This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hCqBnwi3tLGPnGEkwFbaiiOi1Tw.roa File: hCqBnwi3tLGPnGEkwFbaiiOi1Tw.roa (raw, json) Hash identifier: ipklKvl4vE4704mx0vkFCsJ5FNBwNV4h3Vvuy2DJyMQ= Subject key identifier: 84:2A:81:9F:08:B7:B4:B1:8F:9C:61:24:C0:56:DA:8A:23:A2:D5:3C Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f Certificate serial: 019B7B365811FE68183A6088C4FF9C8825EC Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hCqBnwi3tLGPnGEkwFbaiiOi1Tw.roa Signing time: Thu 01 Jan 2026 20:18:37 +0000 ROA not before: Thu 01 Jan 2026 20:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43754 IP address blocks: 91.207.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:58:11:fe:68:18:3a:60:88:c4:ff:9c:88:25:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86623a8458eff347d424348588829ee137b45a3f Validity Not Before: Jan 1 20:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=842a819f08b7b4b18f9c6124c056da8a23a2d53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e0:d9:56:3e:25:fc:db:2c:cc:11:b0:d7:82: 12:5e:3f:5d:3c:aa:8a:94:25:c3:10:2f:4e:1f:30: 78:a9:fa:0c:9d:33:19:9e:f5:62:b1:05:5c:b8:d6: dd:11:1d:ad:cc:e9:3b:ae:3b:51:41:5b:ec:d1:bf: 92:52:6e:66:35:cd:36:11:4c:9b:41:c4:c6:f8:b5: 9f:80:a7:34:55:64:da:57:13:c8:2c:1d:f0:99:af: 64:ac:c8:9b:2a:52:4e:0c:52:50:b4:dd:c0:1b:e0: ec:5f:4f:3c:a6:be:71:59:12:1a:c4:e6:11:4e:5b: 48:4a:ef:d7:5c:12:0c:75:db:a9:d8:6c:96:1d:8a: 40:97:71:73:f3:83:de:64:36:17:9d:ff:fa:8b:d4: 7d:dc:d1:0b:df:e3:a4:9e:7a:a4:b0:d4:d1:9b:71: 5b:f4:af:7e:d8:20:d8:d4:8f:bd:51:9a:8e:95:86: 4d:ca:92:b2:1b:2f:8e:98:ec:92:27:d7:1e:7f:22: 4a:cf:75:3c:9f:09:f3:43:40:41:56:59:de:77:de: ef:e1:47:cc:41:a4:90:59:77:db:27:d8:66:a6:3b: 44:8f:63:be:5e:75:9f:ff:78:bd:0b:90:6d:48:1e: 4f:22:b9:c7:6f:97:86:14:1b:e1:c1:23:32:b3:43: fd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2A:81:9F:08:B7:B4:B1:8F:9C:61:24:C0:56:DA:8A:23:A2:D5:3C X509v3 Authority Key Identifier: keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hCqBnwi3tLGPnGEkwFbaiiOi1Tw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.205.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:df:60:35:7c:8d:3b:b6:4e:df:38:c3:7a:8b:f0:a6:6e:20: ac:c8:20:51:5a:16:b1:6a:0a:5d:be:85:50:6f:63:49:31:0a: d8:a9:79:a7:3c:21:5e:df:73:fa:70:5b:2b:ec:ca:d1:88:30: e1:3e:90:04:d8:ba:d1:b1:8d:57:7a:66:d5:a8:07:c6:b9:08: f0:8b:d0:cb:2b:12:e6:07:ef:79:f9:3b:ba:82:ec:cc:6b:a9: 13:54:99:f3:ee:61:40:1f:82:fd:d1:d4:bf:d5:97:3e:37:b7: 38:37:3e:2c:9d:33:44:00:6c:8d:90:d6:f4:57:16:a8:01:0b: e4:40:73:2c:82:8b:ad:b3:0e:15:10:8c:6d:41:56:8d:51:10: a3:d8:09:0b:49:4e:51:6f:b5:96:c6:f1:39:d3:41:79:ff:1c: cc:a0:fd:4c:a4:cf:d4:1a:c2:94:e1:c0:2d:1c:4f:07:36:59: 62:b7:c2:81:af:33:90:13:92:24:0c:e9:5a:c4:80:89:1e:93: 19:42:2d:01:8d:bd:d8:82:13:10:b1:98:7e:3c:f7:5e:a1:23: 0a:db:18:14:99:a5:55:a6:7e:32:ad:06:b7:7d:41:8e:12:90: 92:e5:25:94:8b:82:49:b7:26:c9:20:bc:63:2d:26:ff:d1:23: b8:91:9f:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NlgR/mgYOmCIxP+ciCXsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NjIzYTg0NThlZmYzNDdkNDI0MzQ4NTg4ODI5ZWUxMzdi NDVhM2YwHhcNMjYwMTAxMjAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDJhODE5ZjA4YjdiNGIxOGY5YzYxMjRjMDU2ZGE4YTIzYTJkNTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eDZVj4l/NsszBGw14ISXj9dPKqK lCXDEC9OHzB4qfoMnTMZnvVisQVcuNbdER2tzOk7rjtRQVvs0b+SUm5mNc02EUyb QcTG+LWfgKc0VWTaVxPILB3wma9krMibKlJODFJQtN3AG+DsX088pr5xWRIaxOYR TltISu/XXBIMddup2GyWHYpAl3Fz84PeZDYXnf/6i9R93NEL3+OknnqksNTRm3Fb 9K9+2CDY1I+9UZqOlYZNypKyGy+OmOySJ9cefyJKz3U8nwnzQ0BBVlned97v4UfM QaSQWXfbJ9hmpjtEj2O+XnWf/3i9C5BtSB5PIrnHb5eGFBvhwSMys0P92wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIQqgZ8It7Sxj5xhJMBW2oojotU8MB8GA1UdIwQY MBaAFIZiOoRY7/NH1CQ0hYiCnuE3tFo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8zOWRiNGQtZTkzZi00MTM5LWFhZDgt NmMyOGJiNDBkNTJlLzEvaENxQm53aTN0TEdQbkdFa3dGYmFpaU9pMVR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8zOWRiNGQtZTkzZi00MTM5LWFhZDgtNmMyOGJiNDBkNTJl LzEvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8/NMA0G CSqGSIb3DQEBCwUAA4IBAQAO32A1fI07tk7fOMN6i/CmbiCsyCBRWhaxagpdvoVQ b2NJMQrYqXmnPCFe33P6cFsr7MrRiDDhPpAE2LrRsY1XembVqAfGuQjwi9DLKxLm B+95+Tu6guzMa6kTVJnz7mFAH4L90dS/1Zc+N7c4Nz4snTNEAGyNkNb0VxaoAQvk QHMsgoutsw4VEIxtQVaNURCj2AkLSU5Rb7WWxvE500F5/xzMoP1MpM/UGsKU4cAt HE8HNllit8KBrzOQE5IkDOlaxICJHpMZQi0Bjb3YghMQsZh+PPdeoSMK2xgUmaVV pn4yrQa3fUGOEpCS5SWUi4JJtybJILxjLSb/0SO4kZ9Z -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:34 2026 by rpki-client