This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/HJui0ciElxv4bGYqZPDA33RoYJw.roa File: HJui0ciElxv4bGYqZPDA33RoYJw.roa (raw, json) Hash identifier: 1rBzg3uYE588MZdGVtS2sI0fvTSnpMoVSwOBlYto0ms= Subject key identifier: 1C:9B:A2:D1:C8:84:97:1B:F8:6C:66:2A:64:F0:C0:DF:74:68:60:9C Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C74BCFD59C5CD388D29B3AF739DC36 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/HJui0ciElxv4bGYqZPDA33RoYJw.roa Signing time: Thu 01 Jan 2026 04:18:28 +0000 ROA not before: Thu 01 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207239 IP address blocks: 194.190.220.0/23 maxlen: 23 212.192.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4b:cf:d5:9c:5c:d3:88:d2:9b:3a:f7:39:dc:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c9ba2d1c884971bf86c662a64f0c0df7468609c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ac:61:22:59:11:9d:2e:74:81:66:cc:12:ac: 9b:df:db:01:c9:ff:a5:3a:fc:aa:80:c5:53:04:c4: 9a:29:6e:6a:75:03:b9:9e:63:cd:be:8a:f1:77:4f: 5e:c2:49:af:45:82:66:fc:78:04:fb:f7:98:42:ab: 55:35:85:bc:85:f0:28:e7:dd:4b:0d:51:e1:3a:c8: ca:ae:bc:2f:2a:f4:4f:10:33:31:0a:1a:b3:52:a5: cb:fe:5f:2e:db:9d:5c:3a:30:58:ba:df:1b:49:a2: 82:db:ca:94:6f:06:2e:d1:be:58:64:d1:c7:0e:36: 22:65:da:f1:e7:7f:3c:ca:db:58:42:3f:bd:79:a1: 54:ca:c5:ea:bc:4f:1b:c7:85:62:c0:14:b0:05:a4: 11:94:4f:bb:bd:bc:7d:8f:38:ba:e1:4f:32:47:6f: 79:82:56:29:b7:6c:91:89:c6:9a:80:3d:e1:51:e1: cb:58:53:9b:03:14:bb:ed:4e:3c:28:c9:24:52:92: 8e:78:63:70:93:52:15:f6:dc:dc:e6:ad:2d:89:af: 6c:b5:0b:95:0f:60:88:65:0e:7b:de:b3:df:36:a2: 4e:f8:05:3b:2f:44:98:61:ad:7b:a9:91:8d:1e:52: c0:69:f2:01:df:ae:17:89:d4:ef:31:32:d8:3e:1c: 6c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9B:A2:D1:C8:84:97:1B:F8:6C:66:2A:64:F0:C0:DF:74:68:60:9C X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/HJui0ciElxv4bGYqZPDA33RoYJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.190.220.0/23 212.192.50.0/23 Signature Algorithm: sha256WithRSAEncryption 87:fc:e6:c0:4f:62:17:dd:5d:ca:81:28:4f:c8:db:15:b4:87: 9b:14:31:84:9d:af:22:af:94:8f:c3:1d:12:5c:25:c2:03:41: be:40:9d:34:6b:1f:7d:a6:76:18:e9:17:b6:3e:21:1d:40:9b: 8c:93:54:76:a1:52:11:b0:ba:f1:95:e3:26:ae:88:ca:44:f9: 34:71:de:98:bf:31:34:4b:b8:2d:74:35:a5:95:bf:f9:db:0e: 8b:86:e6:0d:aa:2b:ad:fe:aa:8f:1e:2b:58:48:a2:11:6c:cf: 7b:6d:1a:84:91:5c:2a:d7:2c:c1:37:fd:b4:c6:d7:a6:22:a0: 0b:09:f0:a9:23:be:09:26:cc:5b:35:66:2a:de:d4:ce:9e:8b: 73:d0:9d:63:f5:dd:91:46:24:7a:d6:1c:24:67:de:01:54:68: 5d:25:39:ed:88:39:89:3a:2c:62:c7:7b:35:73:12:50:dc:30: 8f:cc:32:13:53:5b:2b:75:7a:ad:02:84:51:e1:86:4a:24:37: 67:2b:6c:f0:cd:1c:88:8e:8e:47:d0:1f:a5:72:b5:f7:38:93: d3:d4:f0:ff:32:ee:b4:17:0b:73:90:f9:f9:c5:8a:c2:f1:e0: 96:e6:f5:8f:cc:cb:42:e5:50:a3:c7:b3:39:12:d3:a4:f8:51: 8e:57:88:76 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x0vP1Zxc04jSmzr3Odw2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzliYTJkMWM4ODQ5NzFiZjg2YzY2MmE2NGYwYzBkZjc0Njg2MDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KxhIlkRnS50gWbMEqyb39sByf+l OvyqgMVTBMSaKW5qdQO5nmPNvorxd09ewkmvRYJm/HgE+/eYQqtVNYW8hfAo591L DVHhOsjKrrwvKvRPEDMxChqzUqXL/l8u251cOjBYut8bSaKC28qUbwYu0b5YZNHH DjYiZdrx5388yttYQj+9eaFUysXqvE8bx4ViwBSwBaQRlE+7vbx9jzi64U8yR295 glYpt2yRicaagD3hUeHLWFObAxS77U48KMkkUpKOeGNwk1IV9tzc5q0tia9stQuV D2CIZQ573rPfNqJO+AU7L0SYYa17qZGNHlLAafIB364XidTvMTLYPhxsfwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBybotHIhJcb+GxmKmTwwN90aGCcMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvSEp1aTBjaUVseHY0YkdZcVpQREEzM1JvWUp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwr7cAwQB 1MAyMA0GCSqGSIb3DQEBCwUAA4IBAQCH/ObAT2IX3V3KgShPyNsVtIebFDGEna8i r5SPwx0SXCXCA0G+QJ00ax99pnYY6Re2PiEdQJuMk1R2oVIRsLrxleMmrojKRPk0 cd6YvzE0S7gtdDWllb/52w6LhuYNqiut/qqPHitYSKIRbM97bRqEkVwq1yzBN/20 xtemIqALCfCpI74JJsxbNWYq3tTOnotz0J1j9d2RRiR61hwkZ94BVGhdJTntiDmJ Oixix3s1cxJQ3DCPzDITU1srdXqtAoRR4YZKJDdnK2zwzRyIjo5H0B+lcrX3OJPT 1PD/Mu60FwtzkPn5xYrC8eCW5vWPzMtC5VCjx7M5EtOk+FGOV4h2 -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:23 2026 by rpki-client