This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/HVqsO0SEaw9-mt8SnzIkfdy49ec.roa File: HVqsO0SEaw9-mt8SnzIkfdy49ec.roa (raw, json) Hash identifier: dW2BrZognOp9PSojHUwspZ6qNfssSUD6yjA//f4n5ro= Subject key identifier: 1D:5A:AC:3B:44:84:6B:0F:7E:9A:DF:12:9F:32:24:7D:DC:B8:F5:E7 Certificate issuer: /CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e Certificate serial: 019B79EBC4FCCF40EB1959A93AEACCE794DD Authority key identifier: BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/HVqsO0SEaw9-mt8SnzIkfdy49ec.roa Signing time: Thu 01 Jan 2026 14:17:32 +0000 ROA not before: Thu 01 Jan 2026 14:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1853 IP address blocks: 195.177.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:c4:fc:cf:40:eb:19:59:a9:3a:ea:cc:e7:94:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e Validity Not Before: Jan 1 14:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d5aac3b44846b0f7e9adf129f32247ddcb8f5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3b:0a:4e:82:0f:14:fe:c9:9d:0f:b3:24:52: ac:ba:d0:eb:a7:11:92:39:b6:ef:bd:77:db:db:fa: 22:19:b4:4d:93:3b:33:60:58:f5:4c:33:f6:d2:20: 8b:92:77:9a:12:df:8e:7c:12:1a:e4:23:40:4f:66: 48:9e:58:7c:90:96:b0:b4:b3:55:57:f7:32:94:c7: 37:dd:f9:68:aa:cf:42:69:7c:c4:ab:a1:e4:fc:35: 77:51:bf:8a:3c:45:36:e7:e8:d1:a0:5f:46:2a:29: 8e:4d:18:a7:6e:a5:cb:90:c1:60:a6:b6:ab:a8:8a: ac:a0:5f:c0:ff:2d:3e:c4:db:25:9f:72:44:fa:0d: b3:87:f6:f6:6d:92:6c:f6:c6:a4:9b:af:b2:53:9c: 93:f1:f2:5d:b3:02:24:f5:76:ba:39:01:a9:9e:4f: c8:b3:0a:f5:86:02:37:55:df:04:46:d9:db:d3:09: 65:cd:63:26:c0:3f:a3:e8:12:2d:27:58:08:1c:31: 05:4c:f4:56:2a:4e:ed:b4:ea:5f:7c:7a:e1:c0:0c: a2:04:88:35:f2:34:4b:ad:82:4b:e0:06:5f:1f:85: 57:dd:b0:9d:2c:f8:76:65:a7:c0:d2:e8:36:54:b2: 81:41:1a:56:4a:4c:50:4c:e6:8f:fe:8d:9d:c3:72: 9a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5A:AC:3B:44:84:6B:0F:7E:9A:DF:12:9F:32:24:7D:DC:B8:F5:E7 X509v3 Authority Key Identifier: keyid:BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/HVqsO0SEaw9-mt8SnzIkfdy49ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.177.250.0/23 Signature Algorithm: sha256WithRSAEncryption 49:2a:b4:81:86:08:b6:48:ca:c1:ad:46:75:f9:86:52:6c:5c: f6:2d:7e:98:1e:05:64:26:ac:bd:04:c0:96:ab:45:80:49:5a: 82:c9:51:66:89:b4:14:0b:1b:83:91:a6:cd:5e:57:b7:5a:12: c0:74:ab:eb:55:f1:a0:e4:b4:0b:0f:25:35:23:b5:ba:3b:2b: b3:da:f2:9a:6c:8e:23:26:49:df:b0:c6:24:e1:ad:36:2b:62: 80:b2:6d:e8:cc:19:ea:2a:e8:77:85:49:f3:c1:fe:95:d2:be: 1f:b3:f8:b7:d8:64:7e:8e:a4:ad:50:2f:28:ff:96:3f:c3:e2: 90:b2:98:ac:98:8f:e4:50:2c:86:4e:0b:66:62:a7:bd:86:88: af:ec:6b:cc:58:27:4c:b0:96:09:37:fc:80:d6:64:85:e1:a7: 46:fa:3b:c7:d5:fe:1a:6d:29:a0:36:0a:44:cb:88:15:56:cb: f5:98:de:d6:bb:a5:23:25:07:74:39:bf:e2:33:80:1f:86:e4: f0:f0:2d:89:d0:39:29:46:d7:94:02:53:41:a2:89:a9:96:11: 6e:59:95:6b:24:1e:80:be:37:b8:6c:be:bd:c3:47:a7:46:c2: d4:9c:d1:c9:ee:0b:30:db:1a:65:98:40:2a:46:db:3a:b6:13: dd:6f:5b:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt568T8z0DrGVmpOurM55TdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNWM2YWI2YmMyMDZhNTRjNGFiYjM3NDE1ODU4Y2IyZDUz ZDM0OWUwHhcNMjYwMTAxMTQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDVhYWMzYjQ0ODQ2YjBmN2U5YWRmMTI5ZjMyMjQ3ZGRjYjhmNWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jsKToIPFP7JnQ+zJFKsutDrpxGS ObbvvXfb2/oiGbRNkzszYFj1TDP20iCLkneaEt+OfBIa5CNAT2ZInlh8kJawtLNV V/cylMc33floqs9CaXzEq6Hk/DV3Ub+KPEU25+jRoF9GKimOTRinbqXLkMFgprar qIqsoF/A/y0+xNsln3JE+g2zh/b2bZJs9sakm6+yU5yT8fJdswIk9Xa6OQGpnk/I swr1hgI3Vd8ERtnb0wllzWMmwD+j6BItJ1gIHDEFTPRWKk7ttOpffHrhwAyiBIg1 8jRLrYJL4AZfH4VX3bCdLPh2ZafA0ug2VLKBQRpWSkxQTOaP/o2dw3KaVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB1arDtEhGsPfprfEp8yJH3cuPXnMB8GA1UdIwQY MBaAFL1cara8IGpUxKuzdBWFjLLVPTSeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlZ4cXRyd2dhbFRFcTdOMEZZV01zdFU5Tko0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xMmY0ZTYtYWYxZC00ZWYxLWI3YWQt NDIzMjNiMjAwOWUzLzEvSFZxc08wU0VhdzktbXQ4U256SWtmZHk0OWVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8xMmY0ZTYtYWYxZC00ZWYxLWI3YWQtNDIzMjNiMjAwOWUz LzEvdlZ4cXRyd2dhbFRFcTdOMEZZV01zdFU5Tko0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7H6MA0G CSqGSIb3DQEBCwUAA4IBAQBJKrSBhgi2SMrBrUZ1+YZSbFz2LX6YHgVkJqy9BMCW q0WASVqCyVFmibQUCxuDkabNXle3WhLAdKvrVfGg5LQLDyU1I7W6Oyuz2vKabI4j JknfsMYk4a02K2KAsm3ozBnqKuh3hUnzwf6V0r4fs/i32GR+jqStUC8o/5Y/w+KQ spismI/kUCyGTgtmYqe9hoiv7GvMWCdMsJYJN/yA1mSF4adG+jvH1f4abSmgNgpE y4gVVsv1mN7Wu6UjJQd0Ob/iM4AfhuTw8C2J0DkpRteUAlNBoomplhFuWZVrJB6A vje4bL69w0enRsLUnNHJ7gsw2xplmEAqRts6thPdb1vm -----END CERTIFICATE-----Generated at Tue Jan 27 16:05:10 2026 by rpki-client