This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/HOthVU0bBaG1HkA9x72mAKGEW8E.roa File: HOthVU0bBaG1HkA9x72mAKGEW8E.roa (raw, json) Hash identifier: E0FOy9oZK/JQ6wDHO/lruS7gk3pPcta7ZFOMC1YAmJo= Subject key identifier: 1C:EB:61:55:4D:1B:05:A1:B5:1E:40:3D:C7:BD:A6:00:A1:84:5B:C1 Certificate issuer: /CN=e992a035bffc5a41412c497c1285d1838234ffb0 Certificate serial: 019B7BA3A0E4ADDD0722AE34A34D5D8FC67E Authority key identifier: E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/HOthVU0bBaG1HkA9x72mAKGEW8E.roa Signing time: Thu 01 Jan 2026 22:17:59 +0000 ROA not before: Thu 01 Jan 2026 22:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16243 IP address blocks: 77.222.64.0/19 maxlen: 24 87.249.96.0/19 maxlen: 24 185.76.16.0/22 maxlen: 24 217.114.96.0/20 maxlen: 24 2001:1540::/32 maxlen: 48 2001:1541:4100::/40 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.mft rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:a0:e4:ad:dd:07:22:ae:34:a3:4d:5d:8f:c6:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e992a035bffc5a41412c497c1285d1838234ffb0 Validity Not Before: Jan 1 22:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ceb61554d1b05a1b51e403dc7bda600a1845bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:16:39:24:a6:b1:b2:76:6c:89:91:b8:10:e7: 11:d9:ff:58:fb:0c:18:6b:41:1d:c7:25:6f:ed:1d: d5:3e:2d:34:18:28:6e:93:23:93:7b:a2:bb:32:40: 21:07:4c:86:b3:4e:a4:e9:88:11:37:73:c2:b4:7c: 45:00:56:32:05:78:f1:1b:0a:3b:7e:85:95:dc:6a: ba:44:6c:46:d6:3e:4a:67:03:2e:c4:6c:5a:58:e0: a2:14:9b:42:af:d5:c6:90:fb:8b:0f:92:5e:12:26: 5d:20:fb:db:0e:20:0b:5a:68:2a:d0:17:06:77:4c: 22:fa:9b:78:ab:08:4c:26:03:9b:69:35:2d:55:ab: 1a:b9:ad:1f:24:d6:e1:bd:f1:54:a1:c8:be:02:ba: 39:b2:b3:b9:2b:9e:7c:84:6e:23:89:24:10:e9:06: 1c:d6:e5:eb:e6:f0:de:8d:22:2b:bd:3e:20:2f:e8: 64:2b:e7:e8:b8:7f:70:d9:35:07:16:da:9a:3c:12: 47:91:15:1c:11:3b:23:96:98:fb:6d:2a:25:2f:2c: fa:28:de:46:90:c4:7e:12:78:0f:a9:0a:30:fc:a8: a8:7b:a4:b4:87:bc:9f:bf:32:28:40:33:da:38:14: cd:6f:55:62:ef:f6:f5:89:93:63:a4:cb:fa:08:98: a6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EB:61:55:4D:1B:05:A1:B5:1E:40:3D:C7:BD:A6:00:A1:84:5B:C1 X509v3 Authority Key Identifier: keyid:E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/HOthVU0bBaG1HkA9x72mAKGEW8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.222.64.0/19 87.249.96.0/19 185.76.16.0/22 217.114.96.0/20 IPv6: 2001:1540::/32 2001:1541:4100::/40 Signature Algorithm: sha256WithRSAEncryption 01:9b:2c:40:30:6f:04:7a:d7:bf:e1:84:4b:af:92:f3:52:0d: 