This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/HfpMqcQpb_Oyo8q91Gxgrjfcnfs.roa File: HfpMqcQpb_Oyo8q91Gxgrjfcnfs.roa (raw, json) Hash identifier: 3z+4GXfqGZOD8OYrsC4T9FL0WEjQRqb08RZme3k48Lw= Subject key identifier: 1D:FA:4C:A9:C4:29:6F:F3:B2:A3:CA:BD:D4:6C:60:AE:37:DC:9D:FB Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019B797ED411401E9EB474326E2458670910 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/HfpMqcQpb_Oyo8q91Gxgrjfcnfs.roa Signing time: Thu 01 Jan 2026 12:18:33 +0000 ROA not before: Thu 01 Jan 2026 12:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214922 IP address blocks: 87.236.208.0/24 maxlen: 24 2a03:9381:a::/48 maxlen: 48 2a03:9381:b::/48 maxlen: 48 2a03:9381:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d4:11:40:1e:9e:b4:74:32:6e:24:58:67:09:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Jan 1 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dfa4ca9c4296ff3b2a3cabdd46c60ae37dc9dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8a:75:6a:6d:e5:b0:8b:21:fb:96:98:22:b4: 8e:01:a6:04:72:83:62:89:b3:5d:ac:19:16:f8:88: ca:89:4d:9b:61:e2:1c:e5:c4:75:69:94:37:c1:61: 42:f3:d8:0e:29:3a:e5:66:81:b5:9d:ff:9a:76:b8: 26:81:e7:f4:05:6c:f4:ae:47:b6:01:f8:54:9d:fe: 98:f8:95:bb:31:31:9c:08:e3:5d:d6:54:1f:76:fc: 24:4e:46:46:22:c5:aa:bb:0b:39:7f:4c:68:bf:65: 54:a8:a1:4f:e9:44:a3:07:b7:fc:cc:42:64:ed:3d: ea:8a:8f:18:4b:f4:60:06:8e:a1:a0:d4:69:61:99: 98:3b:de:d7:72:9c:ce:b3:6a:dc:6c:f2:49:a0:62: 24:4d:84:01:a9:9e:ea:5c:c8:5f:99:86:22:3e:57: 0b:81:13:32:ab:23:45:6c:c4:95:45:72:77:3a:ad: 9d:45:3d:86:5a:6f:19:22:e7:df:06:02:a9:ab:a8: 23:ce:3a:f0:1d:fc:61:ba:d8:33:33:9e:72:20:fc: bd:13:7b:2d:02:b7:18:f0:de:2d:23:ec:e6:a7:bd: 78:72:85:9f:b7:9c:16:0c:66:54:f4:42:1b:28:2e: ea:a7:f3:47:4d:db:34:fb:0c:67:34:fb:6d:45:6f: 55:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FA:4C:A9:C4:29:6F:F3:B2:A3:CA:BD:D4:6C:60:AE:37:DC:9D:FB X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/HfpMqcQpb_Oyo8q91Gxgrjfcnfs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.208.0/24 IPv6: 2a03:9381:a::-2a03:9381:c:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 56:25:e0:60:dd:8e:50:f2:fc:2c:f2:57:2e:90:61:ce:34:4b: 66:0a:5a:01:e8:36:60:d4:47:d0:11:1b:94:fc:9c:01:1a:69: aa:24:b8:10:78:38:f8:d9:7c:ed:30:b8:23:47:27:01:5c:fb: a4:7d:08:44:46:55:08:4d:68:26:ee:ee:7b:db:a1:fa:4f:e0: b8:42:6d:e4:32:22:64:a2:43:83:8a:86:60:6e:d5:c0:64:ad: 86:d1:b1:63:55:61:20:ac:a3:8e:98:3c:b9:1c:83:54:9c:41: f4:59:73:19:67:51:68:90:d3:37:1c:e3:02:c6:49:03:9a:aa: 84:ca:5f:ca:b9:8a:f5:ed:32:b9:4f:93:1d:05:eb:c8:3a:d7: 88:1f:bc:80:74:1c:3b:77:a8:2c:0f:44:5b:cf:c2:d2:bb:3a: 74:e8:97:36:52:56:e8:9d:ef:d8:4a:9b:c4:97:44:b0:cc:5a: a9:56:6d:f8:97:b4:d9:f4:82:4c:2d:b4:39:95:35:7a:4f:58: 1c:68:f2:98:3b:5b:61:bc:c9:15:76:d4:8d:1c:3f:39:78:7d: 3a:ec:8a:83:60:42:c1:85:e8:ed:bf:69:00:e8:e5:e5:82:26: d2:f6:95:08:47:1d:18:c4:6d:2c:d2:88:55:0c:0a:9b:32:e0: 06:2f:ce:47 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt5ftQRQB6etHQybiRYZwkQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjYwMTAxMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGZhNGNhOWM0Mjk2ZmYzYjJhM2NhYmRkNDZjNjBhZTM3ZGM5ZGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ip1am3lsIsh+5aYIrSOAaYEcoNi ibNdrBkW+IjKiU2bYeIc5cR1aZQ3wWFC89gOKTrlZoG1nf+adrgmgef0BWz0rke2 AfhUnf6Y+JW7MTGcCONd1lQfdvwkTkZGIsWquws5f0xov2VUqKFP6USjB7f8zEJk 7T3qio8YS/RgBo6hoNRpYZmYO97XcpzOs2rcbPJJoGIkTYQBqZ7qXMhfmYYiPlcL gRMyqyNFbMSVRXJ3Oq2dRT2GWm8ZIuffBgKpq6gjzjrwHfxhutgzM55yIPy9E3st ArcY8N4tI+zmp714coWft5wWDGZU9EIbKC7qp/NHTds0+wxnNPttRW9V8QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFB36TKnEKW/zsqPKvdRsYK433J37MB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEvSGZwTXFjUXBiX095bzhxOTFHeGdyamZjbmZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAV+zQMBoE AgACMBQwEgMHASoDk4EACgMHACoDk4EADDANBgkqhkiG9w0BAQsFAAOCAQEAViXg YN2OUPL8LPJXLpBhzjRLZgpaAeg2YNRH0BEblPycARppqiS4EHg4+Nl87TC4I0cn AVz7pH0IREZVCE1oJu7ue9uh+k/guEJt5DIiZKJDg4qGYG7VwGSthtGxY1VhIKyj jpg8uRyDVJxB9FlzGWdRaJDTNxzjAsZJA5qqhMpfyrmK9e0yuU+THQXryDrXiB+8 gHQcO3eoLA9EW8/C0rs6dOiXNlJW6J3v2EqbxJdEsMxaqVZt+Je02fSCTC20OZU1 ek9YHGjymDtbYbzJFXbUjRw/OXh9OuyKg2BCwYXo7b9pAOjl5YIm0vaVCEcdGMRt LNKIVQwKmzLgBi/ORw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:45 2026 by rpki-client