This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/HFUXrWib3cLz8rTtStx7pLSts40.roa File: HFUXrWib3cLz8rTtStx7pLSts40.roa (raw, json) Hash identifier: 96N/dVun4UvEatMwgA8wS1Cv0SN64AyZ/K5utVWayag= Subject key identifier: 1C:55:17:AD:68:9B:DD:C2:F3:F2:B4:ED:4A:DC:7B:A4:B4:AD:B3:8D Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Certificate serial: 019B783537F5FD4F0E584494FF909A7C75B9 Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/HFUXrWib3cLz8rTtStx7pLSts40.roa Signing time: Thu 01 Jan 2026 06:18:32 +0000 ROA not before: Thu 01 Jan 2026 06:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42708 IP address blocks: 79.141.174.0/23 maxlen: 23 185.117.88.0/23 maxlen: 23 185.174.133.0/24 maxlen: 24 193.42.39.0/24 maxlen: 24 2a01:8640:6::/48 maxlen: 48 2a01:8640:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:37:f5:fd:4f:0e:58:44:94:ff:90:9a:7c:75:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Validity Not Before: Jan 1 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c5517ad689bddc2f3f2b4ed4adc7ba4b4adb38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f4:32:ac:db:44:0b:d3:ed:f8:7e:8f:d9:a3: 8d:b7:ed:00:b4:27:5b:bf:ee:3f:a8:aa:7b:32:fe: 4d:10:c5:13:4a:b4:9c:dd:0e:64:06:9a:04:ca:78: 13:64:dc:a8:b2:1a:62:37:b3:75:42:69:af:9c:78: 44:99:0a:3f:dc:62:db:da:a8:23:7f:b5:1b:dc:06: 19:f3:da:cc:2b:c6:46:b5:62:a8:47:49:23:e5:d9: 80:ad:a3:8c:15:9a:25:2b:ac:18:69:f5:c5:e4:87: 14:a1:59:d3:fd:08:c7:01:be:b0:10:70:b8:93:7a: 0d:d2:f2:97:fc:df:6c:68:53:67:16:25:ff:e2:ba: 5d:64:7f:cb:fd:50:06:89:6e:9b:78:96:de:8f:92: ac:65:53:47:33:6d:7f:e0:e3:4b:15:a6:6b:ac:31: 4c:39:55:68:e7:79:42:d1:61:5e:34:ce:dc:f9:36: 6a:de:2f:d4:14:c2:77:28:5d:c6:67:3f:57:25:26: f0:a7:91:c8:b0:01:85:e8:81:3a:3b:db:f0:c2:1a: 78:e9:19:d5:0d:7c:04:15:db:b0:f7:b5:6b:8e:d4: b9:2e:b8:d7:7f:f7:0e:8a:6e:42:18:4a:37:3a:ba: 02:61:b7:62:6a:33:bb:9b:f2:71:77:a4:a7:72:76: 24:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:55:17:AD:68:9B:DD:C2:F3:F2:B4:ED:4A:DC:7B:A4:B4:AD:B3:8D X509v3 Authority Key Identifier: keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/HFUXrWib3cLz8rTtStx7pLSts40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.141.174.0/23 185.117.88.0/23 185.174.133.0/24 193.42.39.0/24 IPv6: 2a01:8640:6::/48 2a01:8640:9::/48 Signature Algorithm: sha256WithRSAEncryption 46:79:5e:23:b3:71:60:f1:da:01:6d:8f:4d:f9:b8:bd:d9:97: 56:25:2e:b0:0c:c3:03:31:0f:99:ce:d9:d3:7e:a8:aa:a7:6e: 5e:26:92:0f:fd:33:ac:de:2d:e9:b6:57:11:af:c8:45:cd:20: 61:38:a3:37:db:87:f3:97:49:54:be:9c:95:23:ba:08:c4:b6: 0f:98:84:3a:4b:60:bd:22:b1:00:c7:91:e3:2b:4a:47:98:f5: 49:e6:62:54:4c:59:2b:ea:5b:d3:f6:fa:d4:9e:1c:1a:3c:aa: 7c:53:e2:fb:52:f8:79:bb:48:68:7b:22:ec:35:2c:7d:12:ad: b7:ff:b3:c0:09:94:ad:68:23:00:dc:67:51:f1:ea:c6:7e:41: 95:e7:6a:a0:9c:4b:44:b5:41:39:cd:a0:dc:65:72:4a:90:bb: 03:aa:f2:ff:96:eb:45:d9:8a:b5:82:05:70:68:ab:d1:9e:d5: a9:3d:fe:40:cd:fa:1b:c5:a4:fd:8f:1c:53:bb:f5:88:6d:73: a0:c2:26:4a:92:e0:f4:de:15:59:d1:2e:90:b8:05:29:07:a0: 21:1c:cf:1d:d2:f8:9c:1a:db:e4:05:06:5e:c0:97:5c:da:a9: f9:74:56:3c:fb:8f:3b:2c:8f:66:5b:f5:71:e2:ab:39:aa:44: 80:2a:d2:f1 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt4NTf1/U8OWESU/5CafHW5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw NmE0YjgwHhcNMjYwMTAxMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzU1MTdhZDY4OWJkZGMyZjNmMmI0ZWQ0YWRjN2JhNGI0YWRiMzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvQyrNtEC9Pt+H6P2aONt+0AtCdb v+4/qKp7Mv5NEMUTSrSc3Q5kBpoEyngTZNyoshpiN7N1QmmvnHhEmQo/3GLb2qgj f7Ub3AYZ89rMK8ZGtWKoR0kj5dmAraOMFZolK6wYafXF5IcUoVnT/QjHAb6wEHC4 k3oN0vKX/N9saFNnFiX/4rpdZH/L/VAGiW6beJbej5KsZVNHM21/4ONLFaZrrDFM OVVo53lC0WFeNM7c+TZq3i/UFMJ3KF3GZz9XJSbwp5HIsAGF6IE6O9vwwhp46RnV DXwEFduw97VrjtS5LrjXf/cOim5CGEo3OroCYbdiajO7m/Jxd6SncnYkMQIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFBxVF61om93C8/K07Urce6S0rbONMB8GA1UdIwQY MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt MzYyZmZlOGVlMjcwLzEvSEZVWHJXaWIzY0x6OHJUdFN0eDdwTFN0czQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAeBAIAATAYAwQBT42uAwQB uXVYAwQAua6FAwQAwSonMBgEAgACMBIDBwAqAYZAAAYDBwAqAYZAAAkwDQYJKoZI hvcNAQELBQADggEBAEZ5XiOzcWDx2gFtj035uL3Zl1YlLrAMwwMxD5nO2dN+qKqn bl4mkg/9M6zeLem2VxGvyEXNIGE4ozfbh/OXSVS+nJUjugjEtg+YhDpLYL0isQDH keMrSkeY9UnmYlRMWSvqW9P2+tSeHBo8qnxT4vtS+Hm7SGh7Iuw1LH0Srbf/s8AJ lK1oIwDcZ1Hx6sZ+QZXnaqCcS0S1QTnNoNxlckqQuwOq8v+W60XZirWCBXBoq9Ge 1ak9/kDN+hvFpP2PHFO79Yhtc6DCJkqS4PTeFVnRLpC4BSkHoCEczx3S+Jwa2+QF Bl7Al1zaqfl0Vjz7jzssj2Zb9XHiqzmqRIAq0vE= -----END CERTIFICATE-----Generated at Mon Jan 19 17:46:52 2026 by rpki-client