This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/hVWAONuzeazGNdnWSgmA3i9K9C4.roa File: hVWAONuzeazGNdnWSgmA3i9K9C4.roa (raw, json) Hash identifier: uImqFCqVZwZHHyqryIJNgNimhq6Y9tDjYPxtIUj1zD0= Subject key identifier: 85:55:80:38:DB:B3:79:AC:C6:35:D9:D6:4A:09:80:DE:2F:4A:F4:2E Certificate issuer: /CN=05a3b616407b97e26116334877c6aa928aaaeeb2 Certificate serial: 019B7F13ABF2A231D7B1F0A90B7F6C6BF335 Authority key identifier: 05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/hVWAONuzeazGNdnWSgmA3i9K9C4.roa Signing time: Fri 02 Jan 2026 14:19:14 +0000 ROA not before: Fri 02 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198024 IP address blocks: 161.41.0.0/17 maxlen: 17 161.41.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:ab:f2:a2:31:d7:b1:f0:a9:0b:7f:6c:6b:f3:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05a3b616407b97e26116334877c6aa928aaaeeb2 Validity Not Before: Jan 2 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85558038dbb379acc635d9d64a0980de2f4af42e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8a:99:48:4a:86:ed:cf:cb:1f:24:e6:f6:49: 3e:ec:51:d3:be:16:c6:d1:77:9b:c6:5b:dd:46:18: 7a:ce:f0:be:7e:94:b6:c0:cf:e2:f5:46:69:43:d4: 2b:e8:36:c8:44:ce:7e:91:93:7d:f6:d0:ab:b7:69: e8:5e:aa:6a:e2:0c:c4:ba:c1:bc:7d:c2:14:97:ff: 92:b4:18:a8:81:1a:a6:c2:1c:0d:c3:83:48:ae:d0: 34:67:22:f9:93:6b:12:3d:56:87:f0:70:b0:f1:09: 5c:55:1f:27:01:c6:b9:59:49:ab:ac:d4:df:9a:70: 27:21:52:13:45:f8:5c:c0:08:7c:30:9c:e5:54:f8: 5a:52:10:03:37:87:a7:f1:74:2e:e5:93:67:9e:a8: 5f:13:13:73:7c:13:5b:45:59:06:57:bc:d5:2c:c5: 3a:35:47:5c:76:dd:3d:41:18:28:a6:48:43:c3:5d: 48:cb:dc:3d:5a:a4:36:3c:f3:f5:38:bb:e7:54:d3: ae:b9:64:27:ad:8b:e3:95:f2:00:eb:f6:d4:b0:bf: 8e:c6:50:07:eb:28:84:e5:ca:fe:f2:00:16:9a:f7: 46:d2:b4:85:af:c6:e8:05:c8:b7:2c:0b:e2:ee:94: 10:fe:3d:2c:67:a0:5c:e8:26:bd:0c:28:f7:9f:89: 88:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:55:80:38:DB:B3:79:AC:C6:35:D9:D6:4A:09:80:DE:2F:4A:F4:2E X509v3 Authority Key Identifier: keyid:05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/hVWAONuzeazGNdnWSgmA3i9K9C4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.41.