This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/HWkZUGuQFUtSfIxMZ9ShbmYb-Uw.roa File: HWkZUGuQFUtSfIxMZ9ShbmYb-Uw.roa (raw, json) Hash identifier: /p3RuOQH8ff2EFGkQBf64zKFuTokj0i4cJmKRGRkgiU= Subject key identifier: 1D:69:19:50:6B:90:15:4B:52:7C:8C:4C:67:D4:A1:6E:66:1B:F9:4C Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Certificate serial: 019B76EB0CCB150461EFC3BB236AED41D31B Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/HWkZUGuQFUtSfIxMZ9ShbmYb-Uw.roa Signing time: Thu 01 Jan 2026 00:17:54 +0000 ROA not before: Thu 01 Jan 2026 00:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200291 IP address blocks: 193.16.224.0/23 maxlen: 24 2a00:fe00:a000::/36 maxlen: 36 2a00:fe00:a000::/38 maxlen: 38 2a00:fe00:a400::/38 maxlen: 38 2a00:fe00:a800::/38 maxlen: 38 2a00:fe00:ac00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0c:cb:15:04:61:ef:c3:bb:23:6a:ed:41:d3:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Validity Not Before: Jan 1 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d6919506b90154b527c8c4c67d4a16e661bf94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3f:b1:21:9f:a3:41:a6:ec:8b:59:c1:c7:20: 85:cd:31:8e:0b:22:fe:01:69:9e:a7:b1:f2:11:ec: 23:95:ec:16:02:3a:9c:97:29:19:fc:15:74:4b:38: c9:37:c4:56:ed:bc:15:d2:1c:48:c3:24:97:5e:44: f4:95:7c:d5:0d:50:b2:59:54:df:57:6c:4a:86:89: 53:ea:13:87:90:66:2e:a2:53:44:c5:a3:6f:38:28: dc:ab:6d:0b:26:81:8c:9a:68:f4:6b:8c:d2:43:05: 35:fe:6c:e1:81:7b:49:c0:24:14:1e:c9:b3:9c:eb: 63:3e:1c:bb:16:11:69:97:3b:3b:d1:0b:8e:01:50: 24:be:26:9f:ad:14:b7:4f:2c:aa:14:11:0e:68:8a: a3:55:1c:91:9e:4d:0d:29:c3:81:7b:3d:cf:6f:80: 1b:e0:d1:6e:b5:6a:33:07:c5:4b:a9:68:dc:40:1d: fe:31:89:5b:bb:79:50:dd:b0:e4:7c:71:26:38:91: 6d:76:9f:8d:3c:b3:27:c4:88:68:cf:5a:34:13:08: 2c:51:f9:de:e5:7a:29:67:a4:31:83:81:13:88:31: 1a:a4:77:08:4c:74:f8:f2:77:75:09:ea:3a:b3:77: 20:74:86:a2:e6:a0:1a:ae:d6:bf:fe:2d:2a:02:3d: 0a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:69:19:50:6B:90:15:4B:52:7C:8C:4C:67:D4:A1:6E:66:1B:F9:4C X509v3 Authority Key Identifier: keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/HWkZUGuQFUtSfIxMZ9ShbmYb-Uw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.16.224.0/23 IPv6: 2a00:fe00:a000::/36 Signature Algorithm: sha256WithRSAEncryption 45:ea:3b:f5:a1:32:c9:f2:4c:94:71:68:55:02:52:eb:17:cb: 05:c7:da:99:70:bf:f3:7a:56:a3:d6:34:26:1c:84:41:2e:eb: 5a:ba:9f:19:4d:b1:c3:e5:1d:4e:3d:0c:28:8c:fe:43:05:d0: c9:c3:55:a9:58:5b:6e:2a:bd:47:87:a7:87:3f:4b:9e:33:7b: ca:88:d2:70:5a:f7:51:55:27:d0:2d:2e:75:98:19:52:1d:98: 29:1e:70:c1:04:b4:9c:4e:c8:67:1e:00:27:27:22:f6:d0:62: 02:cd:5f:85:47:ed:fd:2f:ec:15:6d:73:18:2d:5f:90:61:d9: 3c:ca:12:7e:2a:4d:3f:d8:de:37:b0:5d:9c:80:72:01:f3:25: 75:a7:77:ef:d2:0b:35:5e:7f:01:ff:50:54:99:ed:4d:c7:94: 87:f3:40:d4:df:f1:d2:aa:36:42:5b:ec:23:4f:b8:ac:55:a2: f9:54:b5:22:de:e1:06:98:9c:b1:17:1e:b0:b7:d8:4d:a4:e4: f2:8e:f1:06:4c:5e:b3:c3:c2:bd:1c:5a:92:62:01:bc:5d:e3: ff:0a:c3:9d:e5:fb:3f:d9:ae:1f:fc:bd:52:35:55:de:c8:d1: ff:56:b8:ea:ce:e6:c4:a0:95:41:93:3c:18:cb:ff:e3:cb:b1: 68:92:23:3a -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt26wzLFQRh78O7I2rtQdMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy MmQyNWIwHhcNMjYwMTAxMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDY5MTk1MDZiOTAxNTRiNTI3YzhjNGM2N2Q0YTE2ZTY2MWJmOTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz+xIZ+jQabsi1nBxyCFzTGOCyL+ AWmep7HyEewjlewWAjqclykZ/BV0SzjJN8RW7bwV0hxIwySXXkT0lXzVDVCyWVTf V2xKholT6hOHkGYuolNExaNvOCjcq20LJoGMmmj0a4zSQwU1/mzhgXtJwCQUHsmz nOtjPhy7FhFplzs70QuOAVAkviafrRS3TyyqFBEOaIqjVRyRnk0NKcOBez3Pb4Ab 4NFutWozB8VLqWjcQB3+MYlbu3lQ3bDkfHEmOJFtdp+NPLMnxIhoz1o0EwgsUfne 5XopZ6Qxg4ETiDEapHcITHT48nd1Ceo6s3cgdIai5qAarta//i0qAj0KnQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFB1pGVBrkBVLUnyMTGfUoW5mG/lMMB8GA1UdIwQY MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt ZWI1YmM3ZDk3YWEwLzEvSFdrWlVHdVFGVXRTZkl4TVo5U2hibVliLVV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBwRDgMA4E AgACMAgDBgQqAP4AoDANBgkqhkiG9w0BAQsFAAOCAQEAReo79aEyyfJMlHFoVQJS 6xfLBcfamXC/83pWo9Y0JhyEQS7rWrqfGU2xw+UdTj0MKIz+QwXQycNVqVhbbiq9 R4enhz9LnjN7yojScFr3UVUn0C0udZgZUh2YKR5wwQS0nE7IZx4AJyci9tBiAs1f hUft/S/sFW1zGC1fkGHZPMoSfipNP9jeN7BdnIByAfMldad379ILNV5/Af9QVJnt TceUh/NA1N/x0qo2QlvsI0+4rFWi+VS1It7hBpicsRcesLfYTaTk8o7xBkxes8PC vRxakmIBvF3j/wrDneX7P9muH/y9UjVV3sjR/1a46s7mxKCVQZM8GMv/48uxaJIj Og== -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:44 2026 by rpki-client