This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/0hykFI2nzIfKw5O60HOpHI0FUF8.roa File: 0hykFI2nzIfKw5O60HOpHI0FUF8.roa (raw, json) Hash identifier: 654t5jHQdvrRaEAnKER11GB5whwJk06cO3f07OUyXdo= Subject key identifier: D2:1C:A4:14:8D:A7:CC:87:CA:C3:93:BA:D0:73:A9:1C:8D:05:50:5F Certificate issuer: /CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7 Certificate serial: 019B797E401F7977957B6937EEE9B6BC3B42 Authority key identifier: 33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/0hykFI2nzIfKw5O60HOpHI0FUF8.roa Signing time: Thu 01 Jan 2026 12:17:55 +0000 ROA not before: Thu 01 Jan 2026 12:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201211 IP address blocks: 185.73.16.0/22 maxlen: 22 185.82.24.0/22 maxlen: 22 193.178.118.0/24 maxlen: 24 2a05:3e80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:40:1f:79:77:95:7b:69:37:ee:e9:b6:bc:3b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7 Validity Not Before: Jan 1 12:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d21ca4148da7cc87cac393bad073a91c8d05505f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f8:55:ef:63:a3:19:f8:a6:12:a7:7a:91:e5: 7f:ad:64:4f:07:17:6e:c8:b6:4d:1a:d7:14:c0:68: b8:df:e2:48:cc:a8:38:58:cd:3a:51:d2:d6:e6:c1: 48:49:a3:89:3e:30:17:a2:fe:53:ca:da:9e:ee:59: de:a2:43:78:75:08:3a:c4:69:76:c7:7d:89:44:ec: 9a:0c:3d:41:b5:01:e3:08:b7:61:68:75:b2:8b:d3: fa:53:fd:03:5f:70:96:de:b7:23:a6:04:8c:88:0b: 3a:6c:d2:a4:24:e0:54:f0:da:f6:7d:08:4b:d7:af: 56:2b:5f:05:d0:8c:6d:b3:54:29:b2:89:4b:7e:c2: e5:c2:82:75:89:76:2b:b3:11:b8:84:6c:7b:6c:85: e9:53:d3:2a:a1:5f:97:29:66:cd:e2:8d:41:82:4f: 95:00:d0:50:34:f4:23:1c:14:d7:89:73:91:05:7a: 05:ea:f0:d6:d9:a8:93:72:a6:74:5f:59:3c:1e:cf: fa:62:4e:a8:9d:f8:ff:fa:9d:17:13:05:37:3c:6a: 05:9a:a4:fe:c5:b1:d9:95:f0:47:fd:25:49:06:42: ba:76:b1:2e:77:cd:14:50:43:ad:d5:e3:5b:24:b0: fa:7c:78:d6:40:1f:92:41:a1:8e:a6:01:c5:ff:83: db:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1C:A4:14:8D:A7:CC:87:CA:C3:93:BA:D0:73:A9:1C:8D:05:50:5F X509v3 Authority Key Identifier: keyid:33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/0hykFI2nzIfKw5O60HOpHI0FUF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.16.0/22 185.82.24.0/22 193.178.118.0/24 IPv6: 2a05:3e80::/29 Signature Algorithm: sha256WithRSAEncryption 4f:7f:a0:b5:e9:97:a5:3b:45:a1:b9:6a:2f:98:9a:ae:6d:93: a7:b5:0b:2b:1a:fb:55:32:61:a9:2e:8a:97:c6:75:63:89:c5: 