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4a:5c:81:56:a8:ee:0a:67:3c:69:5a:aa:bf:88:c8:2d:fb:22: a2:22:fc:0e:a9:3c:63:47:be:21:82:47:f6:f6:6a:bd:fe:33: 24:38:95:3d:50:b3:ce:d7:66:88:bc:15:8d:74:79:6f:68:02: 99:69:d7:80:f0:2f:65:38:65:90:4a:e6:f2:30:ef:4d:dd:1a: 59:cb:5c:52:5c:e1:e1:72:d7:7a:c0:ec:fd:1b:2e:1f:cb:dd: 10:a8:3a:00:5f:e3:5c:42:ed:6c:7c:37:3b:1d:1d:01:5e:63: d7:d0:66:0e:36:28:6e:4f:28:e0:f5:39:5d:8b:12:7b:f5:54: c4:46:96:15:99:6b:f6:48:61:12:00:46:72:31:16:02:34:9e: 6c:5c:75:fe:d1:c5:f2:3c:51:09:8b:e3:c7:f9:a5:72:4a:58: d8:9b:56:8e:0a:af:a5:fb:a8:d2:fe:a3:ce:09:68:ad:42:6d: e7:07:44:10:c6:08:0e:31:85:89:1a:95:9e:90:c9:28:a1:7b: 0e:d5:98:4d:62:dc:46:46:4e:43:d4:22:03:be:e9:08:d9:9d: 41:32:96:e5:a4:3c:64:ae:d1:29:c1:c8:05:ae:b3:ff:9e:09: 96:e0:09:96:4a:b6:ac:4c:02:80:a2:5e:dc:b6:33:f0:f2:b2: 46:39:86:7d -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt/E6vyojHXsfCpC39sa/M1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YTNiNjE2NDA3Yjk3ZTI2MTE2MzM0ODc3YzZhYTkyOGFh YWVlYjIwHhcNMjYwMTAyMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTU1ODAzOGRiYjM3OWFjYzYzNWQ5ZDY0YTA5ODBkZTJmNGFmNDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4qZSEqG7c/LHyTm9kk+7FHTvhbG 0XebxlvdRhh6zvC+fpS2wM/i9UZpQ9Qr6DbIRM5+kZN99tCrt2noXqpq4gzEusG8 fcIUl/+StBiogRqmwhwNw4NIrtA0ZyL5k2sSPVaH8HCw8QlcVR8nAca5WUmrrNTf mnAnIVITRfhcwAh8MJzlVPhaUhADN4en8XQu5ZNnnqhfExNzfBNbRVkGV7zVLMU6 NUdcdt09QRgopkhDw11Iy9w9WqQ2PPP1OLvnVNOuuWQnrYvjlfIA6/bUsL+OxlAH 6yiE5cr+8gAWmvdG0rSFr8boBci3LAvi7pQQ/j0sZ6Bc6Ca9DCj3n4mI6QIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFIVVgDjbs3msxjXZ1koJgN4vSvQuMB8GA1UdIwQY MBaAFAWjthZAe5fiYRYzSHfGqpKKqu6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmFPMkZrQjdsLUpoRmpOSWQ4YXFrb3FxN3JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NDFmNDUtYjkzMy00MDE5LWFhN2Et YWQ1MTM1NzRhNDA0LzEvaFZXQU9OdXplYXpHTmRuV1NnbUEzaTlLOUM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NDFmNDUtYjkzMy00MDE5LWFhN2EtYWQ1MTM1NzRhNDA0 LzEvQmFPMkZrQjdsLUpoRmpOSWQ4YXFrb3FxN3JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoSkwDQYJ KoZIhvcNAQELBQADggEBAEpcgVao7gpnPGlaqr+IyC37IqIi/A6pPGNHviGCR/b2 ar3+MyQ4lT1Qs87XZoi8FY10eW9oAplp14DwL2U4ZZBK5vIw703dGlnLXFJc4eFy 13rA7P0bLh/L3RCoOgBf41xC7Wx8NzsdHQFeY9fQZg42KG5PKOD1OV2LEnv1VMRG lhWZa/ZIYRIARnIxFgI0nmxcdf7RxfI8UQmL48f5pXJKWNibVo4Kr6X7qNL+o84J aK1CbecHRBDGCA4xhYkalZ6QySihew7VmE1i3EZGTkPUIgO+6QjZnUEyluWkPGSu 0SnByAWus/+eCZbgCZZKtqxMAoCiXty2M/DyskY5hn0= -----END CERTIFICATE-----Generated at Tue Jan 27 00:26:55 2026 by rpki-client