84:10:88:7b:ce:f6:e3:81:1c:ba:17:60:6b:9d:2d:f3:36:82: 8a:ea:29:b6:28:46:67:66:4f:46:6f:41:3b:a5:47:f3:48:7b: 98:3a:b5:de:55:51:ea:b3:1a:ec:2f:e7:b2:20:c3:f8:83:2f: ca:b9:27:d9:39:1b:5c:e1:d9:3e:5f:16:61:2b:e6:2f:2e:38: e2:4b:cc:02:83:32:0c:c1:f1:bb:01:cc:4d:c0:50:fa:be:5a: 57:ff:bf:7b:ba:1e:85:cd:5a:b7:98:8e:83:37:20:76:b7:27: 6f:cf:7e:13:0f:7b:e2:77:02:34:db:07:1b:d0:ef:93:52:98: 73:a9:cd:11:40:66:8c:93:d4:27:d0:36:ab:84:a7:65:0b:b4: 7e:3a:e8:62:bc:dc:1c:b1:3b:e5:e7:33:09:f2:72:56:e6:20: 23:d5:ff:c4:dd:a8:b9:c4:c7:e5:f2:7f:39:fe:a4:18:cb:f3: 0e:a0:c3:87:5d:81:ad:4f:a1:76:9f:4a:26:6e:1d:89:3c:f4: 8a:ec:5b:8a:1b:13:08:22:d3:e4:90:46:53:b9:b6:23:de:32: 91:05:96:55:b0:58:9e:5a:d9:d1:0d:af:80:74:ee:ce:37:71: 6d:89:0f:12 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt7o6Dkrd0HIq40o01dj8Z+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5OTJhMDM1YmZmYzVhNDE0MTJjNDk3YzEyODVkMTgzODIz NGZmYjAwHhcNMjYwMTAxMjIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2ViNjE1NTRkMWIwNWExYjUxZTQwM2RjN2JkYTYwMGExODQ1YmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRY5JKaxsnZsiZG4EOcR2f9Y+wwY a0EdxyVv7R3VPi00GChukyOTe6K7MkAhB0yGs06k6YgRN3PCtHxFAFYyBXjxGwo7 foWV3Gq6RGxG1j5KZwMuxGxaWOCiFJtCr9XGkPuLD5JeEiZdIPvbDiALWmgq0BcG d0wi+pt4qwhMJgObaTUtVasaua0fJNbhvfFUoci+Aro5srO5K558hG4jiSQQ6QYc 1uXr5vDejSIrvT4gL+hkK+fouH9w2TUHFtqaPBJHkRUcETsjlpj7bSolLyz6KN5G kMR+EngPqQow/Kioe6S0h7yfvzIoQDPaOBTNb1Vi7/b1iZNjpMv6CJimRwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFBzrYVVNGwWhtR5APce9pgChhFvBMB8GA1UdIwQY MBaAFOmSoDW//FpBQSxJfBKF0YOCNP+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlpLZ05iXzhXa0ZCTEVsOEVvWFJnNEkwXzdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi81ZjVmNmItMzVlNC00MzkxLTk1MTkt Yjk3ZDMzNmVhMmY1LzEvSE90aFZVMGJCYUcxSGtBOXg3Mm1BS0dFVzhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi81ZjVmNmItMzVlNC00MzkxLTk1MTktYjk3ZDMzNmVhMmY1 LzEvNlpLZ05iXzhXa0ZCTEVsOEVvWFJnNEkwXzdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAeBAIAATAYAwQFTd5AAwQF V/lgAwQCuUwQAwQE2XJgMBUEAgACMA8DBQAgARVAAwYAIAEVQUEwDQYJKoZIhvcN AQELBQADggEBAAGbLEAwbwR617/hhEuvkvNSDYQQiHvO9uOBHLoXYGudLfM2gorq KbYoRmdmT0ZvQTulR/NIe5g6td5VUeqzGuwv57Igw/iDL8q5J9k5G1zh2T5fFmEr 5i8uOOJLzAKDMgzB8bsBzE3AUPq+Wlf/v3u6HoXNWreYjoM3IHa3J2/PfhMPe+J3 AjTbBxvQ75NSmHOpzRFAZoyT1CfQNquEp2ULtH466GK83ByxO+XnMwnyclbmICPV /8TdqLnEx+Xyfzn+pBjL8w6gw4ddga1PoXafSiZuHYk89IrsW4obEwgi0+SQRlO5 tiPeMpEFllWwWJ5a2dENr4B07s43cW2JDxI= -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:19 2026 by rpki-client