This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/xHusoPKod-9ku7rZw8cealGeT28.roa File: xHusoPKod-9ku7rZw8cealGeT28.roa (raw, json) Hash identifier: 7YrQt4ZeBYedxpBakuCTTQk0fE7OEPDPBMWW4QTkzWo= Subject key identifier: C4:7B:AC:A0:F2:A8:77:EF:64:BB:BA:D9:C3:C7:1E:6A:51:9E:4F:6F Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019B7CEE3E8A59402EDAD6A546038CFA8699 Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/xHusoPKod-9ku7rZw8cealGeT28.roa Signing time: Fri 02 Jan 2026 04:19:06 +0000 ROA not before: Fri 02 Jan 2026 04:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211432 IP address blocks: 185.106.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3e:8a:59:40:2e:da:d6:a5:46:03:8c:fa:86:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jan 2 04:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c47baca0f2a877ef64bbbad9c3c71e6a519e4f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6d:d4:43:c3:b5:a6:95:51:84:78:04:f2:6b: f3:c5:4d:94:03:ef:c1:26:da:21:7f:f0:3d:23:a7: ba:ff:74:01:10:55:34:2c:07:bf:5b:e5:ef:07:d1: cf:ac:c8:48:28:71:a7:36:eb:c1:b8:e2:b7:e7:8d: 52:a1:98:a8:c7:5b:aa:57:f5:33:59:87:05:da:6c: c1:36:e8:61:4f:1b:79:82:82:c8:99:32:d4:d3:ec: f5:f2:55:b6:d0:d3:fc:df:a0:7a:f9:27:85:e7:cb: 07:5f:73:43:d4:ff:fa:c7:ba:5f:b6:2b:b0:15:70: de:c9:07:24:46:2e:53:ea:7a:cf:58:89:77:7f:ff: ad:02:5c:c4:30:d5:70:81:35:36:ae:0b:65:f0:32: a5:4d:54:4d:d3:7b:85:11:b3:06:87:81:8f:ca:74: 4d:15:8c:c2:79:1a:ee:f5:1b:de:56:c4:ea:34:22: 91:34:8e:d1:3d:af:b8:ce:d4:dd:7b:2c:31:bc:52: ef:1f:b2:bb:3d:94:bf:9c:f7:b6:c9:e6:74:16:43: 41:b2:e9:ed:90:b6:3f:41:d6:ed:33:43:c6:84:34: 56:2a:d5:62:d0:ba:d8:80:5e:c0:b2:18:32:39:69: f4:f3:4a:55:e1:70:a6:94:4e:c3:b4:d7:13:4a:81: a8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7B:AC:A0:F2:A8:77:EF:64:BB:BA:D9:C3:C7:1E:6A:51:9E:4F:6F X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/xHusoPKod-9ku7rZw8cealGeT28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.106.194.0/23 Signature Algorithm: sha256WithRSAEncryption 76:92:a7:09:1d:f1:a1:b3:c1:a5:b4:f4:93:76:2f:83:db:1c: 06:14:d7:05:06:90:da:52:b0:2f:1d:04:bf:24:db:76:31:57: 87:f0:fc:13:a2:b5:2b:69:9f:92:9d:99:d0:8a:aa:c0:6a:30: fc:12:a3:56:58:c3:d8:d8:8d:18:95:f0:e0:40:6b:d0:3a:e2: 50:3c:3d:38:d7:b5:1f:3a:90:fd:8b:18:f5:45:f8:a2:04:fa: 5b:d5:d7:ee:a5:40:39:68:62:8c:c1:61:51:61:27:99:4d:58: b4:b6:fc:b9:53:07:0a:a7:9d:31:82:3b:e9:1f:65:c8:96:c1: 99:28:5c:f3:d7:72:22:e8:81:98:7f:4a:b5:a1:f3:f7:22:f0: f5:0b:b6:ee:ef:26:c3:92:6f:83:a5:11:95:db:74:fe:7b:18: 60:f6:b0:b2:f3:49:95:39:6f:d2:fc:f9:d1:36:2e:2f:95:d6: 07:e0:4e:ca:86:8d:43:42:a6:2b:03:dd:ed:31:4b:97:52:31: 13:ff:92:25:89:45:2d:5a:22:91:f6:20:45:78:4b:18:db:38: 04:dc:0d:c2:b3:7a:6f:4d:ef:e1:3e:41:82:c1:0a:a3:da:73: 3a:12:f1:d7:87:9b:aa:dc:11:05:8c:65:82:b3:2a:d1:dc:c6: 4f:0f:b7:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87j6KWUAu2talRgOM+oaZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjYwMTAyMDQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDdiYWNhMGYyYTg3N2VmNjRiYmJhZDljM2M3MWU2YTUxOWU0ZjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2m3UQ8O1ppVRhHgE8mvzxU2UA+/B Jtohf/A9I6e6/3QBEFU0LAe/W+XvB9HPrMhIKHGnNuvBuOK3541SoZiox1uqV/Uz WYcF2mzBNuhhTxt5goLImTLU0+z18lW20NP836B6+SeF58sHX3ND1P/6x7pftiuw FXDeyQckRi5T6nrPWIl3f/+tAlzEMNVwgTU2rgtl8DKlTVRN03uFEbMGh4GPynRN FYzCeRru9RveVsTqNCKRNI7RPa+4ztTdeywxvFLvH7K7PZS/nPe2yeZ0FkNBsunt kLY/QdbtM0PGhDRWKtVi0LrYgF7AshgyOWn080pV4XCmlE7DtNcTSoGoEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMR7rKDyqHfvZLu62cPHHmpRnk9vMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEveEh1c29QS29kLTlrdTdyWnc4Y2VhbEdlVDI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuWrCMA0G CSqGSIb3DQEBCwUAA4IBAQB2kqcJHfGhs8GltPSTdi+D2xwGFNcFBpDaUrAvHQS/ JNt2MVeH8PwTorUraZ+SnZnQiqrAajD8EqNWWMPY2I0YlfDgQGvQOuJQPD0417Uf OpD9ixj1RfiiBPpb1dfupUA5aGKMwWFRYSeZTVi0tvy5UwcKp50xgjvpH2XIlsGZ KFzz13Ii6IGYf0q1ofP3IvD1C7bu7ybDkm+DpRGV23T+exhg9rCy80mVOW/S/PnR Ni4vldYH4E7Kho1DQqYrA93tMUuXUjET/5IliUUtWiKR9iBFeEsY2zgE3A3Cs3pv Te/hPkGCwQqj2nM6EvHXh5uq3BEFjGWCsyrR3MZPD7e+ -----END CERTIFICATE-----Generated at Sun Jan 25 13:43:44 2026 by rpki-client