This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/HcAxRHlj0nNsddOnk3-AZGCTXRU.roa File: HcAxRHlj0nNsddOnk3-AZGCTXRU.roa (raw, json) Hash identifier: cRJ8+jwNN/ircPlR4b+1JeuhRjmkUt6+fqyC3j2Aye8= Subject key identifier: 1D:C0:31:44:79:63:D2:73:6C:75:D3:A7:93:7F:80:64:60:93:5D:15 Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a Certificate serial: 019B7DCB05CF7E8BF861874939E913A390DA Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/HcAxRHlj0nNsddOnk3-AZGCTXRU.roa Signing time: Fri 02 Jan 2026 08:20:15 +0000 ROA not before: Fri 02 Jan 2026 08:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 137.193.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 02:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:05:cf:7e:8b:f8:61:87:49:39:e9:13:a3:90:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a Validity Not Before: Jan 2 08:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dc031447963d2736c75d3a7937f806460935d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e6:e2:74:67:30:89:8e:43:a9:47:2a:0c:ef: d8:ec:14:d5:d1:0c:f1:6e:6f:5e:30:83:cc:a8:eb: 74:5d:bb:b9:e0:a2:be:8a:70:23:02:f7:3d:aa:11: fb:ae:c4:c4:89:51:da:8a:8e:c4:02:fb:36:4d:3e: 47:2a:24:4e:cc:1f:5b:d2:bb:0e:20:98:f1:61:7c: 67:ba:04:84:d7:6a:a4:6c:dd:07:1b:ad:91:86:83: dc:ee:d2:cc:e0:57:83:c7:a8:c2:99:dd:50:11:9c: 9d:d0:26:97:cf:08:37:bf:92:a6:f5:71:83:cf:ae: 2d:b1:1f:3c:3a:39:cc:38:ae:20:18:6a:a7:88:3f: a1:c0:8d:84:fb:18:85:66:b0:ad:0f:02:bc:12:a5: 0c:3a:a9:6d:d3:13:99:cd:90:ec:9c:7e:11:9b:26: 87:a9:82:1d:2f:ed:10:89:25:68:63:23:b3:32:b4: 8d:f9:36:93:9c:2f:56:9b:4d:c2:15:df:fd:e2:0f: d0:62:17:e6:d0:3b:71:18:84:59:b2:04:bf:fd:77: b8:24:41:9f:8c:17:00:98:b8:58:60:ae:97:b8:07: b2:62:b5:ad:57:30:89:1e:87:9b:99:42:e5:42:92: 7a:47:6e:b1:98:3a:f9:9d:96:2e:2b:35:4d:32:ea: 78:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C0:31:44:79:63:D2:73:6C:75:D3:A7:93:7F:80:64:60:93:5D:15 X509v3 Authority Key Identifier: keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/HcAxRHlj0nNsddOnk3-AZGCTXRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.193.0.0/16 Signature Algorithm: sha256WithRSAEncryption ab:ce:7b:aa:81:ea:e9:37:67:e2:e3:95:4b:02:3b:b8:0d:25: 03:69:de:1d:1f:36:02:b3:e8:1d:d8:aa:6a:95:ab:de:ab:17: 0e:98:03:13:f0:b6:30:6d:b2:db:c7:42:e0:15:6b:6c:b1:c0: fc:36:04:73:aa:0b:af:af:6b:b9:e3:e6:05:8f:27:ac:50:41: 19:b2:6f:04:4f:b0:46:40:89:66:a5:90:bc:32:42:18:20:b2: 62:e3:c0:59:ba:ed:65:17:55:fe:4c:79:0f:8f:26:9c:52:d5: ee:ad:fa:59:a9:9a:cd:f6:ed:ca:6a:1f:94:16:7e:54:ec:18: a2:88:25:b2:31:9e:2b:2a:47:86:f9:51:97:50:f9:62:2b:d6: e8:3a:a8:57:b5:4a:14:cd:86:04:74:5a:47:10:84:f6:16:50: 53:fe:3a:e0:ec:7c:60:e9:97:55:c8:f1:69:69:36:c5:d5:cd: 7d:b7:29:69:ac:63:df:d9:2c:7d:c6:f1:cc:88:70:40:85:73: f0:c9:5d:ac:a2:c7:a3:9a:04:ef:9b:db:e9:2f:66:62:40:36: fa:08:e1:37:d0:42:af:d8:3f:86:74:93:fe:a0:64:3a:75:ff: e0:02:6f:96:9c:20:57:51:e3:a7:47:d6:13:1c:75:5b:2a:60: 02:ce:61:54 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt9ywXPfov4YYdJOekTo5DaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YjYzMjk3MjU0NzY3M2RmMGY3NWFhYmM4MzlhMjQyMjg1 NGEyMmEwHhcNMjYwMTAyMDgyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGMwMzE0NDc5NjNkMjczNmM3NWQzYTc5MzdmODA2NDYwOTM1ZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+bidGcwiY5DqUcqDO/Y7BTV0Qzx bm9eMIPMqOt0Xbu54KK+inAjAvc9qhH7rsTEiVHaio7EAvs2TT5HKiROzB9b0rsO IJjxYXxnugSE12qkbN0HG62RhoPc7tLM4FeDx6jCmd1QEZyd0CaXzwg3v5Km9XGD z64tsR88OjnMOK4gGGqniD+hwI2E+xiFZrCtDwK8EqUMOqlt0xOZzZDsnH4RmyaH qYIdL+0QiSVoYyOzMrSN+TaTnC9Wm03CFd/94g/QYhfm0DtxGIRZsgS//Xe4JEGf jBcAmLhYYK6XuAeyYrWtVzCJHoebmULlQpJ6R26xmDr5nZYuKzVNMup4twIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFB3AMUR5Y9JzbHXTp5N/gGRgk10VMB8GA1UdIwQY MBaAFLW2MpclR2c98Pdaq8g5okIoVKIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGIt YTZhYmIxMjE1ZGVjLzEvSGNBeFJIbGowbk5zZGRPbmszLUFaR0NUWFJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGItYTZhYmIxMjE1ZGVj LzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAicEwDQYJ KoZIhvcNAQELBQADggEBAKvOe6qB6uk3Z+LjlUsCO7gNJQNp3h0fNgKz6B3YqmqV q96rFw6YAxPwtjBtstvHQuAVa2yxwPw2BHOqC6+va7nj5gWPJ6xQQRmybwRPsEZA iWalkLwyQhggsmLjwFm67WUXVf5MeQ+PJpxS1e6t+lmpms327cpqH5QWflTsGKKI JbIxnisqR4b5UZdQ+WIr1ug6qFe1ShTNhgR0WkcQhPYWUFP+OuDsfGDpl1XI8Wlp NsXVzX23KWmsY9/ZLH3G8cyIcECFc/DJXayix6OaBO+b2+kvZmJANvoI4TfQQq/Y P4Z0k/6gZDp1/+ACb5acIFdR46dH1hMcdVsqYALOYVQ= -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:54 2026 by rpki-client