This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/HbwmN3jrt86VovdnkhlnX-L3_UM.roa File: HbwmN3jrt86VovdnkhlnX-L3_UM.roa (raw, json) Hash identifier: FTOcsxdU2Nd8AvXQ7jEYY9Q4L9DRglHMUYoTz7FZ1zA= Subject key identifier: 1D:BC:26:37:78:EB:B7:CE:95:A2:F7:67:92:19:67:5F:E2:F7:FD:43 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019BC0948D5C62A6EC89F59BD596CD1288E2 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/HbwmN3jrt86VovdnkhlnX-L3_UM.roa Signing time: Thu 15 Jan 2026 07:35:19 +0000 ROA not before: Thu 15 Jan 2026 07:35:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210099 IP address blocks: 78.135.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c0:94:8d:5c:62:a6:ec:89:f5:9b:d5:96:cd:12:88:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 15 07:35:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dbc263778ebb7ce95a2f7679219675fe2f7fd43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:50:ea:47:b5:d6:f2:68:62:1c:ce:33:4d:d9: 56:75:2b:da:58:10:8c:ce:57:87:64:5e:76:91:3e: b1:02:10:02:cd:0e:77:fc:32:76:7a:b3:da:79:66: 1d:8e:e4:15:51:e4:0c:84:d3:38:5b:24:bc:76:6f: 1e:de:36:94:47:56:88:90:5d:fc:d1:50:0a:e2:d4: 44:c4:4d:14:e4:46:0c:b8:ad:75:1b:3f:e8:d1:24: 66:79:51:ca:6b:06:28:dc:5f:65:56:1d:5b:d1:cf: 7d:e2:ae:d2:6c:2a:4f:dc:e5:aa:68:5b:87:1c:e0: 9f:b3:3d:c0:98:8a:25:d2:02:04:3c:78:f4:ea:5e: 34:81:75:f2:41:b6:b9:ee:eb:6e:fe:f4:0d:05:17: c3:f8:f9:ad:af:90:64:0f:46:0a:7a:1c:9f:9f:39: 60:38:7b:bc:68:59:e9:c6:c3:ba:22:94:48:71:46: cb:c7:4c:f1:91:5b:1b:f6:27:95:89:2a:61:f6:a5: 1a:bd:c7:8b:70:24:80:0c:de:cc:7e:9d:ca:5f:de: b2:fc:27:8c:b7:58:81:20:55:82:5b:47:50:e9:89: 4b:2e:78:ef:7b:26:d2:5e:a6:93:ef:41:cb:0c:ad: 57:ca:9e:1c:50:de:56:cc:33:e2:69:9f:a8:0d:73: d4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BC:26:37:78:EB:B7:CE:95:A2:F7:67:92:19:67:5F:E2:F7:FD:43 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/HbwmN3jrt86VovdnkhlnX-L3_UM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.73.0/24 Signature Algorithm: sha256WithRSAEncryption 97:30:61:83:7c:ed:b9:1b:92:33:f2:e9:6b:bf:71:4e:dd:1a: d4:0c:54:1b:f6:6e:96:e8:c3:dd:46:1d:c8:3d:69:92:b9:3e: 5c:9d:e5:d5:9c:f7:f5:bb:53:c4:f1:6b:35:53:0c:8f:73:17: 06:cb:c8:b1:ad:ef:2c:2a:52:54:9e:35:87:bf:29:25:ae:c2: 4d:6d:7d:01:ff:d6:f3:7e:ee:cf:15:ff:68:d7:55:65:0c:29: e3:b7:e7:a7:ca:d4:47:4b:b2:67:5a:62:33:b0:a6:5e:2a:02: 3d:67:30:78:18:1e:bd:e3:30:b7:96:f6:30:79:30:8c:a0:92: 35:d0:84:ed:09:23:89:0b:44:f0:63:04:cd:e8:9d:e5:32:2e: 57:71:fa:e5:18:ef:8d:53:db:f0:92:80:16:a8:85:4d:2b:3c: 54:fb:15:98:a9:e9:d4:8a:ef:11:03:b9:5b:e3:4c:4d:4e:b5: 6b:7f:b7:58:f4:81:33:d1:e6:2f:48:ca:d4:19:1b:f2:77:38: e5:4f:e3:98:8e:cf:40:c8:66:a2:8c:20:54:5f:f2:e1:3d:7f: 3c:cc:1f:59:4c:aa:ae:8b:9e:59:1f:5b:40:de:6e:d3:f1:a0: 25:a6:d1:bb:57:a2:56:3a:6f:30:c2:ac:ee:d9:f7:9e:5e:4a: 17:45:63:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvAlI1cYqbsifWb1ZbNEojiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTE1MDczNTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGJjMjYzNzc4ZWJiN2NlOTVhMmY3Njc5MjE5Njc1ZmUyZjdmZDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlDqR7XW8mhiHM4zTdlWdSvaWBCM zleHZF52kT6xAhACzQ53/DJ2erPaeWYdjuQVUeQMhNM4WyS8dm8e3jaUR1aIkF38 0VAK4tRExE0U5EYMuK11Gz/o0SRmeVHKawYo3F9lVh1b0c994q7SbCpP3OWqaFuH HOCfsz3AmIol0gIEPHj06l40gXXyQba57utu/vQNBRfD+Pmtr5BkD0YKehyfnzlg OHu8aFnpxsO6IpRIcUbLx0zxkVsb9ieViSph9qUavceLcCSADN7Mfp3KX96y/CeM t1iBIFWCW0dQ6YlLLnjveybSXqaT70HLDK1Xyp4cUN5WzDPiaZ+oDXPULwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB28Jjd467fOlaL3Z5IZZ1/i9/1DMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvSGJ3bU4zanJ0ODZWb3ZkbmtobG5YLUwzX1VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATodJMA0G CSqGSIb3DQEBCwUAA4IBAQCXMGGDfO25G5Iz8ulrv3FO3RrUDFQb9m6W6MPdRh3I PWmSuT5cneXVnPf1u1PE8Ws1UwyPcxcGy8ixre8sKlJUnjWHvyklrsJNbX0B/9bz fu7PFf9o11VlDCnjt+enytRHS7JnWmIzsKZeKgI9ZzB4GB694zC3lvYweTCMoJI1 0ITtCSOJC0TwYwTN6J3lMi5XcfrlGO+NU9vwkoAWqIVNKzxU+xWYqenUiu8RA7lb 40xNTrVrf7dY9IEz0eYvSMrUGRvydzjlT+OYjs9AyGaijCBUX/LhPX88zB9ZTKqu i55ZH1tA3m7T8aAlptG7V6JWOm8wwqzu2feeXkoXRWNG -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:51 2026 by rpki-client