This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/HLY3yOfkVYAqEx3IXqQjGqSe60s.roa File: HLY3yOfkVYAqEx3IXqQjGqSe60s.roa (raw, json) Hash identifier: 89cRs5OEP6GzsmQJJPOS43nhrd5JryCvGoLQgmsG8Fk= Subject key identifier: 1C:B6:37:C8:E7:E4:55:80:2A:13:1D:C8:5E:A4:23:1A:A4:9E:EB:4B Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019B7BA3D9A5C3461621F4F4F98A17ECDB66 Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/HLY3yOfkVYAqEx3IXqQjGqSe60s.roa Signing time: Thu 01 Jan 2026 22:18:14 +0000 ROA not before: Thu 01 Jan 2026 22:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25098 IP address blocks: 93.94.48.0/24 maxlen: 24 93.94.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d9:a5:c3:46:16:21:f4:f4:f9:8a:17:ec:db:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Jan 1 22:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cb637c8e7e455802a131dc85ea4231aa49eeb4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7f:9d:97:b2:93:6f:cf:c3:5b:04:0a:14:e4: bf:ea:f6:4c:b2:63:8f:61:9d:43:6c:28:46:02:4e: 2e:5f:4c:71:50:a5:67:33:eb:27:6e:44:ad:f1:a2: c3:03:25:d4:2a:d1:76:d8:38:60:44:d1:7d:b1:8b: c7:ab:f5:df:ac:54:92:a5:59:d3:32:4f:87:44:19: 2e:4c:9b:c9:b4:56:44:f7:e1:f8:40:6f:63:b2:34: 27:09:8b:20:53:d0:2a:80:16:0a:74:cb:b8:ce:ba: 5a:94:95:c6:34:ca:63:73:0a:73:54:c6:a1:81:7d: c6:04:3c:87:ed:f7:a3:8e:27:dc:d6:ca:ec:54:84: 9b:a6:fb:37:f1:86:01:93:46:2d:f1:b9:0a:b8:e5: 11:79:2c:89:e7:e5:cb:e2:a4:60:b9:84:cf:3f:17: f0:5e:ee:e5:94:cd:4b:c1:08:24:e2:51:1b:49:e3: dd:59:f6:b4:fa:77:a7:e2:6a:cf:32:7f:70:71:b1: 45:ef:e1:7c:32:2f:3f:7b:1e:e7:c5:a0:33:da:74: a2:c0:8d:43:bc:c7:9e:f3:49:2c:18:0e:ea:65:ab: de:9d:45:aa:ae:52:18:8c:17:39:4d:c0:06:34:0b: f0:d5:00:97:db:44:37:8c:fc:44:8c:88:bc:22:a2: 4e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B6:37:C8:E7:E4:55:80:2A:13:1D:C8:5E:A4:23:1A:A4:9E:EB:4B X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/HLY3yOfkVYAqEx3IXqQjGqSe60s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.94.48.0/23 Signature Algorithm: sha256WithRSAEncryption ab:7d:59:04:de:f3:14:f5:4f:18:79:fc:03:50:cd:bf:18:bb: 10:16:16:9f:cd:0b:b3:e6:6c:b4:2b:40:06:07:82:9c:86:51: 5d:f3:01:fe:03:ce:40:f3:ee:23:e2:0d:96:fd:7d:4b:74:e8: 73:f9:63:db:bc:6e:b6:ed:e6:90:20:8f:93:70:8f:2c:a5:ab: 4c:5f:45:da:d2:a2:06:68:04:a6:79:7c:54:16:83:1d:cf:2b: b6:08:93:88:cf:d0:a7:c3:a2:49:35:85:4d:56:b3:b8:3e:3b: 49:13:cf:5f:aa:0d:13:fb:6a:7a:1c:98:ea:f4:33:51:bf:3d: 34:7f:2b:24:2a:fd:ac:79:99:6e:7e:1b:cd:08:aa:a5:27:17: 45:05:41:f9:53:ec:51:af:2c:b2:cd:ab:c8:6a:fb:04:9f:36: c6:54:3f:83:de:73:74:fd:c6:1c:ae:d5:6a:ae:d6:02:7c:bf: d5:5e:f2:23:bf:c5:b5:41:5a:ba:d1:06:12:c2:98:ef:89:71: f8:fb:87:8e:47:bd:db:3a:50:32:42:88:37:10:47:40:64:4c: 42:af:9f:69:58:5b:5c:24:b4:01:41:e0:5c:e8:5a:d6:63:af: 06:9d:cd:9c:58:3c:6b:1c:db:f2:43:e5:02:10:5e:0e:60:a6: 0b:f2:33:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9mlw0YWIfT0+YoX7NtmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjYwMTAxMjIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2I2MzdjOGU3ZTQ1NTgwMmExMzFkYzg1ZWE0MjMxYWE0OWVlYjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH+dl7KTb8/DWwQKFOS/6vZMsmOP YZ1DbChGAk4uX0xxUKVnM+snbkSt8aLDAyXUKtF22DhgRNF9sYvHq/XfrFSSpVnT Mk+HRBkuTJvJtFZE9+H4QG9jsjQnCYsgU9AqgBYKdMu4zrpalJXGNMpjcwpzVMah gX3GBDyH7fejjifc1srsVISbpvs38YYBk0Yt8bkKuOUReSyJ5+XL4qRguYTPPxfw Xu7llM1LwQgk4lEbSePdWfa0+nen4mrPMn9wcbFF7+F8Mi8/ex7nxaAz2nSiwI1D vMee80ksGA7qZavenUWqrlIYjBc5TcAGNAvw1QCX20Q3jPxEjIi8IqJOlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBy2N8jn5FWAKhMdyF6kIxqknutLMB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvSExZM3lPZmtWWUFxRXgzSVhxUWpHcVNlNjBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXV4wMA0G CSqGSIb3DQEBCwUAA4IBAQCrfVkE3vMU9U8YefwDUM2/GLsQFhafzQuz5my0K0AG B4KchlFd8wH+A85A8+4j4g2W/X1LdOhz+WPbvG627eaQII+TcI8spatMX0Xa0qIG aASmeXxUFoMdzyu2CJOIz9Cnw6JJNYVNVrO4PjtJE89fqg0T+2p6HJjq9DNRvz00 fyskKv2seZlufhvNCKqlJxdFBUH5U+xRryyyzavIavsEnzbGVD+D3nN0/cYcrtVq rtYCfL/VXvIjv8W1QVq60QYSwpjviXH4+4eOR73bOlAyQog3EEdAZExCr59pWFtc JLQBQeBc6FrWY68Gnc2cWDxrHNvyQ+UCEF4OYKYL8jMl -----END CERTIFICATE-----Generated at Thu Jan 8 09:14:16 2026 by rpki-client