This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/HqhLC8dqnQNE0kDdL6ayiqhSPGU.roa File: HqhLC8dqnQNE0kDdL6ayiqhSPGU.roa (raw, json) Hash identifier: bRPK732wUADitLmAxuB4OFABp+AoeaHAzcNtveMQOmo= Subject key identifier: 1E:A8:4B:0B:C7:6A:9D:03:44:D2:40:DD:2F:A6:B2:8A:A8:52:3C:65 Certificate issuer: /CN=53f6b36867238aa718be17e6e73ce40a989578a0 Certificate serial: 019B775930A7B9EB984B55A55D32A472E356 Authority key identifier: 53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/HqhLC8dqnQNE0kDdL6ayiqhSPGU.roa Signing time: Thu 01 Jan 2026 02:18:12 +0000 ROA not before: Thu 01 Jan 2026 02:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31098 IP address blocks: 194.39.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:30:a7:b9:eb:98:4b:55:a5:5d:32:a4:72:e3:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f6b36867238aa718be17e6e73ce40a989578a0 Validity Not Before: Jan 1 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ea84b0bc76a9d0344d240dd2fa6b28aa8523c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d8:df:75:f5:95:be:5c:12:34:0e:85:ec:37: fe:c6:65:a5:77:75:04:82:07:5c:78:0d:d4:7e:36: 6a:f7:b7:a4:ca:9d:c0:c0:f6:ff:d5:95:c8:86:d4: 85:7e:e5:88:a8:40:6a:34:f9:a1:24:10:d2:9c:0a: cd:63:d0:d3:62:55:fe:d5:74:67:a7:da:5a:aa:7a: c7:92:18:9f:a3:0e:48:0c:27:de:1f:67:9d:25:cb: a2:9e:26:7e:2c:fc:df:bc:f7:3b:e6:5e:60:98:84: 3b:61:79:ec:25:17:b7:3e:1b:a8:e6:90:85:57:25: eb:a9:d8:9c:c4:e3:0a:96:a0:54:81:2a:71:27:98: 15:9a:b4:cb:e5:51:68:b4:6c:be:b0:21:0c:45:0e: ed:a1:96:ad:0c:77:11:1e:c5:f4:bf:5f:0d:87:01: 09:94:f0:60:31:ac:98:08:73:bf:dd:d1:42:52:e3: a9:21:a5:2f:cd:be:3b:27:64:39:22:70:81:39:93: d2:75:9d:31:a4:4f:14:59:d0:19:c3:ab:5a:67:fa: f5:6a:22:69:7e:55:f3:09:7b:9f:d2:8f:42:ce:f8: 39:c3:5a:9b:7c:e2:7d:24:8f:dd:35:bd:26:bb:25: 75:56:14:ab:72:3f:9f:59:19:7f:6c:70:fb:b6:c2: 4d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A8:4B:0B:C7:6A:9D:03:44:D2:40:DD:2F:A6:B2:8A:A8:52:3C:65 X509v3 Authority Key Identifier: keyid:53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/HqhLC8dqnQNE0kDdL6ayiqhSPGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.39.140.0/24 Signature Algorithm: sha256WithRSAEncryption 05:3a:48:ad:2a:ba:ec:f5:87:51:80:e3:1f:a8:35:e0:59:b9: ec:8a:f4:3c:65:fe:9c:1e:ec:13:a3:f9:44:5e:74:22:40:13: f4:00:2a:7f:24:fa:8c:02:ea:79:3a:8e:80:35:cb:75:60:64: 23:d7:59:35:9c:eb:42:16:4b:f1:60:b2:f5:08:71:59:90:40: 2c:ba:6e:d2:be:c2:cc:81:80:f2:6d:42:ac:ae:55:7e:b9:e9: 53:59:91:ca:ab:75:52:ea:77:ba:51:5b:51:63:fe:18:73:3a: 30:33:b6:a9:64:de:57:9b:f5:44:0c:61:3b:3d:f4:43:c3:35: 03:a8:43:9e:d7:b4:44:7e:cf:29:52:44:de:c0:3b:23:89:b1: 33:18:c8:55:fa:a0:e2:d2:55:d2:6e:af:88:f8:d2:fb:5d:9a: 6d:d8:c6:6e:1c:27:76:7e:5e:03:b9:b8:79:f5:1b:03:78:c7: 80:5f:48:92:44:44:00:97:05:c8:a9:74:52:a5:2f:2f:52:74: 80:e0:f7:46:c0:81:b1:1f:2e:4c:c2:a4:4a:9e:af:e5:a9:2a: 1c:57:22:0d:3e:84:e1:1b:19:28:10:0e:87:e5:56:f9:69:f3: 2a:f3:85:c3:77:c9:b1:af:b2:15:77:ec:45:93:19:e1:42:2c: db:4d:ba:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WTCnueuYS1WlXTKkcuNWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZjZiMzY4NjcyMzhhYTcxOGJlMTdlNmU3M2NlNDBhOTg5 NTc4YTAwHhcNMjYwMTAxMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWE4NGIwYmM3NmE5ZDAzNDRkMjQwZGQyZmE2YjI4YWE4NTIzYzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNjfdfWVvlwSNA6F7Df+xmWld3UE ggdceA3UfjZq97ekyp3AwPb/1ZXIhtSFfuWIqEBqNPmhJBDSnArNY9DTYlX+1XRn p9paqnrHkhifow5IDCfeH2edJcuiniZ+LPzfvPc75l5gmIQ7YXnsJRe3Phuo5pCF VyXrqdicxOMKlqBUgSpxJ5gVmrTL5VFotGy+sCEMRQ7toZatDHcRHsX0v18NhwEJ lPBgMayYCHO/3dFCUuOpIaUvzb47J2Q5InCBOZPSdZ0xpE8UWdAZw6taZ/r1aiJp flXzCXuf0o9Czvg5w1qbfOJ9JI/dNb0muyV1VhSrcj+fWRl/bHD7tsJNswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB6oSwvHap0DRNJA3S+msoqoUjxlMB8GA1UdIwQY MBaAFFP2s2hnI4qnGL4X5uc85AqYlXigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVV9hemFHY2ppcWNZdmhmbTV6emtDcGlWZUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wOTFlMTEtZWUwYy00OWVjLTk1ZDct NmRiYWQzMWRiYzQxLzEvSHFoTEM4ZHFuUU5FMGtEZEw2YXlpcWhTUEdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wOTFlMTEtZWUwYy00OWVjLTk1ZDctNmRiYWQzMWRiYzQx LzEvVV9hemFHY2ppcWNZdmhmbTV6emtDcGlWZUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwieMMA0G CSqGSIb3DQEBCwUAA4IBAQAFOkitKrrs9YdRgOMfqDXgWbnsivQ8Zf6cHuwTo/lE XnQiQBP0ACp/JPqMAup5Oo6ANct1YGQj11k1nOtCFkvxYLL1CHFZkEAsum7SvsLM gYDybUKsrlV+uelTWZHKq3VS6ne6UVtRY/4YczowM7apZN5Xm/VEDGE7PfRDwzUD qEOe17REfs8pUkTewDsjibEzGMhV+qDi0lXSbq+I+NL7XZpt2MZuHCd2fl4Dubh5 9RsDeMeAX0iSREQAlwXIqXRSpS8vUnSA4PdGwIGxHy5MwqRKnq/lqSocVyINPoTh GxkoEA6H5Vb5afMq84XDd8mxr7IVd+xFkxnhQizbTbq9 -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:48 2026 by rpki-client