This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/hOC_g0aFFJDt5mJXYMKufHdXY_Y.roa File: hOC_g0aFFJDt5mJXYMKufHdXY_Y.roa (raw, json) Hash identifier: /1Qaua2qcuy21kP73vJzs1KKO/Ht1pr5AntmjkyRFoc= Subject key identifier: 84:E0:BF:83:46:85:14:90:ED:E6:62:57:60:C2:AE:7C:77:57:63:F6 Certificate issuer: /CN=c91820b50007e41c53dd6029b37954d3572f4c29 Certificate serial: 019B775923725FC71A67C720270C6893DC06 Authority key identifier: C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/hOC_g0aFFJDt5mJXYMKufHdXY_Y.roa Signing time: Thu 01 Jan 2026 02:18:09 +0000 ROA not before: Thu 01 Jan 2026 02:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48642 IP address blocks: 91.193.148.0/22 maxlen: 22 91.223.170.0/24 maxlen: 24 195.206.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:23:72:5f:c7:1a:67:c7:20:27:0c:68:93:dc:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91820b50007e41c53dd6029b37954d3572f4c29 Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84e0bf8346851490ede6625760c2ae7c775763f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:88:99:4f:d0:63:3b:80:7b:a9:10:6c:16:8f: ee:a8:c9:9e:77:60:2d:7a:fd:9c:5e:6a:06:ee:fe: 41:43:cf:a4:09:73:d8:5c:78:4b:2d:2f:1b:80:2e: 65:87:2f:71:6a:8a:3a:7d:c0:6a:b3:76:03:b2:af: 5f:20:98:5d:36:80:f0:b6:f4:d8:8b:a9:ac:d8:7c: 4b:22:23:8d:72:b7:0e:96:f2:3b:94:aa:a6:86:cb: 3c:0a:36:c7:1c:f4:16:7f:80:06:ce:c7:6b:f8:7c: b1:49:70:ed:a5:eb:33:d0:16:83:cb:cc:09:0b:1a: 57:69:d4:cd:bd:4d:03:fc:ce:de:6d:b9:4b:de:c4: 27:91:8b:92:07:7e:7d:8f:57:b9:a6:82:56:32:af: 01:a7:95:09:02:a8:66:a7:45:cc:75:f1:c7:30:4d: 5e:57:3e:01:0e:da:8c:eb:7a:d7:b5:a6:ad:18:38: 0d:f3:76:10:9d:06:d7:d2:7d:5b:a6:a0:9a:ef:cd: 3f:14:bf:41:0b:47:ba:69:c7:7e:7a:56:61:e3:15: e7:70:b9:59:57:f7:09:0a:1a:d8:a0:df:50:23:8e: 03:22:7c:82:8b:2b:56:0e:14:30:2a:d7:e9:dd:c8: ce:cf:1b:3f:99:f1:fd:f6:aa:da:01:ac:32:65:e4: 37:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E0:BF:83:46:85:14:90:ED:E6:62:57:60:C2:AE:7C:77:57:63:F6 X509v3 Authority Key Identifier: keyid:C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/hOC_g0aFFJDt5mJXYMKufHdXY_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.148.0/22 91.223.170.0/24 195.206.226.0/23 Signature Algorithm: sha256WithRSAEncryption 61:27:4a:12:c0:d4:b0:9c:07:01:e8:76:0c:21:4f:ce:5e:96: 0e:04:61:19:c3:57:61:4f:a9:34:ed:37:f2:14:59:bc:6e:19: