This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/HwJm9Xsiw9pceQNnNfJ_QCQHcKE.roa File: HwJm9Xsiw9pceQNnNfJ_QCQHcKE.roa (raw, json) Hash identifier: cRdvZKn3ogbb94VbqPI6V/k6GIXa73KMunx92mUxdFE= Subject key identifier: 1F:02:66:F5:7B:22:C3:DA:5C:79:03:67:35:F2:7F:40:24:07:70:A1 Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e Certificate serial: 019B7C12DAE4FD4DCEAA0FD331BD8DD0CE57 Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/HwJm9Xsiw9pceQNnNfJ_QCQHcKE.roa Signing time: Fri 02 Jan 2026 00:19:29 +0000 ROA not before: Fri 02 Jan 2026 00:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12337 IP address blocks: 185.176.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:da:e4:fd:4d:ce:aa:0f:d3:31:bd:8d:d0:ce:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e Validity Not Before: Jan 2 00:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f0266f57b22c3da5c79036735f27f40240770a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0d:b5:0f:df:12:df:9e:04:ae:eb:de:71:53: 38:c3:0e:36:8e:0e:3e:ca:9a:24:0b:4f:c9:68:79: 23:5e:69:c9:86:20:ed:e6:49:11:6f:cf:5d:38:72: 4f:e8:69:19:30:8b:7f:88:3d:fd:e3:69:33:df:cc: 39:2e:27:93:a2:5d:51:ea:7c:85:0c:6a:2f:36:b2: 4d:56:97:61:bf:1f:9a:d5:86:e5:44:2d:5c:fb:9d: 18:d7:9c:28:f2:6b:62:a2:1f:ac:8b:68:3b:00:0a: 63:c6:b7:5e:7e:ea:31:d0:33:34:09:d6:9b:da:6d: 9e:b4:e4:da:6b:79:ce:02:ea:f0:4c:ab:3f:91:43: e7:f0:0c:f3:dc:87:d6:8e:21:4e:03:11:f2:30:72: fc:71:85:7f:b7:fe:bf:1b:8b:7c:e8:34:15:a3:a2: d5:9b:6e:90:be:87:e3:81:42:09:b8:c5:90:c3:fb: 33:88:6b:41:8f:70:83:c6:94:dd:69:75:06:eb:15: 6a:b8:41:5c:ec:89:98:8e:47:52:23:01:73:31:e8: 45:d8:6b:d4:e9:e8:ce:52:a6:41:ca:e9:ce:1e:55: 32:66:f6:2b:92:07:d2:47:38:04:69:12:1f:cd:59: d6:65:93:7f:6d:a0:69:89:0e:c0:a8:3d:3a:e6:6b: 95:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:02:66:F5:7B:22:C3:DA:5C:79:03:67:35:F2:7F:40:24:07:70:A1 X509v3 Authority Key Identifier: keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/HwJm9Xsiw9pceQNnNfJ_QCQHcKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.176.167.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:ea:1f:a1:9a:f0:3e:96:35:e6:95:d2:dd:28:8a:ac:6d:60: 61:b2:39:f2:36:fe:14:17:07:c0:b4:49:3c:7c:26:49:a7:28: 71:9f:fc:c0:1a:bf:01:fb:ad:c9:1d:72:de:54:83:8b:12:b1: fa:af:f7:c4:42:78:7e:8f:6a:02:76:36:bc:76:d2:e4:fe:e5: 3f:e7:cc:30:77:33:d5:c1:75:a4:db:11:73:69:f1:f3:5c:da: 32:47:16:90:ee:c8:de:cd:ab:27:06:3d:49:de:94:8a:5d:99: 31:5a:95:6e:3b:e3:b8:ab:a6:50:6f:a9:e5:a4:ae:59:9d:2f: e0:45:8c:77:18:44:b1:ca:9a:82:fc:f2:7a:9f:62:7c:cb:29: cf:24:16:c2:7c:78:71:8c:43:63:57:d4:78:22:83:dc:5c:b9: d2:c6:58:f3:bf:65:54:e2:6f:99:2e:df:59:4a:26:aa:4f:52: c8:fb:a7:68:da:55:df:96:39:53:05:eb:40:19:0b:33:d1:9a: 9f:57:88:d2:a6:5e:42:d2:44:32:8f:84:e3:d7:35:99:75:51: 1f:d8:7a:1e:af:fb:86:ff:8d:4c:09:0d:44:0e:79:23:c8:8d: 85:9b:b1:9e:fe:be:b2:07:bd:6a:2e:3e:dd:13:9b:ac:20:75: 0b:fa:9e:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Etrk/U3Oqg/TMb2N0M5XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhN2IwOWFiNTQ1ODUxYzc4OWQyY2FhODk0MmJhMzljZWEx M2U5M2UwHhcNMjYwMTAyMDAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjAyNjZmNTdiMjJjM2RhNWM3OTAzNjczNWYyN2Y0MDI0MDc3MGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w21D98S354EruvecVM4ww42jg4+ ypokC0/JaHkjXmnJhiDt5kkRb89dOHJP6GkZMIt/iD3942kz38w5LieTol1R6nyF DGovNrJNVpdhvx+a1YblRC1c+50Y15wo8mtioh+si2g7AApjxrdefuox0DM0Cdab 2m2etOTaa3nOAurwTKs/kUPn8Azz3IfWjiFOAxHyMHL8cYV/t/6/G4t86DQVo6LV m26QvofjgUIJuMWQw/sziGtBj3CDxpTdaXUG6xVquEFc7ImYjkdSIwFzMehF2GvU 6ejOUqZByunOHlUyZvYrkgfSRzgEaRIfzVnWZZN/baBpiQ7AqD065muVlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB8CZvV7IsPaXHkDZzXyf0AkB3ChMB8GA1UdIwQY MBaAFIp7CatUWFHHidLKqJQro5zqE+k+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MzFmNTYtYTJhMS00Yzc1LTk1YzMt NWU3ZGM4MjhkMDVkLzEvSHdKbTlYc2l3OXBjZVFObk5mSl9RQ1FIY0tFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83MzFmNTYtYTJhMS00Yzc1LTk1YzMtNWU3ZGM4MjhkMDVk LzEvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubCnMA0G CSqGSIb3DQEBCwUAA4IBAQAb6h+hmvA+ljXmldLdKIqsbWBhsjnyNv4UFwfAtEk8 fCZJpyhxn/zAGr8B+63JHXLeVIOLErH6r/fEQnh+j2oCdja8dtLk/uU/58wwdzPV wXWk2xFzafHzXNoyRxaQ7sjezasnBj1J3pSKXZkxWpVuO+O4q6ZQb6nlpK5ZnS/g RYx3GESxypqC/PJ6n2J8yynPJBbCfHhxjENjV9R4IoPcXLnSxljzv2VU4m+ZLt9Z SiaqT1LI+6do2lXfljlTBetAGQsz0ZqfV4jSpl5C0kQyj4Tj1zWZdVEf2Hoer/uG /41MCQ1EDnkjyI2Fm7Ge/r6yB71qLj7dE5usIHUL+p7C -----END CERTIFICATE-----Generated at Tue Feb 3 06:35:48 2026 by rpki-client