This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/HBWWYqu3QsKptEai5aVSsFVA_Mw.roa File: HBWWYqu3QsKptEai5aVSsFVA_Mw.roa (raw, json) Hash identifier: WlTC9L0JVgdb/Unbuetv/EFxcDPtPHkw+IWYA1PdZgk= Subject key identifier: 1C:15:96:62:AB:B7:42:C2:A9:B4:46:A2:E5:A5:52:B0:55:40:FC:CC Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019A5810BCF42B5232325AC7176C927AABCE Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/HBWWYqu3QsKptEai5aVSsFVA_Mw.roa Signing time: Thu 06 Nov 2025 07:28:03 +0000 ROA not before: Thu 06 Nov 2025 07:28:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 194.231.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:10:bc:f4:2b:52:32:32:5a:c7:17:6c:92:7a:ab:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Nov 6 07:28:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1c159662abb742c2a9b446a2e5a552b05540fccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:6b:90:3c:87:2a:b5:f2:34:c6:14:18:9a: 1f:a2:5b:f4:32:2c:d1:a5:88:95:0c:fb:89:f8:25: 8a:73:09:8e:a5:c4:a2:86:ee:40:8b:ba:3d:f6:bc: c0:79:08:18:09:a0:33:c4:bd:5f:ea:2b:61:95:bd: 03:f9:74:a6:3f:75:08:84:98:28:93:39:ad:64:fb: c1:c9:aa:d8:0e:49:ef:80:c0:a1:92:4b:54:6f:75: 6f:aa:b6:7c:02:ec:47:17:78:bc:24:9d:83:be:a7: 0b:26:15:44:ba:0f:85:24:34:e4:52:51:55:09:21: 6b:35:55:d6:93:37:9c:24:ec:e1:3b:13:4a:98:ae: ba:22:70:7f:ab:82:b8:20:9a:ee:fc:e3:dd:0f:b3: af:e5:5b:b4:1f:e4:6d:94:2b:06:bf:04:2b:c1:6a: ed:ef:7e:11:15:06:11:50:34:bd:a8:62:85:cf:04: e0:c8:23:fe:63:fc:66:41:d2:40:6c:42:a5:7d:b1: 2c:aa:77:c5:5e:79:59:02:fe:c2:1f:ee:c1:a6:d5: e9:74:1f:06:91:5e:4b:b8:42:3d:2f:6a:8d:17:17: ad:db:64:2f:d1:41:82:31:18:b5:94:07:41:2b:9d: fd:81:8a:6e:88:79:55:02:ac:74:f4:8d:1a:9d:58: f8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:15:96:62:AB:B7:42:C2:A9:B4:46:A2:E5:A5:52:B0:55:40:FC:CC X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/HBWWYqu3QsKptEai5aVSsFVA_Mw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.231.143.0/24 Signature Algorithm: sha256WithRSAEncryption 24:20:53:82:9c:ba:16:80:8a:47:45:a9:c6:6a:c1:e4:3f:d6: b6:d7:58:69:e5:a4:76:d1:08:f9:8b:23:6e:b1:c9:be:ef:77: 9d:ff:68:84:bc:77:36:1f:0d:6e:e4:ea:3c:02:3a:27:ea:f7: 55:da:07:60:5f:65:ba:d8:ed:68:e8:3a:7f:10:94:13:18:2a: 47:2d:96:73:f9:7e:46:75:b3:42:f4:57:da:d0:ee:07:5c:c8: b3:fa:da:0c:42:9f:79:a5:28:c9:22:3b:75:7f:a5:e3:11:20: 08:90:1a:b3:fa:71:81:c7:1e:f0:27:b1:d1:0b:50:3c:33:80: 6f:5b:5c:d2:9a:da:f9:53:bb:47:0a:4a:4b:c5:d5:68:7d:1b: 62:ae:e7:15:c0:59:86:08:9e:90:48:aa:c7:46:31:be:71:44: 6a:0a:40:50:70:a6:b6:6e:99:71:04:44:2a:6a:05:23:22:3d: 66:36:6f:a1:0b:ea:99:75:03:04:f7:fb:a6:7b:48:59:12:ab: 78:e0:e7:25:57:49:cb:42:7e:7b:d0:76:e2:21:53:ac:2f:88: 2c:82:67:eb:ac:6c:8a:13:ff:c8:b3:90:fc:96:7c:f7:99:f4: 63:f7:7e:9c:0b:5b:df:27:6d:ff:c4:fd:6f:d1:53:e8:66:07: 30:5c:46:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpYELz0K1IyMlrHF2ySeqvOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMTA2MDcyODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzE1OTY2MmFiYjc0MmMyYTliNDQ2YTJlNWE1NTJiMDU1NDBmY2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrFrkDyHKrXyNMYUGJofolv0MizR pYiVDPuJ+CWKcwmOpcSihu5Ai7o99rzAeQgYCaAzxL1f6ithlb0D+XSmP3UIhJgo kzmtZPvByarYDknvgMChkktUb3VvqrZ8AuxHF3i8JJ2DvqcLJhVEug+FJDTkUlFV CSFrNVXWkzecJOzhOxNKmK66InB/q4K4IJru/OPdD7Ov5Vu0H+RtlCsGvwQrwWrt 734RFQYRUDS9qGKFzwTgyCP+Y/xmQdJAbEKlfbEsqnfFXnlZAv7CH+7BptXpdB8G kV5LuEI9L2qNFxet22Qv0UGCMRi1lAdBK539gYpuiHlVAqx09I0anVj4KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBwVlmKrt0LCqbRGouWlUrBVQPzMMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvSEJXV1lxdTNRc0twdEVhaTVhVlNzRlZBX013LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwuePMA0G CSqGSIb3DQEBCwUAA4IBAQAkIFOCnLoWgIpHRanGasHkP9a211hp5aR20Qj5iyNu scm+73ed/2iEvHc2Hw1u5Oo8Ajon6vdV2gdgX2W62O1o6Dp/EJQTGCpHLZZz+X5G dbNC9Ffa0O4HXMiz+toMQp95pSjJIjt1f6XjESAIkBqz+nGBxx7wJ7HRC1A8M4Bv W1zSmtr5U7tHCkpLxdVofRtirucVwFmGCJ6QSKrHRjG+cURqCkBQcKa2bplxBEQq agUjIj1mNm+hC+qZdQME9/ume0hZEqt44OclV0nLQn570HbiIVOsL4gsgmfrrGyK E//Is5D8lnz3mfRj936cC1vfJ23/xP1v0VPoZgcwXEZC -----END CERTIFICATE-----Generated at Fri Dec 5 04:29:26 2025 by rpki-client