This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/HvwmbCSP3h6Q1duz_1Hqim0XQbw.roa File: HvwmbCSP3h6Q1duz_1Hqim0XQbw.roa (raw, json) Hash identifier: mCzFkk/kAFvF7D5NtEhPxNEFJugYTt+off3Q9ZpMK6g= Subject key identifier: 1E:FC:26:6C:24:8F:DE:1E:90:D5:DB:B3:FF:51:EA:8A:6D:17:41:BC Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C132CFDCD8D96186B26BE3C7B3CB6E3 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/HvwmbCSP3h6Q1duz_1Hqim0XQbw.roa Signing time: Fri 02 Jan 2026 00:19:50 +0000 ROA not before: Fri 02 Jan 2026 00:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204629 IP address blocks: 94.198.46.0/24 maxlen: 24 185.244.228.0/22 maxlen: 22 2a0a:e9c5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:2c:fd:cd:8d:96:18:6b:26:be:3c:7b:3c:b6:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1efc266c248fde1e90d5dbb3ff51ea8a6d1741bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f5:b8:f7:0a:e2:9c:83:ff:dd:04:19:3d:e3: bf:b7:09:e7:f0:9f:9e:b5:2c:34:f0:fd:2d:fe:b2: 93:37:87:07:e9:16:31:bb:0d:0c:05:42:5d:07:ae: b7:52:2c:d3:51:0d:dc:3e:d7:b8:a5:18:bb:a4:10: a3:55:4c:45:cb:d4:e8:38:8f:12:d1:f0:10:19:05: 87:2b:1b:58:5a:06:3f:5f:5f:aa:7d:e0:49:df:ed: 3e:2a:fc:d3:87:59:f2:5d:bb:89:65:16:c2:a5:84: 95:a9:3c:37:59:87:2f:66:c7:8e:6f:e0:d1:3d:3e: 3b:e9:f0:26:6a:ce:e1:e3:43:4b:d7:6f:7a:ad:e6: 62:00:eb:e2:3f:85:52:69:b0:ae:dc:83:ed:23:57: 0f:8b:4e:e1:c9:f7:b9:e5:c0:bd:85:bf:d6:5b:42: fe:0d:db:09:00:12:e5:aa:f8:aa:b3:a8:1d:c7:78: 03:77:a6:47:e4:4d:2e:72:20:eb:83:65:e6:ca:96: fd:9e:00:46:de:42:79:d4:fd:e7:df:e2:67:5b:17: d3:be:6a:1e:20:51:05:87:1d:b1:3c:5f:dc:a0:04: eb:3d:69:be:41:d4:5c:2b:5d:64:cb:1d:eb:c3:94: e2:c1:a5:bb:2c:48:88:6b:4c:4f:c5:0d:68:44:e5: 33:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FC:26:6C:24:8F:DE:1E:90:D5:DB:B3:FF:51:EA:8A:6D:17:41:BC X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/HvwmbCSP3h6Q1duz_1Hqim0XQbw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.198.46.0/24 185.244.228.0/22 IPv6: 2a0a:e9c5::/32 Signature Algorithm: sha256WithRSAEncryption 87:5d:80:ca:2d:73:0c:20:65:f4:82:36:ef:4f:3f:87:b3:44: 72:04:66:3e:a3:06:0a:cc:1e:86:54:35:b1:56:96:b3:96:51: e1:b7:8f:45:13:d3:ce:c9:73:07:4c:53:66:88:70:18:a8:25: 16:f4:2e:0e:89:13:bb:40:29:17:6d:a4:24:02:e3:a3:ef:f3: a2:1c:ed:7c:e1:69:8c:63:d0:ab:03:e1:d2:a9:86:8b:07:3f: 88:f5:57:66:e1:40:14:f1:7f:2c:d3:25:73:14:b6:0d:23:8a: a9:c2:9b:a0:7c:41:fa:d3:9f:36:55:2f:4d:ac:9c:48:ca:95: 59:97:0b:de:13:29:a8:b5:ee:10:b3:8a:0b:ba:23:ac:5a:6c: 8a:2f:3e:58:2b:4a:9b:6b:d5:4a:0b:22:37:65:a7:13:71:1c: 9c:4d:59:28:d5:74:bd:dd:18:f8:e8:b7:89:24:9b:67:7d:85: 78:3c:e9:d9:e2:24:bb:ea:73:99:cc:47:32:db:ec:43:01:4e: ff:7a:8b:df:5e:87:60:fa:84:35:b0:24:1d:5c:8c:8a:1e:d6: 23:49:0e:3c:db:24:cd:cb:bb:93:da:8c:de:b7:59:5e:44:79: a7:fa:af:46:96:f4:d8:2f:7e:16:87:06:51:8a:f5:23:b4:e8: b0:a0:4c:16 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8Eyz9zY2WGGsmvjx7PLbjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWZjMjY2YzI0OGZkZTFlOTBkNWRiYjNmZjUxZWE4YTZkMTc0MWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vW49wrinIP/3QQZPeO/twnn8J+e tSw08P0t/rKTN4cH6RYxuw0MBUJdB663UizTUQ3cPte4pRi7pBCjVUxFy9ToOI8S 0fAQGQWHKxtYWgY/X1+qfeBJ3+0+KvzTh1nyXbuJZRbCpYSVqTw3WYcvZseOb+DR PT476fAmas7h40NL1296reZiAOviP4VSabCu3IPtI1cPi07hyfe55cC9hb/WW0L+ DdsJABLlqviqs6gdx3gDd6ZH5E0uciDrg2Xmypb9ngBG3kJ51P3n3+JnWxfTvmoe IFEFhx2xPF/coATrPWm+QdRcK11kyx3rw5TiwaW7LEiIa0xPxQ1oROUz4wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFB78Jmwkj94ekNXbs/9R6optF0G8MB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvSHZ3bWJDU1AzaDZRMWR1el8xSHFpbTBYUWJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAXsYuAwQC ufTkMA0EAgACMAcDBQAqCunFMA0GCSqGSIb3DQEBCwUAA4IBAQCHXYDKLXMMIGX0 gjbvTz+Hs0RyBGY+owYKzB6GVDWxVpazllHht49FE9POyXMHTFNmiHAYqCUW9C4O iRO7QCkXbaQkAuOj7/OiHO184WmMY9CrA+HSqYaLBz+I9Vdm4UAU8X8s0yVzFLYN I4qpwpugfEH60582VS9NrJxIypVZlwveEymote4Qs4oLuiOsWmyKLz5YK0qba9VK CyI3ZacTcRycTVko1XS93Rj46LeJJJtnfYV4POnZ4iS76nOZzEcy2+xDAU7/eovf Xodg+oQ1sCQdXIyKHtYjSQ482yTNy7uT2ozet1leRHmn+q9GlvTYL34WhwZRivUj tOiwoEwW -----END CERTIFICATE-----Generated at Fri Jan 23 21:37:17 2026 by rpki-client