This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HJcs-w12XR1Oa3_7Fjrfjatz6Nk.roa File: HJcs-w12XR1Oa3_7Fjrfjatz6Nk.roa (raw, json) Hash identifier: N2c+1xmqIJ2oL3KdyPfmWmiUkJmY9BIkjqzElqkXBQ0= Subject key identifier: 1C:97:2C:FB:0D:76:5D:1D:4E:6B:7F:FB:16:3A:DF:8D:AB:73:E8:D9 Certificate issuer: /CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0 Certificate serial: 019B79EC5D3D1FB1CF9A263E07A29EB2C3FA Authority key identifier: 1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HJcs-w12XR1Oa3_7Fjrfjatz6Nk.roa Signing time: Thu 01 Jan 2026 14:18:11 +0000 ROA not before: Thu 01 Jan 2026 14:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31454 IP address blocks: 194.102.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:5d:3d:1f:b1:cf:9a:26:3e:07:a2:9e:b2:c3:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0 Validity Not Before: Jan 1 14:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c972cfb0d765d1d4e6b7ffb163adf8dab73e8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:82:0c:29:7c:92:cd:c7:43:06:6e:46:98:11: 0a:37:35:41:2c:ba:96:53:57:c4:e0:6d:bf:7c:c7: b4:7b:4a:48:58:79:a2:4e:c8:69:fd:9b:4c:07:26: 65:b8:71:d8:ef:97:88:0e:4e:88:79:ba:96:ea:05: 0d:98:79:74:74:d7:ed:74:af:6f:2a:fa:c9:de:a2: 72:09:45:a8:bd:a1:ad:ab:eb:3e:85:21:12:11:0b: b9:dc:6e:d6:3d:ea:77:cf:da:97:5e:94:e3:42:54: 86:45:a3:64:36:b2:47:f9:89:cb:ce:7b:de:57:99: 2b:1b:12:42:1d:1a:72:3c:44:4b:95:ec:2e:d6:2c: f0:8c:e4:51:18:ac:07:23:1a:81:d2:ae:0c:21:9e: f4:f0:e8:e1:2a:39:d6:85:30:0a:dc:44:09:a0:d9: bf:b8:90:f3:30:69:88:14:cb:0f:fc:47:8c:74:59: 07:16:de:f8:60:eb:e0:1e:94:67:ed:62:e1:87:64: b4:ef:31:a8:7e:a3:3b:af:74:16:bc:f4:a8:29:1f: b7:a4:ab:aa:4d:02:6d:d1:e4:02:ac:79:e0:0b:79: 57:dc:1a:4f:2b:25:8b:16:d6:4c:99:c3:9c:fd:1a: b1:b8:85:68:a7:8d:cb:64:58:9f:92:59:3d:b4:01: ed:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:97:2C:FB:0D:76:5D:1D:4E:6B:7F:FB:16:3A:DF:8D:AB:73:E8:D9 X509v3 Authority Key Identifier: keyid:1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HJcs-w12XR1Oa3_7Fjrfjatz6Nk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.102.86.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:d1:bb:30:49:48:9e:d1:68:aa:31:e9:46:39:45:76:19:b9: d8:a8:05:ea:e6:c6:3d:d7:72:28:2a:c1:a7:41:30:b7:6f:92: 91:89:2a:56:a0:9f:32:5b:57:2d:47:9f:41:8b:34:4b:d7:74: b8:ec:a1:02:c8:d0:6e:ab:30:59:ef:31:d4:fe:6f:6e:ae:d0: ad:6a:83:79:06:2a:98:41:6f:27:cb:eb:f7:39:86:21:5c:79: d0:08:45:54:74:34:4a:bc:e2:d8:b2:55:66:9c:d1:23:8c:d0: cb:82:87:8b:60:5a:0f:0a:f7:0c:5d:a9:b1:cd:69:62:f8:e5: 4f:ed:d1:80:1e:41:e6:34:e4:d0:3b:db:0f:9c:f1:9d:fb:91: 6a:2c:b5:f9:3d:82:62:80:cb:fd:bb:0e:1f:20:94:f4:90:71: a6:b1:7d:a0:b5:41:40:1a:fe:26:bd:44:92:7e:d8:a9:26:d0: b7:21:73:98:b8:98:85:9b:78:e3:9f:1a:13:01:32:c2:a7:87: a9:da:90:af:1f:aa:5f:13:65:a9:3b:3b:38:a9:9a:16:8c:ac: 97:83:bb:55:b5:93:c4:bd:bb:4a:28:40:8d:de:0d:6e:c0:b0: 8f:e2:01:49:ed:b9:5e:ab:9a:6b:d6:1a:9e:0b:bc:14:75:7c: b0:d8:f6:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57F09H7HPmiY+B6KessP6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMDE5ODZlNjU1MWJiM2EwMTVhYzY0ZWQ2NzQ3YzIzNGIy YTc5ZTAwHhcNMjYwMTAxMTQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzk3MmNmYjBkNzY1ZDFkNGU2YjdmZmIxNjNhZGY4ZGFiNzNlOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIIMKXySzcdDBm5GmBEKNzVBLLqW U1fE4G2/fMe0e0pIWHmiTshp/ZtMByZluHHY75eIDk6IebqW6gUNmHl0dNftdK9v KvrJ3qJyCUWovaGtq+s+hSESEQu53G7WPep3z9qXXpTjQlSGRaNkNrJH+YnLznve V5krGxJCHRpyPERLlewu1izwjORRGKwHIxqB0q4MIZ708OjhKjnWhTAK3EQJoNm/ uJDzMGmIFMsP/EeMdFkHFt74YOvgHpRn7WLhh2S07zGofqM7r3QWvPSoKR+3pKuq TQJt0eQCrHngC3lX3BpPKyWLFtZMmcOc/RqxuIVop43LZFifklk9tAHt+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFByXLPsNdl0dTmt/+xY6342rc+jZMB8GA1UdIwQY MBaAFB4BmG5lUbs6AVrGTtZ0fCNLKnngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGdHWWJtVlJ1em9CV3NaTzFuUjhJMHNxZWVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8zY2JiOWMtNTAwNi00NmJlLWI0YzMt ZmY4ZjU1NDVlYmEyLzEvSEpjcy13MTJYUjFPYTNfN0ZqcmZqYXR6Nk5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8zY2JiOWMtNTAwNi00NmJlLWI0YzMtZmY4ZjU1NDVlYmEy LzEvSGdHWWJtVlJ1em9CV3NaTzFuUjhJMHNxZWVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmZWMA0G CSqGSIb3DQEBCwUAA4IBAQCf0bswSUie0WiqMelGOUV2GbnYqAXq5sY913IoKsGn QTC3b5KRiSpWoJ8yW1ctR59BizRL13S47KECyNBuqzBZ7zHU/m9urtCtaoN5BiqY QW8ny+v3OYYhXHnQCEVUdDRKvOLYslVmnNEjjNDLgoeLYFoPCvcMXamxzWli+OVP 7dGAHkHmNOTQO9sPnPGd+5FqLLX5PYJigMv9uw4fIJT0kHGmsX2gtUFAGv4mvUSS ftipJtC3IXOYuJiFm3jjnxoTATLCp4ep2pCvH6pfE2WpOzs4qZoWjKyXg7tVtZPE vbtKKECN3g1uwLCP4gFJ7bleq5pr1hqeC7wUdXyw2Pa6 -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:36 2026 by rpki-client