This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/HUC0yUJUDgqy27kx_QVtwVTYAPk.roa File: HUC0yUJUDgqy27kx_QVtwVTYAPk.roa (raw, json) Hash identifier: CyeQ43VG6tD5RMnxhr0UsmCBVHZpmO9VtiFMAauD0/c= Subject key identifier: 1D:40:B4:C9:42:54:0E:0A:B2:DB:B9:31:FD:05:6D:C1:54:D8:00:F9 Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135 Certificate serial: 019B7E374B23DAFB29665A0F243015546FFE Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/HUC0yUJUDgqy27kx_QVtwVTYAPk.roa Signing time: Fri 02 Jan 2026 10:18:31 +0000 ROA not before: Fri 02 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16086 IP address blocks: 185.158.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:4b:23:da:fb:29:66:5a:0f:24:30:15:54:6f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135 Validity Not Before: Jan 2 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d40b4c942540e0ab2dbb931fd056dc154d800f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:47:17:93:b9:2a:22:26:6c:2c:08:b2:ea:a7: 8f:67:ca:34:e7:10:26:cf:29:e9:99:6c:f5:69:c7: f5:6d:7d:83:66:17:c0:57:72:f9:69:c4:c4:e0:5d: d8:58:e4:16:5a:4d:99:a1:ab:37:91:24:6f:56:3c: fa:23:40:a3:d0:4e:6b:62:da:23:4f:4b:ae:29:bc: ec:40:57:7a:2b:12:d8:5c:38:6d:b9:b4:bf:7b:ee: 2c:49:b3:db:90:fc:39:9b:45:04:48:4d:02:32:aa: a3:0d:5e:75:c2:05:15:ee:9e:16:9b:90:73:8a:17: fa:15:c0:6d:46:ba:67:7e:c3:d2:0e:64:54:1d:db: 60:69:51:3d:ba:5e:e7:3a:76:4f:59:4a:e5:55:1c: 39:9f:a2:1d:0a:24:b2:c3:44:8b:0a:67:0b:9c:e0: 6e:5a:37:ef:f6:61:a7:81:e6:97:10:93:f4:82:21: 05:9e:3f:e1:c5:72:cc:12:0d:09:90:8a:f5:ad:30: a1:8d:52:09:ce:92:c7:c0:a2:65:05:92:fa:47:30: cf:4b:c7:de:08:f0:b3:14:95:8e:97:e8:34:3e:9e: 2e:a8:7a:ce:d4:33:8e:79:ad:46:73:ed:e9:a3:bc: e2:5b:3f:f9:75:9b:2c:ac:52:12:15:3f:c9:cf:1c: 4d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:40:B4:C9:42:54:0E:0A:B2:DB:B9:31:FD:05:6D:C1:54:D8:00:F9 X509v3 Authority Key Identifier: keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/HUC0yUJUDgqy27kx_QVtwVTYAPk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.158.162.0/24 Signature Algorithm: sha256WithRSAEncryption 93:f2:04:21:d1:77:59:61:2d:0f:8e:88:41:71:1c:dd:83:23: 06:4f:de:de:82:0d:27:6d:8f:51:9b:1d:89:3f:5c:f3:b6:6b: 6f:df:70:cb:db:e4:87:43:6b:ca:a4:88:72:72:1a:1c:24:f4: 22:70:a9:9f:28:c8:0a:ca:e1:0b:72:bf:0a:ae:78:ee:0b:0b: 26:e5:09:f1:17:87:84:d6:2f:26:aa:17:4b:aa:6d:25:b2:54: 6a:56:d1:97:c7:72:60:8a:66:fe:7c:8f:02:9a:1b:95:11:76: f2:36:92:63:ec:ce:4f:1b:29:3b:51:03:14:ca:f5:1e:36:0c: 67:8b:4c:69:85:42:3d:6c:a9:b6:c3:f6:08:07:ef:c9:be:bf: 3e:22:8c:fa:05:23:58:bf:9d:2b:2e:8e:19:c2:bb:c0:36:83: 20:05:6a:5b:ff:43:e7:eb:cd:45:3a:02:67:e3:34:95:94:50: 8e:ae:de:88:31:6d:c2:6f:e8:28:89:aa:6b:77:a5:21:f0:48: ee:7e:29:69:62:72:42:25:ec:d3:07:32:41:38:e8:19:48:7d: 42:60:10:fa:a1:1f:97:6b:e9:06:0b:14:42:44:1f:73:df:aa: c8:39:37:7b:24:7d:b6:af:a1:82:87:73:5a:86:44:65:6f:14: c7:45:24:ff -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+N0sj2vspZloPJDAVVG/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NzAwNDljYmE3ZjM5YWVlZDMxZDY1MzEzYzdiOTUzZjNm ZGExMzUwHhcNMjYwMTAyMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDQwYjRjOTQyNTQwZTBhYjJkYmI5MzFmZDA1NmRjMTU0ZDgwMGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkcXk7kqIiZsLAiy6qePZ8o05xAm zynpmWz1acf1bX2DZhfAV3L5acTE4F3YWOQWWk2Zoas3kSRvVjz6I0Cj0E5rYtoj T0uuKbzsQFd6KxLYXDhtubS/e+4sSbPbkPw5m0UESE0CMqqjDV51wgUV7p4Wm5Bz ihf6FcBtRrpnfsPSDmRUHdtgaVE9ul7nOnZPWUrlVRw5n6IdCiSyw0SLCmcLnOBu Wjfv9mGngeaXEJP0giEFnj/hxXLMEg0JkIr1rTChjVIJzpLHwKJlBZL6RzDPS8fe CPCzFJWOl+g0Pp4uqHrO1DOOea1Gc+3po7ziWz/5dZssrFISFT/JzxxN9wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFB1AtMlCVA4Kstu5Mf0FbcFU2AD5MB8GA1UdIwQY MBaAFPlwBJy6fzmu7THWUxPHuVPz/aE1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YQUVuTHBfT2E3dE1kWlRFOGU1VV9QOW9UVS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvMTNmNWYxLTQ1YjYtNGJjMS1iNWE1 LTUyMWZhNDFkZmM5Ni8xL0hVQzB5VUpVRGdxeTI3a3hfUVZ0d1ZUWUFQay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTIvMTNmNWYxLTQ1YjYtNGJjMS1iNWE1LTUyMWZhNDFkZmM5 Ni8xLzEtWEFFbkxwX09hN3RNZFpURThlNVVfUDlvVFUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5nqIw DQYJKoZIhvcNAQELBQADggEBAJPyBCHRd1lhLQ+OiEFxHN2DIwZP3t6CDSdtj1Gb HYk/XPO2a2/fcMvb5IdDa8qkiHJyGhwk9CJwqZ8oyArK4QtyvwqueO4LCyblCfEX h4TWLyaqF0uqbSWyVGpW0ZfHcmCKZv58jwKaG5URdvI2kmPszk8bKTtRAxTK9R42 DGeLTGmFQj1sqbbD9ggH78m+vz4ijPoFI1i/nSsujhnCu8A2gyAFalv/Q+frzUU6 AmfjNJWUUI6u3ogxbcJv6CiJqmt3pSHwSO5+KWlickIl7NMHMkE46BlIfUJgEPqh H5dr6QYLFEJEH3Pfqsg5N3skfbavoYKHc1qGRGVvFMdFJP8= -----END CERTIFICATE-----Generated at Mon Jan 26 21:09:50 2026 by rpki-client