This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/HumGUcM3JA5WttmoWk-JTSCdCgM.roa File: HumGUcM3JA5WttmoWk-JTSCdCgM.roa (raw, json) Hash identifier: HnfAs+SxCScsW89JwwIoJO2V9u8mCg1vCQuYyQrU9JY= Subject key identifier: 1E:E9:86:51:C3:37:24:0E:56:B6:D9:A8:5A:4F:89:4D:20:9D:0A:03 Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5 Certificate serial: 019B7A5AB2387FC68682141A030EF37F44DB Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/HumGUcM3JA5WttmoWk-JTSCdCgM.roa Signing time: Thu 01 Jan 2026 16:18:42 +0000 ROA not before: Thu 01 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39305 IP address blocks: 91.132.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b2:38:7f:c6:86:82:14:1a:03:0e:f3:7f:44:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5 Validity Not Before: Jan 1 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ee98651c337240e56b6d9a85a4f894d209d0a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a2:75:03:96:fd:a6:54:2b:91:66:29:51:f8: 52:ad:a7:32:3d:dc:cf:08:ac:7a:6d:00:d2:71:74: 4b:2f:38:c8:69:1c:19:b6:e4:34:f3:76:dd:d8:fc: 70:b6:d6:3a:8d:48:58:99:e5:22:54:e0:a3:1d:c2: db:8e:58:37:04:9b:ea:1a:60:f1:fd:92:a8:d5:39: 3b:0c:47:67:62:4d:c5:df:b4:c4:02:50:c2:7c:85: bf:6d:c1:3b:ab:37:98:eb:0c:da:5f:e5:34:1b:81: 4d:75:0c:17:f8:f5:10:a8:d3:07:22:4c:f1:47:2f: a1:32:64:11:25:66:72:f3:3e:a4:e8:16:5e:32:6f: a7:2c:f3:c6:c9:bb:d0:33:1e:a3:46:8b:2e:04:85: 3a:a7:40:2e:4f:b9:11:1e:91:80:b8:97:3d:c8:0f: 7a:39:b0:51:ba:8c:5f:a2:a5:74:4f:9b:0a:6f:8d: df:d1:1b:67:9d:f9:2d:63:33:b6:18:19:1a:a8:b9: 39:4a:a6:78:48:c9:cc:9a:a3:3e:09:b4:47:5a:4f: 3f:58:a3:e3:27:91:7e:24:31:82:a6:15:ce:ce:34: 40:3b:c6:6d:65:b7:71:ec:62:71:17:9c:36:3d:f3: 47:ba:55:fa:12:9a:f2:00:56:19:98:ea:c0:d1:0f: 23:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E9:86:51:C3:37:24:0E:56:B6:D9:A8:5A:4F:89:4D:20:9D:0A:03 X509v3 Authority Key Identifier: keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/HumGUcM3JA5WttmoWk-JTSCdCgM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.44.0/22 Signature Algorithm: sha256WithRSAEncryption a7:72:79:96:1c:af:94:88:f2:06:ac:a4:9a:50:0b:9d:c8:80: ea:96:f8:c1:51:ac:61:5e:fb:81:29:04:aa:10:ff:93:21:d8: db:51:6e:ae:db:40:3e:4d:ce:7b:b2:27:1d:c1:46:65:bf:52: 1a:07:df:09:87:ca:44:b0:25:5d:7b:7e:12:c2:48:83:6b:75: 9f:ad:0a:06:13:16:fb:13:c7:c4:ce:e7:b2:ca:85:bd:bc:25: 93:df:d3:9e:a6:1f:27:9f:36:7c:8d:75:d8:18:21:4b:2a:de: d1:da:cd:91:34:cb:d2:e5:08:90:a7:ad:b6:8d:34:c3:04:50: 63:61:f4:4b:b7:f0:62:f3:31:99:3f:0d:40:6b:b3:36:c7:8e: ae:6b:4c:15:2b:c4:f4:39:21:fe:72:7c:4d:95:11:f5:b1:51: 41:b9:f6:ab:22:30:30:cf:81:c3:78:04:a2:9a:76:4c:e7:67: 44:f4:18:2b:b3:dc:1a:fb:18:90:95:b1:68:b5:c0:53:7e:1f: 31:b0:40:93:94:af:79:64:f7:97:93:fe:92:05:46:34:b7:3d: b1:28:6e:b0:d8:bf:f7:af:3f:79:e6:09:59:eb:11:20:d3:43: 5a:59:2d:16:b8:b4:7d:e4:15:d3:2a:0e:a0:6b:ef:ab:70:4b: c9:5e:ee:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrI4f8aGghQaAw7zf0TbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjkxOTIyNTg3Zjc1MGY3OGExOTc5NWNiZDg5YmM3Mjlh ZjE3ZDUwHhcNMjYwMTAxMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWU5ODY1MWMzMzcyNDBlNTZiNmQ5YTg1YTRmODk0ZDIwOWQwYTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26J1A5b9plQrkWYpUfhSracyPdzP CKx6bQDScXRLLzjIaRwZtuQ083bd2PxwttY6jUhYmeUiVOCjHcLbjlg3BJvqGmDx /ZKo1Tk7DEdnYk3F37TEAlDCfIW/bcE7qzeY6wzaX+U0G4FNdQwX+PUQqNMHIkzx Ry+hMmQRJWZy8z6k6BZeMm+nLPPGybvQMx6jRosuBIU6p0AuT7kRHpGAuJc9yA96 ObBRuoxfoqV0T5sKb43f0RtnnfktYzO2GBkaqLk5SqZ4SMnMmqM+CbRHWk8/WKPj J5F+JDGCphXOzjRAO8ZtZbdx7GJxF5w2PfNHulX6EpryAFYZmOrA0Q8jrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB7phlHDNyQOVrbZqFpPiU0gnQoDMB8GA1UdIwQY MBaAFA0pGSJYf3UPeKGXlcvYm8cprxfVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80ZGY4ZjEtMjQxZC00MzM5LWIwZjYt ZDY1YWQ0MzBiZWI3LzEvSHVtR1VjTTNKQTVXdHRtb1drLUpUU0NkQ2dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My80ZGY4ZjEtMjQxZC00MzM5LWIwZjYtZDY1YWQ0MzBiZWI3 LzEvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW4QsMA0G CSqGSIb3DQEBCwUAA4IBAQCncnmWHK+UiPIGrKSaUAudyIDqlvjBUaxhXvuBKQSq EP+TIdjbUW6u20A+Tc57sicdwUZlv1IaB98Jh8pEsCVde34SwkiDa3WfrQoGExb7 E8fEzueyyoW9vCWT39Oeph8nnzZ8jXXYGCFLKt7R2s2RNMvS5QiQp622jTTDBFBj YfRLt/Bi8zGZPw1Aa7M2x46ua0wVK8T0OSH+cnxNlRH1sVFBufarIjAwz4HDeASi mnZM52dE9Bgrs9wa+xiQlbFotcBTfh8xsECTlK95ZPeXk/6SBUY0tz2xKG6w2L/3 rz955glZ6xEg00NaWS0WuLR95BXTKg6ga++rcEvJXu64 -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:30 2026 by rpki-client