This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/HlGVjN7etqeTYz5KNfDty1vwl9s.roa File: HlGVjN7etqeTYz5KNfDty1vwl9s.roa (raw, json) Hash identifier: F5PL/iRv4PWVl9yuJ7nn29rt1Os5b+fBG5lTLrQTUPY= Subject key identifier: 1E:51:95:8C:DE:DE:B6:A7:93:63:3E:4A:35:F0:ED:CB:5B:F0:97:DB Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B9CED46C79CEE04B0B4F2EAC59E29BDE4 Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/HlGVjN7etqeTYz5KNfDty1vwl9s.roa Signing time: Thu 08 Jan 2026 09:25:54 +0000 ROA not before: Thu 08 Jan 2026 09:25:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 193.36.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:ed:46:c7:9c:ee:04:b0:b4:f2:ea:c5:9e:29:bd:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Jan 8 09:25:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e51958cdedeb6a793633e4a35f0edcb5bf097db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c1:bc:58:ab:b9:a5:0d:88:62:aa:14:8d:bb: 8d:23:a3:66:05:58:08:13:bb:01:3e:d8:cf:9c:4d: ef:ba:15:09:8d:ea:6b:65:2e:c2:cd:47:1a:a3:78: 4a:ad:9c:1e:d1:83:40:91:53:04:56:28:9f:2d:1a: 96:b3:14:28:ff:37:a4:93:f3:2c:fe:09:6c:be:24: ce:f1:8f:54:e6:03:3d:e8:5c:0c:45:64:2e:62:4c: 83:8c:49:b5:78:4e:55:d6:cf:b3:28:58:73:52:d6: 78:da:5f:fc:ea:69:6d:7d:83:3b:a0:ad:81:3e:c0: dd:8c:e8:a9:42:b3:8c:37:d0:67:58:e8:02:65:8a: 85:90:cc:34:60:42:19:5a:6c:0f:1a:55:4b:42:5b: d6:53:d9:93:65:c5:79:94:9e:86:dc:47:ca:84:14: aa:3d:62:93:51:20:e7:9d:7b:b4:18:95:1b:a7:31: 24:3e:53:25:5e:ff:17:d8:aa:63:8f:5d:fe:15:26: 73:b8:20:34:fc:b4:8c:97:64:a5:dd:43:89:ee:e0: 4f:19:51:84:56:4e:b6:cf:76:e9:2f:ce:2b:d7:88: a8:4d:8f:b3:c5:62:ea:c1:4c:33:b8:33:6a:f8:61: 4a:8e:44:55:0e:f7:88:24:bb:8f:66:44:96:7f:5d: b1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:51:95:8C:DE:DE:B6:A7:93:63:3E:4A:35:F0:ED:CB:5B:F0:97:DB X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/HlGVjN7etqeTYz5KNfDty1vwl9s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.162.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:af:2e:47:36:7f:3c:c2:bc:f0:2b:31:00:6c:3d:df:d0:48: 9c:c9:b5:5c:65:61:70:76:2a:56:05:2c:8c:1d:37:f2:b7:da: 77:55:1e:bc:8d:20:fc:11:ec:80:db:bb:09:6e:68:41:81:8d: 5d:00:40:7a:21:66:20:b2:b3:21:f3:43:4d:b4:75:4c:b4:08: 0d:f2:a1:ca:8a:20:c6:25:7e:73:58:af:9c:0a:e8:c1:f4:77: c2:99:4b:5e:60:92:2d:3f:36:a7:7f:1a:fb:c5:a0:de:70:f6: 86:99:19:ec:80:41:22:e8:9e:07:bf:25:91:d0:a8:f0:5a:b5: 37:83:fe:90:a4:4e:4f:7b:76:8b:1e:83:94:48:14:6d:ed:d0: 67:25:46:79:86:af:61:4d:74:4e:6a:41:65:90:99:43:e8:7b: 4e:34:08:22:bc:92:b3:2a:80:dd:1a:4f:e9:5e:25:ff:9e:9e: 5c:4c:3e:3d:1a:90:86:f3:3f:31:5e:3a:24:19:e8:35:06:9a: ca:bd:3f:23:fb:f6:8d:2e:fe:0e:25:8d:48:87:84:f4:c9:10: ec:76:50:a5:1a:19:62:61:fd:4a:3f:c1:90:0e:5d:1f:97:24: dd:ad:b9:2c:50:fb:3b:6b:af:ab:ee:d5:b0:61:0d:ab:6a:85: 49:7b:ec:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuc7UbHnO4EsLTy6sWeKb3kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjYwMTA4MDkyNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTUxOTU4Y2RlZGViNmE3OTM2MzNlNGEzNWYwZWRjYjViZjA5N2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8G8WKu5pQ2IYqoUjbuNI6NmBVgI E7sBPtjPnE3vuhUJjeprZS7CzUcao3hKrZwe0YNAkVMEViifLRqWsxQo/zekk/Ms /glsviTO8Y9U5gM96FwMRWQuYkyDjEm1eE5V1s+zKFhzUtZ42l/86mltfYM7oK2B PsDdjOipQrOMN9BnWOgCZYqFkMw0YEIZWmwPGlVLQlvWU9mTZcV5lJ6G3EfKhBSq PWKTUSDnnXu0GJUbpzEkPlMlXv8X2Kpjj13+FSZzuCA0/LSMl2Sl3UOJ7uBPGVGE Vk62z3bpL84r14ioTY+zxWLqwUwzuDNq+GFKjkRVDveIJLuPZkSWf12x5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB5RlYze3rank2M+SjXw7ctb8JfbMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvSGxHVmpON2V0cWVUWXo1S05mRHR5MXZ3bDlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSSiMA0G CSqGSIb3DQEBCwUAA4IBAQB7ry5HNn88wrzwKzEAbD3f0EicybVcZWFwdipWBSyM HTfyt9p3VR68jSD8EeyA27sJbmhBgY1dAEB6IWYgsrMh80NNtHVMtAgN8qHKiiDG JX5zWK+cCujB9HfCmUteYJItPzanfxr7xaDecPaGmRnsgEEi6J4HvyWR0KjwWrU3 g/6QpE5Pe3aLHoOUSBRt7dBnJUZ5hq9hTXROakFlkJlD6HtONAgivJKzKoDdGk/p XiX/np5cTD49GpCG8z8xXjokGeg1BprKvT8j+/aNLv4OJY1Ih4T0yRDsdlClGhli Yf1KP8GQDl0flyTdrbksUPs7a6+r7tWwYQ2raoVJe+wE -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:32 2026 by rpki-client