This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HsZ3pgAnq_ETp91xPqGGgqEF28E.roa File: HsZ3pgAnq_ETp91xPqGGgqEF28E.roa (raw, json) Hash identifier: +NXMCSgSFcDwSPirDsX/7h+4RY7r/+cJyptV0QxwAP8= Subject key identifier: 1E:C6:77:A6:00:27:AB:F1:13:A7:DD:71:3E:A1:86:82:A1:05:DB:C1 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3569BEEBCFDD5DE711EB80B990332 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HsZ3pgAnq_ETp91xPqGGgqEF28E.roa Signing time: Thu 01 Jan 2026 08:18:49 +0000 ROA not before: Thu 01 Jan 2026 08:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216139 IP address blocks: 193.222.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:56:9b:ee:bc:fd:d5:de:71:1e:b8:0b:99:03:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ec677a60027abf113a7dd713ea18682a105dbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0b:76:53:9a:c3:bd:e7:70:a7:9f:85:d3:98: 36:30:94:54:df:45:4c:fc:8c:81:7b:49:37:80:79: da:50:9a:43:f6:16:c2:98:1d:14:3b:7f:14:15:ef: 21:20:85:ce:9f:13:37:d9:92:9b:44:98:7d:21:cf: d3:31:c0:ec:57:b0:68:3f:64:3b:9e:ae:0b:e3:19: ae:92:7a:73:37:f3:95:bb:c2:1e:a8:d6:66:bf:99: 84:b7:49:e7:97:c4:4c:8d:b0:2b:bc:af:3c:4b:25: 1e:ea:4c:f3:e4:9c:0e:5c:2c:d7:c1:39:4d:61:54: eb:70:c2:cb:c5:64:53:93:5c:7e:8d:c9:ec:93:42: 80:ba:8d:1a:72:3c:10:fb:69:df:db:8e:89:04:97: 9c:2c:6b:ca:a5:e0:8f:f1:24:49:ea:0f:22:20:06: 5e:fb:e3:08:60:92:ec:b7:02:19:44:23:1b:fd:ed: 2a:3d:c8:56:29:fd:09:6b:e8:cc:a8:44:45:45:5e: 39:17:a1:5e:cd:fa:a3:4d:b6:40:c7:ab:af:84:40: 68:31:f0:c8:0b:f5:8f:dc:dd:25:c7:da:97:d0:08: 70:04:ae:c5:81:c4:a1:e2:8b:c9:8b:b2:ca:03:1d: 92:43:4f:86:b7:82:95:d9:45:2c:85:80:6f:1a:31: 49:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C6:77:A6:00:27:AB:F1:13:A7:DD:71:3E:A1:86:82:A1:05:DB:C1 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HsZ3pgAnq_ETp91xPqGGgqEF28E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.222.96.0/24 Signature Algorithm: sha256WithRSAEncryption b5:20:e9:ab:11:13:0b:bd:c6:c3:ab:a4:6f:c3:5d:a0:bb:36: a3:37:81:4b:4f:25:2f:2d:46:10:e4:e5:cb:da:be:0d:5c:dc: d5:8b:f3:94:ac:10:89:b0:f0:1f:bd:55:86:ca:86:a6:c6:be: bf:ed:a5:b3:f2:6a:5e:7f:5f:6b:cb:8e:97:03:9a:c4:6b:5a: 29:fb:76:07:80:6b:3d:42:44:06:d3:9f:88:d3:0c:0f:35:24: 1b:42:9d:3d:5d:f2:ea:06:6d:44:e6:7c:1c:0b:80:97:81:76: e0:d2:e2:f0:4a:25:21:4f:45:4d:bc:20:49:e1:89:9d:6d:40: ce:54:21:c4:93:fc:0e:03:e3:5b:b2:03:11:f5:99:db:72:05: db:fc:d6:5c:2a:b3:80:b5:34:17:6f:84:d9:a7:33:07:7a:f6: 7d:06:6c:a9:ab:52:dd:7b:53:8f:5f:aa:f4:0f:8a:ac:aa:a9: 8a:45:d5:e7:78:ea:d0:8e:cb:5e:cd:ea:b1:95:c0:c4:0c:4a: ff:5a:e0:7f:4a:1c:97:6e:72:87:6c:0b:80:9f:e8:ea:a5:19: 40:b9:d0:c3:31:e5:3f:92:11:1f:a3:81:36:52:ce:ea:6a:7b: 91:a2:2b:bd:d3:78:62:eb:6b:0a:d8:8e:92:aa:4a:13:ef:5b: 13:92:ff:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1ab7rz91d5xHrgLmQMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWM2NzdhNjAwMjdhYmYxMTNhN2RkNzEzZWExODY4MmExMDVkYmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8At2U5rDvedwp5+F05g2MJRU30VM /IyBe0k3gHnaUJpD9hbCmB0UO38UFe8hIIXOnxM32ZKbRJh9Ic/TMcDsV7BoP2Q7 nq4L4xmuknpzN/OVu8IeqNZmv5mEt0nnl8RMjbArvK88SyUe6kzz5JwOXCzXwTlN YVTrcMLLxWRTk1x+jcnsk0KAuo0acjwQ+2nf246JBJecLGvKpeCP8SRJ6g8iIAZe ++MIYJLstwIZRCMb/e0qPchWKf0Ja+jMqERFRV45F6FezfqjTbZAx6uvhEBoMfDI C/WP3N0lx9qX0AhwBK7FgcSh4ovJi7LKAx2SQ0+Gt4KV2UUshYBvGjFJ4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB7Gd6YAJ6vxE6fdcT6hhoKhBdvBMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvSHNaM3BnQW5xX0VUcDkxeFBxR0dncUVGMjhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd5gMA0G CSqGSIb3DQEBCwUAA4IBAQC1IOmrERMLvcbDq6Rvw12guzajN4FLTyUvLUYQ5OXL 2r4NXNzVi/OUrBCJsPAfvVWGyoamxr6/7aWz8mpef19ry46XA5rEa1op+3YHgGs9 QkQG05+I0wwPNSQbQp09XfLqBm1E5nwcC4CXgXbg0uLwSiUhT0VNvCBJ4YmdbUDO VCHEk/wOA+NbsgMR9ZnbcgXb/NZcKrOAtTQXb4TZpzMHevZ9Bmypq1Lde1OPX6r0 D4qsqqmKRdXneOrQjstezeqxlcDEDEr/WuB/ShyXbnKHbAuAn+jqpRlAudDDMeU/ khEfo4E2Us7qanuRoiu903hi62sK2I6SqkoT71sTkv8J -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:51 2026 by rpki-client