This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/HVZne9WI9uLyJvB9NxBslBjCmlY.roa File: HVZne9WI9uLyJvB9NxBslBjCmlY.roa (raw, json) Hash identifier: YcoHAaoNXAPXHw2TXGEF6Izlodu3eSDrEKdqQwFTx38= Subject key identifier: 1D:56:67:7B:D5:88:F6:E2:F2:26:F0:7D:37:10:6C:94:18:C2:9A:56 Certificate issuer: /CN=6f930698733bad33c081719c7b68bd19723a5a77 Certificate serial: 019B7F85191FD4E1DE4606A1F87065946421 Authority key identifier: 6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/HVZne9WI9uLyJvB9NxBslBjCmlY.roa Signing time: Fri 02 Jan 2026 16:23:07 +0000 ROA not before: Fri 02 Jan 2026 16:23:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207928 IP address blocks: 194.153.76.0/23 maxlen: 23 194.153.76.0/24 maxlen: 24 194.153.77.0/24 maxlen: 24 194.153.102.0/23 maxlen: 23 194.153.102.0/24 maxlen: 24 194.153.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:19:1f:d4:e1:de:46:06:a1:f8:70:65:94:64:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f930698733bad33c081719c7b68bd19723a5a77 Validity Not Before: Jan 2 16:23:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d56677bd588f6e2f226f07d37106c9418c29a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d7:d4:ff:c1:30:cf:30:66:0f:e4:1b:81:fa: c7:70:b6:d5:5f:89:7b:68:8b:59:ad:bc:c4:ff:94: cd:ce:ee:d2:08:c5:1b:0e:ef:cb:40:30:97:d7:e4: 9d:69:f4:34:bb:de:26:47:7a:d7:ee:e0:26:bc:db: de:88:33:d0:bb:62:50:1e:42:7f:18:23:85:ae:77: a6:7a:56:88:e8:23:ca:92:7b:a6:92:eb:8b:6a:58: e9:b9:78:35:cb:28:15:a4:6c:92:c4:fc:46:54:98: 73:37:5f:a1:7a:d9:a8:30:d4:ef:23:a5:35:ea:ff: ba:dc:78:c9:13:6f:bb:14:a2:3f:91:4a:e6:ce:1c: 75:dd:16:73:bb:cf:2c:eb:e6:d9:b4:73:06:ab:1e: d0:6f:7c:e1:59:0d:a4:14:93:77:af:e1:ae:3a:dd: 8b:11:f9:c4:0b:25:71:d1:38:b8:0e:c7:59:a2:2b: cc:8d:be:26:19:ac:ab:51:6e:73:8b:9a:7b:91:2c: 4b:14:ad:1f:a8:0f:74:a3:59:39:f9:94:f2:b5:83: ef:30:74:2a:95:ad:64:1c:fc:34:5a:74:f0:b4:5a: 28:3a:95:a9:1e:94:e9:b0:20:11:a3:bd:04:64:30: ae:0a:69:47:e6:7c:60:26:4c:73:1e:ec:ca:63:38: 94:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:56:67:7B:D5:88:F6:E2:F2:26:F0:7D:37:10:6C:94:18:C2:9A:56 X509v3 Authority Key Identifier: keyid:6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/HVZne9WI9uLyJvB9NxBslBjCmlY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.153.76.0/23 194.153.102.0/23 Signature Algorithm: sha256WithRSAEncryption 25:e0:c2:43:2e:bc:ff:84:59:e5:d9:4b:50:c4:81:3f:71:fb: fa:f3:86:be:4e:9d:86:eb:ec:5f:9b:f4:9b:83:3e:2d:4b:e4: 49:2c:7a:a4:19:4d:2a:9b:31:aa:8f:8b:6d:89:a7:3c:f9:3a: f2:df:c2:79:0f:45:23:21:82:66:f5:7b:6a:2e:96:46:3a:47: b9:b4:c5:20:48:94:55:d5:8b:75:b4:68:24:59:1f:4c:ff:88: 28:c1:ab:6a:10:7f:1b:85:12:4c:67:0d:54:08:1e:a6:ac:dc: 5d:9f:65:eb:94:87:e1:11:c2:8c:72:0a:b6:41:4f:3d:d8:9c: 8d:7e:60:b3:5c:10:0c:c9:ea:8d:8c:26:49:41:62:bf:65:a7: df:e5:9e:b4:06:ee:40:02:68:ff:05:57:99:32:91:74:15:56: db:b1:cc:0b:0a:a3:4b:d5:d1:a2:f5:53:42:b7:8d:fa:0a:d1: 81:da:b8:65:5a:3a:56:f2:c5:0f:a7:45:e1:47:d7:5e:1e:c2: 0e:11:6d:31:87:b6:b6:05:39:91:d0:b2:92:c4:0f:87:3d:6c: 4d:45:d4:fb:69:f5:86:15:06:9f:68:6b:07:06:26:11:a4:80: 0b:28:17:e4:95:e0:41:a0:a9:dc:9f:b9:57:ec:e4:38:9f:32: 51:c4:ea:71 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hRkf1OHeRgah+HBllGQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOTMwNjk4NzMzYmFkMzNjMDgxNzE5YzdiNjhiZDE5NzIz YTVhNzcwHhcNMjYwMTAyMTYyMzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDU2Njc3YmQ1ODhmNmUyZjIyNmYwN2QzNzEwNmM5NDE4YzI5YTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tfU/8EwzzBmD+QbgfrHcLbVX4l7 aItZrbzE/5TNzu7SCMUbDu/LQDCX1+SdafQ0u94mR3rX7uAmvNveiDPQu2JQHkJ/ GCOFrnemelaI6CPKknumkuuLaljpuXg1yygVpGySxPxGVJhzN1+hetmoMNTvI6U1 6v+63HjJE2+7FKI/kUrmzhx13RZzu88s6+bZtHMGqx7Qb3zhWQ2kFJN3r+GuOt2L EfnECyVx0Ti4DsdZoivMjb4mGayrUW5zi5p7kSxLFK0fqA90o1k5+ZTytYPvMHQq la1kHPw0WnTwtFooOpWpHpTpsCARo70EZDCuCmlH5nxgJkxzHuzKYziUJwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB1WZ3vViPbi8ibwfTcQbJQYwppWMB8GA1UdIwQY MBaAFG+TBphzO60zwIFxnHtovRlyOlp3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQt ZmUxMDNmZDM4NTdjLzEvSFZabmU5V0k5dUx5SnZCOU54QnNsQmpDbWxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQtZmUxMDNmZDM4NTdj LzEvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwplMAwQB wplmMA0GCSqGSIb3DQEBCwUAA4IBAQAl4MJDLrz/hFnl2UtQxIE/cfv684a+Tp2G 6+xfm/Sbgz4tS+RJLHqkGU0qmzGqj4ttiac8+Try38J5D0UjIYJm9XtqLpZGOke5 tMUgSJRV1Yt1tGgkWR9M/4gowatqEH8bhRJMZw1UCB6mrNxdn2XrlIfhEcKMcgq2 QU892JyNfmCzXBAMyeqNjCZJQWK/Zaff5Z60Bu5AAmj/BVeZMpF0FVbbscwLCqNL 1dGi9VNCt436CtGB2rhlWjpW8sUPp0XhR9deHsIOEW0xh7a2BTmR0LKSxA+HPWxN RdT7afWGFQafaGsHBiYRpIALKBfkleBBoKncn7lX7OQ4nzJRxOpx -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:08 2026 by rpki-client