This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/HH19122CelF2CYu9NGeiskT2zfQ.roa File: HH19122CelF2CYu9NGeiskT2zfQ.roa (raw, json) Hash identifier: d36L3R0df2y04YpprZZx3+ZOSVeyL0BD9l+o3g16VZ8= Subject key identifier: 1C:7D:7D:D7:6D:82:7A:51:76:09:8B:BD:34:67:A2:B2:44:F6:CD:F4 Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CECF52D99E73FDE9B07DF8D72361765 Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/HH19122CelF2CYu9NGeiskT2zfQ.roa Signing time: Fri 02 Jan 2026 04:17:42 +0000 ROA not before: Fri 02 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3323 IP address blocks: 194.177.196.0/24 maxlen: 24 2001:648:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f5:2d:99:e7:3f:de:9b:07:df:8d:72:36:17:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c7d7dd76d827a5176098bbd3467a2b244f6cdf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9e:c2:e8:45:fe:bb:24:c6:fb:9d:65:f0:68: cf:ae:13:65:cf:fd:24:a3:5a:d1:76:46:4f:ab:99: f5:df:76:40:98:b0:72:2e:9d:e4:31:00:88:02:16: 8d:8c:e0:9a:5e:9c:7e:ee:57:b6:34:c7:95:b8:f0: 67:3b:ee:ec:fe:b0:3a:93:9a:86:3a:91:c8:51:c3: cf:60:82:d0:70:74:ba:bb:16:24:72:ed:6c:80:fb: 99:fb:41:df:cc:c2:2e:e2:31:9b:c3:5b:ba:58:a7: 8f:12:d8:cc:6b:5b:23:5f:21:f7:19:6c:23:ae:1f: de:3d:54:c0:fc:ac:03:46:e0:d6:45:ec:c5:cd:f3: 29:66:8e:5b:a7:48:28:b5:34:68:7e:2a:c6:8a:e5: 2d:d3:42:0e:35:c4:80:fe:4a:db:cc:df:c7:2f:eb: e0:67:41:8c:a2:50:c1:a1:a2:37:33:af:36:2e:f4: 0f:93:d2:7e:4b:ab:1d:22:9b:e2:ea:16:00:25:ad: a5:05:9d:c4:3f:37:b5:e8:84:82:78:4e:84:8c:0a: ec:78:51:4e:6f:84:0e:3d:08:8a:04:73:96:d5:9b: 60:c6:7c:a8:7c:1f:89:41:bc:b1:93:07:33:14:5b: 22:9f:f3:27:4c:25:71:35:35:8b:bb:a2:e7:2d:05: c6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7D:7D:D7:6D:82:7A:51:76:09:8B:BD:34:67:A2:B2:44:F6:CD:F4 X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/HH19122CelF2CYu9NGeiskT2zfQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.177.196.0/24 IPv6: 2001:648:2000::/48 Signature Algorithm: sha256WithRSAEncryption 49:5c:48:6d:76:8f:af:d6:f6:f7:73:f0:d9:b2:d2:3b:bb:66: 16:aa:21:44:7e:45:97:fc:61:29:56:65:a0:5e:0d:95:42:3f: 5c:a2:31:30:96:86:88:f3:fa:60:dc:7e:f4:bd:0f:17:19:57: 54:f4:bf:2b:4b:e7:1e:36:8c:4a:b2:fb:cd:0f:7d:18:7a:8f: 2d:4e:5f:ef:aa:b4:9d:95:87:27:68:0e:b8:78:c8:f4:fa:78: 1c:8a:a5:84:b3:dc:df:80:dc:f3:4b:7f:dc:5e:08:14:33:05: 47:5a:e3:ff:46:00:d6:4f:30:fb:47:92:59:0c:eb:cb:3c:25: 0a:a8:ea:27:9a:c1:a4:50:30:f6:d2:08:31:05:e6:2b:ee:1f: 7e:2d:c2:ba:3c:6e:20:99:14:3d:c1:2b:98:66:97:e5:e6:3c: 3c:20:5f:18:30:12:2f:6d:a9:b1:c2:9a:d8:92:cf:0a:92:e1: 96:cd:e1:27:9a:87:57:4a:59:02:fb:b8:ec:7e:1f:75:62:d5: bc:a1:2e:90:b4:51:68:5a:75:b9:a9:59:61:e1:08:9b:dd:7c: 2b:3e:48:18:37:b4:35:38:03:fa:e1:96:7f:51:5b:35:70:ee: 31:83:a8:cd:08:c5:92:04:5f:c7:ad:60:66:92:86:a8:82:26: e5:5e:eb:a7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt87PUtmec/3psH341yNhdlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzdkN2RkNzZkODI3YTUxNzYwOThiYmQzNDY3YTJiMjQ0ZjZjZGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ7C6EX+uyTG+51l8GjPrhNlz/0k o1rRdkZPq5n133ZAmLByLp3kMQCIAhaNjOCaXpx+7le2NMeVuPBnO+7s/rA6k5qG OpHIUcPPYILQcHS6uxYkcu1sgPuZ+0HfzMIu4jGbw1u6WKePEtjMa1sjXyH3GWwj rh/ePVTA/KwDRuDWRezFzfMpZo5bp0gotTRofirGiuUt00IONcSA/krbzN/HL+vg Z0GMolDBoaI3M682LvQPk9J+S6sdIpvi6hYAJa2lBZ3EPze16ISCeE6EjArseFFO b4QOPQiKBHOW1ZtgxnyofB+JQbyxkwczFFsin/MnTCVxNTWLu6LnLQXGAQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBx9fddtgnpRdgmLvTRnorJE9s30MB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvSEgxOTEyMkNlbEYyQ1l1OU5HZWlza1QyemZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwrHEMA8E AgACMAkDBwAgAQZIIAAwDQYJKoZIhvcNAQELBQADggEBAElcSG12j6/W9vdz8Nmy 0ju7ZhaqIUR+RZf8YSlWZaBeDZVCP1yiMTCWhojz+mDcfvS9DxcZV1T0vytL5x42 jEqy+80PfRh6jy1OX++qtJ2VhydoDrh4yPT6eByKpYSz3N+A3PNLf9xeCBQzBUda 4/9GANZPMPtHklkM68s8JQqo6ieawaRQMPbSCDEF5ivuH34twro8biCZFD3BK5hm l+XmPDwgXxgwEi9tqbHCmtiSzwqS4ZbN4Seah1dKWQL7uOx+H3Vi1byhLpC0UWha dbmpWWHhCJvdfCs+SBg3tDU4A/rhln9RWzVw7jGDqM0IxZIEX8etYGaShqiCJuVe 66c= -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:03 2026 by rpki-client