This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/HBvWuzDzVE6XUCrn9sH2DIhwxus.roa File: HBvWuzDzVE6XUCrn9sH2DIhwxus.roa (raw, json) Hash identifier: cpGNaxmLWD3MRZJdqkLot84X1oqVsHPgItjgvLmgKM4= Subject key identifier: 1C:1B:D6:BB:30:F3:54:4E:97:50:2A:E7:F6:C1:F6:0C:88:70:C6:EB Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019BC78AC8F9C07DE7791D4625A121EB6975 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/HBvWuzDzVE6XUCrn9sH2DIhwxus.roa Signing time: Fri 16 Jan 2026 16:01:59 +0000 ROA not before: Fri 16 Jan 2026 16:01:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 109.236.49.0/24 maxlen: 24 109.236.51.0/24 maxlen: 24 160.20.111.0/24 maxlen: 24 185.85.236.0/24 maxlen: 24 185.254.28.0/24 maxlen: 24 185.254.29.0/24 maxlen: 24 193.35.152.0/24 maxlen: 24 193.35.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c7:8a:c8:f9:c0:7d:e7:79:1d:46:25:a1:21:eb:69:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 16 16:01:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c1bd6bb30f3544e97502ae7f6c1f60c8870c6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:88:f0:ba:4d:3c:1a:5d:af:35:48:81:32: 4f:09:ad:6e:76:36:31:aa:b4:cf:75:8f:4a:51:f6: f3:b0:a1:e5:b3:21:80:77:05:c5:68:1b:85:f5:94: 95:7e:2c:c5:32:1e:5e:f0:74:24:53:93:99:07:aa: 16:94:38:37:8f:16:d9:48:d3:de:84:bb:b0:00:56: 54:67:ba:b0:41:55:2e:55:11:aa:18:6e:f8:b5:1f: 7b:73:0f:84:74:10:89:03:4a:8c:35:e6:96:be:37: 0f:46:33:c5:56:0a:a9:e4:cb:f9:ac:61:d1:91:f7: c6:dd:82:d1:4f:5b:53:bb:4c:b4:18:75:ad:99:86: b2:11:86:ec:1d:14:5e:4c:96:9f:f9:65:47:25:d4: 7e:11:02:a6:f2:73:94:4e:22:bd:1b:39:76:e0:75: 9b:c5:4c:71:a8:17:bf:8e:1c:34:58:5b:24:39:f3: da:9d:87:86:ec:f3:29:4f:fb:a0:b2:2f:3c:82:09: 3f:06:c0:2a:4a:08:45:a4:01:ac:25:22:b0:4f:40: a7:3b:88:88:1b:c2:cf:49:4c:aa:ff:2e:ee:6a:7d: 46:71:28:3a:b6:be:bb:74:d6:33:b9:ab:fe:6b:6b: 9b:d0:ec:01:b0:81:c7:ed:25:9b:54:ee:58:73:11: 22:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1B:D6:BB:30:F3:54:4E:97:50:2A:E7:F6:C1:F6:0C:88:70:C6:EB X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/HBvWuzDzVE6XUCrn9sH2DIhwxus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.236.49.0/24 109.236.51.0/24 160.20.111.0/24 185.85.236.0/24 185.254.28.0/23 193.35.152.0/24 193.35.155.0/24 Signature Algorithm: sha256WithRSAEncryption 01:38:9a:bb:9d:c2:0b:8e:08:f0:30:7d:d7:63:63:11:ec:92: 92:f5:e3:e0:0a:91:0e:8c:53:ce:7f:13:67:43:46:ed:a0:b3: 34:eb:40:e5:25:00:1a:94:47:10:14:cc:b2:e0:2d:59:a0:c1: 73:e7:37:ef:e6:45:ae:bc:7b:a2:02:a9:21:05:71:b8:14:61: 2b:51:c1:c5:f2:1c:2f:52:e1:e4:11:dc:be:b7:a0:e4:5f:f8: 85:b8:c3:d0:56:ad:93:46:ee:e3:f7:70:f9:3e:94:aa:77:d2: c9:3e:29:79:18:17:55:b4:67:4a:c6:5f:7e:f9:b1:bd:4c:e9: 3f:db:c9:39:fa:25:a5:69:38:f1:5b:89:f6:42:b4:95:ef:f6: 8f:ff:c4:96:c6:cb:48:df:a3:02:96:97:b8:78:28:4d:e6:b5: b2:37:0e:c8:fe:42:57:4d:8b:be:0e:72:8d:ac:7e:89:09:01: 45:07:94:b5:87:0b:1d:03:ab:bf:b4:41:d1:e2:2b:c0:6e:3a: 43:0a:86:9e:d4:36:80:ce:19:b8:66:d3:12:e6:a0:93:60:57: d2:3c:c4:57:2e:1a:05:d4:4e:2c:3d:c0:21:fc:56:93:c8:10: e8:a9:3c:0f:2e:48:cc:d6:05:b8:62:31:99:23:92:04:46:e2: 7d:e6:41:e8 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZvHisj5wH3neR1GJaEh62l1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTE2MTYwMTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzFiZDZiYjMwZjM1NDRlOTc1MDJhZTdmNmMxZjYwYzg4NzBjNmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1qI8LpNPBpdrzVIgTJPCa1udjYx qrTPdY9KUfbzsKHlsyGAdwXFaBuF9ZSVfizFMh5e8HQkU5OZB6oWlDg3jxbZSNPe hLuwAFZUZ7qwQVUuVRGqGG74tR97cw+EdBCJA0qMNeaWvjcPRjPFVgqp5Mv5rGHR kffG3YLRT1tTu0y0GHWtmYayEYbsHRReTJaf+WVHJdR+EQKm8nOUTiK9Gzl24HWb xUxxqBe/jhw0WFskOfPanYeG7PMpT/ugsi88ggk/BsAqSghFpAGsJSKwT0CnO4iI G8LPSUyq/y7uan1GcSg6tr67dNYzuav+a2ub0OwBsIHH7SWbVO5YcxEi5wIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFBwb1rsw81ROl1Aq5/bB9gyIcMbrMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvSEJ2V3V6RHpWRTZYVUNybjlzSDJESWh3eHVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAbewxAwQA bewzAwQAoBRvAwQAuVXsAwQBuf4cAwQAwSOYAwQAwSObMA0GCSqGSIb3DQEBCwUA A4IBAQABOJq7ncILjgjwMH3XY2MR7JKS9ePgCpEOjFPOfxNnQ0btoLM060DlJQAa lEcQFMyy4C1ZoMFz5zfv5kWuvHuiAqkhBXG4FGErUcHF8hwvUuHkEdy+t6DkX/iF uMPQVq2TRu7j93D5PpSqd9LJPil5GBdVtGdKxl9++bG9TOk/28k5+iWlaTjxW4n2 QrSV7/aP/8SWxstI36MClpe4eChN5rWyNw7I/kJXTYu+DnKNrH6JCQFFB5S1hwsd A6u/tEHR4ivAbjpDCoae1DaAzhm4ZtMS5qCTYFfSPMRXLhoF1E4sPcAh/FaTyBDo qTwPLkjM1gW4YjGZI5IERuJ95kHo -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:43 2026 by rpki-client