This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/HhUP9V6D6eMcyfe9trO5RFkUgrk.roa File: HhUP9V6D6eMcyfe9trO5RFkUgrk.roa (raw, json) Hash identifier: dLLQt7TFTOMK0HJ6sdmoFfSXq6h2xikykKO4e94KISk= Subject key identifier: 1E:15:0F:F5:5E:83:E9:E3:1C:C9:F7:BD:B6:B3:B9:44:59:14:82:B9 Certificate issuer: /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517 Certificate serial: 019B797ED73578E4558EEF10C0CF0D22C4A4 Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/HhUP9V6D6eMcyfe9trO5RFkUgrk.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.239.162.0/24 maxlen: 24 193.239.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d7:35:78:e4:55:8e:ef:10:c0:cf:0d:22:c4:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517 Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e150ff55e83e9e31cc9f7bdb6b3b944591482b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:08:2e:1c:94:1d:fb:26:02:61:e5:9d:6f:c5: ed:9c:83:62:93:94:94:9f:32:b7:d8:60:39:9c:14: de:78:ca:59:08:b3:15:9b:ce:c6:92:30:03:17:ea: 91:7f:df:fd:b9:1d:b5:24:d8:2f:d9:a0:8d:42:74: 03:37:fb:d9:73:b4:a9:89:a2:f1:9f:83:45:d2:9c: 2a:0c:33:63:4c:a5:9e:17:13:30:df:18:69:b9:28: ac:04:5a:5c:8a:b2:cf:0c:1d:62:4e:4e:5d:21:df: 7b:aa:07:52:0e:91:86:2b:92:d0:bb:c3:95:e8:55: 78:08:6e:16:f2:ed:c8:b1:1a:b2:a9:bd:6f:13:d8: 6a:56:d0:40:50:6b:86:59:0f:c2:9e:a0:dd:4e:02: 10:bf:97:2e:85:c4:99:f7:c7:16:43:43:8d:b5:3e: 72:9b:0b:19:1f:79:a1:e1:4f:49:37:13:19:d8:10: b2:2e:f2:e2:a9:29:63:56:a0:46:4d:4e:e6:f8:07: 12:b1:c2:10:4e:10:78:5d:2a:d8:b2:ff:13:b5:2d: fd:e1:3c:82:3a:ce:ac:7c:7c:e7:46:9c:4b:80:70: 87:c0:75:87:76:8f:a9:9e:5b:51:fa:02:fb:82:98: 92:41:1f:2e:2a:90:ff:db:f1:81:eb:2e:f3:c1:9c: 5a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:15:0F:F5:5E:83:E9:E3:1C:C9:F7:BD:B6:B3:B9:44:59:14:82:B9 X509v3 Authority Key Identifier: keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/HhUP9V6D6eMcyfe9trO5RFkUgrk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.239.162.0/23 Signature Algorithm: sha256WithRSAEncryption 37:73:db:2e:e5:8c:0c:d8:93:66:f5:23:89:de:67:b8:ac:ab: 8b:f8:2b:ec:b8:7a:ad:ac:e8:7a:5f:fd:dc:0f:c9:1d:4a:a4: db:e0:10:9a:a8:a7:bf:bf:c5:e8:65:ba:03:68:50:3a:89:46: a1:e1:b2:c9:80:6d:dd:55:e0:da:fd:c9:ca:f3:d4:ff:6a:d3: 4b:2b:08:5c:c5:eb:bd:0b:6d:52:2c:e0:40:61:50:10:a0:cc: 92:ab:03:c3:f2:31:94:4d:e8:07:29:68:85:5f:fc:59:ce:d8: e6:25:38:c3:c3:6f:e5:5d:98:48:e6:6a:8d:39:c5:f9:eb:94: f6:ed:33:4b:6e:b8:4e:c1:26:a0:6a:eb:e9:6c:a7:3e:52:c5: 92:2a:15:c6:51:c7:f6:81:08:0e:61:20:31:a1:bd:7a:37:d2: 25:7d:9e:16:37:fb:ad:89:d8:49:66:86:a5:9c:b7:cf:60:34: 4e:8f:95:b2:b8:d6:65:59:77:fe:84:e9:bf:4b:0e:3c:dc:dc: 81:d3:b4:42:a8:2c:62:91:8d:6f:1e:df:91:87:3d:e8:7b:67: ef:c9:20:5e:8b:13:3e:88:aa:cc:03:2a:b3:fd:5b:66:92:d6: 73:65:09:11:f3:b8:78:0a:4d:ca:cd:ec:77:ee:84:4c:ec:0e: 39:07:d8:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftc1eORVju8QwM8NIsSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNTFiNWI4MTMyZjllMzA3YjcxN2EzZTFlNTRkMWY3ZjQ1 YWU1MTcwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTE1MGZmNTVlODNlOWUzMWNjOWY3YmRiNmIzYjk0NDU5MTQ4MmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAguHJQd+yYCYeWdb8XtnINik5SU nzK32GA5nBTeeMpZCLMVm87GkjADF+qRf9/9uR21JNgv2aCNQnQDN/vZc7SpiaLx n4NF0pwqDDNjTKWeFxMw3xhpuSisBFpcirLPDB1iTk5dId97qgdSDpGGK5LQu8OV 6FV4CG4W8u3IsRqyqb1vE9hqVtBAUGuGWQ/CnqDdTgIQv5cuhcSZ98cWQ0ONtT5y mwsZH3mh4U9JNxMZ2BCyLvLiqSljVqBGTU7m+AcSscIQThB4XSrYsv8TtS394TyC Os6sfHznRpxLgHCHwHWHdo+pnltR+gL7gpiSQR8uKpD/2/GB6y7zwZxaqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB4VD/Veg+njHMn3vbazuURZFIK5MB8GA1UdIwQY MBaAFI9RtbgTL54we3F6Ph5U0ff0WuUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajFHMXVCTXZuakI3Y1hvLUhsVFI5X1JhNVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kYTI0MjctYjMzYi00YjgxLWFmMzct ZTIyNTFlNDg5Y2JiLzEvSGhVUDlWNkQ2ZU1jeWZlOXRyTzVSRmtVZ3JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kYTI0MjctYjMzYi00YjgxLWFmMzctZTIyNTFlNDg5Y2Ji LzEvajFHMXVCTXZuakI3Y1hvLUhsVFI5X1JhNVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwe+iMA0G CSqGSIb3DQEBCwUAA4IBAQA3c9su5YwM2JNm9SOJ3me4rKuL+CvsuHqtrOh6X/3c D8kdSqTb4BCaqKe/v8XoZboDaFA6iUah4bLJgG3dVeDa/cnK89T/atNLKwhcxeu9 C21SLOBAYVAQoMySqwPD8jGUTegHKWiFX/xZztjmJTjDw2/lXZhI5mqNOcX565T2 7TNLbrhOwSagauvpbKc+UsWSKhXGUcf2gQgOYSAxob16N9IlfZ4WN/utidhJZoal nLfPYDROj5WyuNZlWXf+hOm/Sw483NyB07RCqCxikY1vHt+Rhz3oe2fvySBeixM+ iKrMAyqz/VtmktZzZQkR87h4Ck3Kzex37oRM7A45B9hF -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:48 2026 by rpki-client