This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/HhuLuv4H8nFl-u4FRGTWHs5DTJg.roa File: HhuLuv4H8nFl-u4FRGTWHs5DTJg.roa (raw, json) Hash identifier: 6cAQwo1q/0sZVyGynHF1390xD5S+4XKwq9DB6RFsVo4= Subject key identifier: 1E:1B:8B:BA:FE:07:F2:71:65:FA:EE:05:44:64:D6:1E:CE:43:4C:98 Certificate issuer: /CN=f286832adda40a97eb863a5a6482c946931a66ef Certificate serial: 019B79ED23A38ACE129840F2EF97673FC7D1 Authority key identifier: F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/HhuLuv4H8nFl-u4FRGTWHs5DTJg.roa Signing time: Thu 01 Jan 2026 14:19:02 +0000 ROA not before: Thu 01 Jan 2026 14:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 193.200.158.0/24 maxlen: 24 2001:678:10b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:23:a3:8a:ce:12:98:40:f2:ef:97:67:3f:c7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f286832adda40a97eb863a5a6482c946931a66ef Validity Not Before: Jan 1 14:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e1b8bbafe07f27165faee054464d61ece434c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ef:6a:ae:62:15:9f:52:43:fa:36:f7:b6:c1: 8e:d4:ea:df:f5:50:3c:63:06:63:7c:97:5c:e0:9e: 1e:97:2f:3a:2b:83:31:5c:62:ef:f9:bf:cd:4f:51: ab:f9:cf:4a:71:31:dd:b6:72:81:a9:5d:03:54:2d: 4e:d8:67:f2:69:6c:a8:b3:a1:27:20:1b:62:36:b4: 6c:51:c2:0f:75:0b:11:12:73:95:a0:d3:fa:a4:72: 03:a0:ac:4b:68:23:96:4d:b8:ab:82:66:3d:a4:5a: 44:c5:9b:fe:bd:65:73:16:9c:c3:20:f2:69:7b:03: 69:a2:ad:53:40:0f:0a:c8:51:a4:c6:48:28:2d:10: 73:8a:b5:bf:df:e8:43:88:95:36:70:1b:96:ac:34: cd:88:2a:21:26:67:2f:bd:4f:82:c4:48:f2:ef:a6: 6e:09:f5:1c:f4:7a:00:e9:90:f7:c5:ad:6b:8b:07: 62:e8:96:74:ea:35:fa:ef:91:c5:86:b9:b2:df:3d: 6b:7b:7c:be:cd:02:cf:07:02:66:7b:87:e5:43:60: c7:7f:c2:ee:b0:61:de:a6:08:99:e2:40:d6:12:7d: 6f:f3:15:15:e5:ab:56:3f:fd:52:9e:62:39:7e:83: fa:6b:c6:2a:5c:ed:2a:0b:80:98:4c:59:06:20:3d: 2c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1B:8B:BA:FE:07:F2:71:65:FA:EE:05:44:64:D6:1E:CE:43:4C:98 X509v3 Authority Key Identifier: keyid:F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/HhuLuv4H8nFl-u4FRGTWHs5DTJg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.158.0/24 IPv6: 2001:678:10b0::/48 Signature Algorithm: sha256WithRSAEncryption 92:25:96:47:48:ce:f3:1b:0c:45:6c:73:f6:18:ca:b1:5d:8c: e6:37:56:b5:ba:4f:e3:ed:3f:ec:7b:5b:17:53:64:4b:85:10: b6:f4:e7:99:a6:95:f7:d8:43:0a:c4:99:04:d4:39:1c:95:6e: 