This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/HSTuOoYmEP6FXvCjkFUxy8XItsM.roa File: HSTuOoYmEP6FXvCjkFUxy8XItsM.roa (raw, json) Hash identifier: 3WnYMecI83ODrS9RSw34uD8M2grMSOCkpuc7v1FNu/k= Subject key identifier: 1D:24:EE:3A:86:26:10:FE:85:5E:F0:A3:90:55:31:CB:C5:C8:B6:C3 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B07C4B7315658F142B0BAD8F476D3 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/HSTuOoYmEP6FXvCjkFUxy8XItsM.roa Signing time: Fri 02 Jan 2026 06:17:56 +0000 ROA not before: Fri 02 Jan 2026 06:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32181 IP address blocks: 130.185.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:07:c4:b7:31:56:58:f1:42:b0:ba:d8:f4:76:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d24ee3a862610fe855ef0a3905531cbc5c8b6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e8:ed:3c:40:3f:a2:1d:f2:c2:06:c7:0f:3c: 9b:d1:6f:d9:cb:83:de:dc:60:1b:07:9b:d2:97:6c: 4a:4d:c8:28:0d:8b:28:bb:7e:46:e9:c9:d5:dd:89: a6:13:c0:52:42:bb:fa:10:8c:79:d8:5d:05:98:25: 64:ed:83:ab:b0:25:fb:bd:78:93:1f:d4:70:68:f7: 11:12:8e:6d:75:b4:14:41:81:2a:f1:33:19:df:3a: 33:83:bb:9c:e9:e5:15:93:be:74:d4:22:65:4b:39: 4f:9b:fd:c7:12:46:5f:af:30:10:c6:45:42:fa:53: bd:9f:49:6f:5c:44:8e:eb:1a:7d:2d:2f:09:c8:ad: 48:6a:77:9c:e6:36:66:d2:02:3a:e1:c7:37:e8:80: 1e:82:4f:61:02:5d:6a:9d:9a:5a:af:51:5a:16:68: ee:5b:f8:97:a4:66:fe:b4:1d:c1:98:c7:68:9b:55: b2:69:49:bd:ae:c4:91:cf:81:36:d7:b6:f9:95:f0: 48:73:8e:39:f1:4b:e5:1b:7a:bd:41:b5:a0:e3:8b: 23:29:a2:38:2a:24:c0:95:c3:02:a2:b3:13:b7:16: 02:c1:76:87:90:af:cd:eb:b6:bd:d2:12:f0:0c:8f: de:39:5f:a7:4c:43:78:d3:fc:1d:55:51:2f:15:d1: 25:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:24:EE:3A:86:26:10:FE:85:5E:F0:A3:90:55:31:CB:C5:C8:B6:C3 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/HSTuOoYmEP6FXvCjkFUxy8XItsM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.185.239.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:46:13:ee:cd:89:b2:71:e4:06:29:69:43:5b:cc:f4:84:29: 12:1b:5e:1e:89:a4:78:fe:66:0f:aa:15:e3:b8:50:5e:79:dc: 5e:a0:e4:70:33:3d:57:50:1c:70:35:4c:16:13:9c:fe:df:de: da:26:b9:41:bf:81:51:02:8b:6d:94:61:df:a0:29:81:25:8b: d6:ee:42:f8:5f:90:14:8c:34:3b:d9:ef:83:11:19:38:64:7a: 0b:a5:f9:bf:72:90:f9:f8:e5:99:4c:ce:22:bd:cc:d3:3a:7b: 08:f8:0f:24:a0:c4:e9:e6:48:c1:3d:a5:c3:9c:cc:3f:56:dd: eb:91:19:07:b0:a3:e5:12:bc:7d:71:5d:61:00:a2:10:17:49: 0c:45:c0:58:97:42:d3:1c:5d:17:15:13:5a:28:45:5a:dc:a3: 00:f3:67:c4:f1:c3:66:09:10:d6:f8:e8:3f:cf:99:f9:32:01: 9f:16:b2:0e:39:98:7f:5e:8e:a8:2b:f3:be:87:45:fb:fe:92: a0:69:9d:3b:45:7a:7a:56:68:6a:fc:f7:d2:b3:63:3c:fd:a7: 7d:51:68:9a:29:5f:d4:34:fc:a3:c6:34:f2:60:be:c4:4f:da: 86:f6:91:f6:5f:c4:db:8b:76:16:e8:4d:9c:a5:af:29:9f:e4: bd:a7:5a:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WwfEtzFWWPFCsLrY9HbTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDI0ZWUzYTg2MjYxMGZlODU1ZWYwYTM5MDU1MzFjYmM1YzhiNmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOjtPEA/oh3ywgbHDzyb0W/Zy4Pe 3GAbB5vSl2xKTcgoDYsou35G6cnV3YmmE8BSQrv6EIx52F0FmCVk7YOrsCX7vXiT H9RwaPcREo5tdbQUQYEq8TMZ3zozg7uc6eUVk7501CJlSzlPm/3HEkZfrzAQxkVC +lO9n0lvXESO6xp9LS8JyK1Ianec5jZm0gI64cc36IAegk9hAl1qnZpar1FaFmju W/iXpGb+tB3BmMdom1WyaUm9rsSRz4E217b5lfBIc4458UvlG3q9QbWg44sjKaI4 KiTAlcMCorMTtxYCwXaHkK/N67a90hLwDI/eOV+nTEN40/wdVVEvFdEl2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB0k7jqGJhD+hV7wo5BVMcvFyLbDMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvSFNUdU9vWW1FUDZGWHZDamtGVXh5OFhJdHNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgrnvMA0G CSqGSIb3DQEBCwUAA4IBAQCeRhPuzYmyceQGKWlDW8z0hCkSG14eiaR4/mYPqhXj uFBeedxeoORwMz1XUBxwNUwWE5z+397aJrlBv4FRAottlGHfoCmBJYvW7kL4X5AU jDQ72e+DERk4ZHoLpfm/cpD5+OWZTM4ivczTOnsI+A8koMTp5kjBPaXDnMw/Vt3r kRkHsKPlErx9cV1hAKIQF0kMRcBYl0LTHF0XFRNaKEVa3KMA82fE8cNmCRDW+Og/ z5n5MgGfFrIOOZh/Xo6oK/O+h0X7/pKgaZ07RXp6Vmhq/PfSs2M8/ad9UWiaKV/U NPyjxjTyYL7ET9qG9pH2X8Tbi3YW6E2cpa8pn+S9p1r2 -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:49 2026 by rpki-client