This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/huyceIHVnvQkvqjpwCiPSV0-omg.roa File: huyceIHVnvQkvqjpwCiPSV0-omg.roa (raw, json) Hash identifier: iUSoYSpkqD2GKh9pN5QDirlx+fKKFecxfJ2ArcTf/QE= Subject key identifier: 86:EC:9C:78:81:D5:9E:F4:24:BE:A8:E9:C0:28:8F:49:5D:3E:A2:68 Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab Certificate serial: 019B7A5ACB2DAEE9818C556A65AA35C54DB0 Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/huyceIHVnvQkvqjpwCiPSV0-omg.roa Signing time: Thu 01 Jan 2026 16:18:49 +0000 ROA not before: Thu 01 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197495 IP address blocks: 91.198.169.0/24 maxlen: 24 195.206.121.0/24 maxlen: 24 2001:67c:28cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cb:2d:ae:e9:81:8c:55:6a:65:aa:35:c5:4d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86ec9c7881d59ef424bea8e9c0288f495d3ea268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b1:e1:8c:cc:7e:73:2d:66:7c:00:78:90:e2: 3b:a1:7c:80:3c:e4:7e:a9:3c:68:0e:93:f7:ca:bd: 81:ff:46:94:85:eb:36:d0:83:fe:89:1f:63:a7:89: ee:b0:33:df:b9:3a:7b:72:0f:9a:fc:8c:4b:1f:4e: 2c:2e:7b:23:74:e3:86:86:92:5e:ed:7d:4b:1b:4d: 00:e1:06:69:23:fa:4e:ce:d2:e9:a8:72:95:0f:0c: 9c:4f:a4:cb:98:81:a8:da:5e:6a:ca:33:cc:76:17: f4:36:6a:0c:00:73:4a:d4:7b:8a:ed:59:7a:29:94: 53:64:e9:38:af:db:79:3a:02:5c:fc:25:f2:96:78: a7:68:46:03:8b:e0:20:6d:de:99:1b:31:27:50:48: ab:7a:a9:bb:ba:ac:24:4d:86:4f:f3:62:dc:b6:35: 42:af:ff:07:7e:00:4b:23:2b:23:52:39:6a:30:9b: 40:7c:a0:b3:7b:32:bd:7e:f8:ba:29:b0:42:87:46: bb:c7:94:be:4c:ff:85:ab:ff:ea:ff:c3:74:32:57: 5c:63:26:5f:72:cc:0a:4b:a9:fc:d7:e8:d7:02:3a: 9c:51:5b:bb:85:19:30:2c:2f:ef:dc:41:0d:30:85: 15:4f:13:9a:46:76:6f:4c:19:36:df:e3:e2:93:d8: ce:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EC:9C:78:81:D5:9E:F4:24:BE:A8:E9:C0:28:8F:49:5D:3E:A2:68 X509v3 Authority Key Identifier: keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/huyceIHVnvQkvqjpwCiPSV0-omg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.169.0/24 195.206.121.0/24 IPv6: 2001:67c:28cc::/48 Signature Algorithm: sha256WithRSAEncryption 7b:05:0a:56:da:00:e8:1f:53:4e:e4:ce:8e:13:0c:0d:90:ea: 6e:c4:6f:a4:80:2e:95:48:34:25:4f:fe:a7:ad:9e:1e:a7:60: 93:a5:3e:f4:83:8b:c7:f4:f6:55:44:39:93:9e:6f:8d:8a:29: c2:b2:c5:71:bd:11:db:6b:2c:70:38:d0:d1:4a:c2:76:4a:11: c8:c0:d3:eb:e8:13:0d:5c:87:9d:98:25:72:dc:40:9d:96:cd: b0:d0:c2:08:8f:62:ff:fd:3c:4a:06:3e:77:90:e4:39:7e:f5: ae:a6:40:60:e3:c1:7b:27:6a:a8:cf:ff:78:6d:d6:16:3f:b0: 53:f2:33:22:32:89:ba:ac:3b:65:4a:82:17:85:91:b3:9a:0c: e0:ea:f2:49:7e:00:20:4c:45:aa:d3:26:88:86:d1:00:db:ac: 6e:48:39:44:23:21:62:35:52:49:69:09:24:c2:bb:36:ee:38: 84:3b:d3:e6:9f:3f:7d:fa:68:88:c5:10:dc:5f:90:8f:6e:2b: 40:e6:57:1c:6b:80:c0:11:22:7c:55:1e:3c:58:25:5c:4f:78: f9:1c:80:f5:83:27:3b:0e:66:ca:f5:ba:96:c7:0f:ac:f3:99: 47:56:c1:0e:2f:39:53:a8:92:39:b8:31:3f:b4:0f:0a:07:59: 7c:54:c8:ee -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6WsstrumBjFVqZao1xU2wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTI1MmI5ZTIxZGY4MTc2Y2M1MzgwMjc4OTVmN2Y0NTg1 NjY2YWIwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmVjOWM3ODgxZDU5ZWY0MjRiZWE4ZTljMDI4OGY0OTVkM2VhMjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobHhjMx+cy1mfAB4kOI7oXyAPOR+ qTxoDpP3yr2B/0aUhes20IP+iR9jp4nusDPfuTp7cg+a/IxLH04sLnsjdOOGhpJe 7X1LG00A4QZpI/pOztLpqHKVDwycT6TLmIGo2l5qyjPMdhf0NmoMAHNK1HuK7Vl6 KZRTZOk4r9t5OgJc/CXylninaEYDi+Agbd6ZGzEnUEireqm7uqwkTYZP82LctjVC r/8HfgBLIysjUjlqMJtAfKCzezK9fvi6KbBCh0a7x5S+TP+Fq//q/8N0MldcYyZf cswKS6n81+jXAjqcUVu7hRkwLC/v3EENMIUVTxOaRnZvTBk23+Pik9jO4wIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFIbsnHiB1Z70JL6o6cAoj0ldPqJoMB8GA1UdIwQY MBaAFGeSUrniHfgXbMU4AniV9/RYVmarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVKU3VlSWQtQmRzeFRnQ2VKWDM5RmhXWnFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zMWMyNjctZjJlMy00ZmE5LTlkNDEt MzM2ZTViM2RkMDcxLzEvaHV5Y2VJSFZudlFrdnFqcHdDaVBTVjAtb21nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8zMWMyNjctZjJlMy00ZmE5LTlkNDEtMzM2ZTViM2RkMDcx LzEvWjVKU3VlSWQtQmRzeFRnQ2VKWDM5RmhXWnFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW8apAwQA w855MA8EAgACMAkDBwAgAQZ8KMwwDQYJKoZIhvcNAQELBQADggEBAHsFClbaAOgf U07kzo4TDA2Q6m7Eb6SALpVINCVP/qetnh6nYJOlPvSDi8f09lVEOZOeb42KKcKy xXG9EdtrLHA40NFKwnZKEcjA0+voEw1ch52YJXLcQJ2WzbDQwgiPYv/9PEoGPneQ 5Dl+9a6mQGDjwXsnaqjP/3ht1hY/sFPyMyIyibqsO2VKgheFkbOaDODq8kl+ACBM RarTJoiG0QDbrG5IOUQjIWI1UklpCSTCuzbuOIQ70+afP336aIjFENxfkI9uK0Dm VxxrgMARInxVHjxYJVxPePkcgPWDJzsOZsr1upbHD6zzmUdWwQ4vOVOokjm4MT+0 DwoHWXxUyO4= -----END CERTIFICATE-----Generated at Tue Feb 10 07:53:38 2026 by rpki-client