99:dc:55:c9:20:ef:5e:dc:35:fb:13:88:a7:ad:f4:ee:9f:bf: 51:cb:6e:f8:34:88:97:56:c9:6b:1b:73:39:ab:47:69:3b:be: 0b:ec:f2:31:bc:96:0f:33:86:93:81:7e:0b:6d:b4:1b:fd:ba: db:23:b6:db:d0:60:68:b3:19:ac:66:07:b4:cf:5d:0e:9e:5a: ed:5f:99:63:1c:38:dd:d7:5d:87:2c:c6:55:39:48:9c:12:fa: f1:9d:ed:d8:a9:19:88:79:ce:15:37:cc:a1:87:93:5c:fc:1e: f9:72:90:38:ee:29:78:49:50:0c:ab:c4:59:a7:22:cc:d5:82: d3:cb:e9:68:eb:ee:3b:c3:af:e6:b8:9f:2e:4e:96:59:76:fc: 59:87:25:8d:26:b5:d8:5b:bc:d2:35:30:7a:f2:c1:b4:3e:3d: 6d:03:b7:f0:1d:26:56:b4:98:4a:40:ae:ce:05:9c:12:be:02: b1:c0:a8:3f:3b:26:33:a0:2d:ca:d9:b5:da:5a:c9:4f:b9:96: d6:1e:13:8c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57SOjis4SmEDy75dnP8fRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyODY4MzJhZGRhNDBhOTdlYjg2M2E1YTY0ODJjOTQ2OTMx YTY2ZWYwHhcNMjYwMTAxMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTFiOGJiYWZlMDdmMjcxNjVmYWVlMDU0NDY0ZDYxZWNlNDM0Yzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO9qrmIVn1JD+jb3tsGO1Orf9VA8 YwZjfJdc4J4ely86K4MxXGLv+b/NT1Gr+c9KcTHdtnKBqV0DVC1O2GfyaWyos6En IBtiNrRsUcIPdQsREnOVoNP6pHIDoKxLaCOWTbirgmY9pFpExZv+vWVzFpzDIPJp ewNpoq1TQA8KyFGkxkgoLRBzirW/3+hDiJU2cBuWrDTNiCohJmcvvU+CxEjy76Zu CfUc9HoA6ZD3xa1riwdi6JZ06jX675HFhrmy3z1re3y+zQLPBwJme4flQ2DHf8Lu sGHepgiZ4kDWEn1v8xUV5atWP/1SnmI5foP6a8YqXO0qC4CYTFkGID0sBQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFB4bi7r+B/JxZfruBURk1h7OQ0yYMB8GA1UdIwQY MBaAFPKGgyrdpAqX64Y6WmSCyUaTGmbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG9hREt0MmtDcGZyaGpwYVpJTEpScE1hWnU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80NWU3MzgtMjg2ZS00ZjlhLWJhMDIt ZDk0MzExNDBlNmYxLzEvSGh1THV2NEg4bkZsLXU0RlJHVFdIczVEVEpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC80NWU3MzgtMjg2ZS00ZjlhLWJhMDItZDk0MzExNDBlNmYx LzEvOG9hREt0MmtDcGZyaGpwYVpJTEpScE1hWnU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwcieMA8E AgACMAkDBwAgAQZ4ELAwDQYJKoZIhvcNAQELBQADggEBAJIllkdIzvMbDEVsc/YY yrFdjOY3VrW6T+PtP+x7WxdTZEuFELb055mmlffYQwrEmQTUORyVbpncVckg717c NfsTiKet9O6fv1HLbvg0iJdWyWsbczmrR2k7vgvs8jG8lg8zhpOBfgtttBv9utsj ttvQYGizGaxmB7TPXQ6eWu1fmWMcON3XXYcsxlU5SJwS+vGd7dipGYh5zhU3zKGH k1z8HvlykDjuKXhJUAyrxFmnIszVgtPL6Wjr7jvDr+a4ny5Olll2/FmHJY0mtdhb vNI1MHrywbQ+PW0Dt/AdJla0mEpArs4FnBK+ArHAqD87JjOgLcrZtdpayU+5ltYe E4w= -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:29 2026 by rpki-client