This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/HwgNT-WlslCb5z--PUmLTd8h3OY.roa File: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (raw, json) Hash identifier: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U= Subject key identifier: 1F:08:0D:4F:E5:A5:B2:50:9B:E7:3F:BE:3D:49:8B:4D:DF:21:DC:E6 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019B7B36C05BF6D43C75046CBA1EAB0C85DB Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/HwgNT-WlslCb5z--PUmLTd8h3OY.roa Signing time: Thu 01 Jan 2026 20:19:04 +0000 ROA not before: Thu 01 Jan 2026 20:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197518 IP address blocks: 130.193.104.0/21 maxlen: 21 130.193.104.0/24 maxlen: 24 130.193.108.0/24 maxlen: 24 185.255.200.0/22 maxlen: 22 188.95.248.0/21 maxlen: 21 2a03:680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c0:5b:f6:d4:3c:75:04:6c:ba:1e:ab:0c:85:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Jan 1 20:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f080d4fe5a5b2509be73fbe3d498b4ddf21dce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:46:cd:43:b4:52:69:28:5b:7c:35:19:5c:b2: fa:e5:b2:fd:55:29:ea:7a:6b:0a:7b:f9:28:15:94: c0:85:73:4c:35:8e:09:2e:30:26:8c:20:ea:ea:ae: c4:2c:b6:0f:03:7f:8a:e9:60:5a:65:82:51:f9:67: 6c:98:ad:eb:2e:16:33:99:92:2b:8d:89:4a:ab:94: 42:20:14:87:52:f6:ea:b2:3c:35:c6:de:be:b0:e2: 6e:6d:27:8b:1f:e3:01:79:a2:de:46:ac:88:8a:18: 3e:3d:94:ac:23:59:f2:37:9d:9d:4c:97:cc:a7:40: 31:b0:86:9e:9f:1a:99:5e:79:42:ae:0f:73:78:c4: db:8b:6a:8d:d2:13:15:d1:b3:42:87:d1:9a:be:92: a7:8e:de:6a:67:b9:75:20:f7:0d:0b:fc:f7:9b:f7: 67:3f:fb:17:4e:2f:1a:6b:eb:97:7e:51:17:32:a6: d7:32:bb:04:b0:ae:9a:ce:a7:85:4b:9f:2d:12:78: 33:78:9e:cc:e3:50:21:da:2f:1c:d5:fa:a7:e0:21: 96:e2:ca:48:cc:79:32:4d:51:68:28:c2:42:79:84: bd:8d:82:43:68:bc:79:4f:32:9c:3c:4b:00:40:23: 1d:27:6a:4d:d0:3c:51:e7:11:ea:ca:27:49:fd:e6: 66:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:08:0D:4F:E5:A5:B2:50:9B:E7:3F:BE:3D:49:8B:4D:DF:21:DC:E6 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/HwgNT-WlslCb5z--PUmLTd8h3OY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.193.104.0/21 185.255.200.0/22 188.95.248.0/21 IPv6: 2a03:680::/32 Signature Algorithm: sha256WithRSAEncryption 8b:d3:a1:9c:7e:30:1d:3d:9c:84:a1:ca:28:7a:16:2c:5a:10: 61:4a:3b:76:32:2a:0f:a9:db:68:83:dd:40:b6:c7:b9:13:45: 34:32:9d:29:e8:e2:e4:50:17:d0:4c:64:dc:75:dc:b2:6f:08: bc:c5:a4:52:52:e5:48:b4:a0:69:bb:b4:f3:75:c0:69:a3:f7: c3:64:ec:ad:b2:69:0d:0a:68:df:57:0b:db:97:4e:33:0e:40: fd:c1:98:48:de:2c:bd:7e:93:95:de:f5:a6:63:b0:1d:ad:64: db:6a:d8:e5:21:3d:89:f6:74:f9:2c:7d:2f:95:fa:48:a4:34: d3:37:a5:d1:5b:33:e6:76:6b:47:ac:e0:43:07:12:ef:a8:d1: de:5d:ba:b4:09:42:a1:90:f5:2e:6e:bd:9f:20:f2:bc:78:d7: e6:11:a7:87:ad:b2:72:1c:76:39:8d:97:23:26:45:79:04:22: 08:50:5a:f7:36:9b:2f:91:85:98:aa:74:7e:18:87:a4:f8:a6: 87:79:58:aa:f4:b7:fa:89:9a:8f:c3:7b:05:a6:12:ea:ad:c8: f8:da:ea:c1:f8:1e:20:ed:c7:59:e8:a0:c7:c7:54:6f:6a:b2: 87:fa:79:da:60:f9:a8:ea:ab:1f:fe:8d:33:d4:92:98:5b:e6: e3:b0:c1:71 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7NsBb9tQ8dQRsuh6rDIXbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMTAxMjAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjA4MGQ0ZmU1YTViMjUwOWJlNzNmYmUzZDQ5OGI0ZGRmMjFkY2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0bNQ7RSaShbfDUZXLL65bL9VSnq emsKe/koFZTAhXNMNY4JLjAmjCDq6q7ELLYPA3+K6WBaZYJR+WdsmK3rLhYzmZIr jYlKq5RCIBSHUvbqsjw1xt6+sOJubSeLH+MBeaLeRqyIihg+PZSsI1nyN52dTJfM p0AxsIaenxqZXnlCrg9zeMTbi2qN0hMV0bNCh9GavpKnjt5qZ7l1IPcNC/z3m/dn P/sXTi8aa+uXflEXMqbXMrsEsK6azqeFS58tEngzeJ7M41Ah2i8c1fqn4CGW4spI zHkyTVFoKMJCeYS9jYJDaLx5TzKcPEsAQCMdJ2pN0DxR5xHqyidJ/eZmrQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFB8IDU/lpbJQm+c/vj1Ji03fIdzmMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvSHdnTlQtV2xzbENiNXotLVBVbUxUZDhoM09ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDgsFoAwQC uf/IAwQDvF/4MA0EAgACMAcDBQAqAwaAMA0GCSqGSIb3DQEBCwUAA4IBAQCL06Gc fjAdPZyEocooehYsWhBhSjt2MioPqdtog91Atse5E0U0Mp0p6OLkUBfQTGTcddyy bwi8xaRSUuVItKBpu7TzdcBpo/fDZOytsmkNCmjfVwvbl04zDkD9wZhI3iy9fpOV 3vWmY7AdrWTbatjlIT2J9nT5LH0vlfpIpDTTN6XRWzPmdmtHrOBDBxLvqNHeXbq0 CUKhkPUubr2fIPK8eNfmEaeHrbJyHHY5jZcjJkV5BCIIUFr3NpsvkYWYqnR+GIek +KaHeViq9Lf6iZqPw3sFphLqrcj42urB+B4g7cdZ6KDHx1RvarKH+nnaYPmo6qsf /o0z1JKYW+bjsMFx -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:31 2026 by rpki-client