This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/hHMxYrkbIkFlZ-X8dtv-2AQEohA.roa File: hHMxYrkbIkFlZ-X8dtv-2AQEohA.roa (raw, json) Hash identifier: UNg1Ev3uL6ITTCViVHYmyV+MQPsqTHd5HHXqSXS8miA= Subject key identifier: 84:73:31:62:B9:1B:22:41:65:67:E5:FC:76:DB:FE:D8:04:04:A2:10 Certificate issuer: /CN=6987d47935e1137d544426db5288e12a9c025ac2 Certificate serial: 019B7A5A728EA96C9B1A26A32984E572B9F6 Authority key identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/hHMxYrkbIkFlZ-X8dtv-2AQEohA.roa Signing time: Thu 01 Jan 2026 16:18:26 +0000 ROA not before: Thu 01 Jan 2026 16:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.84.4.0/24 maxlen: 24 193.84.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 01:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:72:8e:a9:6c:9b:1a:26:a3:29:84:e5:72:b9:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6987d47935e1137d544426db5288e12a9c025ac2 Validity Not Before: Jan 1 16:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84733162b91b22416567e5fc76dbfed80404a210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c6:a9:5d:02:41:f4:48:1f:d6:8a:e3:c9:80: f6:d6:66:ef:8b:3d:e7:9b:fa:5d:fb:6a:a7:d0:17: 00:fb:3c:af:8e:c3:94:58:9c:06:9b:ef:b2:3c:b7: c0:4f:ed:fc:7a:64:c4:5c:e9:b8:b0:6f:d4:c3:59: e6:62:49:1b:9d:79:20:dc:53:85:54:5f:40:d1:b9: b6:7b:ee:3f:3f:fb:eb:ed:9c:d8:3e:1c:4a:72:1c: 6f:b7:50:13:67:df:31:b6:30:83:ab:b7:f0:1d:9e: 28:ff:17:37:de:e6:f1:21:91:8a:2a:a7:e3:29:da: 52:f0:81:d5:b1:d9:a6:43:10:7d:17:9f:2a:56:27: a9:a7:8d:79:55:cd:61:ff:fe:f9:b2:d4:21:f8:f4: 2e:3f:fb:f2:d4:cf:fd:9e:5f:89:c2:63:b1:66:95: 61:21:1a:de:1b:27:72:57:8e:33:71:0e:6f:11:45: 16:5c:66:fb:96:91:08:36:84:25:9a:4f:95:8d:39: 75:2e:fd:4a:67:a4:f3:d1:c8:ec:9c:67:7a:33:1e: ef:75:a1:db:8a:86:a4:9d:d8:79:1b:74:9e:c1:80: 06:19:63:06:77:0b:6b:4f:2a:b8:7b:5b:6e:94:39: 08:af:be:4a:b8:37:ea:55:d4:99:48:ca:57:d7:b2: 73:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:73:31:62:B9:1B:22:41:65:67:E5:FC:76:DB:FE:D8:04:04:A2:10 X509v3 Authority Key Identifier: keyid:69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/hHMxYrkbIkFlZ-X8dtv-2AQEohA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.84.4.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:43:27:d4:5c:2b:68:1a:49:89:26:ec:10:65:ee:70:3d:24: 48:36:7d:22:63:d2:93:e3:2a:f9:14:b1:12:3f:ea:4d:2a:99: cf:0f:57:3d:cd:1b:24:70:71:42:8b:01:d9:4b:d1:69:f7:f7: c8:e5:6a:ba:d8:65:c9:94:d9:75:2d:74:68:6d:4e:16:8d:40: 78:25:17:8c:9e:e3:16:8c:af:a1:09:27:70:4c:a2:3b:eb:7b: 1f:35:8f:e7:1e:89:e6:cf:45:23:4f:7c:9b:18:97:ce:3b:5f: fb:4d:cd:7c:1b:24:c8:af:ba:1b:7d:4c:c3:3f:17:10:5b:c2: af:7d:b4:bb:81:54:f6:39:06:2a:c4:82:f9:78:87:8e:3a:5f: 39:15:f2:60:90:53:6e:e3:10:84:6e:3e:2b:a2:ca:55:69:20: 7d:2f:d9:06:38:90:95:dc:c0:e1:95:15:55:79:90:72:93:86: 1d:23:81:b0:06:15:0a:28:4a:7a:af:15:a0:18:23:0e:1a:83: c9:fb:24:4c:38:d0:0f:89:4d:fa:5b:80:08:d8:92:40:3c:bc: 0e:0a:89:54:92:79:41:92:f6:25:30:ff:47:0f:c3:1b:c9:ca: e3:98:67:da:04:65:03:d4:78:be:17:e7:dc:56:6e:8d:44:3e: d4:a0:d4:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WnKOqWybGiajKYTlcrn2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ODdkNDc5MzVlMTEzN2Q1NDQ0MjZkYjUyODhlMTJhOWMw MjVhYzIwHhcNMjYwMTAxMTYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDczMzE2MmI5MWIyMjQxNjU2N2U1ZmM3NmRiZmVkODA0MDRhMjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8apXQJB9Egf1orjyYD21mbviz3n m/pd+2qn0BcA+zyvjsOUWJwGm++yPLfAT+38emTEXOm4sG/Uw1nmYkkbnXkg3FOF VF9A0bm2e+4/P/vr7ZzYPhxKchxvt1ATZ98xtjCDq7fwHZ4o/xc33ubxIZGKKqfj KdpS8IHVsdmmQxB9F58qViepp415Vc1h//75stQh+PQuP/vy1M/9nl+JwmOxZpVh IRreGydyV44zcQ5vEUUWXGb7lpEINoQlmk+VjTl1Lv1KZ6Tz0cjsnGd6Mx7vdaHb ioakndh5G3SewYAGGWMGdwtrTyq4e1tulDkIr75KuDfqVdSZSMpX17Jz/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIRzMWK5GyJBZWfl/Hbb/tgEBKIQMB8GA1UdIwQY MBaAFGmH1Hk14RN9VEQm21KI4SqcAlrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVlmVWVUWGhFMzFVUkNiYlVvamhLcHdDV3NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zMmQ3YWQtOGJmOS00Mjc0LTk1Zjgt OWM5NTM1OTRkNmIxLzEvaEhNeFlya2JJa0ZsWi1YOGR0di0yQVFFb2hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8zMmQ3YWQtOGJmOS00Mjc0LTk1ZjgtOWM5NTM1OTRkNmIx LzEvYVlmVWVUWGhFMzFVUkNiYlVvamhLcHdDV3NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwVQEMA0G CSqGSIb3DQEBCwUAA4IBAQANQyfUXCtoGkmJJuwQZe5wPSRINn0iY9KT4yr5FLES P+pNKpnPD1c9zRskcHFCiwHZS9Fp9/fI5Wq62GXJlNl1LXRobU4WjUB4JReMnuMW jK+hCSdwTKI763sfNY/nHonmz0UjT3ybGJfOO1/7Tc18GyTIr7obfUzDPxcQW8Kv fbS7gVT2OQYqxIL5eIeOOl85FfJgkFNu4xCEbj4rospVaSB9L9kGOJCV3MDhlRVV eZByk4YdI4GwBhUKKEp6rxWgGCMOGoPJ+yRMONAPiU36W4AI2JJAPLwOColUknlB kvYlMP9HD8MbycrjmGfaBGUD1Hi+F+fcVm6NRD7UoNTH -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:11 2026 by rpki-client