This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/HmuiSy6DiqyFIS3hKu7LdivnQl0.roa File: HmuiSy6DiqyFIS3hKu7LdivnQl0.roa (raw, json) Hash identifier: AUDFtOT4GZ2PlVwxPCH5qqp0l2hQvma3gFblT+w1Ox0= Subject key identifier: 1E:6B:A2:4B:2E:83:8A:AC:85:21:2D:E1:2A:EE:CB:76:2B:E7:42:5D Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 019B7AC90467F07D8B74DE2A107B05894994 Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/HmuiSy6DiqyFIS3hKu7LdivnQl0.roa Signing time: Thu 01 Jan 2026 18:19:12 +0000 ROA not before: Thu 01 Jan 2026 18:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48716 IP address blocks: 45.8.98.0/24 maxlen: 24 92.118.115.0/24 maxlen: 24 94.198.220.0/23 maxlen: 23 94.198.220.0/24 maxlen: 24 94.198.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:04:67:f0:7d:8b:74:de:2a:10:7b:05:89:49:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Jan 1 18:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e6ba24b2e838aac85212de12aeecb762be7425d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f8:00:80:31:b0:2c:f8:ee:d2:8b:d6:c2:05: 66:ec:4f:50:75:51:e7:09:20:22:4d:79:4d:f7:c8: aa:a8:08:79:b5:30:2f:15:1b:c2:46:54:1b:39:9a: 8c:2d:74:d4:65:2d:3f:be:23:f5:a2:59:78:12:54: b9:e5:07:81:2c:be:ab:10:76:ce:df:db:72:99:f7: 56:3c:35:46:f6:ee:2a:38:eb:30:23:6b:13:bc:7f: 0f:57:ec:50:c2:9c:3c:60:02:30:9a:6c:62:a7:f7: 52:62:55:15:eb:a1:c7:89:57:7d:03:6e:ed:4d:03: 4b:bd:6b:c3:6f:9e:65:6c:6c:b9:f8:80:49:62:d6: 48:1d:68:43:db:e5:81:2f:2f:96:bb:6f:b8:54:e5: a3:e9:21:1a:ee:e6:c4:1d:81:29:0c:f4:43:b7:77: 06:83:33:7e:1e:b3:b5:3a:9c:84:9b:9d:96:9b:1b: 3b:de:e5:87:a7:67:6f:bf:74:8f:97:07:c7:c7:64: 10:19:c9:cf:ac:fa:f6:c0:a6:2d:2a:d2:ee:74:ed: 2d:e7:c8:69:76:30:73:66:07:0c:7f:c7:d9:34:10: 9a:82:c7:3b:10:dd:f9:f4:4d:bc:20:2f:f0:8f:fd: 22:ff:5b:44:62:3b:64:a0:d9:00:68:7e:60:0f:d6: c2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6B:A2:4B:2E:83:8A:AC:85:21:2D:E1:2A:EE:CB:76:2B:E7:42:5D X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/HmuiSy6DiqyFIS3hKu7LdivnQl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.98.0/24 92.118.115.0/24 94.198.220.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:1d:84:8a:88:69:e6:c5:d6:08:f9:39:e5:5f:fe:82:be:29: f3:75:ab:15:8b:be:d0:94:77:27:83:b0:3a:57:e2:71:fa:3f: 76:79:1a:d7:69:b5:73:27:65:25:a4:57:04:4b:3c:52:99:d9: a8:3b:b5:0a:cd:95:7e:08:af:a3:7f:28:53:61:75:02:9f:d3: a8:6e:84:5b:e1:65:98:b9:42:04:cf:b7:bc:1a:01:ca:4c:0c: b5:2d:29:68:c7:49:58:6d:57:ec:b9:9d:81:ff:93:de:9f:e5: 17:6a:57:3f:10:a2:74:74:fc:d8:99:33:97:d7:77:7c:28:7e: 64:15:2e:54:32:05:f1:c8:27:a2:fe:56:9d:94:17:e7:7a:3c: bd:0b:93:7b:79:48:08:69:7c:65:07:c4:75:e3:b0:62:2b:d9: 48:67:f7:39:28:02:02:ca:f5:e3:b1:0a:19:78:0b:28:e5:c1: fb:56:70:be:1d:a5:a5:ec:8f:f9:04:dd:0f:7e:70:2f:e8:d4: bf:0b:7e:ef:c3:a8:a9:7d:7d:86:f0:68:76:1c:4a:c8:ca:06: 54:10:db:1b:91:7f:1e:ed:10:f2:1d:bc:c0:f2:a4:08:05:16: 21:46:83:45:fb:e4:b1:5a:3f:dd:5f:36:0c:f8:7d:1e:c2:6a: 8c:88:cd:84 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yQRn8H2LdN4qEHsFiUmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjYwMTAxMTgxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTZiYTI0YjJlODM4YWFjODUyMTJkZTEyYWVlY2I3NjJiZTc0MjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvgAgDGwLPju0ovWwgVm7E9QdVHn CSAiTXlN98iqqAh5tTAvFRvCRlQbOZqMLXTUZS0/viP1oll4ElS55QeBLL6rEHbO 39tymfdWPDVG9u4qOOswI2sTvH8PV+xQwpw8YAIwmmxip/dSYlUV66HHiVd9A27t TQNLvWvDb55lbGy5+IBJYtZIHWhD2+WBLy+Wu2+4VOWj6SEa7ubEHYEpDPRDt3cG gzN+HrO1OpyEm52Wmxs73uWHp2dvv3SPlwfHx2QQGcnPrPr2wKYtKtLudO0t58hp djBzZgcMf8fZNBCagsc7EN359E28IC/wj/0i/1tEYjtkoNkAaH5gD9bCSwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFB5roksug4qshSEt4Sruy3Yr50JdMB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvSG11aVN5NkRpcXlGSVMzaEt1N0xkaXZuUWwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALQhiAwQA XHZzAwQBXsbcMA0GCSqGSIb3DQEBCwUAA4IBAQBrHYSKiGnmxdYI+TnlX/6Cvinz dasVi77QlHcng7A6V+Jx+j92eRrXabVzJ2UlpFcESzxSmdmoO7UKzZV+CK+jfyhT YXUCn9OoboRb4WWYuUIEz7e8GgHKTAy1LSlox0lYbVfsuZ2B/5Pen+UXalc/EKJ0 dPzYmTOX13d8KH5kFS5UMgXxyCei/ladlBfnejy9C5N7eUgIaXxlB8R147BiK9lI Z/c5KAICyvXjsQoZeAso5cH7VnC+HaWl7I/5BN0PfnAv6NS/C37vw6ipfX2G8Gh2 HErIygZUENsbkX8e7RDyHbzA8qQIBRYhRoNF++SxWj/dXzYM+H0ewmqMiM2E -----END CERTIFICATE-----Generated at Wed Jan 21 14:10:55 2026 by rpki-client