:21:9c:ae:8a:0d:ae:75:3d:61:d5:46:bb:f1:bc:96: 2c:cd:ab:13:b4:24:bd:0c:8d:47:d8:ed:17:2a:f3:69:cb:89: 29:f3:55:c6:b2:33:2b:66:0e:34:46:10:33:9d:dc:9f:df:8a: a7:6a:7a:88:b0:cc:18:43:c9:db:46:69:72:c1:f1:f3:d8:cf: b9:7e:c9:39:bf:af:54:9b:50:18:54:8b:44:da:20:81:75:da: e6:72:fc:54 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o/7xpS1fjLHkVK4gykkWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTZjZWNmZmQ5YjhiYmExOGQ0NzRlN2IzOTkzZTBhMWQx NGRiYjMwHhcNMjYwMTAxMjIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTA4ZDA5NWEyYTMzOWNjNzIwNDY2MWU4ZjA1YjY5YzRiMzUwMTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/qoXG5YMEsPoa4lke00zba3k8DU yownmAD9RvABMyoSEJQeI3Kdtp5ZPrtj3yisjkbopJM/iTF/4S0V3CeonRZh4Ef6 /e4wYhPVLfmQ2VDw6QnlxsnnjQECz9Wlvk+T9XS54ibRjUwKyd+zYBYMVcXyNYd4 JNJW1h3pygmZiHvfhAWtCt36AeZh9KMz1fChrhj4TGUBG1Yh4mYx/kuonbbHpD0x 1JNXwcPcMV0OzcIMUfe8j4e2ICyacGpXuNG8njbxQP9xbSPDx18PAxKKnToOsncM JIR4jxxd2U1v3cmM4qMSLrLG6YfkCJtzCVg8R0I3REKue70vx4C0b9Be3wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB4I0JWioznMcgRmHo8FtpxLNQFeMB8GA1UdIwQY MBaAFD7mzs/9m4u6GNR057OZPgodFNuzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNjFjYWEtMjUwMC00Mzg4LWE5ZmEt NzMyNDkxMzk3NWQ1LzEvSGdqUWxhS2pPY3h5QkdZZWp3VzJuRXMxQVY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lNjFjYWEtMjUwMC00Mzg4LWE5ZmEtNzMyNDkxMzk3NWQ1 LzEvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwvYIAwQB wvYOMA0GCSqGSIb3DQEBCwUAA4IBAQCW5zNQ3uF7ApGoqvbRLF2ioE1MIBnfH5MK BFCRo8O9vw+xDX78kFVdw8pz1Hu7ERtza02iBXPAFpaaJ03UGje+lfaPn/KQ6EVl GNOr2DpMlzjJXgnCJXrtDLRLWutgfzR49IqZ47yyUEeDSDtiuhwUTN97u7BggWZP b04X7DZB+d+00r94uOK39lVyeeudmNMttgPPI0BHBPrczxOptWj7BtC9/8shnK6K Da51PWHVRrvxvJYszasTtCS9DI1H2O0XKvNpy4kp81XGsjMrZg40RhAzndyf34qn anqIsMwYQ8nbRmlywfHz2M+5fsk5v69Um1AYVItE2iCBddrmcvxU -----END CERTIFICATE-----Generated at Sun Jan 25 16:39:31 2026 by rpki-client