This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/HBbTZ3Q7BOwj640I0jYSUAVw3qo.roa File: HBbTZ3Q7BOwj640I0jYSUAVw3qo.roa (raw, json) Hash identifier: o7T4Dh22yBlZp7Egs8uQK5dq+Y2Bk/ktQFDv0GOBtkk= Subject key identifier: 1C:16:D3:67:74:3B:04:EC:23:EB:8D:08:D2:36:12:50:05:70:DE:AA Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91 Certificate serial: 019B79ED6296046DF3B62B228786ADF51827 Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/HBbTZ3Q7BOwj640I0jYSUAVw3qo.roa Signing time: Thu 01 Jan 2026 14:19:18 +0000 ROA not before: Thu 01 Jan 2026 14:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 193.31.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:62:96:04:6d:f3:b6:2b:22:87:86:ad:f5:18:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91 Validity Not Before: Jan 1 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c16d367743b04ec23eb8d08d23612500570deaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:27:ba:82:ab:cb:ee:29:e5:17:77:d3:42:12: 7f:f5:6a:94:3c:0e:db:db:9c:0d:5b:a1:0d:af:82: ea:57:0b:83:4f:3d:70:0b:bc:29:29:31:fd:84:b9: 04:c1:3a:e4:53:39:06:fb:7d:34:e5:28:69:5f:62: c8:6d:a4:6b:07:63:02:8d:4c:6e:39:68:97:cb:af: 83:53:e0:73:bb:c9:13:87:f6:f3:66:68:3e:19:39: 12:96:1a:4f:d5:c5:b8:cf:7f:6f:29:45:d7:81:9f: 99:c3:3d:1e:fe:e7:15:ce:c7:80:0e:45:8c:49:06: d6:7f:44:0e:45:b8:95:b8:8a:16:e3:68:0f:1e:69: 79:dd:fe:cb:3e:b4:97:24:1b:62:42:75:8a:3f:e0: 89:7e:d1:d8:9b:70:88:35:8b:ec:f0:26:14:6c:c6: 2d:b0:3c:54:48:b0:7c:79:a2:a0:04:d6:6c:4c:e6: b8:dc:e1:c6:49:ea:59:e8:42:c0:2c:02:14:75:20: fe:b8:ca:08:60:0b:4b:c1:3f:66:68:00:4c:b8:60: a4:9d:71:b5:33:b3:ba:ff:34:79:eb:06:8e:3c:f5: 66:ee:be:73:ba:f9:80:f3:a7:43:f0:99:ca:5c:00: 0d:cd:03:47:c8:c2:ea:66:72:85:f6:86:c7:8a:b8: a7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:16:D3:67:74:3B:04:EC:23:EB:8D:08:D2:36:12:50:05:70:DE:AA X509v3 Authority Key Identifier: keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/HBbTZ3Q7BOwj640I0jYSUAVw3qo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.31.62.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:04:70:e1:60:18:a8:af:59:62:66:6c:7f:a8:08:f1:0c:c2: 3a:cd:67:0f:6b:21:3f:d3:75:3d:d1:2a:79:29:9a:2a:81:a5: 22:33:c3:87:a2:a1:1e:7d:10:26:f7:31:7e:7a:c7:22:76:78: 89:40:96:a2:fd:5f:77:59:b3:da:6d:be:78:62:c7:0c:e2:9c: 21:d5:90:c0:50:ba:f8:61:4f:2d:f4:3a:85:ef:43:ca:82:23: e7:cd:48:32:ad:f7:55:3c:b7:6a:b7:68:9b:7e:af:b9:c1:6c: ac:94:d6:ac:be:80:5b:5f:cc:6f:70:6c:63:60:38:82:76:70: b0:84:22:97:82:a9:b3:96:ef:ac:5a:97:f4:2d:d8:6f:bb:cb: 54:93:8d:eb:1b:24:8b:0e:0c:63:c9:7f:61:5b:40:5b:9f:4b: 42:fb:a4:77:8e:1d:c6:bc:a1:74:6c:af:5d:b1:0a:e8:60:7c: 6b:32:18:16:dc:09:ce:1c:3c:09:78:ef:f1:f0:5a:1b:1f:95: 49:31:f7:10:e8:fe:aa:1f:6c:35:bd:f0:0b:02:1d:82:a2:08: 0b:d2:f5:dd:cd:29:2c:e1:3e:cf:bd:d3:ed:1a:f0:a9:89:ac: 54:a5:e2:cb:a8:b9:af:dd:3f:54:ba:bc:85:ca:43:0d:49:39: 8b:8f:dc:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WKWBG3ztisih4at9RgnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMWQ1ZmVhZmQzOTE3NDcyNWJmZTRiZWY5MWJkMjdjN2Iy ZjZmOTEwHhcNMjYwMTAxMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzE2ZDM2Nzc0M2IwNGVjMjNlYjhkMDhkMjM2MTI1MDA1NzBkZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCe6gqvL7inlF3fTQhJ/9WqUPA7b 25wNW6ENr4LqVwuDTz1wC7wpKTH9hLkEwTrkUzkG+3005ShpX2LIbaRrB2MCjUxu OWiXy6+DU+Bzu8kTh/bzZmg+GTkSlhpP1cW4z39vKUXXgZ+Zwz0e/ucVzseADkWM SQbWf0QORbiVuIoW42gPHml53f7LPrSXJBtiQnWKP+CJftHYm3CINYvs8CYUbMYt sDxUSLB8eaKgBNZsTOa43OHGSepZ6ELALAIUdSD+uMoIYAtLwT9maABMuGCknXG1 M7O6/zR56waOPPVm7r5zuvmA86dD8JnKXAANzQNHyMLqZnKF9obHirinfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBwW02d0OwTsI+uNCNI2ElAFcN6qMB8GA1UdIwQY MBaAFL8dX+r9ORdHJb/kvvkb0nx7L2+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82MDY1ZDItMTAzZS00YWI3LWJmYjMt MWE4Yzg0MmFmZTJhLzEvSEJiVFozUTdCT3dqNjQwSTBqWVNVQVZ3M3FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82MDY1ZDItMTAzZS00YWI3LWJmYjMtMWE4Yzg0MmFmZTJh LzEvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR8+MA0G CSqGSIb3DQEBCwUAA4IBAQA+BHDhYBior1liZmx/qAjxDMI6zWcPayE/03U90Sp5 KZoqgaUiM8OHoqEefRAm9zF+escidniJQJai/V93WbPabb54YscM4pwh1ZDAULr4 YU8t9DqF70PKgiPnzUgyrfdVPLdqt2ibfq+5wWyslNasvoBbX8xvcGxjYDiCdnCw hCKXgqmzlu+sWpf0Ldhvu8tUk43rGySLDgxjyX9hW0Bbn0tC+6R3jh3GvKF0bK9d sQroYHxrMhgW3AnOHDwJeO/x8FobH5VJMfcQ6P6qH2w1vfALAh2CoggL0vXdzSks 4T7PvdPtGvCpiaxUpeLLqLmv3T9UuryFykMNSTmLj9wS -----END CERTIFICATE-----Generated at Mon Jan 19 10:37:00 2026 by rpki-client