This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/HwQ0ysJ-ReYIfvTATtIFQHGFYuo.roa File: HwQ0ysJ-ReYIfvTATtIFQHGFYuo.roa (raw, json) Hash identifier: RcBZdLGve7aLoT/eCaK4NY6Ranv/HZBfg4Kh6wYHemY= Subject key identifier: 1F:04:34:CA:C2:7E:45:E6:08:7E:F4:C0:4E:D2:05:40:71:85:62:EA Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA78A31DF037196986F235A6237F7E5 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/HwQ0ysJ-ReYIfvTATtIFQHGFYuo.roa Signing time: Fri 02 Jan 2026 12:21:07 +0000 ROA not before: Fri 02 Jan 2026 12:21:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209313 IP address blocks: 94.25.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:8a:31:df:03:71:96:98:6f:23:5a:62:37:f7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f0434cac27e45e6087ef4c04ed20540718562ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1a:50:b9:5a:7b:24:cc:f1:43:80:9b:84:47: 71:60:64:a2:d5:fa:92:57:7e:d7:fc:15:70:2f:ff: 9d:f1:59:62:74:97:4a:9e:94:c3:f7:28:5a:a8:03: e2:f5:96:40:3d:b5:a5:1a:84:09:cc:ca:b0:b4:20: ed:7e:a2:71:17:99:a9:ae:34:67:fa:98:2b:31:cc: 96:f9:c5:9e:d7:0b:36:0a:92:5e:3e:1d:83:58:e5: e1:b1:6e:ad:9a:38:03:f3:06:87:21:3d:21:8e:4e: fa:a9:b9:ac:5c:c1:e6:a3:18:b5:b3:53:53:fe:e5: ba:fc:1e:5a:80:66:3b:a7:62:25:3d:71:c0:e7:97: 83:5f:96:ef:bf:2f:57:a2:4b:37:d6:69:b8:36:33: 83:6d:39:a1:1c:26:b6:fe:6d:64:38:a2:37:1a:0d: ad:b0:85:d9:9c:c3:3a:bc:a0:da:5a:b5:bd:06:0f: 78:e2:4e:4e:ed:74:2d:9f:dc:4e:31:2f:31:76:df: 13:14:37:e5:4f:f9:59:9a:c3:d0:f8:f7:d2:ff:84: bd:e3:d1:bd:a9:57:5f:4b:a0:6b:8e:52:a5:ba:08: 5f:27:4a:05:7d:8e:e8:50:ad:f9:20:66:e0:79:3a: ac:e3:e0:23:09:71:7d:d5:fe:6d:cb:36:e0:fc:6b: ba:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:04:34:CA:C2:7E:45:E6:08:7E:F4:C0:4E:D2:05:40:71:85:62:EA X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/HwQ0ysJ-ReYIfvTATtIFQHGFYuo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.25.30.0/24 Signature Algorithm: sha256WithRSAEncryption 73:0c:7d:3e:1d:80:28:3c:8e:21:7f:b8:c1:a9:53:c9:49:9c: 13:8b:7a:6c:3d:32:07:45:3f:70:81:f0:52:0f:ae:96:07:72: 53:3c:c8:54:e4:be:c5:9c:05:72:17:a9:af:fc:56:28:b4:55: 83:95:d7:fa:32:85:eb:3c:c5:26:fb:b9:fc:2f:12:ef:da:ae: 5d:8e:f3:a7:3b:0e:14:46:9a:26:6c:7a:49:47:13:83:45:bb: a5:cb:7c:01:06:d5:bf:a1:ca:ea:83:26:65:d1:69:db:4f:4a: 3e:38:eb:41:18:0b:8d:17:68:cb:dc:44:3d:c4:da:98:15:68: dc:ac:2d:52:14:92:5e:eb:d5:cc:a1:93:fa:17:63:0a:05:d5: e1:a0:90:e3:58:77:48:1e:f8:22:1f:10:31:f0:33:ef:9c:62: bd:d8:13:77:92:46:b4:7e:63:97:72:65:32:27:b7:62:a9:e9: 8b:23:c1:3b:67:ba:82:b9:c5:da:88:a7:84:22:67:91:74:a5: 8e:69:a2:af:5b:70:8a:e6:02:d8:a6:b7:15:88:aa:ed:b5:fb: 72:93:c5:6d:5c:bb:21:23:77:8b:66:40:ec:ac:c1:d8:f0:1c: 7e:47:2f:7c:f2:43:40:56:24:74:e6:d2:f1:0a:91:34:fe:7a: 30:15:14:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p4ox3wNxlphvI1piN/flMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjA0MzRjYWMyN2U0NWU2MDg3ZWY0YzA0ZWQyMDU0MDcxODU2MmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxpQuVp7JMzxQ4CbhEdxYGSi1fqS V37X/BVwL/+d8VlidJdKnpTD9yhaqAPi9ZZAPbWlGoQJzMqwtCDtfqJxF5mprjRn +pgrMcyW+cWe1ws2CpJePh2DWOXhsW6tmjgD8waHIT0hjk76qbmsXMHmoxi1s1NT /uW6/B5agGY7p2IlPXHA55eDX5bvvy9Xoks31mm4NjODbTmhHCa2/m1kOKI3Gg2t sIXZnMM6vKDaWrW9Bg944k5O7XQtn9xOMS8xdt8TFDflT/lZmsPQ+PfS/4S949G9 qVdfS6BrjlKlughfJ0oFfY7oUK35IGbgeTqs4+AjCXF91f5tyzbg/Gu61wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB8ENMrCfkXmCH70wE7SBUBxhWLqMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvSHdRMHlzSi1SZVlJZnZUQVR0SUZRSEdGWXVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXhkeMA0G CSqGSIb3DQEBCwUAA4IBAQBzDH0+HYAoPI4hf7jBqVPJSZwTi3psPTIHRT9wgfBS D66WB3JTPMhU5L7FnAVyF6mv/FYotFWDldf6MoXrPMUm+7n8LxLv2q5djvOnOw4U RpombHpJRxODRbuly3wBBtW/ocrqgyZl0WnbT0o+OOtBGAuNF2jL3EQ9xNqYFWjc rC1SFJJe69XMoZP6F2MKBdXhoJDjWHdIHvgiHxAx8DPvnGK92BN3kka0fmOXcmUy J7diqemLI8E7Z7qCucXaiKeEImeRdKWOaaKvW3CK5gLYprcViKrttftyk8VtXLsh I3eLZkDsrMHY8Bx+Ry988kNAViR05tLxCpE0/nowFRSz -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:37 2026 by rpki-client