This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/HiUqKu1CLOYfZbl3wCDGIXPaQ18.roa File: HiUqKu1CLOYfZbl3wCDGIXPaQ18.roa (raw, json) Hash identifier: jutim/UTVgLR2CiOBLYd1qnaODFkPt/SBYjCIEf8wS8= Subject key identifier: 1E:25:2A:2A:ED:42:2C:E6:1F:65:B9:77:C0:20:C6:21:73:DA:43:5F Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2 Certificate serial: 019B7C7F4C65FB6DF1E27BB3B241F2263DE3 Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/HiUqKu1CLOYfZbl3wCDGIXPaQ18.roa Signing time: Fri 02 Jan 2026 02:17:55 +0000 ROA not before: Fri 02 Jan 2026 02:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5520 IP address blocks: 134.95.0.0/16 maxlen: 16 185.240.116.0/22 maxlen: 22 2a00:a200::/29 maxlen: 29 2a00:a200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:4c:65:fb:6d:f1:e2:7b:b3:b2:41:f2:26:3d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2 Validity Not Before: Jan 2 02:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e252a2aed422ce61f65b977c020c62173da435f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1d:9b:91:cc:41:ee:c8:bb:3b:4e:4a:74:60: e0:30:0b:54:c0:92:6a:c4:0c:a0:4a:94:6d:a3:81: 4f:9c:84:aa:81:29:74:66:c4:90:08:98:4d:fb:d0: a0:b9:84:90:3d:52:fa:12:d4:ea:9d:3b:34:89:2b: 7d:5f:3a:f4:cc:45:11:bd:d5:2a:93:da:b7:18:b7: 47:80:1c:ec:8a:ea:be:19:b8:89:da:62:e3:0a:9f: ee:83:61:27:2a:bb:68:36:81:b2:9e:11:8a:6d:fa: a4:56:64:29:5c:7e:3c:f4:23:15:99:84:c0:99:9e: a0:11:a5:8f:51:39:ef:cd:b7:10:75:48:2f:6e:f9: e3:5a:11:19:ff:06:b3:7d:99:b1:e8:bd:03:7e:77: 03:12:df:74:fe:61:30:2a:af:b0:0b:81:4e:96:dc: 60:2d:35:94:ae:de:c6:12:fe:51:ef:0f:dc:72:6f: 15:f2:56:a6:01:24:dc:76:93:02:86:ef:3b:b4:cf: 7a:09:d1:69:61:a8:2d:90:3c:88:9f:18:3e:00:bb: c7:c9:36:26:8b:cf:be:87:e0:b1:54:81:d3:03:71: 4d:25:1f:c7:6e:5c:c2:43:30:38:b9:49:85:84:94: 3d:40:00:fb:6e:dc:85:1e:30:9d:3d:70:58:5d:31: 1d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:25:2A:2A:ED:42:2C:E6:1F:65:B9:77:C0:20:C6:21:73:DA:43:5F X509v3 Authority Key Identifier: keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/HiUqKu1CLOYfZbl3wCDGIXPaQ18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.95.0.0/16 185.240.116.0/22 IPv6: 2a00:a200::/29 Signature Algorithm: sha256WithRSAEncryption 06:b9:b7:fb:0a:c7:55:d6:40:f5:42:85:94:5c:59:b9:ad:b0: e4:3a:77:93:99:53:64:d1:4a:ba:3c:2a:8d:0b:9e:51:16:7a: d8:0c:ab:9d:a2:7a:c9:9e:92:94:36:8f:4c:21:92:3d:c7:1f: f2:e6:5d:fd:bc:a4:1c:a1:57:b2:26:08:5e:df:07:09:99:86: 20:a2:16:85:a5:73:f5:ad:0d:80:fa:c0:ff:c7:20:89:b6:2a: 2f:91:10:64:62:d0:55:44:83:16:63:99:c4:89:6a:b2:06:60: 4c:2f:8c:d0:54:08:c7:7c:5e:ac:a2:d1:db:e8:8b:33:fa:e4: e3:16:5c:93:4a:55:37:6e:f0:73:d4:6c:41:70:38:14:18:f0: fb:85:78:9d:d8:bd:be:4f:27:aa:37:fa:72:75:85:99:8b:4d: fe:f1:7e:1b:56:9c:5c:99:e2:07:15:dc:05:a9:81:a5:a7:76: 79:dd:4c:7b:fa:c6:93:ec:58:77:4b:7a:e2:0a:ef:08:61:d9: 52:5c:68:96:a8:d3:0f:d7:07:e5:01:87:48:f6:b2:94:e3:55: a4:1c:80:1d:f2:62:a3:35:36:1c:cb:83:25:3a:24:44:2c:5d: 5c:c3:1c:bf:0c:83:8c:48:12:2b:4a:be:83:15:87:68:a3:63: 95:e9:7e:1e -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt8f0xl+23x4nuzskHyJj3jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNTc2MTkxM2Y1NzVjNDExYzk5MjMyMmViYjA2Y2QyZjM3 ZjAyYTIwHhcNMjYwMTAyMDIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTI1MmEyYWVkNDIyY2U2MWY2NWI5NzdjMDIwYzYyMTczZGE0MzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x2bkcxB7si7O05KdGDgMAtUwJJq xAygSpRto4FPnISqgSl0ZsSQCJhN+9CguYSQPVL6EtTqnTs0iSt9Xzr0zEURvdUq k9q3GLdHgBzsiuq+GbiJ2mLjCp/ug2EnKrtoNoGynhGKbfqkVmQpXH489CMVmYTA mZ6gEaWPUTnvzbcQdUgvbvnjWhEZ/wazfZmx6L0DfncDEt90/mEwKq+wC4FOltxg LTWUrt7GEv5R7w/ccm8V8lamASTcdpMChu87tM96CdFpYagtkDyInxg+ALvHyTYm i8++h+CxVIHTA3FNJR/HblzCQzA4uUmFhJQ9QAD7btyFHjCdPXBYXTEdvQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFB4lKirtQizmH2W5d8AgxiFz2kNfMB8GA1UdIwQY MBaAFFNXYZE/V1xBHJkjIuuwbNLzfwKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS85ZjAwYTktYjYwZi00ZTMyLTkwMzct MDRkZmMzNjYzZTM1LzEvSGlVcUt1MUNMT1lmWmJsM3dDREdJWFBhUTE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS85ZjAwYTktYjYwZi00ZTMyLTkwMzctMDRkZmMzNjYzZTM1 LzEvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwMAhl8DBAK5 8HQwDQQCAAIwBwMFAyoAogAwDQYJKoZIhvcNAQELBQADggEBAAa5t/sKx1XWQPVC hZRcWbmtsOQ6d5OZU2TRSro8Ko0LnlEWetgMq52iesmekpQ2j0whkj3HH/LmXf28 pByhV7ImCF7fBwmZhiCiFoWlc/WtDYD6wP/HIIm2Ki+REGRi0FVEgxZjmcSJarIG YEwvjNBUCMd8Xqyi0dvoizP65OMWXJNKVTdu8HPUbEFwOBQY8PuFeJ3Yvb5PJ6o3 +nJ1hZmLTf7xfhtWnFyZ4gcV3AWpgaWndnndTHv6xpPsWHdLeuIK7whh2VJcaJao 0w/XB+UBh0j2spTjVaQcgB3yYqM1NhzLgyU6JEQsXVzDHL8Mg4xIEitKvoMVh2ij Y5Xpfh4= -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:07 2026 by rpki-client