cb:36:c1:f8:5b:c4:41:4b:0b:19:91:6f:bd:7d:ec:eb:85:82: ba:0d:c5:74:75:f9:0d:e8:76:d7:57:33:91:7c:e5:16:73:14: 2d:90:b6:2c:36:63:a9:c7:77:02:4f:05:a6:38:7e:a6:e1:d1: c1:a2:fe:20:40:b3:73:28:6b:6a:15:5f:27:83:e9:79:5b:25: 28:2c:7e:28:36:c8:79:2e:8b:d4:7c:2c:d2:43:6b:aa:24:8f: 89:4a:03:8f:fc:30:c1:32:37:24:30:fe:9e:92:49:ab:d6:3b: 61:b2:06:68:03:d1:9d:c6:8e:3b:a5:59:f2:0c:b7:2c:e4:cb: cb:37:0f:73:71:0f:af:4f:8e:47:02:87:cd:08:ef:bc:1d:0f: b5:39:e2:47:7f:dc:b6:9f:a6:06:1c:1b:ca:ba:8f:2c:40:aa: a5:66:9e:2d:d5:ef:c5:1e:0c:b2:34:2a:b9:82:1b:de:c9:b0: 75:6b:ff:5d:33:5e:e0:3b:22:fa:9b:9e:72:88:39:84:e8:59: af:91:20:8f:48:38:a6:72:63:71:bf:b1:11:41:45:29:95:f0: d4:25:38:21 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WSNyX8caZ8cgJwxok9wGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MTgyMGI1MDAwN2U0MWM1M2RkNjAyOWIzNzk1NGQzNTcy ZjRjMjkwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGUwYmY4MzQ2ODUxNDkwZWRlNjYyNTc2MGMyYWU3Yzc3NTc2M2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoiZT9BjO4B7qRBsFo/uqMmed2At ev2cXmoG7v5BQ8+kCXPYXHhLLS8bgC5lhy9xaoo6fcBqs3YDsq9fIJhdNoDwtvTY i6ms2HxLIiONcrcOlvI7lKqmhss8CjbHHPQWf4AGzsdr+HyxSXDtpesz0BaDy8wJ CxpXadTNvU0D/M7ebblL3sQnkYuSB359j1e5poJWMq8Bp5UJAqhmp0XMdfHHME1e Vz4BDtqM63rXtaatGDgN83YQnQbX0n1bpqCa780/FL9BC0e6acd+elZh4xXncLlZ V/cJChrYoN9QI44DInyCiytWDhQwKtfp3cjOzxs/mfH99qraAawyZeQ3jwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFITgv4NGhRSQ7eZiV2DCrnx3V2P2MB8GA1UdIwQY MBaAFMkYILUAB+QcU91gKbN5VNNXL0wpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVJnZ3RRQUg1QnhUM1dBcHMzbFUwMWN2VENrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYTcxMjEtNTQxNC00NDg0LTkxODUt ZWVjMTRjOTcxYzRkLzEvaE9DX2cwYUZGSkR0NW1KWFlNS3VmSGRYWV9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYTcxMjEtNTQxNC00NDg0LTkxODUtZWVjMTRjOTcxYzRk LzEveVJnZ3RRQUg1QnhUM1dBcHMzbFUwMWN2VENrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW8GUAwQA W9+qAwQBw87iMA0GCSqGSIb3DQEBCwUAA4IBAQBhJ0oSwNSwnAcB6HYMIU/OXpYO BGEZw1dhT6k07TfyFFm8bhnLNsH4W8RBSwsZkW+9fezrhYK6DcV0dfkN6HbXVzOR fOUWcxQtkLYsNmOpx3cCTwWmOH6m4dHBov4gQLNzKGtqFV8ng+l5WyUoLH4oNsh5 LovUfCzSQ2uqJI+JSgOP/DDBMjckMP6ekkmr1jthsgZoA9Gdxo47pVnyDLcs5MvL Nw9zcQ+vT45HAofNCO+8HQ+1OeJHf9y2n6YGHBvKuo8sQKqlZp4t1e/FHgyyNCq5 ghveybB1a/9dM17gOyL6m55yiDmE6FmvkSCPSDimcmNxv7ERQUUplfDUJTgh -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:05 2026 by rpki-client