This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/HWeoGI8bSPm_NqHZm92XdX9TYk0.roa File: HWeoGI8bSPm_NqHZm92XdX9TYk0.roa (raw, json) Hash identifier: u3mXxiyjIsoywfMmTD3C7UEDYkxAKFfqwDHl41MKpZU= Subject key identifier: 1D:67:A8:18:8F:1B:48:F9:BF:36:A1:D9:9B:DD:97:75:7F:53:62:4D Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBE495E2FAA98D4546608BA2521FD5 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/HWeoGI8bSPm_NqHZm92XdX9TYk0.roa Signing time: Thu 01 Jan 2026 14:17:41 +0000 ROA not before: Thu 01 Jan 2026 14:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205302 IP address blocks: 212.183.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:e4:95:e2:fa:a9:8d:45:46:60:8b:a2:52:1f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d67a8188f1b48f9bf36a1d99bdd97757f53624d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:da:a4:7f:7c:c5:d6:bd:24:57:84:96:ca:a7: c0:06:0c:b7:81:1d:95:f4:7c:ff:58:ca:7e:95:c1: 66:2b:10:73:da:4c:8d:33:c5:a4:da:ac:4c:89:74: af:0e:2a:d4:ea:91:0d:70:26:0d:25:c1:43:4c:f5: 80:a9:f2:b2:e8:e3:75:be:5a:b4:6b:c7:5f:5b:b6: ff:16:5c:38:78:1e:1f:01:94:b5:2c:03:3e:5d:76: 36:93:5c:1f:a3:96:19:66:ce:34:72:b2:5d:7d:95: 76:a5:3c:9d:6b:46:39:4c:20:7d:6b:71:5d:07:0e: e2:62:c7:23:9c:48:54:c8:64:fa:fd:21:02:01:f3: da:18:b8:96:06:a9:3e:e5:55:97:f7:33:a8:81:ff: 09:26:f1:19:56:8d:24:3e:45:30:0b:f6:cd:53:eb: a0:66:78:d9:e9:e6:52:ae:6e:63:e5:d8:bc:fc:8b: be:95:49:23:ff:3c:60:6f:ed:15:e1:76:b0:b8:37: a7:b9:85:17:90:52:93:11:2b:ea:b2:fb:5b:14:7b: 23:87:9c:3b:f3:cf:89:08:99:cb:a2:d4:62:18:78: cb:cc:24:56:4a:fe:63:d0:e0:1e:42:0e:ff:19:dd: 2e:dd:7d:8e:4e:6d:90:84:8c:ea:59:ff:cc:de:de: 7d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:67:A8:18:8F:1B:48:F9:BF:36:A1:D9:9B:DD:97:75:7F:53:62:4D X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/HWeoGI8bSPm_NqHZm92XdX9TYk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.183.4.0/24 Signature Algorithm: sha256WithRSAEncryption 21:e9:10:ca:4a:a6:74:38:43:3d:4e:67:15:ea:d3:9e:0c:69: f3:50:e8:08:d0:ee:f9:c9:31:ad:25:f2:ca:a4:bd:72:bf:07: d3:33:77:be:d0:ad:b1:a4:96:1e:31:dc:55:e0:2f:1d:f7:e4: 20:e1:09:72:e3:f1:a1:a0:fa:38:d5:2f:22:f7:59:69:26:c9: e4:c3:98:ad:35:97:de:10:9e:1e:aa:10:49:e3:6a:27:44:79: 0f:30:e1:bb:91:30:87:ea:ab:54:cc:8e:cc:c0:c1:01:1b:91: 54:5d:90:c2:a6:1f:38:b7:12:0c:98:b4:02:08:6d:7b:4f:22: 94:8a:25:8c:fb:bd:5d:40:74:8d:9d:c7:6d:5a:4a:07:08:b7: 20:9a:05:4f:31:3e:a4:84:aa:72:db:7f:6d:39:83:51:3c:07: bb:71:a5:1e:0d:d1:0c:ed:1a:a8:54:64:b2:d1:a0:00:11:01: dc:7a:58:41:8e:8a:77:59:73:12:80:d0:3d:b3:cb:92:c1:99: 07:c9:b2:88:b6:96:f0:39:8b:c4:6b:43:7d:1c:6c:1a:d6:19: 4a:15:86:a5:fd:a9:7a:61:f6:28:a1:f7:ef:c8:92:93:bf:6c: df:42:7f:d4:a0:8c:bc:53:c0:3d:ca:74:24:ef:e7:d8:41:50: 8f:af:60:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt56+SV4vqpjUVGYIuiUh/VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDY3YTgxODhmMWI0OGY5YmYzNmExZDk5YmRkOTc3NTdmNTM2MjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNqkf3zF1r0kV4SWyqfABgy3gR2V 9Hz/WMp+lcFmKxBz2kyNM8Wk2qxMiXSvDirU6pENcCYNJcFDTPWAqfKy6ON1vlq0 a8dfW7b/Flw4eB4fAZS1LAM+XXY2k1wfo5YZZs40crJdfZV2pTyda0Y5TCB9a3Fd Bw7iYscjnEhUyGT6/SECAfPaGLiWBqk+5VWX9zOogf8JJvEZVo0kPkUwC/bNU+ug ZnjZ6eZSrm5j5di8/Iu+lUkj/zxgb+0V4XawuDenuYUXkFKTESvqsvtbFHsjh5w7 88+JCJnLotRiGHjLzCRWSv5j0OAeQg7/Gd0u3X2OTm2QhIzqWf/M3t59HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB1nqBiPG0j5vzah2Zvdl3V/U2JNMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvSFdlb0dJOGJTUG1fTnFIWm05MlhkWDlUWWswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1LcEMA0G CSqGSIb3DQEBCwUAA4IBAQAh6RDKSqZ0OEM9TmcV6tOeDGnzUOgI0O75yTGtJfLK pL1yvwfTM3e+0K2xpJYeMdxV4C8d9+Qg4Qly4/GhoPo41S8i91lpJsnkw5itNZfe EJ4eqhBJ42onRHkPMOG7kTCH6qtUzI7MwMEBG5FUXZDCph84txIMmLQCCG17TyKU iiWM+71dQHSNncdtWkoHCLcgmgVPMT6khKpy239tOYNRPAe7caUeDdEM7RqoVGSy 0aAAEQHcelhBjop3WXMSgNA9s8uSwZkHybKItpbwOYvEa0N9HGwa1hlKFYal/al6 YfYooffvyJKTv2zfQn/UoIy8U8A9ynQk7+fYQVCPr2AQ -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:35 2026 by rpki-client