This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/HuFQZvhRuo0xrVnhchpAwhxXio0.roa File: HuFQZvhRuo0xrVnhchpAwhxXio0.roa (raw, json) Hash identifier: 5dZkdyNjGGkUNI6gq510mm4AVyEYl5KXnKFtrfLu3/Q= Subject key identifier: 1E:E1:50:66:F8:51:BA:8D:31:AD:59:E1:72:1A:40:C2:1C:57:8A:8D Certificate issuer: /CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640 Certificate serial: 019B7910E2B44DC8CC90C9723590EB1AC750 Authority key identifier: 88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/HuFQZvhRuo0xrVnhchpAwhxXio0.roa Signing time: Thu 01 Jan 2026 10:18:28 +0000 ROA not before: Thu 01 Jan 2026 10:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197679 IP address blocks: 91.224.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e2:b4:4d:c8:cc:90:c9:72:35:90:eb:1a:c7:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640 Validity Not Before: Jan 1 10:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ee15066f851ba8d31ad59e1721a40c21c578a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8c:43:10:b4:6e:0e:b0:82:bb:2f:45:3c:ae: 8a:14:7c:8b:d1:c4:95:83:89:a4:95:57:48:4f:33: 11:30:12:d1:e8:b8:da:cd:bf:42:28:4a:e8:b1:fa: 31:49:a3:49:5c:97:0f:8b:43:17:de:6c:44:e1:67: 1f:53:f7:70:13:77:9b:2c:13:8b:70:39:c4:b2:b0: 89:8d:12:29:8d:3a:74:14:fd:48:29:f8:7d:08:cf: 46:69:31:3a:e2:d0:f2:a1:b6:b9:04:19:1b:2b:a3: 85:4b:77:7b:70:b2:11:d3:e5:68:6c:95:ca:1c:75: d2:81:85:6a:ac:8c:82:f3:a5:48:d3:e4:15:6b:bb: 1b:f7:e5:57:c1:ff:dd:0b:e0:d7:15:89:23:39:da: 1f:5f:10:c4:c0:68:42:95:26:40:70:c9:fc:16:3f: bc:f9:56:88:30:b6:c0:c2:c2:22:42:fd:41:03:0d: 86:86:d5:e1:7e:78:ca:29:a9:9f:09:b7:e6:28:14: 6f:01:79:fc:74:bc:47:8e:08:cb:59:c2:40:1e:b7: d0:f0:0c:c0:bd:42:c6:a1:71:09:68:dc:43:93:88: 6e:3e:0a:b6:c4:89:1c:61:da:f9:34:6d:65:90:98: 29:62:f2:af:af:07:cd:79:f7:b9:94:28:48:70:6d: 6a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E1:50:66:F8:51:BA:8D:31:AD:59:E1:72:1A:40:C2:1C:57:8A:8D X509v3 Authority Key Identifier: keyid:88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/HuFQZvhRuo0xrVnhchpAwhxXio0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.238.0/23 Signature Algorithm: sha256WithRSAEncryption ef:25:8b:60:46:3f:82:e6:69:bf:ca:09:ce:43:8e:de:ae:19: a4:2e:ff:40:a6:30:75:37:6c:de:4d:43:28:6f:41:a7:cb:bb: 67:b7:a3:8e:1f:f1:75:86:bb:ea:df:36:a1:73:f8:5b:97:f6: 99:93:b9:59:ab:8f:44:62:3f:8a:e8:54:49:dc:5c:b1:51:d3: 6b:5c:60:f5:4e:95:fb:a0:81:73:07:cc:c6:79:7f:c7:96:8d: 4e:ed:4d:13:5b:9d:25:c7:8d:21:8a:41:ba:2e:77:f8:ca:75: 64:96:ed:25:3b:30:d5:5d:b8:a9:33:a1:4f:d9:74:50:88:d1: 02:07:f2:85:d6:01:42:ff:cc:e0:44:fa:b3:f5:3d:de:66:b5: d3:00:4f:dd:76:48:fe:bc:3f:75:a7:18:2a:eb:d0:e2:ca:d7: 20:6e:6c:04:b6:bf:f6:cb:9d:70:51:8a:13:12:2a:a0:bd:75: 6c:c5:23:f0:94:ac:ca:f0:b2:05:f4:d0:e9:09:0d:5a:4e:c5: a7:20:70:60:76:84:43:2c:c8:78:9b:2d:34:e9:52:c8:d0:53: 48:26:af:32:34:ca:31:e4:df:32:75:d7:76:5a:ad:61:a5:1a: a3:a0:0d:dc:dc:09:d5:02:bf:85:a6:33:b0:5c:18:f3:78:80: c0:cd:ac:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOK0TcjMkMlyNZDrGsdQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4OGM3Yjk0NjQyZDJlNGJiZmI5NTgzYWQ5NDFmNTFlYjhj NDU2NDAwHhcNMjYwMTAxMTAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWUxNTA2NmY4NTFiYThkMzFhZDU5ZTE3MjFhNDBjMjFjNTc4YThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoxDELRuDrCCuy9FPK6KFHyL0cSV g4mklVdITzMRMBLR6Ljazb9CKErosfoxSaNJXJcPi0MX3mxE4WcfU/dwE3ebLBOL cDnEsrCJjRIpjTp0FP1IKfh9CM9GaTE64tDyoba5BBkbK6OFS3d7cLIR0+VobJXK HHXSgYVqrIyC86VI0+QVa7sb9+VXwf/dC+DXFYkjOdofXxDEwGhClSZAcMn8Fj+8 +VaIMLbAwsIiQv1BAw2GhtXhfnjKKamfCbfmKBRvAXn8dLxHjgjLWcJAHrfQ8AzA vULGoXEJaNxDk4huPgq2xIkcYdr5NG1lkJgpYvKvrwfNefe5lChIcG1qTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB7hUGb4UbqNMa1Z4XIaQMIcV4qNMB8GA1UdIwQY MBaAFIiMe5RkLS5Lv7lYOtlB9R64xFZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUl4N2xHUXRMa3VfdVZnNjJVSDFIcmpFVmtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jY2JmN2EtZWMzOC00NGU2LWIyZWIt NzE4Nzk3N2UwNTdlLzEvSHVGUVp2aFJ1bzB4clZuaGNocEF3aHhYaW8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9jY2JmN2EtZWMzOC00NGU2LWIyZWItNzE4Nzk3N2UwNTdl LzEvaUl4N2xHUXRMa3VfdVZnNjJVSDFIcmpFVmtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+DuMA0G CSqGSIb3DQEBCwUAA4IBAQDvJYtgRj+C5mm/ygnOQ47erhmkLv9ApjB1N2zeTUMo b0Gny7tnt6OOH/F1hrvq3zahc/hbl/aZk7lZq49EYj+K6FRJ3FyxUdNrXGD1TpX7 oIFzB8zGeX/Hlo1O7U0TW50lx40hikG6Lnf4ynVklu0lOzDVXbipM6FP2XRQiNEC B/KF1gFC/8zgRPqz9T3eZrXTAE/ddkj+vD91pxgq69DiytcgbmwEtr/2y51wUYoT EiqgvXVsxSPwlKzK8LIF9NDpCQ1aTsWnIHBgdoRDLMh4my006VLI0FNIJq8yNMox 5N8yddd2Wq1hpRqjoA3c3AnVAr+FpjOwXBjzeIDAzaw9 -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:59 2026 by rpki-client