This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/hLDJZ-V17lQ1uYy4Yb_7EyNt5EY.roa File: hLDJZ-V17lQ1uYy4Yb_7EyNt5EY.roa (raw, json) Hash identifier: 0stvy4uT+ZzDa9Ceq2lwui9WwwpxCgyyC5wsX5cUjjE= Subject key identifier: 84:B0:C9:67:E5:75:EE:54:35:B9:8C:B8:61:BF:FB:13:23:6D:E4:46 Certificate issuer: /CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467 Certificate serial: 019B7DCA555EFDC1666BF8A8931AF3039B28 Authority key identifier: CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/hLDJZ-V17lQ1uYy4Yb_7EyNt5EY.roa Signing time: Fri 02 Jan 2026 08:19:30 +0000 ROA not before: Fri 02 Jan 2026 08:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29670 IP address blocks: 193.96.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:55:5e:fd:c1:66:6b:f8:a8:93:1a:f3:03:9b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467 Validity Not Before: Jan 2 08:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84b0c967e575ee5435b98cb861bffb13236de446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fc:33:4f:13:93:5d:2f:1e:dc:d7:e7:a8:fe: 33:ed:5d:ef:ca:bc:dc:8c:0d:ba:5d:8c:dc:63:36: 8e:17:6f:24:61:55:8f:25:95:09:16:f2:d2:75:42: 5c:49:1f:7d:c9:15:b7:28:24:5c:ea:7e:e3:7b:e6: c9:8a:e5:62:7f:df:30:1b:0c:05:7c:d5:62:30:f5: 92:30:ec:d7:2c:23:3b:c4:04:3e:e1:46:13:fe:6e: e8:64:e0:91:ab:10:d2:8b:f3:0d:ca:f3:78:92:ca: e4:dd:14:73:16:56:30:0d:4c:b8:17:a5:01:53:6d: 6f:cf:f8:e5:2c:76:d3:df:f0:63:a2:f3:61:b3:77: 45:bf:aa:c2:e7:2a:12:81:a9:5a:84:28:a5:4e:57: 72:ab:b5:54:16:d7:54:4c:ca:ca:4e:33:32:ff:ad: 55:0a:59:4d:1f:30:c1:0e:44:d9:6b:ef:3c:2e:9b: ff:00:e9:47:96:dc:ba:5f:df:76:81:e4:ed:37:ad: 56:30:b7:9c:06:50:b9:77:24:5a:19:c3:5e:62:03: 8e:75:55:32:10:21:40:d3:3f:0c:06:39:d7:a5:6e: fa:a8:cc:41:1b:8c:e6:be:84:51:5e:ed:88:c6:55: e9:77:17:1a:76:e9:3a:0b:d0:46:f6:a2:50:26:c9: bf:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B0:C9:67:E5:75:EE:54:35:B9:8C:B8:61:BF:FB:13:23:6D:E4:46 X509v3 Authority Key Identifier: keyid:CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/hLDJZ-V17lQ1uYy4Yb_7EyNt5EY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.96.24.0/24 Signature Algorithm: sha256WithRSAEncryption 39:1d:51:7b:e9:95:da:f6:d1:ea:32:5a:22:c6:20:df:9e:3e: a0:e5:d8:ec:c9:fb:19:53:1c:f0:15:3e:bc:8d:26:a6:81:60: f7:c6:44:e8:31:99:87:30:04:2f:1f:ea:26:bc:05:12:e0:4b: 34:5e:72:eb:9f:f7:8d:45:6c:a2:22:7f:15:b9:d3:5b:bd:69: 77:10:37:5f:d3:02:df:26:d5:92:a6:80:3d:ef:14:01:33:1d: fb:b8:7b:7d:13:1b:d6:6f:5a:41:f2:2d:a6:71:c8:81:73:1b: 35:a9:9b:13:c9:e5:99:ca:2d:65:38:f2:3b:f1:89:1f:7f:7c: d6:6b:83:ee:33:a8:d3:5f:97:72:cc:4e:e0:eb:7c:4d:0d:0a: 05:3a:3a:b5:9e:3a:1d:b3:d5:4b:4f:87:98:82:7e:5a:72:1b: ae:50:e4:eb:3c:1b:88:f5:39:a8:7a:32:4e:d4:80:9d:65:9a: b3:bb:b1:b3:28:9a:d7:f6:96:19:23:a3:61:a6:95:1b:38:48: 9e:a2:10:40:17:2c:15:47:d4:b8:22:12:9f:8c:67:c5:df:60: 3e:e6:ef:d1:a9:f8:3b:85:d1:03:0a:ad:46:2f:ed:d8:14:17: f3:27:da:4e:93:7a:14:2c:61:a4:ce:5e:a8:0a:aa:7f:8e:ea: e4:4b:52:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ylVe/cFma/iokxrzA5soMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNTk5YmRjMWNmYzdhZThjYzJmYmExNWZjZDgwY2ExMTcz Nzg0NjcwHhcNMjYwMTAyMDgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGIwYzk2N2U1NzVlZTU0MzViOThjYjg2MWJmZmIxMzIzNmRlNDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPwzTxOTXS8e3NfnqP4z7V3vyrzc jA26XYzcYzaOF28kYVWPJZUJFvLSdUJcSR99yRW3KCRc6n7je+bJiuVif98wGwwF fNViMPWSMOzXLCM7xAQ+4UYT/m7oZOCRqxDSi/MNyvN4ksrk3RRzFlYwDUy4F6UB U21vz/jlLHbT3/BjovNhs3dFv6rC5yoSgalahCilTldyq7VUFtdUTMrKTjMy/61V CllNHzDBDkTZa+88Lpv/AOlHlty6X992geTtN61WMLecBlC5dyRaGcNeYgOOdVUy ECFA0z8MBjnXpW76qMxBG4zmvoRRXu2IxlXpdxcaduk6C9BG9qJQJsm/mQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFISwyWflde5UNbmMuGG/+xMjbeRGMB8GA1UdIwQY MBaAFMpZm9wc/HrozC+6FfzYDKEXN4RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWxtYjNCejhldWpNTDdvVl9OZ01vUmMzaEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xY2VjYjgtOTdkOS00NzNmLWIwMDQt Y2M5MTI3NDZlNDdlLzEvaExESlotVjE3bFExdVl5NFliXzdFeU50NUVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8xY2VjYjgtOTdkOS00NzNmLWIwMDQtY2M5MTI3NDZlNDdl LzEveWxtYjNCejhldWpNTDdvVl9OZ01vUmMzaEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWAYMA0G CSqGSIb3DQEBCwUAA4IBAQA5HVF76ZXa9tHqMloixiDfnj6g5djsyfsZUxzwFT68 jSamgWD3xkToMZmHMAQvH+omvAUS4Es0XnLrn/eNRWyiIn8VudNbvWl3EDdf0wLf JtWSpoA97xQBMx37uHt9ExvWb1pB8i2mcciBcxs1qZsTyeWZyi1lOPI78Ykff3zW a4PuM6jTX5dyzE7g63xNDQoFOjq1njods9VLT4eYgn5achuuUOTrPBuI9TmoejJO 1ICdZZqzu7GzKJrX9pYZI6NhppUbOEieohBAFywVR9S4IhKfjGfF32A+5u/Rqfg7 hdEDCq1GL+3YFBfzJ9pOk3oULGGkzl6oCqp/jurkS1Ic -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:18 2026 by rpki-client