This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/HUfPguDLv61FjwhE83RjHvo6SG0.roa File: HUfPguDLv61FjwhE83RjHvo6SG0.roa (raw, json) Hash identifier: TVSqZsAvt2m9gNwVr8IK6jrYRpSQJdNbVnyELUQDzIY= Subject key identifier: 1D:47:CF:82:E0:CB:BF:AD:45:8F:08:44:F3:74:63:1E:FA:3A:48:6D Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B7F8385B5D7FE16608C35C802A3A35EED Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/HUfPguDLv61FjwhE83RjHvo6SG0.roa Signing time: Fri 02 Jan 2026 16:21:24 +0000 ROA not before: Fri 02 Jan 2026 16:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 185.83.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:85:b5:d7:fe:16:60:8c:35:c8:02:a3:a3:5e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 2 16:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d47cf82e0cbbfad458f0844f374631efa3a486d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:44:d4:0f:61:89:1d:ff:27:52:08:5b:e3:98: b4:4f:b9:7d:51:54:97:7c:e7:f3:8c:3c:2f:7a:10: e2:bb:e3:28:51:99:16:31:fd:2c:b1:bf:91:15:ec: e4:3e:c9:a5:cf:70:6a:aa:a5:7b:50:01:24:48:c8: 9a:52:d0:a9:04:1b:a6:cf:2b:29:9d:e1:a2:93:d9: ea:b7:2b:a8:54:14:7f:e6:f0:85:ba:dd:20:64:c6: 30:15:8e:d9:91:f0:6f:5e:b7:4e:af:8b:dc:b4:48: 3a:df:71:3c:33:51:04:a8:8b:0f:34:5c:ac:a6:d7: 72:15:88:c4:7f:58:1a:9b:21:39:ce:0c:23:c0:72: 16:a1:18:b7:2e:1c:05:10:73:82:95:cf:06:43:12: de:ee:90:1d:25:6a:04:15:df:15:63:2b:7f:bb:22: 2c:74:9e:52:13:ce:b6:88:2f:fb:37:af:dc:db:9e: ed:45:14:6e:ed:b3:62:16:bd:d2:3a:fd:5f:60:ce: c3:58:f3:da:28:1c:f7:06:db:e8:ae:33:8b:98:6c: 9d:fa:53:67:29:3d:aa:0c:4b:15:b6:94:9a:7a:a3: 3e:e0:80:5d:d9:49:c2:b2:32:de:88:ad:3b:6d:73: d4:bb:e6:99:55:28:3a:39:6a:6b:c5:04:fd:07:66: fb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:47:CF:82:E0:CB:BF:AD:45:8F:08:44:F3:74:63:1E:FA:3A:48:6D X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/HUfPguDLv61FjwhE83RjHvo6SG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.203.0/24 Signature Algorithm: sha256WithRSAEncryption 03:16:0d:13:cb:58:4e:f4:9e:13:1c:46:5a:af:34:cd:55:c5: 8a:90:b1:7e:71:99:8e:99:e3:e8:5d:cc:b8:eb:c4:0d:54:c3: 20:5b:f7:43:d5:c7:88:0b:73:74:85:17:52:aa:72:a9:4d:21: 87:12:5e:18:25:e4:7c:75:6e:0b:a3:61:6b:16:c0:07:48:33: eb:32:53:31:74:fc:10:c4:fc:f3:d8:46:02:65:4e:0a:31:3a: 89:fc:d5:75:b9:d0:97:98:a5:1f:e1:49:61:79:a3:49:a4:80: ab:3b:4b:bb:f5:59:ca:05:7a:82:ed:9d:0e:cf:ec:34:97:82: f8:7a:40:1e:b7:45:85:c4:43:fb:c3:07:3b:49:22:29:d2:80: ef:b7:08:3b:d4:cb:ab:2d:45:ac:d3:4c:bc:cf:77:b3:c2:c0: 4a:8f:9b:cb:7c:10:50:6e:59:0c:c9:e1:90:1e:50:ca:88:8b: aa:6b:85:75:8a:4c:37:d5:d4:fd:85:3d:22:ec:b3:83:b1:f7: a9:28:f3:6d:ac:a8:2c:43:d1:a2:fb:cd:0d:02:59:8a:b3:33: 97:2b:c0:32:b8:34:93:85:e9:2a:10:2f:23:fa:96:79:ad:d9: 96:ba:d2:d0:29:fe:ea:89:bb:5c:14:98:67:f6:99:4d:e6:a9: 6d:2f:4e:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g4W11/4WYIw1yAKjo17tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTAyMTYyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDQ3Y2Y4MmUwY2JiZmFkNDU4ZjA4NDRmMzc0NjMxZWZhM2E0ODZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkTUD2GJHf8nUghb45i0T7l9UVSX fOfzjDwvehDiu+MoUZkWMf0ssb+RFezkPsmlz3BqqqV7UAEkSMiaUtCpBBumzysp neGik9nqtyuoVBR/5vCFut0gZMYwFY7ZkfBvXrdOr4vctEg633E8M1EEqIsPNFys ptdyFYjEf1gamyE5zgwjwHIWoRi3LhwFEHOClc8GQxLe7pAdJWoEFd8VYyt/uyIs dJ5SE862iC/7N6/c257tRRRu7bNiFr3SOv1fYM7DWPPaKBz3BtvorjOLmGyd+lNn KT2qDEsVtpSaeqM+4IBd2UnCsjLeiK07bXPUu+aZVSg6OWprxQT9B2b7uwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB1Hz4Lgy7+tRY8IRPN0Yx76OkhtMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvSFVmUGd1REx2NjFGandoRTgzUmpIdm82U0cwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVPLMA0G CSqGSIb3DQEBCwUAA4IBAQADFg0Ty1hO9J4THEZarzTNVcWKkLF+cZmOmePoXcy4 68QNVMMgW/dD1ceIC3N0hRdSqnKpTSGHEl4YJeR8dW4Lo2FrFsAHSDPrMlMxdPwQ xPzz2EYCZU4KMTqJ/NV1udCXmKUf4UlheaNJpICrO0u79VnKBXqC7Z0Oz+w0l4L4 ekAet0WFxEP7wwc7SSIp0oDvtwg71MurLUWs00y8z3ezwsBKj5vLfBBQblkMyeGQ HlDKiIuqa4V1ikw31dT9hT0i7LODsfepKPNtrKgsQ9Gi+80NAlmKszOXK8AyuDST hekqEC8j+pZ5rdmWutLQKf7qibtcFJhn9plN5qltL05m -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:18 2026 by rpki-client