This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/HbYZTtGMJhum7wVah1TSuSIfi6E.roa File: HbYZTtGMJhum7wVah1TSuSIfi6E.roa (raw, json) Hash identifier: guI90kmsxTQKYCpZeNJdycDZFfRWof/q9BI7u0wU7lg= Subject key identifier: 1D:B6:19:4E:D1:8C:26:1B:A6:EF:05:5A:87:54:D2:B9:22:1F:8B:A1 Certificate issuer: /CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0 Certificate serial: 019B7910F05C49087153383B2BC93AAF0CA0 Authority key identifier: 58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/HbYZTtGMJhum7wVah1TSuSIfi6E.roa Signing time: Thu 01 Jan 2026 10:18:31 +0000 ROA not before: Thu 01 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214095 IP address blocks: 94.231.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f0:5c:49:08:71:53:38:3b:2b:c9:3a:af:0c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0 Validity Not Before: Jan 1 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1db6194ed18c261ba6ef055a8754d2b9221f8ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e9:14:6f:00:9d:11:b8:ee:85:1b:f1:58:0a: a5:d2:91:d0:56:b4:0d:bc:79:72:ab:bb:74:7f:99: ad:59:ec:fb:df:67:76:cd:b0:8f:36:63:ae:88:3e: 8e:84:ab:d1:d7:a5:b0:60:70:e3:f3:c2:1d:e7:7a: 9e:d6:fd:25:3e:98:e0:06:fd:de:28:0d:b0:e0:91: 04:af:e6:7e:c7:b4:85:c0:1b:a3:02:da:53:d6:3d: 19:22:91:6d:cd:f0:8c:ad:f6:97:78:49:84:26:9e: c9:c9:2d:4a:38:75:53:8f:42:56:5d:8c:03:5f:ae: f6:33:23:b2:cf:23:96:55:dc:1c:e9:2d:9e:42:35: 29:6e:28:80:b8:3b:f3:5a:5e:b7:71:07:c8:b3:99: ab:4d:0e:b2:de:86:f0:18:24:67:2d:49:a7:8b:42: 00:c7:91:6b:ac:81:2f:ab:ae:6a:83:d9:36:1f:4b: a2:1e:87:f1:8b:63:c9:85:38:ac:a0:99:d4:94:c8: 03:b2:44:9f:96:ff:f8:e0:d5:78:08:bd:3d:0d:0b: ca:f4:00:38:87:85:d1:e0:20:a6:97:ea:85:54:6c: 07:74:f8:94:ec:71:1d:38:57:14:12:35:dc:79:6c: a6:55:ab:c6:80:4e:f3:7b:84:c5:59:32:5b:39:cb: 62:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B6:19:4E:D1:8C:26:1B:A6:EF:05:5A:87:54:D2:B9:22:1F:8B:A1 X509v3 Authority Key Identifier: keyid:58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/HbYZTtGMJhum7wVah1TSuSIfi6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.231.192.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:a3:a3:3c:5f:a4:d9:24:1b:df:9c:b7:d3:e5:4e:69:9e:69: b5:bc:be:27:56:2b:97:16:6a:b4:7d:db:1a:4b:70:91:47:65: f9:0d:04:b3:b0:bf:1d:e1:e2:dd:be:de:98:85:03:4f:32:0c: 79:51:3e:6d:62:ba:4e:51:a2:2f:33:28:f3:69:fd:13:c5:fb: 0d:1e:bc:ee:2e:da:5a:5b:03:fc:12:42:3d:96:d2:30:3d:6e: fd:8d:36:05:9c:e1:be:24:48:6b:28:53:86:cb:83:7b:85:ee: 6a:f0:db:38:6e:aa:f1:03:9d:61:77:b7:57:ba:bd:b0:70:f6: 1e:39:84:7e:c6:f1:88:e5:55:bf:d1:29:97:cd:21:b2:1f:bf: 50:87:8f:04:ad:a0:9d:94:5b:d2:d0:62:0a:6f:b7:b3:0b:57: 5c:40:63:8d:34:41:ea:7c:5e:c8:b2:f1:59:14:53:48:4d:b3: 49:e8:e8:f7:4d:17:d8:96:5a:f8:e6:fa:16:a0:fb:e4:8e:17: cc:67:cd:0a:5f:70:e5:eb:b0:52:39:50:ae:8c:eb:62:f1:c1: 49:87:76:5d:38:63:d6:b9:4d:15:fe:47:0c:77:a8:ac:c1:a4: 97:b1:c3:4f:ec:0c:b8:ae:c3:fe:8c:3a:7d:1a:d8:f7:8d:6b: 89:16:4e:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPBcSQhxUzg7K8k6rwygMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZjI2N2FhYWM5OWJmMGM5ZDFlOGU0MjlkZTAxY2NkM2Nj OTBlYzAwHhcNMjYwMTAxMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGI2MTk0ZWQxOGMyNjFiYTZlZjA1NWE4NzU0ZDJiOTIyMWY4YmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+kUbwCdEbjuhRvxWAql0pHQVrQN vHlyq7t0f5mtWez732d2zbCPNmOuiD6OhKvR16WwYHDj88Id53qe1v0lPpjgBv3e KA2w4JEEr+Z+x7SFwBujAtpT1j0ZIpFtzfCMrfaXeEmEJp7JyS1KOHVTj0JWXYwD X672MyOyzyOWVdwc6S2eQjUpbiiAuDvzWl63cQfIs5mrTQ6y3obwGCRnLUmni0IA x5FrrIEvq65qg9k2H0uiHofxi2PJhTisoJnUlMgDskSflv/44NV4CL09DQvK9AA4 h4XR4CCml+qFVGwHdPiU7HEdOFcUEjXceWymVavGgE7ze4TFWTJbOctiBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB22GU7RjCYbpu8FWodU0rkiH4uhMB8GA1UdIwQY MBaAFFjyZ6qsmb8MnR6OQp3gHM08yQ7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1BKbnFxeVp2d3lkSG81Q25lQWN6VHpKRHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNGZlOGUtNGI0ZC00YWM3LTlhOTIt N2EzYjMxYmU3YjM4LzEvSGJZWlR0R01KaHVtN3dWYWgxVFN1U0lmaTZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9hNGZlOGUtNGI0ZC00YWM3LTlhOTItN2EzYjMxYmU3YjM4 LzEvV1BKbnFxeVp2d3lkSG81Q25lQWN6VHpKRHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXufAMA0G CSqGSIb3DQEBCwUAA4IBAQCKo6M8X6TZJBvfnLfT5U5pnmm1vL4nViuXFmq0fdsa S3CRR2X5DQSzsL8d4eLdvt6YhQNPMgx5UT5tYrpOUaIvMyjzaf0TxfsNHrzuLtpa WwP8EkI9ltIwPW79jTYFnOG+JEhrKFOGy4N7he5q8Ns4bqrxA51hd7dXur2wcPYe OYR+xvGI5VW/0SmXzSGyH79Qh48EraCdlFvS0GIKb7ezC1dcQGONNEHqfF7IsvFZ FFNITbNJ6Oj3TRfYllr45voWoPvkjhfMZ80KX3Dl67BSOVCujOti8cFJh3ZdOGPW uU0V/kcMd6iswaSXscNP7Ay4rsP+jDp9Gtj3jWuJFk4D -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:59 2026 by rpki-client