This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/HQ7gaLn_1HFi6HNHlUSI1f4l3Us.roa File: HQ7gaLn_1HFi6HNHlUSI1f4l3Us.roa (raw, json) Hash identifier: x209ELOQte0n4JlBeclyNeX93X61Mm5mJK6Xlhlo8y8= Subject key identifier: 1D:0E:E0:68:B9:FF:D4:71:62:E8:73:47:95:44:88:D5:FE:25:DD:4B Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E3904FC28D2537370D6201F27D69818 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/HQ7gaLn_1HFi6HNHlUSI1f4l3Us.roa Signing time: Fri 02 Jan 2026 10:20:24 +0000 ROA not before: Fri 02 Jan 2026 10:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13077 IP address blocks: 195.209.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:04:fc:28:d2:53:73:70:d6:20:1f:27:d6:98:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d0ee068b9ffd47162e87347954488d5fe25dd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:88:93:fd:ac:4b:aa:fd:b0:ef:9b:cf:0a: 1a:57:7f:14:df:61:e7:6f:5e:63:6b:f9:ca:d1:d1: 5f:74:aa:8a:f1:60:2e:dc:bb:b3:af:21:5d:af:c5: 4e:a4:26:96:ed:1c:c0:61:1c:ff:cd:13:80:0c:f9: f5:aa:65:6a:85:7f:dd:6e:fd:6f:38:f4:e9:43:7c: 2a:cc:5f:c5:5e:8e:6e:da:6e:31:9c:43:7f:5b:d5: ff:8b:75:22:4e:40:ca:cf:b9:44:de:b6:0e:63:70: ea:8b:e5:29:33:a3:b6:7d:f7:f7:28:a1:fc:97:c4: 94:d2:cf:1a:dc:76:6b:61:c4:43:59:d5:fb:00:3b: 0b:c2:31:e1:77:1f:52:77:f4:13:51:11:77:f8:a5: 39:30:51:c6:a0:04:10:3a:de:0c:1b:4f:c6:0c:81: 23:d8:e0:d8:87:8f:24:be:a6:39:f9:c7:10:53:5a: ef:05:1a:2b:e8:29:4f:df:44:01:63:47:24:da:26: a7:2a:17:15:8a:f4:78:25:18:e2:f9:63:25:cb:80: 0f:16:20:9e:74:8c:fa:fc:9e:f2:93:03:1b:95:3e: fe:b0:f9:31:08:f5:3d:2a:cd:f1:f8:13:1c:57:0d: e1:97:b2:2d:10:4a:26:05:12:8f:14:40:34:d1:70: aa:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0E:E0:68:B9:FF:D4:71:62:E8:73:47:95:44:88:D5:FE:25:DD:4B X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/HQ7gaLn_1HFi6HNHlUSI1f4l3Us.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.209.244.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:c2:9f:8a:28:1b:ae:cb:07:e9:c9:60:18:61:99:0a:14:65: 19:39:0c:c0:ec:69:a0:e5:77:96:16:41:29:f5:d1:a8:fc:65: fd:ae:5e:d2:19:9a:ba:1d:34:0f:12:3f:25:82:0a:80:d0:97: 12:c0:19:80:bf:46:5f:d2:34:45:4b:3a:18:b6:74:38:9a:58: 51:d5:5c:6b:48:ad:7a:d2:bf:27:4f:a9:b1:1a:d3:ee:51:62: 33:db:db:a6:00:d4:36:38:11:b4:f8:ae:76:4f:f4:ee:08:3a: 29:43:48:b4:85:0c:36:99:1a:d8:d2:b7:f7:18:83:6b:61:2b: 51:a6:5e:78:72:de:ea:9d:13:08:e6:98:27:d4:c5:41:44:53: 90:22:8c:ac:3a:0a:c3:69:31:57:41:0e:b9:0e:9c:03:0c:12: 4f:cc:0b:d4:13:47:cb:c1:ee:bc:9a:87:72:86:8f:22:df:77: 0e:1e:25:52:ff:24:e1:50:c1:0d:a5:e1:9e:a6:36:9a:e9:9a: 48:a5:9f:54:d8:ad:64:ab:5a:36:f1:90:1b:d7:ec:e6:07:af: 1f:1e:6f:74:51:e2:83:19:c2:c4:8b:16:dd:59:5e:92:20:c7: cb:4f:d7:4e:9f:d0:a0:05:3f:3b:1f:a9:51:b8:fc:3f:e6:03: 4b:6b:86:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQT8KNJTc3DWIB8n1pgYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDBlZTA2OGI5ZmZkNDcxNjJlODczNDc5NTQ0ODhkNWZlMjVkZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlKIk/2sS6r9sO+bzwoaV38U32Hn b15ja/nK0dFfdKqK8WAu3LuzryFdr8VOpCaW7RzAYRz/zROADPn1qmVqhX/dbv1v OPTpQ3wqzF/FXo5u2m4xnEN/W9X/i3UiTkDKz7lE3rYOY3Dqi+UpM6O2fff3KKH8 l8SU0s8a3HZrYcRDWdX7ADsLwjHhdx9Sd/QTURF3+KU5MFHGoAQQOt4MG0/GDIEj 2ODYh48kvqY5+ccQU1rvBRor6ClP30QBY0ck2ianKhcVivR4JRji+WMly4APFiCe dIz6/J7ykwMblT7+sPkxCPU9Ks3x+BMcVw3hl7ItEEomBRKPFEA00XCqKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB0O4Gi5/9RxYuhzR5VEiNX+Jd1LMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvSFE3Z2FMbl8xSEZpNkhOSGxVU0kxZjRsM1VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw9H0MA0G CSqGSIb3DQEBCwUAA4IBAQBfwp+KKBuuywfpyWAYYZkKFGUZOQzA7Gmg5XeWFkEp 9dGo/GX9rl7SGZq6HTQPEj8lggqA0JcSwBmAv0Zf0jRFSzoYtnQ4mlhR1VxrSK16 0r8nT6mxGtPuUWIz29umANQ2OBG0+K52T/TuCDopQ0i0hQw2mRrY0rf3GINrYStR pl54ct7qnRMI5pgn1MVBRFOQIoysOgrDaTFXQQ65DpwDDBJPzAvUE0fLwe68mody ho8i33cOHiVS/yThUMENpeGepjaa6ZpIpZ9U2K1kq1o28ZAb1+zmB68fHm90UeKD GcLEixbdWV6SIMfLT9dOn9CgBT87H6lRuPw/5gNLa4b1 -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:46 2026 by rpki-client