This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/HWudsOjdG8oDTKzDkSrmsmwxXhg.roa File: HWudsOjdG8oDTKzDkSrmsmwxXhg.roa (raw, json) Hash identifier: MsNQyO4x3GL1ZljNMgkCfOoEnGHTPJUa2PFQHyg4E6M= Subject key identifier: 1D:6B:9D:B0:E8:DD:1B:CA:03:4C:AC:C3:91:2A:E6:B2:6C:31:5E:18 Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Certificate serial: 019C1493B66E7F9785806B3141FA93931FEB Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/HWudsOjdG8oDTKzDkSrmsmwxXhg.roa Signing time: Sat 31 Jan 2026 15:02:30 +0000 ROA not before: Sat 31 Jan 2026 15:02:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10111 IP address blocks: 222.167.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:14:93:b6:6e:7f:97:85:80:6b:31:41:fa:93:93:1f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Validity Not Before: Jan 31 15:02:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d6b9db0e8dd1bca034cacc3912ae6b26c315e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c8:55:d2:c0:2b:34:1b:ed:04:9a:60:f5:b6: 8f:1e:70:22:5e:16:58:76:44:5d:75:14:36:c6:16: 24:6e:78:b3:1c:75:c0:31:04:66:b5:19:8b:2e:61: bd:70:23:d1:19:a7:b8:41:9b:b7:17:f1:7f:8e:15: fd:8b:9f:3c:35:b6:13:e5:0a:1b:aa:30:5a:e5:e9: 09:d1:86:51:ed:f9:33:ee:0c:76:9d:1f:7b:ea:9b: 94:5c:e3:11:72:df:be:58:90:dc:ac:d7:97:de:e3: 8e:ed:f2:1b:4d:ff:ef:d9:25:5f:7d:e3:f2:bf:28: 58:d2:3e:e5:c9:18:d2:6f:e0:d1:93:64:1a:c1:19: 12:1c:cc:cd:52:86:2d:6a:83:2c:71:77:da:83:b3: a3:f2:7e:cf:1d:ad:6f:f0:18:99:e6:05:eb:0e:98: 87:cc:bd:fa:c9:95:d5:bb:0f:66:50:48:fb:f3:d3: 80:35:05:6e:4e:03:4d:91:61:93:5b:af:1d:db:24: 62:3b:00:1d:8b:72:3f:56:a1:51:39:d9:4b:63:f8: de:0f:1b:f5:8b:77:4b:01:5e:8f:fc:3d:2a:d7:d5: a5:0b:3b:1f:0d:16:e6:d2:f9:a3:c6:c9:b6:e1:27: f3:8c:8e:ff:53:3e:11:4a:af:92:c9:8f:cd:ba:3a: c9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6B:9D:B0:E8:DD:1B:CA:03:4C:AC:C3:91:2A:E6:B2:6C:31:5E:18 X509v3 Authority Key Identifier: keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/HWudsOjdG8oDTKzDkSrmsmwxXhg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 222.167.244.0/24 Signature Algorithm: sha256WithRSAEncryption 02:bf:3b:80:2f:aa:f3:48:4c:5a:c5:6a:87:8c:11:8d:a2:d6: dc:44:6e:cb:cb:5b:aa:00:bb:c1:b2:30:11:a8:6c:f0:a3:73: e9:7d:ef:66:e0:94:21:26:90:7e:3d:65:39:27:62:55:ca:0f: 03:2c:db:c6:06:6d:fd:f5:5f:ff:41:27:38:ed:1d:60:2a:56: 23:b0:cc:c2:f3:19:5f:6d:98:aa:df:1b:f2:81:1c:38:33:47: 3a:d6:9f:ca:92:7d:54:28:70:cb:b5:27:bc:0e:8f:56:11:15: 44:c0:93:5f:50:8e:e7:aa:06:11:f2:08:a0:1b:2f:28:13:0b: d3:9e:04:66:8c:be:d3:77:f9:9d:ab:bc:70:fc:71:88:97:f1: c7:c8:7c:a3:50:90:d6:35:86:78:00:a2:41:a1:08:8d:5a:18: cd:47:71:59:03:5a:cb:c6:9e:30:46:7d:27:d0:45:7d:67:a3: 6b:d9:2a:45:00:75:93:c2:95:29:dc:23:3e:3b:7c:f9:d1:43: 94:d2:2f:69:5d:af:11:f5:7a:82:91:51:8c:2f:28:b6:4e:5b: 68:8c:1c:d1:42:f8:94:dd:0f:8c:d8:88:52:dc:9b:0e:14:9e: 56:d1:d8:5a:cb:5d:01:11:4f:c8:1a:b9:39:85:99:40:84:d1: ce:5b:f2:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwUk7Zuf5eFgGsxQfqTkx/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1 YTkyOTQwHhcNMjYwMTMxMTUwMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDZiOWRiMGU4ZGQxYmNhMDM0Y2FjYzM5MTJhZTZiMjZjMzE1ZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMhV0sArNBvtBJpg9baPHnAiXhZY dkRddRQ2xhYkbnizHHXAMQRmtRmLLmG9cCPRGae4QZu3F/F/jhX9i588NbYT5Qob qjBa5ekJ0YZR7fkz7gx2nR976puUXOMRct++WJDcrNeX3uOO7fIbTf/v2SVffePy vyhY0j7lyRjSb+DRk2QawRkSHMzNUoYtaoMscXfag7Oj8n7PHa1v8BiZ5gXrDpiH zL36yZXVuw9mUEj789OANQVuTgNNkWGTW68d2yRiOwAdi3I/VqFROdlLY/jeDxv1 i3dLAV6P/D0q19WlCzsfDRbm0vmjxsm24SfzjI7/Uz4RSq+SyY/NujrJhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB1rnbDo3RvKA0ysw5Eq5rJsMV4YMB8GA1UdIwQY MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt NGEzNDhlN2JlNDQxLzEvSFd1ZHNPamRHOG9EVEt6RGtTcm1zbXd4WGhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3qf0MA0G CSqGSIb3DQEBCwUAA4IBAQACvzuAL6rzSExaxWqHjBGNotbcRG7Ly1uqALvBsjAR qGzwo3Ppfe9m4JQhJpB+PWU5J2JVyg8DLNvGBm399V//QSc47R1gKlYjsMzC8xlf bZiq3xvygRw4M0c61p/Kkn1UKHDLtSe8Do9WERVEwJNfUI7nqgYR8gigGy8oEwvT ngRmjL7Td/mdq7xw/HGIl/HHyHyjUJDWNYZ4AKJBoQiNWhjNR3FZA1rLxp4wRn0n 0EV9Z6Nr2SpFAHWTwpUp3CM+O3z50UOU0i9pXa8R9XqCkVGMLyi2TltojBzRQviU 3Q+M2IhS3JsOFJ5W0dhay10BEU/IGrk5hZlAhNHOW/Kf -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:29 2026 by rpki-client