This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/HcrhRtfROyUtMyYdwEAqxsg1wig.roa File: HcrhRtfROyUtMyYdwEAqxsg1wig.roa (raw, json) Hash identifier: u1rHBHJGzvgEOJg1heYgUCIOqnoD1iQ2J3moBSCOEfQ= Subject key identifier: 1D:CA:E1:46:D7:D1:3B:25:2D:33:26:1D:C0:40:2A:C6:C8:35:C2:28 Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 019B7F150479A8019538EC59E9B0F435257D Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/HcrhRtfROyUtMyYdwEAqxsg1wig.roa Signing time: Fri 02 Jan 2026 14:20:42 +0000 ROA not before: Fri 02 Jan 2026 14:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52035 IP address blocks: 158.41.24.0/21 maxlen: 24 2a0e:ce40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:04:79:a8:01:95:38:ec:59:e9:b0:f4:35:25:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Jan 2 14:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dcae146d7d13b252d33261dc0402ac6c835c228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:41:2f:f0:42:d2:dd:99:64:59:19:1d:19:49: ab:64:f6:b8:0a:b7:20:02:fa:c5:26:7f:44:bb:6e: 6a:80:8f:95:f5:3a:4e:db:53:8f:e1:4c:5d:65:5d: b4:d0:21:4c:57:eb:be:b2:86:56:36:8f:c6:27:c8: 6e:77:83:30:51:7d:b9:d8:57:ba:51:e9:8c:d1:13: 78:c1:b5:e3:95:d3:3a:c7:a2:69:5b:39:e4:b1:46: e9:3a:b6:3d:32:a3:92:e8:a8:9e:8b:a2:25:87:71: ec:94:f1:2c:3f:51:ed:95:53:9f:50:c3:1c:ea:0e: 04:2f:b5:0b:d2:31:e1:b4:2a:5b:c3:27:2e:94:a3: 41:35:3b:cc:12:a3:8e:69:31:6c:61:22:e2:32:0a: 5f:15:bc:a4:95:03:db:b6:ee:1e:93:f2:24:ef:a7: d2:64:3d:a4:6e:c0:b2:ad:03:01:f6:5a:1c:a1:5f: b1:59:f1:91:fc:bc:cd:5b:65:e0:c0:e7:77:d0:de: 77:ab:61:d3:4b:39:08:21:24:a9:b6:d7:48:ca:0f: 7b:2e:e5:1a:ac:5c:fd:09:98:7a:3a:11:33:aa:d9: 95:10:e9:9f:ba:cf:ea:36:07:f0:a6:2e:ff:23:11: 26:3b:fe:4a:2c:58:1e:3c:9e:f7:bf:de:d7:4b:ba: c1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CA:E1:46:D7:D1:3B:25:2D:33:26:1D:C0:40:2A:C6:C8:35:C2:28 X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/HcrhRtfROyUtMyYdwEAqxsg1wig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.41.24.0/21 IPv6: 2a0e:ce40::/29 Signature Algorithm: sha256WithRSAEncryption 06:42:ad:c9:da:b5:72:17:aa:a2:9f:32:b5:e1:d0:b1:18:1c: 06:55:73:92:ed:f0:2b:08:41:98:ff:36:be:b4:4a:62:04:95: e2:68:3b:2f:51:4d:aa:c4:8d:05:b1:b3:f5:b5:01:86:be:61: 9e:b3:29:89:fc:7b:e6:d7:a1:b5:5e:d5:c4:9f:49:59:88:e2: 20:09:61:36:dc:0e:25:4e:9d:16:3a:6b:b8:60:50:bc:9e:70: 80:a3:3e:00:7a:05:cd:d0:9d:02:c4:15:bf:af:7d:30:34:43: 4f:f7:33:1c:db:f8:c1:f3:1d:b2:ea:cb:f4:65:b7:eb:36:60: 8b:fe:f5:e2:72:af:86:21:c0:57:42:ba:7c:1d:cf:f4:02:41: 84:56:9b:40:67:48:76:69:7c:32:a7:f0:ec:f8:7b:f7:57:07: c8:fb:a2:7a:5f:e7:1d:ba:e0:f6:4f:41:51:81:14:02:b8:d6: 6e:a2:82:92:63:19:10:6a:62:5b:10:19:02:87:10:44:79:3d: 34:53:73:ca:35:37:a1:95:b3:7a:66:1c:49:6d:2a:78:5d:c9: 89:74:32:61:fc:db:4b:1d:51:6e:8d:54:10:98:f2:9e:63:d1: ed:8e:3b:75:48:dc:11:b4:63:04:c6:f0:ee:a4:e7:58:a6:8d: 25:37:22:77 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FQR5qAGVOOxZ6bD0NSV9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjYwMTAyMTQyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGNhZTE0NmQ3ZDEzYjI1MmQzMzI2MWRjMDQwMmFjNmM4MzVjMjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0Ev8ELS3ZlkWRkdGUmrZPa4Crcg AvrFJn9Eu25qgI+V9TpO21OP4UxdZV200CFMV+u+soZWNo/GJ8hud4MwUX252Fe6 UemM0RN4wbXjldM6x6JpWznksUbpOrY9MqOS6Kiei6Ilh3HslPEsP1HtlVOfUMMc 6g4EL7UL0jHhtCpbwyculKNBNTvMEqOOaTFsYSLiMgpfFbyklQPbtu4ek/Ik76fS ZD2kbsCyrQMB9locoV+xWfGR/LzNW2XgwOd30N53q2HTSzkIISSpttdIyg97LuUa rFz9CZh6OhEzqtmVEOmfus/qNgfwpi7/IxEmO/5KLFgePJ73v97XS7rB0QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFB3K4UbX0TslLTMmHcBAKsbINcIoMB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvSGNyaFJ0ZlJPeVV0TXlZZHdFQXF4c2cxd2lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDnikYMA0E AgACMAcDBQMqDs5AMA0GCSqGSIb3DQEBCwUAA4IBAQAGQq3J2rVyF6qinzK14dCx GBwGVXOS7fArCEGY/za+tEpiBJXiaDsvUU2qxI0FsbP1tQGGvmGesymJ/Hvm16G1 XtXEn0lZiOIgCWE23A4lTp0WOmu4YFC8nnCAoz4AegXN0J0CxBW/r30wNENP9zMc 2/jB8x2y6sv0ZbfrNmCL/vXicq+GIcBXQrp8Hc/0AkGEVptAZ0h2aXwyp/Ds+Hv3 VwfI+6J6X+cduuD2T0FRgRQCuNZuooKSYxkQamJbEBkChxBEeT00U3PKNTehlbN6 ZhxJbSp4XcmJdDJh/NtLHVFujVQQmPKeY9Htjjt1SNwRtGMExvDupOdYpo0lNyJ3 -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:47 2026 by rpki-client