This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/Hp__tFbaZdaiAofy6QbTMuwaJyg.roa File: Hp__tFbaZdaiAofy6QbTMuwaJyg.roa (raw, json) Hash identifier: gy/Ii3yXNRU7ahYXH/J+iAr5bw4XRUBaMk0HedWPciE= Subject key identifier: 1E:9F:FF:B4:56:DA:65:D6:A2:02:87:F2:E9:06:D3:32:EC:1A:27:28 Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2 Certificate serial: 019B7910B1609342F4C23F24605358AFA199 Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/Hp__tFbaZdaiAofy6QbTMuwaJyg.roa Signing time: Thu 01 Jan 2026 10:18:15 +0000 ROA not before: Thu 01 Jan 2026 10:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34994 IP address blocks: 82.193.94.0/24 maxlen: 32 82.193.95.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b1:60:93:42:f4:c2:3f:24:60:53:58:af:a1:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2 Validity Not Before: Jan 1 10:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e9fffb456da65d6a20287f2e906d332ec1a2728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5c:2c:1a:6e:24:07:b9:5c:b8:e3:f9:0a:6b: ef:60:d2:a2:9e:8d:7d:7f:f6:f3:ff:a8:a7:3c:d9: e7:53:04:c8:c7:f6:97:41:71:b6:56:bd:db:bb:0f: 92:41:b4:55:b5:8c:fa:87:60:02:fc:e1:a3:74:1b: 58:93:5e:f1:a2:71:29:97:5b:da:c2:61:ee:34:dc: 0f:b8:a4:38:c0:4b:fb:c1:9e:1d:81:96:32:c5:db: a8:dd:19:74:a8:fa:a2:d2:08:67:8c:cd:71:05:32: 79:ec:67:60:f1:0c:b6:82:ab:b8:ef:09:93:fd:6e: ad:9e:6c:84:53:07:15:2e:b9:92:99:0a:ff:77:52: 82:18:77:e6:ec:a3:87:41:80:f7:71:6e:d6:c5:eb: e8:5b:31:3a:9a:02:44:88:87:66:a7:2a:58:0a:d4: a4:e3:49:80:1d:13:67:8f:f1:f6:9c:cb:80:a3:03: 3c:57:67:8d:8a:17:57:da:5d:27:10:99:9c:f6:fa: e1:ce:0b:f7:6a:23:be:41:aa:2d:24:0e:ae:a6:fc: 69:73:05:53:84:40:b4:e5:f4:9d:15:d2:75:1c:ba: 2b:e1:ff:ed:9e:b5:17:26:c8:f7:f0:49:ad:6d:09: c8:1f:87:5d:4c:5c:d5:6d:62:fe:75:fb:89:3f:9b: c1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9F:FF:B4:56:DA:65:D6:A2:02:87:F2:E9:06:D3:32:EC:1A:27:28 X509v3 Authority Key Identifier: keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/Hp__tFbaZdaiAofy6QbTMuwaJyg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.193.94.0/23 Signature Algorithm: sha256WithRSAEncryption 17:a9:41:ab:ec:68:38:f3:d9:70:2b:80:75:4d:47:67:7f:c6: 72:e5:76:bb:c3:69:b1:4c:e1:c4:77:00:d4:72:a0:64:45:3b: 3c:6f:ea:af:09:3f:4d:98:73:c2:c6:80:2a:5a:b0:90:59:46: 71:b6:00:bd:3e:91:0d:45:54:0e:ec:1a:d4:b1:99:8a:a6:ef: d5:44:c0:44:27:58:3d:b9:a5:2c:8c:14:61:d5:c0:cb:ad:63: cc:2f:3e:6c:be:71:04:bd:d5:e1:d2:09:eb:b1:c5:aa:6a:53: 69:72:88:3e:e7:d5:c9:d5:38:2c:78:d8:4e:82:eb:fa:0d:b3: 4e:c8:5b:5e:4e:be:1c:b0:c1:a4:25:6a:51:47:9c:40:75:26: 04:05:59:cd:d3:08:5d:6e:ad:43:a3:d4:28:2a:39:b9:87:1f: 18:c0:8a:d5:e6:29:27:f7:8f:49:9d:4d:ea:1b:b5:60:b4:7d: f3:ad:ac:e6:b8:93:5e:1c:4e:2c:7e:20:14:28:24:18:e8:04: 4a:39:d3:a1:e1:79:5f:ea:df:34:8d:1a:8d:64:8f:04:a6:e0: 31:d8:27:ad:0e:c6:bf:9a:d1:3e:7e:08:b0:d7:a2:17:40:32: bc:02:6a:f2:0f:f5:27:77:6b:1a:8a:2a:27:27:82:33:e2:3b: 34:f4:3a:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ELFgk0L0wj8kYFNYr6GZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTFiMzY1NTJmOWRhY2NiOTJhYzVjM2I0NGI0MjZkNjQz NzQ5ZTIwHhcNMjYwMTAxMTAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTlmZmZiNDU2ZGE2NWQ2YTIwMjg3ZjJlOTA2ZDMzMmVjMWEyNzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFwsGm4kB7lcuOP5CmvvYNKino19 f/bz/6inPNnnUwTIx/aXQXG2Vr3buw+SQbRVtYz6h2AC/OGjdBtYk17xonEpl1va wmHuNNwPuKQ4wEv7wZ4dgZYyxduo3Rl0qPqi0ghnjM1xBTJ57Gdg8Qy2gqu47wmT /W6tnmyEUwcVLrmSmQr/d1KCGHfm7KOHQYD3cW7WxevoWzE6mgJEiIdmpypYCtSk 40mAHRNnj/H2nMuAowM8V2eNihdX2l0nEJmc9vrhzgv3aiO+QaotJA6upvxpcwVT hEC05fSdFdJ1HLor4f/tnrUXJsj38EmtbQnIH4ddTFzVbWL+dfuJP5vBmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB6f/7RW2mXWogKH8ukG0zLsGicoMB8GA1UdIwQY MBaAFOWhs2VS+drMuSrFw7RLQm1kN0niMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMt YzVlNmQyM2Y4YjA5LzEvSHBfX3RGYmFaZGFpQW9meTZRYlRNdXdhSnlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMtYzVlNmQyM2Y4YjA5 LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUsFeMA0G CSqGSIb3DQEBCwUAA4IBAQAXqUGr7Gg489lwK4B1TUdnf8Zy5Xa7w2mxTOHEdwDU cqBkRTs8b+qvCT9NmHPCxoAqWrCQWUZxtgC9PpENRVQO7BrUsZmKpu/VRMBEJ1g9 uaUsjBRh1cDLrWPMLz5svnEEvdXh0gnrscWqalNpcog+59XJ1TgseNhOguv6DbNO yFteTr4csMGkJWpRR5xAdSYEBVnN0whdbq1Do9QoKjm5hx8YwIrV5ikn949JnU3q G7VgtH3zrazmuJNeHE4sfiAUKCQY6ARKOdOh4Xlf6t80jRqNZI8EpuAx2CetDsa/ mtE+fgiw16IXQDK8AmryD/Und2saiionJ4Iz4js09DrQ -----END CERTIFICATE-----Generated at Mon Jan 26 11:44:16 2026 by rpki-client