This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/HwCEkBXkDVGb_trROXqUO3InBZs.roa File: HwCEkBXkDVGb_trROXqUO3InBZs.roa (raw, json) Hash identifier: 4VqvdzlCii9J+rZ10d2Ty8zbIKLGsNMqZiNczN/lH5o= Subject key identifier: 1F:00:84:90:15:E4:0D:51:9B:FE:DA:D1:39:7A:94:3B:72:27:05:9B Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a Certificate serial: 019B7E38942C9542158D9A6DF315963018AF Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/HwCEkBXkDVGb_trROXqUO3InBZs.roa Signing time: Fri 02 Jan 2026 10:19:55 +0000 ROA not before: Fri 02 Jan 2026 10:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207830 IP address blocks: 213.174.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:94:2c:95:42:15:8d:9a:6d:f3:15:96:30:18:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a Validity Not Before: Jan 2 10:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f00849015e40d519bfedad1397a943b7227059b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9b:72:52:90:5d:e5:cf:88:46:50:5d:53:7e: 18:74:c6:4b:30:a9:9b:83:8a:30:83:08:66:be:86: 8f:97:85:5e:14:31:98:c6:76:ec:b6:6c:53:ad:5b: 39:96:1f:e7:d5:07:5d:1d:ce:0d:31:9c:22:7e:42: 33:16:11:d7:ca:db:24:d7:40:65:b1:12:44:74:00: 5f:86:37:e6:0b:e6:2e:2b:b3:1e:d9:b4:02:be:e9: d1:c0:5e:8e:e0:2e:af:fc:be:d5:f5:9e:97:4e:22: e7:40:fb:a0:0d:dd:81:ce:a0:77:48:9f:74:1f:80: ce:aa:69:64:8f:80:2c:4f:f2:6c:f1:08:65:b7:0a: d1:5d:5d:34:9e:3d:b1:0c:2f:07:41:1d:43:8b:1e: 41:b3:54:b7:e2:ab:bb:f8:8d:f6:5d:1f:fe:c3:da: a8:d9:4f:d2:0d:1d:df:02:05:d8:6b:8e:5d:58:0d: 85:15:51:89:bd:b6:12:23:fc:f7:b4:53:84:fe:29: da:a4:49:bf:4c:96:2b:f5:3a:d8:48:6d:9a:2c:55: 11:65:84:90:83:92:b5:72:89:65:ac:c2:f4:06:40: 01:e8:e5:cb:ae:5d:7d:a6:bc:2d:77:83:d5:4b:72: d6:9b:9b:58:2c:f7:ba:73:19:3e:2a:01:25:e0:05: 58:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:00:84:90:15:E4:0D:51:9B:FE:DA:D1:39:7A:94:3B:72:27:05:9B X509v3 Authority Key Identifier: keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/HwCEkBXkDVGb_trROXqUO3InBZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.174.5.0/24 Signature Algorithm: sha256WithRSAEncryption 77:c1:fa:f9:1e:f8:bb:5f:c8:15:c4:67:69:49:0a:a4:7e:73: b6:5f:ce:d4:ad:6c:4f:63:7a:c0:39:68:9a:5e:18:9b:e2:2c: a5:1d:a9:b0:fa:e4:44:d0:d1:36:8a:aa:67:4b:5d:f6:ad:e2: 5d:21:e8:ff:ce:4f:79:00:6e:ce:6d:8c:5c:0f:59:95:48:5e: 4d:de:d8:b2:70:0e:76:3a:9c:9a:be:16:9b:94:fe:6e:eb:3a: 92:5c:b0:0d:e5:d3:46:8e:41:db:43:61:25:98:d2:4c:23:0f: d3:79:ef:fa:0a:bd:cf:78:be:ea:87:08:c1:2c:f3:25:91:3c: 94:3a:19:92:f4:48:8c:c3:6e:0a:68:c9:85:48:0f:ff:a8:38: ef:34:20:4f:91:b9:61:e3:0e:2b:16:11:00:36:60:0a:4f:62: 7d:fc:39:82:b7:f3:1d:44:f9:c3:cc:f8:2c:27:2b:12:bd:8f: 27:9e:b6:9c:c7:aa:df:97:4a:19:9b:56:96:bb:cf:9d:15:07: 0c:0e:f1:b8:cf:e0:b8:8b:2e:70:bc:35:64:f0:63:e8:0a:2f: fb:ba:b9:70:ea:9a:8f:d4:57:fc:0c:eb:00:7e:11:19:42:a3: 14:9e:18:39:21:43:5a:c8:83:54:0c:2e:d7:dc:25:d5:9c:16: 8a:fa:7f:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJQslUIVjZpt8xWWMBivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0 Y2IxN2EwHhcNMjYwMTAyMTAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjAwODQ5MDE1ZTQwZDUxOWJmZWRhZDEzOTdhOTQzYjcyMjcwNTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArptyUpBd5c+IRlBdU34YdMZLMKmb g4owgwhmvoaPl4VeFDGYxnbstmxTrVs5lh/n1QddHc4NMZwifkIzFhHXytsk10Bl sRJEdABfhjfmC+YuK7Me2bQCvunRwF6O4C6v/L7V9Z6XTiLnQPugDd2BzqB3SJ90 H4DOqmlkj4AsT/Js8QhltwrRXV00nj2xDC8HQR1Dix5Bs1S34qu7+I32XR/+w9qo 2U/SDR3fAgXYa45dWA2FFVGJvbYSI/z3tFOE/inapEm/TJYr9TrYSG2aLFURZYSQ g5K1collrML0BkAB6OXLrl19prwtd4PVS3LWm5tYLPe6cxk+KgEl4AVYgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB8AhJAV5A1Rm/7a0Tl6lDtyJwWbMB8GA1UdIwQY MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt NTQ5ZWU2ZDMwZmI2LzEvSHdDRWtCWGtEVkdiX3RyUk9YcVVPM0luQlpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2 LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1a4FMA0G CSqGSIb3DQEBCwUAA4IBAQB3wfr5Hvi7X8gVxGdpSQqkfnO2X87UrWxPY3rAOWia Xhib4iylHamw+uRE0NE2iqpnS132reJdIej/zk95AG7ObYxcD1mVSF5N3tiycA52 OpyavhablP5u6zqSXLAN5dNGjkHbQ2ElmNJMIw/Tee/6Cr3PeL7qhwjBLPMlkTyU OhmS9EiMw24KaMmFSA//qDjvNCBPkblh4w4rFhEANmAKT2J9/DmCt/MdRPnDzPgs JysSvY8nnracx6rfl0oZm1aWu8+dFQcMDvG4z+C4iy5wvDVk8GPoCi/7urlw6pqP 1Ff8DOsAfhEZQqMUnhg5IUNayINUDC7X3CXVnBaK+n+K -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:46 2026 by rpki-client