This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/v4-hkrmpo-sqeCMeJ_vYE4rWpjo.roa File: v4-hkrmpo-sqeCMeJ_vYE4rWpjo.roa (raw, json) Hash identifier: 0SUNe2XwpLFI11Ihhq2d2WPppOz2Dt6w1G3PnhDPFVg= Subject key identifier: BF:8F:A1:92:B9:A9:A3:EB:2A:78:23:1E:27:FB:D8:13:8A:D6:A6:3A Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Certificate serial: 019BD8DC672AF46B9F430ADEF4166C0194B3 Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/v4-hkrmpo-sqeCMeJ_vYE4rWpjo.roa Signing time: Tue 20 Jan 2026 00:44:41 +0000 ROA not before: Tue 20 Jan 2026 00:44:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57269 IP address blocks: 86.127.224.0/19 maxlen: 19 188.26.192.0/19 maxlen: 19 188.26.192.0/21 maxlen: 21 188.26.200.0/21 maxlen: 21 188.26.208.0/21 maxlen: 21 188.26.216.0/21 maxlen: 21 188.26.218.0/24 maxlen: 24 194.55.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:dc:67:2a:f4:6b:9f:43:0a:de:f4:16:6c:01:94:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Validity Not Before: Jan 20 00:44:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf8fa192b9a9a3eb2a78231e27fbd8138ad6a63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6a:be:4f:13:45:a4:b7:7e:ed:4f:c3:56:05: 68:f3:70:74:08:35:2a:f4:25:98:96:24:d8:3c:9f: 55:7e:7b:5c:04:e6:d2:d6:13:2c:2f:ea:59:c2:96: 22:46:a8:cb:aa:0b:aa:1a:7b:fc:80:e0:ef:9b:42: ed:f6:13:eb:3d:84:db:4b:7e:7b:4a:15:68:94:7b: 8f:b5:82:4e:f2:42:94:dd:27:16:41:d7:e1:61:68: 49:bb:40:8c:b5:c6:37:6f:e6:11:3b:26:5c:9d:8b: 47:40:a8:47:d9:ea:f2:c6:90:c7:d9:af:03:98:99: 20:21:a7:38:3c:39:78:37:38:88:bd:8a:cf:64:15: c2:ad:ea:3b:61:81:09:37:9c:27:6f:a2:96:5c:4d: 8b:4e:64:2b:ba:eb:64:5f:16:fc:42:8c:a4:ac:b3: 91:7d:d5:01:2b:fc:9b:3f:f5:0d:d4:3a:8c:13:fd: dd:51:a7:cd:4c:0b:63:d0:72:84:da:42:8d:35:94: f0:9c:a3:e1:60:86:a6:00:31:3d:79:3b:0d:8f:e3: 6d:b3:7a:76:cf:75:3c:07:1c:88:f5:a5:a2:ec:80: 34:26:41:5b:e8:c5:38:6d:27:81:9c:52:51:80:18: 85:3c:91:dc:5c:51:a2:ff:bb:6d:d4:9c:b6:ab:e9: e7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8F:A1:92:B9:A9:A3:EB:2A:78:23:1E:27:FB:D8:13:8A:D6:A6:3A X509v3 Authority Key Identifier: keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/v4-hkrmpo-sqeCMeJ_vYE4rWpjo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.127.224.0/19 188.26.192.0/19 194.55.169.0/24 Signature Algorithm: sha256WithRSAEncryption 82:28:85:17:b2:c9:16:b2:96:72:b6:0d:30:f1:6b:e3:75:20: 90:70:28:ee:2b:45:05:4e:2e:5a:21:d5:73:fe:94:95:26:d8: a8:5d:25:64:59:fa:0d:16:b5:cb:a4:4e:96:c3:e6:fa:6e:e6: 84:b6:f6:e6:44:d7:3e:16:04:4d:18:38:81:e2:f5:10:89:a5: ff:eb:52:b8:19:32:3c:64:89:33:c7:f7:51:02:bf:b3:63:95: 3b:cb:4c:0f:6d:6c:08:ca:83:3d:7b:bf:18:74:f7:57:b9:b4: d6:85:56:ff:5d:0c:05:88:e7:bf:de:7f:ff:ef:1e:08:ca:1a: 44:76:01:61:c0:7e:0a:50:c8:e4:8a:67:23:81:33:2c:2f:34: 01:cf:1e:de:bd:1a:74:28:af:e7:ca:0d:d1:7f:10:f3:3e:9e: 6d:3b:4c:f3:92:f6:fe:52:76:8c:ec:2e:f6:c7:1a:8c:70:63: b6:57:a6:90:85:10:f9:a2:33:b9:4a:de:e5:90:7b:7f:81:eb: 92:72:77:2e:34:c6:01:3d:24:3e:3f:1a:6a:b7:85:c0:11:21: c3:eb:da:0a:d6:84:b4:5f:a8:a1:83:b3:22:d8:29:a9:08:62: 32:47:42:9e:c1:e8:ec:c2:f8:16:ae:8d:e4:16:9a:3b:83:49: 0d:41:ba:83 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvY3Gcq9GufQwre9BZsAZSzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3 OWRjMTYwHhcNMjYwMTIwMDA0NDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjhmYTE5MmI5YTlhM2ViMmE3ODIzMWUyN2ZiZDgxMzhhZDZhNjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGq+TxNFpLd+7U/DVgVo83B0CDUq 9CWYliTYPJ9VfntcBObS1hMsL+pZwpYiRqjLqguqGnv8gODvm0Lt9hPrPYTbS357 ShVolHuPtYJO8kKU3ScWQdfhYWhJu0CMtcY3b+YROyZcnYtHQKhH2eryxpDH2a8D mJkgIac4PDl4NziIvYrPZBXCreo7YYEJN5wnb6KWXE2LTmQruutkXxb8QoykrLOR fdUBK/ybP/UN1DqME/3dUafNTAtj0HKE2kKNNZTwnKPhYIamADE9eTsNj+Nts3p2 z3U8BxyI9aWi7IA0JkFb6MU4bSeBnFJRgBiFPJHcXFGi/7tt1Jy2q+nntQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFL+PoZK5qaPrKngjHif72BOK1qY6MB8GA1UdIwQY MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt ZDJiYmYzN2RhYmI0LzEvdjQtaGtybXBvLXNxZUNNZUpfdllFNHJXcGpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0 LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFVn/gAwQF vBrAAwQAwjepMA0GCSqGSIb3DQEBCwUAA4IBAQCCKIUXsskWspZytg0w8WvjdSCQ cCjuK0UFTi5aIdVz/pSVJtioXSVkWfoNFrXLpE6Ww+b6buaEtvbmRNc+FgRNGDiB 4vUQiaX/61K4GTI8ZIkzx/dRAr+zY5U7y0wPbWwIyoM9e78YdPdXubTWhVb/XQwF iOe/3n//7x4IyhpEdgFhwH4KUMjkimcjgTMsLzQBzx7evRp0KK/nyg3RfxDzPp5t O0zzkvb+UnaM7C72xxqMcGO2V6aQhRD5ojO5St7lkHt/geuScncuNMYBPSQ+Pxpq t4XAESHD69oK1oS0X6ihg7Mi2CmpCGIyR0KewejswvgWro3kFpo7g0kNQbqD -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:56 2026 by rpki-client