This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/HBkN7gBFqg8wrLeCctyRbldPy5s.roa File: HBkN7gBFqg8wrLeCctyRbldPy5s.roa (raw, json) Hash identifier: AUr2V6K4atlnSkLL5NY8L9BYrfaGlOea116ovsRFBqo= Subject key identifier: 1C:19:0D:EE:00:45:AA:0F:30:AC:B7:82:72:DC:91:6E:57:4F:CB:9B Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F1446F399CEE26F333145C84E76D857 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/HBkN7gBFqg8wrLeCctyRbldPy5s.roa Signing time: Fri 02 Jan 2026 14:19:53 +0000 ROA not before: Fri 02 Jan 2026 14:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42007 IP address blocks: 193.233.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:46:f3:99:ce:e2:6f:33:31:45:c8:4e:76:d8:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c190dee0045aa0f30acb78272dc916e574fcb9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b3:fc:a7:b2:8b:32:f0:2d:0e:19:22:d7:39: 4d:85:97:71:bf:f7:78:6d:d5:12:22:e3:a5:55:05: 2b:be:dd:d5:c3:60:ae:3b:43:51:67:22:18:1a:11: 9b:01:f7:a1:25:9f:90:a2:9c:87:a6:00:a6:26:10: bd:88:a5:41:7c:46:d2:0e:5c:dc:69:6c:f5:9e:30: 33:4f:b1:57:af:f7:66:2a:c1:ba:7c:9c:80:43:b5: 41:e7:79:de:92:51:bb:02:70:1f:a2:3b:bc:cc:ad: df:8a:d8:c2:f5:63:05:e9:c6:9e:5a:94:c9:80:f8: cc:ba:42:4e:91:fd:e4:84:64:ea:e2:ea:eb:35:57: 84:3a:3e:11:10:aa:23:32:e3:ad:ed:b6:71:93:0f: 07:f2:9f:be:56:28:ff:75:a6:73:53:b8:f2:ef:00: 49:6f:30:44:e1:2b:aa:e0:78:d3:51:1f:8e:13:48: 1f:e6:1f:46:82:e6:7e:f2:45:d1:28:a3:61:76:30: 23:52:99:4b:f9:56:30:a4:b2:25:91:80:ff:33:1e: 91:37:c8:21:35:ad:99:24:43:ef:44:27:90:95:e0: 1d:9c:a3:9e:98:f5:dc:54:3b:ac:5e:b4:97:ec:dd: 62:7b:ab:3c:26:10:0d:27:c4:9a:ac:39:00:b1:56: 65:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:19:0D:EE:00:45:AA:0F:30:AC:B7:82:72:DC:91:6E:57:4F:CB:9B X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/HBkN7gBFqg8wrLeCctyRbldPy5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.32.0/20 Signature Algorithm: sha256WithRSAEncryption 1a:5e:90:05:01:ad:0f:18:0c:26:66:87:74:06:33:98:df:ae: 91:a5:6e:6a:28:43:4d:36:24:aa:df:32:7c:90:12:21:31:fe: 28:c5:23:d9:72:34:07:2f:e2:53:ab:9b:75:76:b6:25:26:79: c9:42:90:0d:7e:1d:99:6e:dd:ef:65:d0:89:21:31:d3:2a:d6: ff:e9:7d:18:27:b3:7e:c4:cb:dd:d8:83:1e:e9:83:26:2a:82: 97:e5:16:d3:ca:c7:ed:2e:19:eb:0f:0c:f6:db:73:17:a7:9a: 2f:9b:0a:a8:66:83:a4:da:57:1d:23:06:fe:22:5b:a4:21:8c: 7c:78:c0:22:66:4f:81:8d:dc:a4:1d:ce:4f:52:10:bb:98:04: 89:9d:ba:ae:30:fa:4e:e6:b1:9d:06:f4:e5:e0:19:d5:c9:df: 10:84:e8:4d:ac:bd:ef:25:73:79:c8:1f:8e:3b:50:7d:73:7f: 16:0a:ed:e6:b7:26:2e:63:ba:68:6d:73:90:f3:c0:6b:5f:96: 70:5b:05:18:1a:de:21:3b:af:41:8d:aa:90:35:d8:22:c2:1c: 9a:8e:a2:3e:cf:95:0a:77:fd:e0:ec:9e:da:e7:ba:84:d0:e5: a9:c8:4a:b3:a7:fa:71:c8:e7:80:38:1e:28:0d:3a:48:ec:7d: 51:98:63:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FEbzmc7ibzMxRchOdthXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzE5MGRlZTAwNDVhYTBmMzBhY2I3ODI3MmRjOTE2ZTU3NGZjYjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLP8p7KLMvAtDhki1zlNhZdxv/d4 bdUSIuOlVQUrvt3Vw2CuO0NRZyIYGhGbAfehJZ+QopyHpgCmJhC9iKVBfEbSDlzc aWz1njAzT7FXr/dmKsG6fJyAQ7VB53neklG7AnAfoju8zK3fitjC9WMF6caeWpTJ gPjMukJOkf3khGTq4urrNVeEOj4REKojMuOt7bZxkw8H8p++Vij/daZzU7jy7wBJ bzBE4Suq4HjTUR+OE0gf5h9GguZ+8kXRKKNhdjAjUplL+VYwpLIlkYD/Mx6RN8gh Na2ZJEPvRCeQleAdnKOemPXcVDusXrSX7N1ie6s8JhANJ8SarDkAsVZl+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBwZDe4ARaoPMKy3gnLckW5XT8ubMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvSEJrTjdnQkZxZzh3ckxlQ2N0eVJibGRQeTVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwekgMA0G CSqGSIb3DQEBCwUAA4IBAQAaXpAFAa0PGAwmZod0BjOY366RpW5qKENNNiSq3zJ8 kBIhMf4oxSPZcjQHL+JTq5t1drYlJnnJQpANfh2Zbt3vZdCJITHTKtb/6X0YJ7N+ xMvd2IMe6YMmKoKX5RbTysftLhnrDwz223MXp5ovmwqoZoOk2lcdIwb+IlukIYx8 eMAiZk+BjdykHc5PUhC7mASJnbquMPpO5rGdBvTl4BnVyd8QhOhNrL3vJXN5yB+O O1B9c38WCu3mtyYuY7pobXOQ88BrX5ZwWwUYGt4hO69BjaqQNdgiwhyajqI+z5UK d/3g7J7a57qE0OWpyEqzp/pxyOeAOB4oDTpI7H1RmGPD -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:52 2026 by rpki-client