24:10:32:5f:aa:2c:6e:0a:1d:ff:34:d6:c6:b0:b7:34:f5:94: f8:c7:6f:60:b5:72:b2:1a:e8:52:1a:ac:fc:68:e7:05:a4:19: 16:1a:c8:52:8c:58:db:76:ba:5c:14:41:1b:5d:cf:11:6c:80: ee:34:68:12:eb:f0:03:de:03:54:40:c7:97:96:d9:96:2c:26: a1:fb:0d:81:ec:1f:5b:4e:16:56:12:4e:9e:13:fa:05:83:45: 90:04:2d:6a:4e:ab:90:d0:8e:a9:2b:80:e3:c7:ee:0a:1c:6f: f9:e1:aa:70:4b:f0:2b:7e:83:d9:7f:05:69:fd:b5:b2:af:0c: 03:e5:d8:96:d5:86:e9:95:1e:1d:68:c8:56:c6:b7:91:10:4d: 5a:37:0f:db:04:66:83:74:f2:97:4d:cb:94:4b:bf:42:2a:26: d1:61:e9:21:53:53:8f:d9:24:4d:e0:be:b5:a5:53:da:77:45: 5a:a1:cc:cb:81:0a:5d:ee:81:5d:f8:4e:5b:d1:67:cc:6b:9d: 7e:74:2b:eb:c7:6a:03:98:8b:ac:da:85:e5:3b:49:5e:8c:61: 80:02:ef:ab -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5fkAfeXeVe2k37um2vDtCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZmMxZTViNmM3ODhmYWY4ZmU5MzMxOTgxZDY1YjVmODY0 YjgwZjcwHhcNMjYwMTAxMTIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjFjYTQxNDhkYTdjYzg3Y2FjMzkzYmFkMDczYTkxYzhkMDU1MDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fhV72OjGfimEqd6keV/rWRPBxdu yLZNGtcUwGi43+JIzKg4WM06UdLW5sFISaOJPjAXov5Tytqe7lneokN4dQg6xGl2 x32JROyaDD1BtQHjCLdhaHWyi9P6U/0DX3CW3rcjpgSMiAs6bNKkJOBU8Nr2fQhL 169WK18F0Ixts1QpsolLfsLlwoJ1iXYrsxG4hGx7bIXpU9MqoV+XKWbN4o1Bgk+V ANBQNPQjHBTXiXORBXoF6vDW2aiTcqZ0X1k8Hs/6Yk6onfj/+p0XEwU3PGoFmqT+ xbHZlfBH/SVJBkK6drEud80UUEOt1eNbJLD6fHjWQB+SQaGOpgHF/4PbDQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFNIcpBSNp8yHysOTutBzqRyNBVBfMB8GA1UdIwQY MBaAFDP8HltseI+vj+kzGYHWW1+GS4D3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTV93ZVcyeDRqNi1QNlRNWmdkWmJYNFpMZ1BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81ZGNhOWQtNzNkZC00N2RjLTg1NDkt YjFjNGRlODRlNzBlLzEvMGh5a0ZJMm56SWZLdzVPNjBIT3BISTBGVUY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81ZGNhOWQtNzNkZC00N2RjLTg1NDktYjFjNGRlODRlNzBl LzEvTV93ZVcyeDRqNi1QNlRNWmdkWmJYNFpMZ1BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuUkQAwQC uVIYAwQAwbJ2MA0EAgACMAcDBQMqBT6AMA0GCSqGSIb3DQEBCwUAA4IBAQBPf6C1 6ZelO0WhuWovmJqubZOntQsrGvtVMmGpLoqXxnVjicUkEDJfqixuCh3/NNbGsLc0 9ZT4x29gtXKyGuhSGqz8aOcFpBkWGshSjFjbdrpcFEEbXc8RbIDuNGgS6/AD3gNU QMeXltmWLCah+w2B7B9bThZWEk6eE/oFg0WQBC1qTquQ0I6pK4Djx+4KHG/54apw S/ArfoPZfwVp/bWyrwwD5diW1YbplR4daMhWxreREE1aNw/bBGaDdPKXTcuUS79C KibRYekhU1OP2SRN4L61pVPad0VaoczLgQpd7oFd+E5b0WfMa51+dCvrx2oDmIus 2oXlO0lejGGAAu+r -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:57 2026 by rpki-client